last executing test programs: 1m14.41945848s ago: executing program 0 (id=1271): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0fffe, 0x5636, 0x1) 1m13.680491188s ago: executing program 0 (id=1275): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.511190106s ago: executing program 0 (id=1277): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0xffffffffffffffdc, &(0x7f0000000880)}, 0x10) 1m12.032630305s ago: executing program 0 (id=1283): r0 = socket$unix(0x1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r0, 0x0, 0x0) 1m11.636413166s ago: executing program 0 (id=1286): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x11, 0x8001d, 0xc2, &(0x7f00000000c0)="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"}) 1m11.171837863s ago: executing program 0 (id=1289): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reconstruct_alloc,no_data_io,hash,\x00'], 0x1, 0x5903, &(0x7f0000010b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000002580)=ANY=[@ANYBLOB="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"]) 56.111772465s ago: executing program 32 (id=1289): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reconstruct_alloc,no_data_io,hash,\x00'], 0x1, 0x5903, &(0x7f0000010b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000002580)=ANY=[@ANYBLOB="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"]) 23.424334485s ago: executing program 6 (id=1528): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000c80)={0x8, {"822193ef8202b1070a2fb18b8ddf9fa82a9fed3371aff8ff0abb9d8772bd4da4ddb0ac902f0516b6b26e8b07a73fe51ecfa7e2e0f386e29a4e489cb29b4f77b007b3c62dbccb0089c343f1acb48b9de989eaf9fc7a32d62f5c8883fc69a4c7f0cad84ff53dfbc1481a9e33374c37394b428b97ff5a95a41184f7534a8614892aa703c22e9dd8fff76b6a1e579decb50d5bc1af014e3ac4ea2bb4985dd72af93d270de54e937db862eb102624d7721d9fb240a38dfa941ad1de8711cab8313b9803ed473c68e5c15e57fce34f54d0b1ed56db7ff6efa8e1a4bbbee30542a136f992146d31c69dc5868c9fa3f3723f9ac44f5588387525c1843b0d4204e3b71430fb1bb80b9bf8b938e06c8a3428ef1baa891f654b2caf132ccb5d691b7aa43cd860d40e1da527712285d5a39eb42ebaf83cb9ed65fef43304d728c856cb9786bf11dd82020ceeea543bbe8bca0357422dca66fa7dd455fa7ae04ab2a3f6e1e9024b2d933155b97b7e4113b7b6cc545b4d0e8fd5303f1e633fc0a6ccf28184695fd4611c5cec79e7f2c7695b24ed19f93d4d52b5b546262c85998911c6c3b34b6c7beaea2306698d5ee4bffb13435a56c5cdd4fdf817535bfebcfaa8f1f63496bb5438ef1e13e89beeb899325fd2c349fd176d110e76510561c6972764f7b8a6f410f23d8a7aae5f54bcf8e98fe1486354bb3538cb8601e846076fe50b040e0a4d3637a05d614dc665b075bfd86d45fab440e8cd8e28bd3b4d800ab1cd545142c6d7ed050c4570a2a2acba754b2129fc83648438450f6ef0f882fa19ff8f27e480699c4b27fcfa2bc7ed1e532e11bb0ad6f44c86ae7bb895b05adddb7bcd1f03c54f5e557d7f855d05aa91d54082968913a1396005e14eb88639df9a2a741af939febb1f043656d416ae4cae733167a33807b6410fe2cf13363b641bf67364c901f0147f718146aff0c98a36c651619cd55675e76455dc99e9e667bb65b80a4a219e1dc93bf3d89b759cef32f5292f80d847eb374ab3b8f91fe60be3b8745bedf101da9caee7764871cce5eec550acc501b5bff48bc43e988a095455c1badb868a61a183cc493f63d4572d94bc7d21aebd8edac49af17c1ea5ecc2407809a8ddfea288243674e91b924a645a069e053f99a157e3f5b527155d6090c0b8ec58228f98d2b6ffe2d5f47c9825ee8b3e2aec33d6f2d4c04dbe7e66d52f2336e626ec05f2ac5721a635f0751ce512046be9ca8de5b4a9822c93b2286314ad50e4bf6eeae7af56052d52703d5bdd7d4e582e1336f2eb201df9695aac3e77a2790bb726b41689b84efdcd234ff4c62f1f4eb6929467ea9154c77cc1903a7c2e2da73b63e802eaa63c1dd15adbfc9d1e88b9145859b0734d095957185c1c69e2b479928f543a634724c39baac0894130d0d26d993b43b690e2d414fce2fadeabb2789c1941eca0e3faf5519d7d4a0568991b11a0545f5f999a1fa43e1fceff1f8af114dd02f57ef8d8828c6ad73e1f21133b52a5f56bb3979b87794be22a71c852bf44f94f8bdfe15ea3147cd1564a1fa20150addec4d09e3d00cb1cfcec7d31f29a4978236a764f360d14232fdc9407907ce0db2cedbf3b80dee2837180ceb36656adb0a17beac1eff3ce355ee2d85fcf7ae042d36f20f566731d4bf33775dc0d763daf7dd23e131d18243048cb92a5b435158e1b019c373406937e7e2cd042fc3f527ce1f3bd6711d924816b220fbcb1c3314e052162ef878ad65794ba97c792a3b34d5614d078835f2e6dc6a9cadc131c1dcb960b7c722af3d7d1e525a538a4359b6e8950c32811298404c56d31a4fd13157170b6d30439d68e3b83e4066a20a465323f71299b8d73bb1adb0f01f448ba71ed25ed2dc8ac907cac50e322d8956e2944a7d007627e11d0ea17c7193619fe8446af0f806aa69d3c9f8526ab0bda7d88db0e80479de77d639f732a8039af14480607fe2f1141b22cb910f11d0d11385ade7eb411f6af6afa75cdd5dbd4516c954651f95fdf7616092c95efa3914c289c6fdba5251fd83b689ae31925011b386270856fa6fe61db968b0577eec98bdb211a80c758bede6af7099a643fd4ade609e061969d3f94a48c4de480cf60a070321c36b578681cdafb13b37138e620c0b6e9404235ed71edbadbab3e4b44e7cb43d2e120c4cb70f81726c6ac54c4875bc730d674e218ef8deb143e419b5e4c3877fd745a5c0f220a31693821028f2434fcbee3b2bf32f4e48c183644f1b56edb4ac6278935518c473b3c359113f2aa030764885d61ea36930db3e5f573cbaeb518c53250f27a5ff73ab9ea8a8e4426ec1edc3b6e19e2bd8cbb826e72490a2bc3f14afc85f60794cd1c03f83013304964de504a314bac7e28b5dca03f9e2d939666e4d230dabd838b92db82e00f45929dd57b33ab44621fa3576486604a179b64b186dbfcbedd0c75ffc6689a7e7f456cb64e074002d99dc1ed688a6817a52b5b96ab5b4c588c3363d9ea2fbddf9fda81b3058b56aadedc3926ee4b284e465c5d6f33bb7f565206961e02a63ee3007afc5a5ed37e58f8d20476965396ee5104d9d7a92493dcf3f2140f57364efe4d217e877d1fd749e49af861c623cfe89532d78253d3b32a4392235152c1012004d18ba6e0d2a4fc5f4563192061dacab727467291b44c857214bb97d320169a71dfc426887c05542b51ee33be9ef0f5afe98c1e5d4e6409a65678a696916f6791c49db11738294da398107a6ce61a08a89e72a885205294cabe4e13cda4b976b72c18dc16f4539b805bc02a18012eebe9c21a79e4fb7b492cdf8243ca8e069af92be46ab8840a0e008f392e10b885a890b8a04a34031836b2439737bb3e653d6812c0a2e8a4ba2ccfa33c8f6fdad34e2cc777f08eabb075821945d309087129697ebfcef5a3627db72e9d21247a94076fdb9b16da252c3c3763c90e11fa926b9c370dba393fc1d370977e61f3d706af9ebd549abd32973f66bf950c14375bb50855e9c0c39508a19c314dfefd910d4608d0145d8801966f6d585d89dfcdb59f5112ef77480597647500ffcfd615bc75e7a957c19ae3d815773583576bdfa17f1ae4e64b010f0d97fd8be291ddda8225d66c0e63d9a06d7bd9ead34daffef90cb3aca6d630e3813ccb5dcb02f8c31885256c44de0f66e6cdfa78957915a3907312d5e0f7b452155d06b89b04b13dd811c5bd1d2f673d7b12a2ceac3c2640cbb5f1f496f095664fc5b4daf974d7fbdc93d1ff78a575187f78b05a3617124fe918e1ca9cf2243aef13952671aa5a6a5289c5ce3046a9f2623f8a2c2e638abff9134ddb91ea1d1b2805daf95032987a113896f7ceb91585974e06d4716991b1b7a5892071592514dd761ca0e584573d86a11266c51d7c42eb5ba7334f50a43b740dc0042a7231065a8f4171cff3dc75bc07a32be9989bdbe18a5689105706251309976530d4e0712dbdb06f97497b3bc736b2f166391eb43a512921dc3553dffb87f76113ef367d9ccdc13d03f4ae8ac8b034fa1e388b7c69f45086f59f230f5e8965e993cd5a15ba111fe8ac53180599405c9ef43d45195bbcb37e5f319621a569d5626f3567908b1eabb248192240497454639c1c10e7fa198303eec718917193c0eadc8e99c8b300d370854e19413bd2dafb4381eea0831bf317693c3860054cb5a939e8cab40062cfc35b3e1b0f6789cbed26c6ed3651da4971300c70feb77a4a5799b65dd0b166f24264e0436400e36c01100005d68a60906174ef8cc966f020d234bac0dec0a38a445573ca3943e4e85c1b05985d4391f20a7fe0ee6fe0583eb1e522d75dae5122d4eb032f0cd4b2c7ebffee0778b1937c467cac81d7f1d08b9bb229cf2755d782771fdac6602503580cbf9bf1cced09261ec6e3c1642a19c32371663d23e0def55056cbb4df854532bcab2eb1332a3147a3401832b985b32442eaf64d53b0594796103d0b18477bd6e4c648d5d50c65087efff8171c4dfd20fb3acc009223c6774f05e68a3116960004c8ebf48096ae7968ea9af1aab44da8baf2f8d303fe89d48e1c1a791171ca0ad2d8a02645c7a2307b00817fe7c4587d62ddbb2c3dfb06b542e608074c928979c3fd0fcfdc4861c1285a76302c7ce1ae09f3353bf4e91f86010bce59df522cbe5018ddac221d4acfb8a8df32c34d90bf7a463920c1621d8a433d185affa877500d6afaa86facb425943d7cb5e6b15ed239452502e5eecd3461cad4e90778043650b82e6cbb82fd0ad1c7c4163b6de507827ff0a24b5b2e7bf512a3597e6bcd44acbc0d421eae376805a85cf1c8e81caa63918ba0def0dba1dfecbc53faf038a58a7c08ab88a4da7b24cb631c06a03edce9d4fcc672a3cda20c72ae82e0cd82f73e33c6496987744c6dee28f6e8ba7c8093d22200af92b59725bc02a08aea11eb9df838122fbfb10833c0b23c1e7b472c79074030b2637255799423c2c95b19bc197feea327577e09a309fe9a78e05273555296d782dd1bd2467674b86bff57ddf18ae1d5bf10dd36ef3d442e5e2c07d5f739e292ac84ec0e2af7c3ee994c197de640346f719cac8fbb4fad17127af2ceeac3c8cb59d69ef7897480e1b5ca1e5fe3394afb8c457f2ea850579d50f799d66b0b790d2c5e0d415f4591fd591f56412387184de5dd4e39fbd500123ad7aa7f2acf936af170d00b5309d769c57bb008aa51990451726c211e8b6d9345cb7cd357b44b2f016027519afe91c3410af84a9c85c6c8b37cc9ec68f03413acf990a669a570e92a477cc5a339a3087b2eec392bc183562be1d958d83defbc253e0e53d593468cc28907481970cbca839a512cf3c2dd163d176cf15571ac3f10c67b14f6e67f81c7edcece0f8a9430b10fe0573b4147176d315684bce0681f6cb8a812d0ea5ee5d349e46b530ab755a02936daae976028594fb5680eac77abb3f2ca7c5ba26d716b7752ee75c456f9a99bf3b6cbf992a513bb97c65200a5ad5d9678285319753ee4abcb803a76aa37ef7cb6eaef49b89b2b772ec5e93e78554aeadfd1885ca8d9b003689176133000bab127b8e924770316a6966449d0bebd1b234de94dcf537ef31fa6cdecf275750c4901cd8c862106b2fe6bf9185e14cc3127127bca8c271124e2f7beff0c49b37f7a3e3c6276e88e9761af826d002a6bf198d950cab76162460683b8459491e9ac5ee399d0de3ecf319c042b137c8dd26bc2773b01ef884fb90ab9786404f48c0c92beba47bd2fe8083c3a3cbc38807dea2d9073295e42f6a923c87b40bf81f3097da4450a08fc8ea48552182b0547d6d0e856afe2efc8128bcca52efc316f4006ccaee3fb494595c8ea81f6f8745ecfd9fb0e490862d115822f8dde3dc7b810acb4736ab335ee344fc1e2bbbe7ea50963f752ad24d2db6520188658bdad2d12a26368c512bccc19765c9324e0242a427aad80127bb2f0d1d9b59d20d9cab174883a83312297cae0c4724e4e1e438fc56da5206dd805944d65bf40ca3eaa5c6eec88693503e2da0def721bf294001f838a2af9680cf6e0d9ff686d038c4569f0e6a1a083a164bcb3d5b228a144b327d6b429323b4e1b0e402f58ee9f29a440cfdc630d13c0c7b83ccc82f722689817a1869d392760b8a659308501dd756041fcabd766bb34adb46ed8827ca0b9307ca73218d17ad95194bf18abcd6b89f7d0ca7022154971bf050529f7bdfa9fa9717f0781e1a5ca7bcb0c8297b891808ca40fdfb9524a8b4f793e46d8b34abfa6e625c954c64355121ac27d332d35c676d3463299d1004584fa35b4", 0x1000}}, 0x1006) 23.048418556s ago: executing program 1 (id=1529): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000209c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000031080)={0x0, 0x0, &(0x7f0000031040)={&(0x7f0000030fc0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000) 22.800697775s ago: executing program 1 (id=1530): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 22.539849151s ago: executing program 1 (id=1531): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) 22.060986999s ago: executing program 6 (id=1533): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x58, 0x0, 0x0, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}, 0x1, 0xf000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) 21.832448933s ago: executing program 1 (id=1534): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 21.677492984s ago: executing program 6 (id=1535): r0 = epoll_create1(0x80000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x48042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000014}) 21.417311074s ago: executing program 3 (id=1537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 21.121721081s ago: executing program 6 (id=1538): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x2, 0x0) close(0x3) 20.842742219s ago: executing program 3 (id=1540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x0) 20.477366912s ago: executing program 3 (id=1541): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee00}, {0x0, 0x0, 0x5}, {0x10000000000800}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 20.096089506s ago: executing program 3 (id=1543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 20.078555879s ago: executing program 6 (id=1544): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0xab, 0x2a, 0x20, 0x572, 0xc69a, 0x505e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xb2, 0xc5}}]}}]}}, 0x0) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20.061799589s ago: executing program 5 (id=1545): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@i_version}, {@data_err_abort}, {@noload}, {@orlov}, {@nobarrier}]}, 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='ext4\x00', 0x0, 0x0) 19.787626462s ago: executing program 3 (id=1547): timer_create(0x3, 0x0, &(0x7f00009b1ffc)=0x0) rt_sigsuspend(&(0x7f0000000200), 0x8) timer_settime(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 18.641602416s ago: executing program 3 (id=1550): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000004700)=""/4105, 0x1009}, {&(0x7f0000001140)=""/179, 0xb3}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000001300)=""/208, 0xd0}], 0x7}, 0x40012000) 18.592747087s ago: executing program 1 (id=1551): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)='\v', 0x1) 18.395700472s ago: executing program 4 (id=1552): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xa, &(0x7f00001c9fff)="03", 0x19) 18.324238684s ago: executing program 5 (id=1553): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="4016e6"], 0x0, 0x0, 0x0, 0x0}) 18.250599667s ago: executing program 6 (id=1554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300, 0x0, 0x8040}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 17.984744592s ago: executing program 4 (id=1555): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 17.707439027s ago: executing program 4 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 17.538865014s ago: executing program 4 (id=1558): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x541b, 0x0) 17.358039161s ago: executing program 4 (id=1559): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000001f80)=ANY=[@ANYBLOB="73686f77657865632c756e695f786c6174653d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c756e695f786c6174653d302c726f6469722c636865636b3d7374726963742c726f6469722c756e695f786c6174653d312c696f636861727365743d6d6163637972696c6c69632c636f6465706167653d3837342c756e695f786c6174653d312c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c726f6469722c756e695f786c6174653d312c757466383d312c73686f72746e616d653d77696e39352c757466383d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c757466383d312c73686f72746e616d653d77696e39352c757466383d312c726f6469722c646566636f6e746578743d756e636f6e66696e65645f752c00318f7e629767ced6883360f35407762d12b615023e62d95e0ad95350295ffedb27f3301281ad27bf9a40ed5e9e3130366c7c64e2bba17de457f57b"], 0xfa, 0x2dd, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 17.009101733s ago: executing program 4 (id=1560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e008000000008000d"], 0x5c}}, 0x0) 16.829518729s ago: executing program 2 (id=1561): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f0000000640)=ANY=[], 0x1, 0x669, &(0x7f0000001000)="$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") setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 16.518905337s ago: executing program 2 (id=1562): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="94ec7acd4ab2", 0x0, 0x0, 0x0, 0x0, 0x0}) 16.428543311s ago: executing program 5 (id=1563): unshare(0x4000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22140, 0x24) pwritev2(r0, 0x0, 0x0, 0xa00, 0x0, 0x700000000000000) 16.271093852s ago: executing program 1 (id=1564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879310000000005002000050000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x840) 16.221537608s ago: executing program 2 (id=1565): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x2d) fcntl$getflags(r0, 0xb) 16.171861479s ago: executing program 5 (id=1566): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{}]}) 15.988511355s ago: executing program 2 (id=1567): r0 = syz_open_dev$evdev(&(0x7f0000001180), 0x3, 0x80) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000011c0)=0x3) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001d40)=0x3) 15.889934863s ago: executing program 5 (id=1568): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 15.759007195s ago: executing program 2 (id=1569): r0 = socket$inet(0x2, 0x3, 0x7) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 15.676002195s ago: executing program 5 (id=1570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void, @void}}}, 0x1c}}, 0x0) 15.478129016s ago: executing program 2 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x701, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 3.093433201s ago: executing program 33 (id=1554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300, 0x0, 0x8040}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.649794695s ago: executing program 34 (id=1550): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000004700)=""/4105, 0x1009}, {&(0x7f0000001140)=""/179, 0xb3}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000001300)=""/208, 0xd0}], 0x7}, 0x40012000) 1.568763578s ago: executing program 35 (id=1560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e008000000008000d"], 0x5c}}, 0x0) 1.045663006s ago: executing program 36 (id=1564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879310000000005002000050000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x840) 511.35527ms ago: executing program 37 (id=1570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 38 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x701, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.338812][ T8322] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.632757][ T8327] loop4: detected capacity change from 0 to 32768 [ 154.640935][ T29] audit: type=1804 audit(1731645192.529:17): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.965" name="/" dev="pidfs" ino=8631 res=1 errno=0 [ 154.693820][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.928300][ T8342] loop0: detected capacity change from 0 to 512 [ 154.956523][ T8342] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.959667][ T8340] netlink: 'syz.5.971': attribute type 1 has an invalid length. [ 154.980965][ T8340] netlink: 9384 bytes leftover after parsing attributes in process `syz.5.971'. [ 154.998919][ T8342] EXT4-fs (loop0): 1 truncate cleaned up [ 155.005283][ T8344] loop2: detected capacity change from 0 to 512 [ 155.012933][ T8344] EXT4-fs (loop2): Test dummy encryption mode enabled [ 155.019818][ T8344] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.076139][ T8342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.113101][ T8344] EXT4-fs (loop2): 1 truncate cleaned up [ 155.141639][ T8344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.242241][ T8352] loop5: detected capacity change from 0 to 1764 [ 155.286769][ T8355] loop4: detected capacity change from 0 to 256 [ 155.418099][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.462343][ T8355] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xe95cf635, utbl_chksum : 0xe619d30d) [ 155.597685][ T8358] loop3: detected capacity change from 0 to 32768 [ 155.605047][ T8358] btrfs: Deprecated parameter 'usebackuproot' [ 155.611416][ T8358] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.645470][ T8358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.973 (8358) [ 155.764135][ T8358] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.778103][ T8344] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 155.800824][ T8358] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 155.832371][ T8358] BTRFS info (device loop3): disk space caching is enabled [ 155.839652][ T8358] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 156.069224][ T8382] sp0: Synchronizing with TNC [ 156.165828][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.180214][ T8381] loop5: detected capacity change from 0 to 2048 [ 156.259864][ T8388] loop0: detected capacity change from 0 to 4096 [ 156.278085][ T8388] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 156.309194][ T8381] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 156.446435][ T8381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.510620][ T964] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.690839][ T964] usb 3-1: Using ep0 maxpacket: 8 [ 156.741996][ T964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.794989][ T8388] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 156.851772][ T964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.916413][ T8388] ntfs3(loop0): ino=1a, ntfs_sync_fs failed, -22. [ 156.918593][ T964] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 156.968552][ T964] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 156.970746][ T8388] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 156.988043][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.018637][ T5848] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.148019][ T964] usb 3-1: config 0 descriptor?? [ 157.158250][ T8414] CUSE: unknown device info "€" [ 157.191739][ T8414] CUSE: zero length info key specified [ 157.194654][ T5838] ntfs3(loop0): ino=1a, ntfs_sync_fs failed, -22. [ 157.571242][ T964] sony 0003:054C:0268.0007: item fetching failed at offset 6/70 [ 157.596192][ T964] sony 0003:054C:0268.0007: parse failed [ 157.630573][ T964] sony 0003:054C:0268.0007: probe with driver sony failed with error -22 [ 157.695420][ T8424] loop5: detected capacity change from 0 to 256 [ 157.702345][ T5839] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.744601][ T8426] netlink: 100 bytes leftover after parsing attributes in process `syz.1.995'. [ 157.805900][ T5927] usb 3-1: USB disconnect, device number 4 [ 157.871076][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 157.879991][ T5839] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 157.940609][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.970475][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.002254][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.101879][ T5839] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 158.129874][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.156526][ T5839] usb 4-1: Product: syz [ 158.180664][ T5839] usb 4-1: Manufacturer: syz [ 158.198621][ T5839] usb 4-1: SerialNumber: syz [ 158.231815][ T5839] usb 4-1: config 0 descriptor?? [ 158.254904][ T8420] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 158.503098][ T5839] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 158.543401][ T5839] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 158.913575][ C1] powermate: config urb returned -71 [ 158.919198][ C1] powermate: config urb returned -71 [ 158.925104][ C1] powermate: config urb returned -71 [ 158.941088][ T3575] usb 4-1: USB disconnect, device number 6 [ 158.947109][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 159.010571][ T5839] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 159.112333][ T8406] loop4: detected capacity change from 0 to 32768 [ 159.175315][ T5839] usb 6-1: unable to get BOS descriptor or descriptor too short [ 159.185183][ T5839] usb 6-1: config 100 has an invalid interface number: 59 but max is 1 [ 159.224812][ T5839] usb 6-1: config 100 has an invalid interface number: 197 but max is 1 [ 159.280506][ T5839] usb 6-1: config 100 has no interface number 0 [ 159.299779][ T5839] usb 6-1: config 100 has no interface number 1 [ 159.326366][ T5839] usb 6-1: config 100 interface 59 has no altsetting 0 [ 159.362111][ T5839] usb 6-1: config 100 interface 197 has no altsetting 0 [ 159.385400][ T5839] usb 6-1: New USB device found, idVendor=12d1, idProduct=4501, bcdDevice=1d.b6 [ 159.402863][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.414173][ T8441] loop2: detected capacity change from 0 to 32768 [ 159.423107][ T5839] usb 6-1: Product: syz [ 159.428150][ T5839] usb 6-1: Manufacturer: syz [ 159.446282][ T8449] loop0: detected capacity change from 0 to 1024 [ 159.468092][ T8441] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1004 (8441) [ 159.490648][ T5839] usb 6-1: SerialNumber: syz [ 159.529457][ T8441] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.559031][ T8441] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 159.585040][ T8441] BTRFS info (device loop2): using free-space-tree [ 159.863418][ T8441] BTRFS info (device loop2): checking UUID tree [ 159.885109][ T5839] usb 6-1: USB disconnect, device number 4 [ 160.076257][ T8477] loop1: detected capacity change from 0 to 256 [ 160.126473][ T8477] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 160.160759][ T5903] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 160.284221][ T8477] Process accounting resumed [ 160.331492][ T5836] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.369030][ T5903] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 160.432752][ T5903] usb 4-1: config 0 has no interface number 0 [ 160.450506][ T5903] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 160.510470][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.555371][ T5903] usb 4-1: config 0 descriptor?? [ 160.602913][ T5903] ums-realtek 4-1:0.5: USB Mass Storage device detected [ 160.830244][ T5903] usb 4-1: USB disconnect, device number 7 [ 161.104442][ T8494] loop2: detected capacity change from 0 to 512 [ 161.159084][ T8469] loop0: detected capacity change from 0 to 32768 [ 161.174645][ T8494] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.307031][ T8469] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.325310][ T8494] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1017: bad orphan inode 16 [ 161.411724][ T8494] ext4_test_bit(bit=15, block=4) = 0 [ 161.446516][ T8494] EXT4-fs (loop2): 1 orphan inode deleted [ 161.461637][ T8494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.667623][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.712794][ T8469] XFS (loop0): Ending clean mount [ 161.718102][ T8511] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1020'. [ 161.740654][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1020'. [ 161.896398][ T8469] XFS (loop0): Quotacheck needed: Please wait. [ 161.988061][ T8469] XFS (loop0): Quotacheck: Done. [ 162.046349][ T8492] loop1: detected capacity change from 0 to 32768 [ 162.169585][ T8492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1016 (8492) [ 162.193057][ T8492] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.210329][ T8522] 9pnet_rdma: rdma_create_trans (8522): problem binding to privport: 13 [ 162.237940][ T8492] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 162.257447][ T8492] BTRFS info (device loop1): using free-space-tree [ 162.353636][ T5838] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.782476][ T8547] loop3: detected capacity change from 0 to 64 [ 162.836043][ T5835] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.954580][ T8551] program syz.0.1029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.292203][ T8517] loop5: detected capacity change from 0 to 32768 [ 163.307602][ T5927] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 163.490229][ T8517] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.511062][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 163.533789][ T5927] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 163.554831][ T5927] usb 1-1: config 0 has no interface number 0 [ 163.634500][ T5927] usb 1-1: config 0 interface 12 has no altsetting 0 [ 163.653839][ T8578] loop1: detected capacity change from 0 to 4096 [ 163.700936][ T5927] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 163.741041][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 163.755512][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.785378][ T5927] usb 1-1: Product: syz [ 163.789591][ T5927] usb 1-1: Manufacturer: syz [ 163.814874][ T5927] usb 1-1: SerialNumber: syz [ 163.819684][ T8517] XFS (loop5): Ending clean mount [ 163.838150][ T5927] usb 1-1: config 0 descriptor?? [ 163.876292][ T8517] XFS (loop5): Quotacheck needed: Please wait. [ 163.914443][ T8] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.935256][ T8] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.957586][ T8517] XFS (loop5): Quotacheck: Done. [ 163.975244][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.000697][ T8] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 164.010078][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.024303][ T8] usb 4-1: config 0 descriptor?? [ 164.175474][ T5847] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.466399][ T8] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 164.482207][ T5927] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 164.505326][ T8] aquacomputer_d5next 0003:0C70:F014.0008: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 164.518447][ T5927] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 164.522477][ T8586] syz.4.1044: attempt to access beyond end of device [ 164.522477][ T8586] nbd4: rw=0, sector=16, nr_sectors = 8 limit=0 [ 164.530516][ T5927] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 164.548872][ T5927] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 164.583559][ T5927] usb 1-1: USB disconnect, device number 2 [ 164.637091][ T8586] REISERFS warning (device nbd4): sh-2006 read_super_block: bread failed (dev nbd4, block 2, size 4096) [ 164.642116][ T8589] loop1: detected capacity change from 0 to 1024 [ 164.648844][ T8586] syz.4.1044: attempt to access beyond end of device [ 164.648844][ T8586] nbd4: rw=0, sector=128, nr_sectors = 8 limit=0 [ 164.672491][ T8] usb 4-1: USB disconnect, device number 8 [ 164.682452][ T8586] REISERFS warning (device nbd4): sh-2006 read_super_block: bread failed (dev nbd4, block 16, size 4096) [ 164.702984][ T8586] REISERFS warning (device nbd4): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd4 [ 164.801478][ T8589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.160069][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.282765][ T8604] Zero length message leads to an empty skb [ 165.489348][ T8607] loop3: detected capacity change from 0 to 2048 [ 165.518159][ T8607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.525023][ T8615] loop4: detected capacity change from 0 to 512 [ 165.534314][ T8615] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.540972][ T8615] EXT4-fs: Ignoring removed nobh option [ 165.630637][ T8615] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 165.645021][ T8615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 165.656720][ T8615] System zones: 1-12 [ 165.671702][ T8607] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 165.697876][ T8615] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1055: corrupted in-inode xattr: e_value size too large [ 165.702931][ T8622] loop1: detected capacity change from 0 to 1764 [ 165.795121][ T8615] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1055: couldn't read orphan inode 15 (err -117) [ 165.861680][ T8615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.863098][ T8622] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 166.004292][ T8622] block device autoloading is deprecated and will be removed. [ 166.080596][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.181116][ T8640] loop0: detected capacity change from 0 to 2048 [ 166.229109][ T8640] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.278665][ T8644] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 166.295910][ T8644] netlink: 9364 bytes leftover after parsing attributes in process `syz.3.1069'. [ 166.313119][ T8644] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 166.379957][ T5838] UDF-fs: warning (device loop0): udf_evict_inode: Inode 1347 (mode 100755) has inode size 9000 different from extent length 9216. Filesystem need not be standards compliant. [ 166.520539][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.724266][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.748724][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.785719][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 166.790605][ T8] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 166.815514][ T8656] loop3: detected capacity change from 0 to 4096 [ 166.822058][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.846569][ T8] usb 3-1: config 0 descriptor?? [ 166.864977][ T8656] NILFS (loop3): invalid segment: Checksum error in segment payload [ 166.930602][ T8656] NILFS (loop3): trying rollback from an earlier position [ 166.939495][ T8630] loop5: detected capacity change from 0 to 40427 [ 166.995671][ T8630] F2FS-fs (loop5): invalid crc_offset: 16 [ 167.007390][ T8656] NILFS (loop3): recovery complete [ 167.034942][ T8630] F2FS-fs (loop5): Found nat_bits in checkpoint [ 167.051037][ T8667] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.210138][ T8630] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 167.279918][ T8630] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=400000, run fsck to fix. [ 167.285725][ T8643] loop4: detected capacity change from 0 to 32768 [ 167.316519][ T8] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 167.353870][ T8676] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=400000, run fsck to fix. [ 167.370681][ T8] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 167.377693][ T8] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 167.409657][ T8] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 167.416857][ T8] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 167.456447][ T8] holtek 0003:1241:5015.0009: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 167.470626][ T8] holtek 0003:1241:5015.0009: no inputs found [ 167.546051][ T3575] usb 3-1: USB disconnect, device number 5 [ 167.796414][ T8682] loop1: detected capacity change from 0 to 32768 [ 167.804355][ T8682] XFS: noikeep mount option is deprecated. [ 167.984416][ T8671] loop0: detected capacity change from 0 to 32768 [ 167.992919][ T8671] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1079 (8671) [ 168.044192][ T8682] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 168.082687][ T8671] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 168.106028][ T8671] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 168.124519][ T8671] BTRFS info (device loop0): using free-space-tree [ 168.284982][ T8682] XFS (loop1): Ending clean mount [ 168.311902][ T8682] XFS (loop1): Quotacheck needed: Please wait. [ 168.324753][ T8717] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 168.409081][ T8682] XFS (loop1): Quotacheck: Done. [ 168.569286][ T5903] kernel write not supported for file /sg0 (pid: 5903 comm: kworker/1:5) [ 168.597530][ T5835] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 168.742996][ T5838] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 169.183115][ T8726] loop5: detected capacity change from 0 to 40427 [ 169.209572][ T8726] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 169.218162][ T8726] F2FS-fs (loop5): Image doesn't support compression [ 169.226046][ T8726] F2FS-fs (loop5): heap/no_heap options were deprecated [ 169.233879][ T8726] F2FS-fs (loop5): Image doesn't support compression [ 169.253003][ T8743] tipc: Started in network mode [ 169.257956][ T8743] tipc: Node identity 00000000000000000000ffff640101, cluster identity 4711 [ 169.270062][ T8726] F2FS-fs (loop5): invalid crc value [ 169.285596][ T8743] tipc: Enabling of bearer rejected, failed to enable media [ 169.297642][ T8726] F2FS-fs (loop5): Found nat_bits in checkpoint [ 169.361452][ T8749] (unnamed net_device) (uninitialized): (slave vcan0): Device is not bonding slave [ 169.410590][ T8749] (unnamed net_device) (uninitialized): option active_slave: invalid value (vcan0) [ 169.460546][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.556203][ T8726] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 169.602642][ T8758] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 169.610726][ T8758] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.713747][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 169.779408][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.803411][ T8] usb 2-1: config 0 has no interface number 0 [ 169.810776][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.824021][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.834219][ T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=ee.00 [ 169.843788][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.856872][ T8] usb 2-1: config 0 descriptor?? [ 169.907051][ T5847] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4f6/0x1ca0 [ 169.919428][ T5847] F2FS-fs (loop5): invalid blkaddr: 513, type: 10, run fsck to fix. [ 169.969781][ T5847] syz-executor: attempt to access beyond end of device [ 169.969781][ T5847] loop5: rw=2051, sector=45072, nr_sectors = 24 limit=40427 [ 169.985530][ T5847] F2FS-fs (loop5): Issue discard(5634, 5634, 3) failed, ret: -5 [ 170.293725][ T8] uclogic 0003:256C:006D.000A: No inputs registered, leaving [ 170.316562][ T8] uclogic 0003:256C:006D.000A: hidraw0: USB HID v0.40 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1 [ 170.491116][ T8796] loop2: detected capacity change from 0 to 256 [ 170.504242][ T8] usb 2-1: USB disconnect, device number 4 [ 170.508322][ T8796] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 170.553463][ T5927] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.631034][ T8801] loop2: detected capacity change from 0 to 512 [ 170.638636][ T8801] EXT4-fs: Ignoring removed orlov option [ 170.682534][ T8801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.702243][ T8801] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.733826][ T5927] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 170.743970][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.752294][ T5927] usb 4-1: Product: syz [ 170.756573][ T5927] usb 4-1: Manufacturer: syz [ 170.761381][ T5927] usb 4-1: SerialNumber: syz [ 170.769545][ T5927] usb 4-1: config 0 descriptor?? [ 170.780365][ T5927] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 009 [ 170.824940][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.854924][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 171.160543][ T5903] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 171.310680][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 171.328815][ T5903] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 171.348048][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.351102][ T964] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.367647][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.389125][ T5903] usb 3-1: SerialNumber: syz [ 171.401752][ T5927] i2c i2c-1: failure reading functionality [ 171.414313][ T5927] i2c i2c-1: connected i2c-tiny-usb device [ 171.417076][ T5903] cdc_acm 3-1:1.0: skipping garbage [ 171.432434][ T5927] usb 4-1: USB disconnect, device number 9 [ 171.441474][ T5903] cdc_acm 3-1:1.0: invalid descriptor buffer length [ 171.464610][ T5903] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 171.487527][ T5903] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 171.518317][ T5903] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 171.541673][ T964] usb 2-1: Using ep0 maxpacket: 8 [ 171.562142][ T964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.584426][ T964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.615577][ T964] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 171.635183][ T964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.653402][ T5903] usb 3-1: USB disconnect, device number 6 [ 171.657401][ T964] usb 2-1: config 0 descriptor?? [ 171.674904][ T8825] loop0: detected capacity change from 0 to 512 [ 171.692626][ T8812] loop5: detected capacity change from 0 to 32768 [ 171.700817][ T8825] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 171.717069][ T8825] EXT4-fs (loop0): invalid journal inode [ 171.722921][ T8825] EXT4-fs (loop0): can't get journal size [ 171.735389][ T8825] EXT4-fs (loop0): 1 truncate cleaned up [ 171.744321][ T8825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.757983][ T8812] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.826520][ T8812] XFS (loop5): Ending clean mount [ 171.855102][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.919939][ T5847] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.017281][ T8841] loop3: detected capacity change from 0 to 256 [ 172.199305][ T964] wacom 0003:056A:0333.000B: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0 [ 172.209356][ T8845] gretap0: entered promiscuous mode [ 172.230228][ T8845] gretap0: left promiscuous mode [ 172.332786][ T8851] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1144'. [ 172.456720][ T5902] usb 2-1: USB disconnect, device number 5 [ 172.554205][ T29] audit: type=1326 audit(1731645210.449:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8826 comm="syz.4.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63537e719 code=0x7fc00000 [ 173.012407][ T3575] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 173.114907][ T8880] loop1: detected capacity change from 0 to 256 [ 173.192860][ T3575] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 173.210732][ T3575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.263820][ T3575] usb 6-1: config 0 descriptor?? [ 173.269222][ T8880] FAT-fs (loop1): Directory bread(block 64) failed [ 173.277327][ T8880] FAT-fs (loop1): Directory bread(block 65) failed [ 173.307001][ T8880] FAT-fs (loop1): Directory bread(block 66) failed [ 173.326000][ T8880] FAT-fs (loop1): Directory bread(block 67) failed [ 173.341797][ T8880] FAT-fs (loop1): Directory bread(block 68) failed [ 173.358089][ T8880] FAT-fs (loop1): Directory bread(block 69) failed [ 173.390896][ T8880] FAT-fs (loop1): Directory bread(block 70) failed [ 173.418208][ T8880] FAT-fs (loop1): Directory bread(block 71) failed [ 173.443671][ T8880] FAT-fs (loop1): Directory bread(block 72) failed [ 173.471097][ T8880] FAT-fs (loop1): Directory bread(block 73) failed [ 173.491795][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.543130][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.589111][ T3575] [drm] vendor descriptor length:6 data:06 5f 01 05 41 00 00 00 00 00 00 [ 173.610089][ T3575] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 173.761443][ T8862] loop0: detected capacity change from 0 to 40427 [ 173.780553][ T8862] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 173.788292][ T8862] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.790856][ T3575] [drm:udl_init] *ERROR* Selecting channel failed [ 173.835004][ T8866] loop4: detected capacity change from 0 to 40427 [ 173.853863][ T8862] F2FS-fs (loop0): heap/no_heap options were deprecated [ 173.860297][ T3575] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 173.879013][ T8866] F2FS-fs (loop4): Mismatch start address, segment0(134218240) cp_blkaddr(0) [ 173.880848][ T8862] F2FS-fs (loop0): Image doesn't support compression [ 173.899695][ T3575] [drm] Initialized udl on minor 2 [ 173.910797][ T8866] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 173.941016][ T8862] F2FS-fs (loop0): invalid crc value [ 173.943369][ T3575] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.970265][ T8862] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.991869][ T8866] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.002193][ T3575] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 174.042085][ T5903] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 174.068696][ T3575] usb 6-1: USB disconnect, device number 5 [ 174.075872][ T5903] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 174.139868][ T8866] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 174.147107][ T8866] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.171268][ T8862] F2FS-fs (loop0): Start checkpoint disabled! [ 174.187308][ T8866] F2FS-fs (loop4): Can't flush 4 in 0 for SEGS_PER_SEC 1 != 1 [ 174.231720][ T8862] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 174.240539][ T8862] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 174.275930][ T29] audit: type=1800 audit(1731645212.169:19): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1149" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 174.317829][ T5837] syz-executor: attempt to access beyond end of device [ 174.317829][ T5837] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.364587][ T5837] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 174.483818][ T1093] kworker/u8:6: attempt to access beyond end of device [ 174.483818][ T1093] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 174.499173][ T5839] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 174.525581][ T8891] loop2: detected capacity change from 0 to 32768 [ 174.550147][ T1093] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 174.591932][ T1093] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 174.631224][ T8915] netlink: 'syz.5.1174': attribute type 29 has an invalid length. [ 174.662359][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.674801][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.685165][ T5839] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 174.694450][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.706046][ T5839] usb 4-1: config 0 descriptor?? [ 174.717858][ T8891] JBD2: Ignoring recovery information on journal [ 174.741248][ T8915] netlink: 'syz.5.1174': attribute type 29 has an invalid length. [ 175.043283][ T8891] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 175.131640][ T5839] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 175.168965][ T5839] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 175.190566][ T5839] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 175.197741][ T5839] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 175.227487][ T5839] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 175.262119][ T5839] asus 0003:0B05:17E0.000C: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.3-1/input0 [ 175.279380][ T5836] ocfs2: Unmounting device (7,2) on (node local) [ 175.283714][ T5839] asus 0003:0B05:17E0.000C: Asus input not registered [ 175.290751][ T8908] loop1: detected capacity change from 0 to 32768 [ 175.300351][ T5839] asus 0003:0B05:17E0.000C: probe with driver asus failed with error -12 [ 175.341840][ T5839] usb 4-1: USB disconnect, device number 10 [ 175.437598][ T8933] netlink: 134716 bytes leftover after parsing attributes in process `syz.2.1179'. [ 175.447579][ T8933] openvswitch: netlink: Message has 5 unknown bytes. [ 175.512480][ T8937] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1180'. [ 175.522359][ T8937] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 175.611547][ T964] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.624838][ T8908] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.770560][ T964] usb 6-1: Using ep0 maxpacket: 16 [ 175.778282][ T964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.792213][ T964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.840531][ T964] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.876309][ T964] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.898045][ T964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.913629][ T964] usb 6-1: config 0 descriptor?? [ 175.948450][ T8908] XFS (loop1): Ending clean mount [ 175.972104][ T8908] XFS (loop1): Quotacheck needed: Please wait. [ 176.364056][ T8908] XFS (loop1): Quotacheck: Done. [ 176.415387][ T8967] loop4: detected capacity change from 0 to 40427 [ 176.445424][ T5835] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.489959][ T8967] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 176.497916][ T8967] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 176.503195][ T8979] loop2: detected capacity change from 0 to 8 [ 176.526254][ T964] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input10 [ 176.571373][ T8967] F2FS-fs (loop4): invalid crc value [ 176.595786][ T8979] SQUASHFS error: lzo decompression failed, data probably corrupt [ 176.607332][ T964] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 176.632735][ T8979] SQUASHFS error: Failed to read block 0x71: -5 [ 176.635372][ T8967] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.639149][ T8979] SQUASHFS error: lzo decompression failed, data probably corrupt [ 176.662323][ T8979] SQUASHFS error: Failed to read block 0x71: -5 [ 176.669192][ T29] audit: type=1800 audit(1731645214.559:20): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1197" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 176.761175][ T5903] usb 6-1: USB disconnect, device number 6 [ 176.784075][ T8967] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 176.792120][ T8967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 176.879142][ T8967] syz.4.1191: attempt to access beyond end of device [ 176.879142][ T8967] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 176.904276][ T8987] loop1: detected capacity change from 0 to 128 [ 176.926437][ T8987] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.927311][ T8988] loop2: detected capacity change from 0 to 256 [ 176.951898][ T8987] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.954068][ T8967] syz.4.1191: attempt to access beyond end of device [ 176.954068][ T8967] loop4: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 177.016090][ T8988] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 177.043114][ T29] audit: type=1804 audit(1731645214.939:21): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1199" name="/newroot/207/bus/bus" dev="loop2" ino=1048702 res=1 errno=0 [ 177.066761][ T8967] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 177.076694][ T8967] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 177.091819][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.130662][ T29] audit: type=1800 audit(1731645214.939:22): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1199" name="bus" dev="loop2" ino=1048702 res=0 errno=0 [ 177.335676][ T9003] 9pnet_fd: p9_fd_create_tcp (9003): problem binding to privport [ 177.489206][ T9011] loop3: detected capacity change from 0 to 256 [ 177.540569][ T9007] loop2: detected capacity change from 0 to 2048 [ 177.604543][ T9007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.669545][ T9018] loop3: detected capacity change from 0 to 128 [ 177.673630][ T9007] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 177.693279][ T9014] loop1: detected capacity change from 0 to 256 [ 177.747079][ T9014] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 177.810587][ T964] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 177.913675][ T9029] loop4: detected capacity change from 0 to 1024 [ 177.960586][ T5927] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 177.963837][ T9029] hfsplus: bad catalog entry type [ 177.968329][ T964] usb 6-1: Using ep0 maxpacket: 8 [ 177.992493][ T964] usb 6-1: config 0 has an invalid interface number: 6 but max is 2 [ 178.000908][ T964] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 178.009096][ T964] usb 6-1: config 0 has no interface number 1 [ 178.038458][ T964] usb 6-1: config 0 has no interface number 2 [ 178.046394][ T53] hfsplus: b-tree write err: -5, ino 4 [ 178.055965][ T964] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 178.072344][ T964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.083840][ T964] usb 6-1: config 0 descriptor?? [ 178.121828][ T5927] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 178.149420][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.170733][ T5927] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.189784][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.217709][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.227787][ T5927] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.236675][ T9042] loop1: detected capacity change from 0 to 512 [ 178.239255][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.256588][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.265659][ T9039] netlink: 'syz.3.1224': attribute type 2 has an invalid length. [ 178.267979][ T5927] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.289759][ T9042] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.336349][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.360851][ T964] qcserial 6-1:0.6: Qualcomm USB modem converter detected [ 178.373646][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.379610][ T9042] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1225: casefold flag without casefold feature [ 178.428749][ T5927] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.437641][ T9042] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1225: couldn't read orphan inode 15 (err -117) [ 178.455380][ T9042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.470914][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.531349][ T9042] ./file0: Can't lookup blockdev [ 178.547786][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.557663][ T5927] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.569612][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.589256][ T9056] netlink: 'syz.3.1231': attribute type 2 has an invalid length. [ 178.610579][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.619515][ T5927] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.631065][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.652884][ T3575] usb 6-1: USB disconnect, device number 7 [ 178.660015][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.660191][ T5903] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.680168][ T3575] qcserial 6-1:0.6: device disconnected [ 178.811032][ T9062] loop1: detected capacity change from 0 to 4096 [ 178.818649][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.827770][ T5927] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.838793][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.847047][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.856307][ T5927] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.864979][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 178.869395][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.885323][ T5927] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 178.894973][ T5903] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 178.895686][ T5927] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 178.918242][ T5927] usb 1-1: Product: syz [ 178.920490][ T5903] usb 5-1: config 0 has no interface number 0 [ 178.939833][ T5903] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice= 5.d6 [ 178.960546][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.962721][ T9062] ntfs3(loop1): Failed to load $Extend (-22). [ 178.977584][ T5927] usb 1-1: Manufacturer: syz [ 178.987087][ T9062] ntfs3(loop1): Failed to initialize $Extend. [ 178.988050][ T9058] loop3: detected capacity change from 0 to 8192 [ 178.993740][ T5927] usb 1-1: SerialNumber: syz [ 179.009261][ T5903] usb 5-1: config 0 descriptor?? [ 179.022163][ T5903] usb-storage 5-1:0.236: USB Mass Storage device detected [ 179.022261][ T5927] usb 1-1: config 0 descriptor?? [ 179.050974][ T5903] usb-storage 5-1:0.236: device ignored [ 179.058497][ T5927] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 179.191374][ T9070] loop3: detected capacity change from 0 to 1024 [ 179.214262][ T9070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.218436][ T9073] loop1: detected capacity change from 0 to 256 [ 179.279829][ T3575] usb 1-1: USB disconnect, device number 3 [ 179.280823][ T5927] usb 5-1: USB disconnect, device number 6 [ 179.293457][ T3575] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 179.320351][ T9070] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 179.395497][ T9073] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcb93d4f6, utbl_chksum : 0xe619d30d) [ 179.420640][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.456073][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.600678][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 179.629106][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 179.688572][ T25] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 179.702908][ T25] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 179.727348][ T25] usb 3-1: Product: syz [ 179.743910][ T25] usb 3-1: Manufacturer: syz [ 179.748547][ T25] usb 3-1: SerialNumber: syz [ 179.780344][ T25] usb 3-1: config 0 descriptor?? [ 179.809055][ T9068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.911478][ T5903] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 180.106028][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.118605][ T25] usb 3-1: USB disconnect, device number 7 [ 180.171746][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.242922][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.320099][ T5903] usb 6-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 180.383038][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.439544][ T5903] usb 6-1: config 0 descriptor?? [ 180.501654][ T3575] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.530039][ T9092] loop1: detected capacity change from 0 to 128 [ 180.598579][ T9095] loop0: detected capacity change from 0 to 256 [ 180.613872][ T9092] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 180.651258][ T9095] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 180.685425][ T9092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.694609][ T3575] usb 5-1: Using ep0 maxpacket: 8 [ 180.721565][ T3575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.755882][ T3575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.789229][ T3575] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.883044][ T3575] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 180.951365][ T5903] wacom 0003:056A:0116.000E: hidraw0: USB HID v0.05 Device [HID 056a:0116] on usb-dummy_hcd.5-1/input0 [ 180.965669][ T3575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.018431][ T3575] usb 5-1: config 0 descriptor?? [ 181.124244][ T5903] usb 6-1: USB disconnect, device number 8 [ 181.200873][ T5856] Bluetooth: hci0: Malformed LE Event: 0x0b [ 181.257224][ T9104] loop3: detected capacity change from 0 to 128 [ 181.287854][ T9097] loop1: detected capacity change from 0 to 2048 [ 181.305153][ T9099] loop2: detected capacity change from 0 to 1024 [ 181.335625][ T9097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.441051][ T29] audit: type=1800 audit(1731645219.279:23): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1252" name="file2" dev="loop2" ino=840 res=0 errno=0 [ 181.486940][ T3575] sunplus 0003:04FC:05D8.000F: item fetching failed at offset 5/7 [ 181.504279][ T3575] sunplus 0003:04FC:05D8.000F: probe with driver sunplus failed with error -22 [ 181.695361][ T3575] usb 5-1: USB disconnect, device number 7 [ 181.771737][ T9104] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.827334][ T9104] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.945470][ T9114] loop0: detected capacity change from 0 to 128 [ 182.148299][ T5848] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.422044][ T9121] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 182.455590][ T9121] [U] J"—E:ÀÆ" [ 182.459224][ T9121] [U] ª‡Ó [ 183.697493][ T9143] loop0: detected capacity change from 0 to 512 [ 183.807794][ T9143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.960795][ T9143] EXT4-fs (loop0): 1 truncate cleaned up [ 184.027819][ T9143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.063111][ T9111] loop2: detected capacity change from 0 to 32768 [ 184.132277][ T9111] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1256 (9111) [ 184.250247][ T9111] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 184.300635][ T5903] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 184.319342][ T9111] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 184.355422][ T9150] loop1: detected capacity change from 0 to 16 [ 184.373127][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.399893][ T9111] BTRFS info (device loop2): using free-space-tree [ 184.427649][ T9150] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.468942][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 184.517460][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.565161][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.584372][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.597978][ T5903] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.607623][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.673115][ T5903] usb 6-1: config 0 descriptor?? [ 184.727200][ T9124] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 184.810781][ T9124] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -11 in[46, 4050] out[1851] [ 184.885720][ T9134] loop4: detected capacity change from 0 to 32768 [ 184.896872][ T9111] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 184.898629][ T9111] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 184.911681][ T9111] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 184.920876][ T9111] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 184.930683][ T9111] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 184.940999][ T9111] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 184.951377][ T9111] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 184.969190][ T9124] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 185.095453][ T9134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1267 (9134) [ 185.215315][ T9134] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.262929][ T9134] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 185.272206][ T9134] BTRFS info (device loop4): disk space caching is enabled [ 185.279604][ T9134] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 185.358095][ T9111] BTRFS error (device loop2): open_ctree failed [ 185.642269][ T9134] BTRFS info (device loop4): rebuilding free space tree [ 185.751800][ T9134] BTRFS info (device loop4): disabling free space tree [ 185.829526][ T5903] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 185.858822][ T9134] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 185.945638][ T9134] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.998099][ T5903] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0010/input/input15 [ 186.171619][ T5903] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 186.307414][ T5903] usb 6-1: USB disconnect, device number 9 [ 186.341764][ T5837] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.492185][ T9197] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 186.832635][ T9203] loop2: detected capacity change from 0 to 1024 [ 186.919932][ T9203] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 186.977828][ T9203] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 187.062499][ T9203] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 187.166615][ T9203] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.1280: unexpected bad inode w/o EXT4_IGET_BAD [ 187.290931][ T9203] EXT4-fs (loop2): no journal found [ 187.310924][ T9203] EXT4-fs (loop2): can't get journal size [ 187.378101][ T9203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.465267][ T9214] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1292'. [ 187.524270][ T9214] netlink: 'syz.5.1292': attribute type 2 has an invalid length. [ 187.572927][ T9203] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1404: inode #12: block 16: comm syz.2.1280: path /221/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 187.609283][ T9214] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1292'. [ 187.644154][ T9217] loop1: detected capacity change from 0 to 2048 [ 187.721244][ T3575] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 187.751436][ T9217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.967760][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.978186][ T3575] usb 4-1: Using ep0 maxpacket: 16 [ 188.019911][ T3575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.090715][ T3575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.109343][ T9227] loop5: detected capacity change from 0 to 256 [ 188.129199][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.151716][ T3575] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 188.186162][ T9227] exfat: Deprecated parameter 'utf8' [ 188.210681][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.237190][ T3575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.291788][ T3575] usb 4-1: config 0 descriptor?? [ 188.350704][ T9227] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 188.400919][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 188.443154][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.531765][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.602349][ T9231] loop1: detected capacity change from 0 to 1024 [ 188.636900][ T25] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 188.707689][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.784201][ T25] usb 5-1: config 0 descriptor?? [ 188.807435][ T3575] kye 0003:0458:5017.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 188.910952][ T3575] kye 0003:0458:5017.0011: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 189.008756][ T3575] kye 0003:0458:5017.0011: tablet-enabling feature report not found [ 189.020243][ T9233] xt_CT: No such helper "pptp" [ 189.085938][ T53] hfsplus: b-tree write err: -5, ino 4 [ 189.100564][ T3575] kye 0003:0458:5017.0011: tablet enabling failed [ 189.189281][ T3575] usb 4-1: USB disconnect, device number 11 [ 189.295588][ T25] hid-alps 0003:044E:120C.0012: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.4-1/input0 [ 189.473541][ T9209] loop0: detected capacity change from 0 to 32768 [ 189.503583][ T25] usb 5-1: USB disconnect, device number 8 [ 189.611523][ T9243] loop5: detected capacity change from 0 to 2048 [ 189.709029][ T9252] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.850313][ T9209] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 189.928416][ T9256] loop3: detected capacity change from 0 to 64 [ 190.041819][ T9209] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 190.124915][ T9209] bcachefs (loop0): Version upgrade required: [ 190.124915][ T9209] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 190.124915][ T9209] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 190.124915][ T9209] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 190.754409][ T9209] bcachefs (loop0): dropping and reconstructing all alloc info [ 190.840241][ T9271] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1312'. [ 190.898395][ T9209] bcachefs (loop0): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 190.949675][ T9209] bcachefs (loop0): bch2_fs_recovery(): error EINTR [ 191.020517][ T9209] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 191.091282][ T9209] bcachefs (loop0): shutting down [ 191.199673][ T9209] bcachefs (loop0): shutdown complete [ 191.565253][ T9277] loop2: detected capacity change from 0 to 4096 [ 191.707021][ T9287] loop1: detected capacity change from 0 to 256 [ 191.750785][ T9286] Illegal XDP return value 4294967274 on prog (id 62) dev N/A, expect packet loss! [ 191.882533][ T9287] FAT-fs (loop1): Directory bread(block 64) failed [ 191.927440][ T9287] FAT-fs (loop1): Directory bread(block 65) failed [ 191.981282][ T9287] FAT-fs (loop1): Directory bread(block 66) failed [ 192.040724][ T9287] FAT-fs (loop1): Directory bread(block 67) failed [ 192.047396][ T9287] FAT-fs (loop1): Directory bread(block 68) failed [ 192.146402][ T9287] FAT-fs (loop1): Directory bread(block 69) failed [ 192.186741][ T9287] FAT-fs (loop1): Directory bread(block 70) failed [ 192.250768][ T9287] FAT-fs (loop1): Directory bread(block 71) failed [ 192.257550][ T9287] FAT-fs (loop1): Directory bread(block 72) failed [ 192.345902][ T9287] FAT-fs (loop1): Directory bread(block 73) failed [ 193.286988][ T29] audit: type=1326 audit(1731645231.179:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.5.1330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f267537e719 code=0x0 [ 193.674610][ T9318] loop3: detected capacity change from 0 to 2048 [ 193.747414][ T9318] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 193.781177][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.789573][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.810221][ T9322] loop1: detected capacity change from 0 to 64 [ 193.862663][ T9323] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.911706][ T9318] syz.3.1333: attempt to access beyond end of device [ 193.911706][ T9318] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 194.339551][ T9331] loop4: detected capacity change from 0 to 512 [ 194.439127][ T9331] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.510574][ T9331] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 194.595715][ T9331] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 194.653371][ T9331] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 194.700691][ T9331] System zones: 0-2, 18-18, 34-34 [ 194.758783][ T9333] loop3: detected capacity change from 0 to 4096 [ 194.781402][ T9331] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 194.922339][ T9331] EXT4-fs (loop4): 1 truncate cleaned up [ 194.929642][ T9331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.156514][ T9331] EXT4-fs warning (device loop4): ext4_group_extend:1891: can't read last block, resize aborted [ 195.272985][ T9312] loop2: detected capacity change from 0 to 32768 [ 195.472002][ T9342] netlink: 64102 bytes leftover after parsing attributes in process `syz.3.1343'. [ 195.900242][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.913511][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 195.919691][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 195.926035][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 195.932233][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 195.939198][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 195.996891][ T9328] loop1: detected capacity change from 0 to 40427 [ 196.062894][ T9351] loop5: detected capacity change from 0 to 128 [ 196.192540][ T9312] workqueue: Failed to create a rescuer kthread for wq "bcachefs_copygc": -EINTR [ 196.192720][ T9312] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 196.351989][ T9312] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 196.553233][ T9360] loop4: detected capacity change from 0 to 64 [ 196.921022][ T9366] loop2: detected capacity change from 0 to 64 [ 197.082972][ T9371] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 197.092963][ T9371] team0: Device ipvlan2 is already an upper device of the team interface [ 198.179552][ T9375] loop4: detected capacity change from 0 to 32768 [ 198.289356][ T9375] JBD2: Ignoring recovery information on journal [ 198.302114][ T9384] loop3: detected capacity change from 0 to 2048 [ 198.397277][ T9388] loop2: detected capacity change from 0 to 64 [ 198.499162][ T9384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.720882][ T9392] netlink: 'syz.3.1362': attribute type 3 has an invalid length. [ 198.739571][ T9392] openvswitch: netlink: Actions may not be safe on all matching packets [ 199.149512][ T9386] loop5: detected capacity change from 0 to 32768 [ 199.158910][ T9386] XFS: noikeep mount option is deprecated. [ 199.166010][ T3575] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 199.190861][ T9375] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 199.376337][ T5837] ocfs2: Unmounting device (7,4) on (node local) [ 199.383582][ T3575] usb 3-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 199.410534][ T3575] usb 3-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 199.440045][ T3575] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 199.477033][ T3575] usb 3-1: config 255 has no interfaces? [ 199.497416][ T3575] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 199.528376][ T3575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.768284][ T3575] usb 3-1: string descriptor 0 read error: -71 [ 199.778643][ T3575] usb 3-1: USB disconnect, device number 8 [ 199.994446][ T9398] loop3: detected capacity change from 0 to 32768 [ 200.734977][ T9402] loop4: detected capacity change from 0 to 32768 [ 200.780551][ T9402] read_mapping_page failed! [ 200.792083][ T9402] ERROR: (device loop4): txCommit: [ 200.792083][ T9402] [ 200.815250][ T9402] ERROR: (device loop4): remounting filesystem as read-only [ 200.905694][ T9386] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop5": -EINTR [ 201.089395][ T9414] loop2: detected capacity change from 0 to 64 [ 201.501953][ T9418] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.572725][ T9421] loop5: detected capacity change from 0 to 128 [ 201.715097][ T9398] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 201.955678][ T9431] loop5: detected capacity change from 0 to 1024 [ 201.978745][ T9431] EXT4-fs: Ignoring removed bh option [ 202.140555][ T5848] ocfs2: Unmounting device (7,3) on (node local) [ 202.691699][ T9431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.967152][ T9436] loop2: detected capacity change from 0 to 32768 [ 203.062690][ T9436] ERROR: (device loop2): diAllocBit: iag inconsistent [ 203.062690][ T9436] [ 203.073718][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 203.376749][ T9436] ialloc: diAlloc returned -5! [ 203.385491][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.652377][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 203.675284][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 203.719904][ T9451] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1382'. [ 203.729799][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1382'. [ 203.739645][ T9451] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1382'. [ 204.703246][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 204.714573][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 204.722980][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.731023][ T9328] F2FS-fs (loop1): invalid crc value [ 205.794750][ T9328] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 205.973675][ T9441] chnl_net:caif_netlink_parms(): no params data found [ 206.334394][ T9490] loop2: detected capacity change from 0 to 256 [ 206.570745][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 206.621494][ T9441] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.676312][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.720742][ T9441] bridge_slave_0: entered allmulticast mode [ 206.786955][ T9441] bridge_slave_0: entered promiscuous mode [ 206.793461][ T5849] Bluetooth: hci6: command tx timeout [ 206.881576][ T9441] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.888725][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.968142][ T9441] bridge_slave_1: entered allmulticast mode [ 207.009654][ T9441] bridge_slave_1: entered promiscuous mode [ 207.285397][ T9501] loop4: detected capacity change from 0 to 4096 [ 207.294674][ T9441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.316354][ T9504] loop2: detected capacity change from 0 to 1764 [ 207.368180][ T9441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.380840][ T9501] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 207.516337][ T9501] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 207.687225][ T9441] team0: Port device team_slave_0 added [ 207.724115][ T9474] loop5: detected capacity change from 0 to 32768 [ 207.773592][ T9441] team0: Port device team_slave_1 added [ 207.865085][ T9474] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.032877][ T9474] XFS (loop5): Ending clean mount [ 208.068531][ T9474] XFS (loop5): Quotacheck needed: Please wait. [ 208.118269][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.171817][ T9474] XFS (loop5): Quotacheck: Done. [ 208.193586][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.322181][ T9441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.381868][ T9524] loop2: detected capacity change from 0 to 1024 [ 208.435237][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.461259][ T5847] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.505407][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.685596][ T9441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.900509][ T5849] Bluetooth: hci6: command tx timeout [ 208.951189][ T11] hfsplus: b-tree write err: -5, ino 4 [ 209.194061][ T9441] hsr_slave_0: entered promiscuous mode [ 209.301086][ T9441] hsr_slave_1: entered promiscuous mode [ 209.322428][ T9441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.388830][ T9441] Cannot create hsr debugfs directory [ 209.410559][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 209.591190][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 209.686389][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.751151][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.803803][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 209.825197][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1409'. [ 209.848134][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.910284][ T9541] netlink: 'syz.5.1409': attribute type 7 has an invalid length. [ 209.948455][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.988047][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.071936][ T25] usb 4-1: config 0 descriptor?? [ 210.180724][ T3575] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.371532][ T3575] usb 2-1: Using ep0 maxpacket: 16 [ 210.388116][ T9549] nbd: must specify a size in bytes for the device [ 210.415646][ T3575] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 210.457873][ T3575] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 210.515682][ T3575] usb 2-1: Product: syz [ 210.543009][ T25] microsoft 0003:045E:07DA.0013: unbalanced collection at end of report description [ 210.560758][ T3575] usb 2-1: Manufacturer: syz [ 210.607768][ T3575] usb 2-1: SerialNumber: syz [ 210.642364][ T25] microsoft 0003:045E:07DA.0013: parse failed [ 210.663981][ T3575] usb 2-1: config 0 descriptor?? [ 210.711130][ T25] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 210.779162][ T9441] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.806691][ T25] usb 4-1: USB disconnect, device number 12 [ 210.889175][ T9441] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.926063][ T9558] loop5: detected capacity change from 0 to 1024 [ 210.952567][ T5849] Bluetooth: hci6: command tx timeout [ 210.995859][ T9441] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.031709][ T9558] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.054873][ T3575] usb 2-1: USB disconnect, device number 6 [ 211.108751][ T9441] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.293024][ T9558] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1421: Invalid block bitmap block 0 in block_group 0 [ 211.340122][ T9441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.424372][ T9558] Quota error (device loop5): write_blk: dquota write failed [ 211.466172][ T9441] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.475830][ T9558] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 211.526961][ T9558] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.1421: Failed to acquire dquot type 0 [ 211.558130][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.565393][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.596787][ T9558] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1421: Freeing blocks not in datazone - block = 0, count = 4096 [ 211.624948][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.632116][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.701958][ T9558] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1421: Invalid inode bitmap blk 0 in block_group 0 [ 211.816266][ T9558] EXT4-fs error (device loop5) in ext4_free_inode:360: Corrupt filesystem [ 211.858521][ T9558] EXT4-fs (loop5): 1 orphan inode deleted [ 211.899137][ T9558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.190546][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.606933][ T9441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.935544][ T9562] loop4: detected capacity change from 0 to 32768 [ 212.983318][ T9583] loop1: detected capacity change from 0 to 1024 [ 213.025061][ T9562] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1422 (9562) [ 213.038874][ T5849] Bluetooth: hci6: command tx timeout [ 213.056139][ T9562] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 213.075144][ T9562] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 213.088551][ T9562] BTRFS info (device loop4): using free-space-tree [ 213.402413][ T9591] loop3: detected capacity change from 0 to 16 [ 213.440750][ T9591] erofs: (device loop3): mounted with root inode @ nid 36. [ 214.186781][ T9441] veth0_vlan: entered promiscuous mode [ 214.267841][ T9441] veth1_vlan: entered promiscuous mode [ 214.295708][ T9562] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 214.296026][ T9562] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 214.331260][ T9562] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 214.386871][ T9562] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 214.427134][ T9441] veth0_macvtap: entered promiscuous mode [ 214.463718][ T9562] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 214.464054][ T9562] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 214.563848][ T9441] veth1_macvtap: entered promiscuous mode [ 214.598686][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.637135][ T9562] BTRFS error (device loop4): open_ctree failed [ 214.662984][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.706984][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.749399][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.813316][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.835291][ T9613] loop3: detected capacity change from 0 to 512 [ 214.863221][ T9613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.880491][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.915316][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.984607][ T9613] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 215.110985][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.122287][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.140775][ T9613] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 215.150846][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.186529][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.199051][ T9613] EXT4-fs (loop3): 1 truncate cleaned up [ 215.219585][ T9613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.251232][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.313527][ T9441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.410778][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.460777][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.520606][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.559987][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.604420][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.675299][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.705724][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.751444][ T9613] EXT4-fs: group quota file already specified [ 215.764779][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.811401][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.854458][ T9615] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 215.896637][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.929000][ T9441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.961541][ T9619] 9pnet_fd: Insufficient options for proto=fd [ 215.974106][ T9622] loop4: detected capacity change from 0 to 64 [ 215.980553][ T9441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.069087][ T9441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.133933][ T9615] EXT4-fs (loop3): Remounting filesystem read-only [ 216.153397][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.172484][ T9441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.194746][ T9622] hfs: request for non-existent node 327680 in B*Tree [ 216.247476][ T9441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.257282][ T9622] hfs: request for non-existent node 327680 in B*Tree [ 216.297688][ T9622] hfs: request for non-existent node 327680 in B*Tree [ 216.320899][ T9441] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.355842][ T9622] hfs: request for non-existent node 327680 in B*Tree [ 216.380500][ T9441] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.407827][ T9625] loop2: detected capacity change from 0 to 1024 [ 216.622311][ T53] hfs: request for non-existent node 327680 in B*Tree [ 216.629429][ T53] hfs: request for non-existent node 327680 in B*Tree [ 216.755987][ T53] hfsplus: b-tree write err: -5, ino 4 [ 216.910524][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.918400][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.081722][ T146] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 217.129110][ T146] EXT4-fs error (device loop5): ext4_release_dquot:6902: comm kworker/u8:5: Failed to release dquot type 0 [ 217.194839][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.217119][ T9638] loop1: detected capacity change from 0 to 1024 [ 217.249480][ T9634] loop4: detected capacity change from 0 to 4096 [ 217.258963][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.420374][ T9639] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.504959][ T9638] hfsplus: request for non-existent node 33423360 in B*Tree [ 217.566794][ T9642] loop2: detected capacity change from 0 to 512 [ 217.585648][ T9638] hfsplus: request for non-existent node 33423360 in B*Tree [ 217.626801][ T9645] loop5: detected capacity change from 0 to 512 [ 217.682223][ T9642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.742483][ T9646] loop3: detected capacity change from 0 to 512 [ 217.802361][ T9645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.829855][ T9646] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1447: invalid indirect mapped block 256 (level 2) [ 217.923911][ T9645] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.971048][ T9646] EXT4-fs (loop3): 2 truncates cleaned up [ 218.003046][ T9646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.054826][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.320787][ T9653] loop6: detected capacity change from 0 to 4096 [ 218.426068][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.445032][ T9656] loop4: detected capacity change from 0 to 4096 [ 218.474220][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.811151][ T9656] ntfs3(loop4): failed to convert "0080" to macgaelic [ 218.855341][ T9656] ntfs3(loop4): failed to convert name for inode 1e. [ 219.303098][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 219.573059][ T9672] loop4: detected capacity change from 0 to 2048 [ 219.682515][ T9672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.915790][ T9680] loop2: detected capacity change from 0 to 2048 [ 220.067718][ T9680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.240070][ T9680] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.1460: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 220.282441][ T9682] loop5: detected capacity change from 0 to 4096 [ 220.497609][ T9694] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.527220][ T9693] loop3: detected capacity change from 0 to 512 [ 220.535235][ T9657] loop1: detected capacity change from 0 to 32768 [ 220.606038][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.634655][ T9682] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 220.661232][ T9693] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 220.721041][ T9682] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 220.751333][ T9657] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.760108][ T9693] EXT4-fs (loop3): invalid journal inode [ 220.790888][ T9693] EXT4-fs (loop3): can't get journal size [ 220.837755][ T9693] EXT4-fs (loop3): 1 truncate cleaned up [ 220.871912][ T9682] Remounting filesystem read-only [ 220.876986][ T9682] NILFS (loop5): error -5 truncating bmap (ino=12) [ 220.899360][ T9693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.098338][ T9693] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 65409 (only 1 groups) [ 221.155998][ T9657] XFS (loop1): Ending clean mount [ 221.180751][ T9657] XFS (loop1): Quotacheck needed: Please wait. [ 221.194504][ T5847] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 221.333566][ T9709] loop4: detected capacity change from 0 to 1024 [ 221.414885][ T9657] XFS (loop1): Quotacheck: Done. [ 221.457313][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.478964][ T5835] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.137920][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 222.370557][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 222.392239][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.421938][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.475282][ T9733] loop5: detected capacity change from 0 to 64 [ 222.483338][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.553976][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.593056][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.636609][ T25] usb 2-1: config 0 descriptor?? [ 222.818323][ T9738] loop5: detected capacity change from 0 to 64 [ 222.847988][ T9688] loop6: detected capacity change from 0 to 40427 [ 223.010636][ T9688] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 223.038076][ T9688] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 223.056737][ T9738] Trying to free block not in datazone [ 223.096247][ T25] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 223.148200][ T9743] Trying to free block not in datazone [ 223.189270][ T9743] minix_free_inode: bit 5 already cleared [ 223.217413][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0014/input/input18 [ 223.229973][ T9688] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4) [ 223.317851][ T25] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 223.337160][ T9709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.404218][ T25] usb 2-1: USB disconnect, device number 7 [ 223.723364][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.085678][ T9740] loop3: detected capacity change from 0 to 32768 [ 225.123307][ T9740] XFS: noikeep mount option is deprecated. [ 225.228995][ T5903] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.392258][ T5903] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 225.412187][ T5903] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 225.421521][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.435645][ T5903] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 225.694809][ T9774] loop6: detected capacity change from 0 to 4096 [ 225.709569][ T9740] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 225.721234][ T9740] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 225.944744][ T9740] XFS (loop3): AIL initialisation failed: error -12 [ 226.000813][ T9740] XFS (loop3): log mount failed [ 226.472165][ T5903] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 226.540915][ T25] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 226.641803][ T9782] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.684485][ T5903] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 226.735753][ T9752] loop2: detected capacity change from 0 to 32768 [ 226.749803][ T25] usb 6-1: config 0 has an invalid interface number: 103 but max is 0 [ 226.767146][ T5903] stv0680 2-1:4.0: last error: 173, command = 0xa9 [ 226.789118][ T25] usb 6-1: config 0 has no interface number 0 [ 226.831588][ T25] usb 6-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=de.4d [ 226.855997][ T5903] usb 2-1: USB disconnect, device number 8 [ 226.892554][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.914522][ T9752] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 226.923270][ T25] usb 6-1: Product: syz [ 226.929225][ T9752] XFS (loop2): AIL initialisation failed: error -12 [ 226.937557][ T25] usb 6-1: Manufacturer: syz [ 226.943369][ T25] usb 6-1: SerialNumber: syz [ 226.964406][ T9752] XFS (loop2): log mount failed [ 227.013651][ T25] usb 6-1: config 0 descriptor?? [ 227.380607][ T25] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in warm state. [ 227.506772][ T25] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 227.600896][ T25] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 227.695421][ T25] usb 6-1: media controller created [ 227.796071][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.859239][ T9800] loop3: detected capacity change from 0 to 256 [ 228.119255][ T9800] FAT-fs (loop3): Directory bread(block 64) failed [ 228.143179][ T9800] FAT-fs (loop3): Directory bread(block 65) failed [ 228.189367][ T9798] loop1: detected capacity change from 0 to 4096 [ 228.205670][ T9800] FAT-fs (loop3): Directory bread(block 66) failed [ 228.257267][ T25] DVB: Unable to find symbol dib8000_attach() [ 228.269189][ T9800] FAT-fs (loop3): Directory bread(block 67) failed [ 228.287959][ T9798] ntfs3(loop1): ino=3, Correct links count -> 2. [ 228.320314][ T25] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 228.343011][ T9800] FAT-fs (loop3): Directory bread(block 68) failed [ 228.401915][ T9800] FAT-fs (loop3): Directory bread(block 69) failed [ 228.419212][ T25] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 228.463315][ T9800] FAT-fs (loop3): Directory bread(block 70) failed [ 228.492835][ T25] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 228.523832][ T9800] FAT-fs (loop3): Directory bread(block 71) failed [ 228.568520][ T25] usb 6-1: media controller created [ 228.576046][ T9800] FAT-fs (loop3): Directory bread(block 72) failed [ 228.584017][ T9798] ntfs3(loop1): failed to convert "0080" to macgreek [ 228.609189][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.620755][ T9798] ntfs3(loop1): failed to convert name for inode 1e. [ 228.627874][ T9800] FAT-fs (loop3): Directory bread(block 73) failed [ 228.799927][ T25] DVB: Unable to find symbol dib8000_attach() [ 228.835479][ T25] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 229.055031][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 229.090566][ T25] Registered IR keymap rc-empty [ 229.122676][ T25] dvb-usb: could not initialize remote control. [ 229.155084][ T25] dvb-usb: DiBcom STK8096-PVR reference design successfully initialized and connected. [ 229.312742][ T25] usb 6-1: USB disconnect, device number 10 [ 229.412497][ T25] dvb-usb: DiBcom STK8096-PVR reference design successfully deinitialized and disconnected. [ 229.551450][ T3575] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 229.728881][ T3575] usb 7-1: Using ep0 maxpacket: 16 [ 229.758281][ T3575] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.812479][ T5903] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 229.820200][ T3575] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 229.874387][ T3575] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 229.918190][ T3575] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 229.970625][ T3575] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.026056][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 230.036135][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.077347][ T3575] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 230.090648][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.123932][ T3575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.142800][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.163210][ T3575] usb 7-1: Product: syz [ 230.181096][ T3575] usb 7-1: Manufacturer: syz [ 230.190873][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 230.229323][ T3575] usb 7-1: SerialNumber: syz [ 230.238963][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.254429][ T3575] usb 7-1: config 0 descriptor?? [ 230.327596][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.366464][ T5903] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.415719][ T5903] usb 5-1: Manufacturer: syz [ 230.459056][ T5903] usb 5-1: config 0 descriptor?? [ 230.494846][ T3575] appledisplay: Apple Cinema Display connected [ 230.713892][ T3575] usb 7-1: USB disconnect, device number 2 [ 230.719782][ C1] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 230.767270][ T3575] appledisplay: Apple Cinema Display disconnected [ 231.079485][ T9837] loop2: detected capacity change from 0 to 128 [ 231.396482][ T9843] loop5: detected capacity change from 0 to 512 [ 231.455514][ T9823] loop3: detected capacity change from 0 to 40427 [ 231.458602][ T9823] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 231.458644][ T9823] F2FS-fs (loop3): Image doesn't support compression [ 231.458692][ T9823] F2FS-fs (loop3): Image doesn't support compression [ 231.503453][ T9837] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.508957][ T9843] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 231.509020][ T9843] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 231.509045][ T9843] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1513: Corrupt directory, running e2fsck is recommended [ 231.511968][ T9843] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 231.513854][ T9843] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1513: corrupted in-inode xattr: invalid ea_ino [ 231.514263][ T9843] EXT4-fs (loop5): Remounting filesystem read-only [ 231.515325][ T9843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.516778][ T9837] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.530542][ T5903] rc_core: IR keymap rc-hauppauge not found [ 231.530567][ T5903] Registered IR keymap rc-empty [ 231.532193][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.536431][ T9837] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 231.550709][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.573228][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 231.575676][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 231.583514][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.601552][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.622014][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.633248][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.650624][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.673169][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.692320][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.705076][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.720646][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.747450][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.761575][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.780938][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.808020][ T5903] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 231.808056][ T5903] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 231.845494][ T5903] usb 5-1: USB disconnect, device number 9 [ 232.222581][ T9854] loop6: detected capacity change from 0 to 1024 [ 232.695057][ T9854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.695221][ T9854] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.742893][ T9854] EXT4-fs error (device loop6): ext4_xattr_block_find:1877: inode #15: comm syz.6.1516: corrupted xattr block 128: invalid ea_ino [ 232.747448][ T9854] EXT4-fs (loop6): Remounting filesystem read-only [ 232.931706][ T9441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.976014][ T9864] nbd: couldn't find device at index 50432 [ 233.785602][ T9860] syz.2.1518 (9860): drop_caches: 2 [ 233.789595][ T9871] random: crng reseeded on system resumption [ 233.840896][ T9823] F2FS-fs (loop3): invalid crc value [ 233.841687][ T9823] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 234.034310][ T9875] loop5: detected capacity change from 0 to 1024 [ 234.125051][ T9875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.351949][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.930643][ T5839] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 236.035597][ T9898] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1533'. [ 236.084386][ T9898] netlink: 'syz.6.1533': attribute type 1 has an invalid length. [ 236.120600][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 236.147954][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.193753][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.236941][ T5839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.338419][ T5839] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 236.417212][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.487136][ T5839] usb 6-1: config 0 descriptor?? [ 236.566765][ T9209] bcachefs: bch2_fs_get_tree() error: EINTR [ 237.033905][ T5839] kye 0003:0458:5010.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 237.142718][ T5839] kye 0003:0458:5010.0015: unknown main item tag 0x0 [ 237.177137][ T9884] loop2: detected capacity change from 0 to 40427 [ 237.194071][ T5839] kye 0003:0458:5010.0015: unknown main item tag 0x0 [ 237.222530][ T5839] kye 0003:0458:5010.0015: unknown main item tag 0x0 [ 237.269969][ T5839] kye 0003:0458:5010.0015: unknown main item tag 0x0 [ 237.303549][ T5839] kye 0003:0458:5010.0015: unknown main item tag 0x0 [ 237.310286][ T5839] kye 0003:0458:5010.0015: unknown main item tag 0x0 [ 237.358667][ T5839] kye 0003:0458:5010.0015: unknown main item tag 0x0 [ 237.414071][ T5839] kye 0003:0458:5010.0015: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 237.502180][ T5839] kye 0003:0458:5010.0015: tablet-enabling feature report not found [ 237.575897][ T5839] kye 0003:0458:5010.0015: tablet enabling failed [ 237.587041][ T9884] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 237.632445][ T5839] usb 6-1: USB disconnect, device number 11 [ 238.313404][ T3575] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 238.468446][ T9931] loop4: detected capacity change from 0 to 128 [ 238.515903][ T3575] usb 7-1: New USB device found, idVendor=0572, idProduct=c69a, bcdDevice=50.5e [ 238.547726][ T3575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.578035][ T3575] usb 7-1: Product: syz [ 238.591611][ T3575] usb 7-1: Manufacturer: syz [ 238.612709][ T3575] usb 7-1: SerialNumber: syz [ 238.633803][ T3575] usb 7-1: config 0 descriptor?? [ 238.661250][ T3575] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.671820][ T9901] loop1: detected capacity change from 0 to 40427 [ 238.689586][ T9901] F2FS-fs (loop1): invalid crc value [ 238.722518][ T3575] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.762650][ T3575] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.815811][ T9938] loop5: detected capacity change from 0 to 128 [ 238.843983][ T9938] EXT4-fs: Ignoring removed i_version option [ 238.850044][ T9938] EXT4-fs: Ignoring removed orlov option [ 238.878377][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.914500][ T3575] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.921587][ T3575] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.963175][ T9901] F2FS-fs (loop1): Found nat_bits in checkpoint [ 239.009190][ T3575] usb 7-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C v2 Lite' in warm state [ 239.022205][ T3575] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 239.040880][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.061707][ T3575] usb 7-1: USB disconnect, device number 3 [ 239.149371][ T9938] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.163195][ T9931] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.192268][ T9901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 239.218059][ T9938] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.284144][ T9931] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.573011][ T5837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.691476][ T5847] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.165553][ T5839] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 240.332381][ T5839] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 240.356293][ T5839] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 240.390299][ T5839] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 240.423315][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.473791][ T5839] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 240.679601][ T5839] gspca_sn9c2028: read1 error -32 [ 240.743227][ T9963] loop4: detected capacity change from 0 to 256 [ 240.902193][ T5839] gspca_sn9c2028: read1 error -71 [ 240.913511][ T5839] sn9c2028 6-1:220.0: probe with driver sn9c2028 failed with error -71 [ 240.975636][ T5839] usb 6-1: USB disconnect, device number 12 [ 241.303406][ T9967] loop2: detected capacity change from 0 to 1024 [ 255.206697][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.213383][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.171050][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.181895][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.193241][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.201121][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.209132][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.216476][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.272688][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.291041][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.299848][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.308936][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.318669][ T5849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 256.326510][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.804426][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 256.820268][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 256.840770][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 256.848762][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 256.860681][ T5852] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 256.869233][ T5852] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 257.332370][ T5849] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 257.344987][ T5849] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 257.353198][ T5849] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 257.362561][ T5849] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 257.387322][ T5849] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 257.397265][ T5849] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 257.851932][ T5852] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 257.868905][ T5852] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 257.877703][ T5852] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 257.887043][ T5852] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 257.894852][ T5852] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 257.903711][ T5852] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 258.310980][ T5849] Bluetooth: hci3: command tx timeout [ 258.354972][ T5852] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 258.364300][ T5852] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 258.381024][ T5852] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 258.390900][ T5852] Bluetooth: hci7: command tx timeout [ 258.398311][ T5852] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 258.406148][ T5852] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 258.424010][ T5852] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 258.953159][ T5849] Bluetooth: hci8: command tx timeout [ 259.433098][ T5849] Bluetooth: hci9: command tx timeout [ 259.990866][ T5849] Bluetooth: hci10: command tx timeout [ 260.393714][ T5849] Bluetooth: hci3: command tx timeout [ 260.470866][ T5852] Bluetooth: hci7: command tx timeout [ 260.480640][ T5849] Bluetooth: hci11: command tx timeout [ 261.030818][ T5852] Bluetooth: hci8: command tx timeout [ 261.510680][ T5852] Bluetooth: hci9: command tx timeout [ 262.070974][ T5852] Bluetooth: hci10: command tx timeout [ 262.473782][ T5852] Bluetooth: hci3: command tx timeout [ 262.550554][ T5852] Bluetooth: hci7: command tx timeout [ 262.556012][ T5852] Bluetooth: hci11: command tx timeout [ 263.110619][ T5852] Bluetooth: hci8: command tx timeout [ 263.590648][ T5852] Bluetooth: hci9: command tx timeout [ 264.150886][ T5852] Bluetooth: hci10: command tx timeout [ 264.550788][ T5852] Bluetooth: hci3: command tx timeout [ 264.633846][ T5849] Bluetooth: hci7: command tx timeout [ 264.639469][ T5852] Bluetooth: hci11: command tx timeout [ 265.190667][ T5852] Bluetooth: hci8: command tx timeout [ 265.670563][ T5852] Bluetooth: hci9: command tx timeout [ 266.230973][ T5852] Bluetooth: hci10: command tx timeout [ 266.710694][ T5852] Bluetooth: hci11: command tx timeout [ 267.068306][ T1093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.304779][ T1093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.652681][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.659031][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.148184][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.173947][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.201627][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.209829][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.230078][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.237962][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.371018][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.384093][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.393573][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.436328][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.444335][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.452348][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.546857][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.561707][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.571358][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.593219][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.630878][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 318.640832][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.817994][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.828853][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.861106][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.871896][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.880669][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 318.888057][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.377309][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.389036][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.398074][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.407447][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.421259][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 319.440084][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.448957][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.459960][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.468562][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.489169][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.500345][ T5856] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 319.510747][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.312727][ T5849] Bluetooth: hci0: command tx timeout [ 320.550926][ T5849] Bluetooth: hci1: command tx timeout [ 320.710710][ T5849] Bluetooth: hci2: command tx timeout [ 320.950842][ T5849] Bluetooth: hci4: command tx timeout [ 321.510864][ T5849] Bluetooth: hci5: command tx timeout [ 321.590689][ T5849] Bluetooth: hci6: command tx timeout [ 322.390966][ T5849] Bluetooth: hci0: command tx timeout [ 322.630925][ T5849] Bluetooth: hci1: command tx timeout [ 322.792868][ T5849] Bluetooth: hci2: command tx timeout [ 323.030682][ T5856] Bluetooth: hci4: command tx timeout [ 323.590621][ T5849] Bluetooth: hci5: command tx timeout [ 323.671005][ T5849] Bluetooth: hci6: command tx timeout [ 324.470808][ T5856] Bluetooth: hci0: command tx timeout [ 324.710815][ T5856] Bluetooth: hci1: command tx timeout [ 324.870781][ T5856] Bluetooth: hci2: command tx timeout [ 325.110684][ T5856] Bluetooth: hci4: command tx timeout [ 325.670653][ T5856] Bluetooth: hci5: command tx timeout [ 325.750762][ T5856] Bluetooth: hci6: command tx timeout [ 326.550934][ T5856] Bluetooth: hci0: command tx timeout [ 326.800929][ T5856] Bluetooth: hci1: command tx timeout [ 326.951996][ T5856] Bluetooth: hci2: command tx timeout [ 327.190861][ T5856] Bluetooth: hci4: command tx timeout [ 327.750576][ T5856] Bluetooth: hci5: command tx timeout [ 327.830848][ T5856] Bluetooth: hci6: command tx timeout [ 339.685946][ T1093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.744218][ T1093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.491705][ T5849] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 376.510710][ T5849] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 376.520153][ T5849] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 376.532335][ T5849] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 376.543059][ T5849] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 376.550827][ T5849] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 377.503874][ T5849] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 377.515509][ T5849] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 377.531198][ T5849] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 377.548146][ T5849] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 377.566654][ T5849] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 377.580659][ T5849] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 378.089299][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.110060][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.404378][ T5846] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 378.414879][ T5846] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 378.423606][ T5846] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 378.432079][ T5846] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 378.445558][ T5846] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 378.468267][ T5846] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 378.503652][ T5859] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 378.522004][ T5859] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 378.531291][ T5859] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 378.540381][ T5859] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 378.564379][ T5859] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 378.571934][ T5859] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 378.640742][ T5846] Bluetooth: hci12: command tx timeout [ 379.036931][ T5859] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 379.070749][ T5859] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 379.083155][ T5859] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 379.091209][ T5859] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 379.098930][ T5859] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 379.106371][ T5859] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 379.605290][ T5846] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 379.626743][ T5846] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 379.636131][ T5846] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 379.648382][ T5846] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 379.656707][ T5846] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 379.667422][ T5846] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 379.677082][ T5851] Bluetooth: hci13: command tx timeout [ 380.173543][ T5846] Bluetooth: hci7: command 0x0406 tx timeout [ 380.179764][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 380.190542][ T5859] Bluetooth: hci8: command 0x0406 tx timeout [ 380.196617][ T5859] Bluetooth: hci9: command 0x0406 tx timeout [ 380.202779][ T5851] Bluetooth: hci10: command 0x0406 tx timeout [ 380.551006][ T5860] Bluetooth: hci14: command tx timeout [ 380.640143][ T5860] Bluetooth: hci15: command tx timeout [ 380.710715][ T5860] Bluetooth: hci12: command tx timeout [ 381.190665][ T5860] Bluetooth: hci16: command tx timeout [ 381.750673][ T5856] Bluetooth: hci13: command tx timeout [ 381.757285][ T5860] Bluetooth: hci17: command tx timeout [ 382.630650][ T5860] Bluetooth: hci14: command tx timeout [ 382.710885][ T5860] Bluetooth: hci15: command tx timeout [ 382.790550][ T5860] Bluetooth: hci12: command tx timeout [ 383.278295][ T5860] Bluetooth: hci16: command tx timeout [ 383.830739][ T5860] Bluetooth: hci17: command tx timeout [ 383.836301][ T5852] Bluetooth: hci13: command tx timeout [ 384.710709][ T5852] Bluetooth: hci14: command tx timeout [ 384.790764][ T5852] Bluetooth: hci15: command tx timeout [ 384.871236][ T5852] Bluetooth: hci12: command tx timeout [ 385.270590][ T5852] Bluetooth: hci11: command 0x0406 tx timeout [ 385.352977][ T5856] Bluetooth: hci16: command tx timeout [ 385.910814][ T5852] Bluetooth: hci17: command tx timeout [ 385.919163][ T5856] Bluetooth: hci13: command tx timeout [ 386.790718][ T5856] Bluetooth: hci14: command tx timeout [ 386.871004][ T5856] Bluetooth: hci15: command tx timeout [ 387.430812][ T5856] Bluetooth: hci16: command tx timeout [ 387.990648][ T5856] Bluetooth: hci17: command tx timeout [ 391.503063][ T1093] bridge_slave_1: left allmulticast mode [ 391.509001][ T1093] bridge_slave_1: left promiscuous mode [ 391.552086][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.623566][ T1093] bridge_slave_0: left allmulticast mode [ 391.629398][ T1093] bridge_slave_0: left promiscuous mode [ 391.659617][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.246416][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.307715][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.349624][ T1093] bond0 (unregistering): Released all slaves [ 393.375295][ T1093] bond1 (unregistering): Released all slaves [ 436.942804][ T5852] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 436.952764][ T5852] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 436.962321][ T5852] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 436.970275][ T5852] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 436.978530][ T5852] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 436.986148][ T5852] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 437.560101][ T5852] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 437.577238][ T5852] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 437.585309][ T5852] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 437.596608][ T5852] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 437.611441][ T5852] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 437.618823][ T5852] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 438.068952][ T5852] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 438.081050][ T5852] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 438.088932][ T5852] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 438.102754][ T5852] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 438.112265][ T5852] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 438.121081][ T5852] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 438.583379][ T5856] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 438.592760][ T5856] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 438.605006][ T5856] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 438.613496][ T5856] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 438.621553][ T5856] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 438.629750][ T5856] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 439.030774][ T5852] Bluetooth: hci18: command tx timeout [ 439.110189][ T5856] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 439.124702][ T5856] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 439.134726][ T5856] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 439.143743][ T5856] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 439.151852][ T5856] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 439.159391][ T5856] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 439.564213][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.574762][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.672007][ T5146] Bluetooth: hci19: command tx timeout [ 440.063478][ T5846] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 440.080949][ T5846] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 440.092500][ T5846] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 440.105537][ T5846] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 440.114062][ T5846] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3 [ 440.124207][ T5846] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 440.230981][ T5846] Bluetooth: hci20: command tx timeout [ 440.710801][ T5846] Bluetooth: hci21: command tx timeout [ 441.115169][ T5846] Bluetooth: hci18: command tx timeout [ 441.190933][ T5846] Bluetooth: hci22: command tx timeout [ 441.617328][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 441.626152][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 441.633127][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 441.639276][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 441.645500][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 441.750642][ T5860] Bluetooth: hci19: command tx timeout [ 442.154283][ T5859] Bluetooth: hci23: command tx timeout [ 442.310866][ T5859] Bluetooth: hci20: command tx timeout [ 442.792759][ T5859] Bluetooth: hci21: command tx timeout [ 443.192992][ T5859] Bluetooth: hci18: command tx timeout [ 443.273351][ T5859] Bluetooth: hci22: command tx timeout [ 443.830700][ T5859] Bluetooth: hci19: command tx timeout [ 444.240796][ T5859] Bluetooth: hci23: command tx timeout [ 444.390692][ T5859] Bluetooth: hci20: command tx timeout [ 444.870762][ T5859] Bluetooth: hci21: command tx timeout [ 445.270932][ T5859] Bluetooth: hci18: command tx timeout [ 445.351431][ T5859] Bluetooth: hci22: command tx timeout [ 445.910735][ T5859] Bluetooth: hci19: command tx timeout [ 446.311008][ T5859] Bluetooth: hci23: command tx timeout [ 446.470769][ T5859] Bluetooth: hci20: command tx timeout [ 446.717043][ T5859] Bluetooth: hci6: command 0x0406 tx timeout [ 446.950682][ T5860] Bluetooth: hci21: command tx timeout [ 447.430917][ T5860] Bluetooth: hci22: command tx timeout [ 448.390715][ T5860] Bluetooth: hci23: command tx timeout [ 497.666356][ T5859] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 497.675563][ T5859] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 497.683700][ T5859] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 497.703961][ T5859] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 497.711846][ T5859] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3 [ 497.721312][ T5859] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 498.159930][ T5859] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 498.168908][ T5859] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 498.177848][ T5859] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 498.186781][ T5859] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 498.194882][ T5859] Bluetooth: hci25: unexpected cc 0x0c25 length: 249 > 3 [ 498.202346][ T5859] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 498.628782][ T5860] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 498.638100][ T5860] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 498.647201][ T5860] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 498.658992][ T5860] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 498.667313][ T5860] Bluetooth: hci26: unexpected cc 0x0c25 length: 249 > 3 [ 498.677808][ T5860] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 499.031337][ T30] INFO: task syz-executor:10015 blocked for more than 143 seconds. [ 499.039303][ T30] Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 499.072475][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.103930][ T30] task:syz-executor state:D stack:24752 pid:10015 tgid:10015 ppid:1 flags:0x00004006 [ 499.148160][ T30] Call Trace: [ 499.151876][ T30] [ 499.154846][ T30] __schedule+0x184f/0x4c30 [ 499.159422][ T30] ? __pfx___schedule+0x10/0x10 [ 499.201306][ T5860] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 499.211873][ T5860] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 499.223382][ T5860] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 499.234806][ T30] ? __pfx_lock_release+0x10/0x10 [ 499.239894][ T30] ? __mutex_trylock_common+0x92/0x2e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 499.250834][ T5860] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 499.258503][ T5860] Bluetooth: hci27: unexpected cc 0x0c25 length: 249 > 3 [ 499.267442][ T5860] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 499.410483][ T30] ? schedule+0x90/0x320 [ 499.414798][ T30] schedule+0x14b/0x320 [ 499.419000][ T30] schedule_preempt_disabled+0x13/0x30 [ 499.486108][ T30] __mutex_lock+0x6a7/0xd70 [ 499.500622][ T30] ? xas_find_marked+0xf5d/0x10e0 [ 499.505732][ T30] ? __mutex_lock+0x52a/0xd70 [ 499.530537][ T30] ? add_one_compat_dev+0x10d/0x710 [ 499.535794][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 499.568549][ T30] ? xa_find+0x36c/0x420 [ 499.580121][ T30] ? __pfx_down_read+0x10/0x10 [ 499.607922][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.613830][ T30] add_one_compat_dev+0x10d/0x710 [ 499.640727][ T30] ? fs_reclaim_acquire+0x93/0x130 [ 499.645980][ T30] rdma_dev_init_net+0x1f1/0x280 [ 499.660592][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 499.666106][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.700607][ T30] ops_init+0x320/0x590 [ 499.704922][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 499.710350][ T30] setup_net+0x287/0x9e0 [ 499.739623][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 499.751730][ T5859] Bluetooth: hci24: command tx timeout [ 499.768890][ T30] ? __pfx_setup_net+0x10/0x10 [ 499.780831][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.787803][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.815857][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.838332][ T30] copy_net_ns+0x33f/0x570 [ 499.860613][ T30] create_new_namespaces+0x425/0x7b0 [ 499.865969][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 499.887841][ T30] ksys_unshare+0x57d/0xa70 [ 499.908004][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 499.928348][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.948185][ T30] ? do_syscall_64+0x100/0x230 [ 499.960818][ T30] __x64_sys_unshare+0x38/0x40 [ 499.965972][ T30] do_syscall_64+0xf3/0x230 [ 499.997181][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.018517][ T30] RIP: 0033:0x7f528a77ff17 [ 500.028186][ T30] RSP: 002b:00007fff8fac3778 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 500.060519][ T30] RAX: ffffffffffffffda RBX: 00007f528a935f40 RCX: 00007f528a77ff17 [ 500.068812][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 500.110456][ T30] RBP: 00007f528a936a38 R08: 0000000000000000 R09: 0000000000000000 [ 500.118484][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 500.149899][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 500.171294][ T5860] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1 [ 500.182014][ T5860] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9 [ 500.189961][ T5860] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9 [ 500.209030][ T5860] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4 [ 500.216976][ T5860] Bluetooth: hci28: unexpected cc 0x0c25 length: 249 > 3 [ 500.224403][ T5860] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2 [ 500.255773][ T30] [ 500.267582][ T30] INFO: task syz-executor:10019 blocked for more than 144 seconds. [ 500.276867][ T30] Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 500.290445][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.311190][ T5859] Bluetooth: hci25: command tx timeout [ 500.340816][ T30] task:syz-executor state:D stack:24416 pid:10019 tgid:10019 ppid:1 flags:0x00004006 [ 500.361014][ T30] Call Trace: [ 500.364411][ T30] [ 500.367366][ T30] __schedule+0x184f/0x4c30 [ 500.379187][ T30] ? __pfx___schedule+0x10/0x10 [ 500.385535][ T30] ? __pfx_lock_release+0x10/0x10 [ 500.399916][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 500.410466][ T30] ? schedule+0x90/0x320 [ 500.414771][ T30] schedule+0x14b/0x320 [ 500.418974][ T30] schedule_preempt_disabled+0x13/0x30 [ 500.439748][ T30] __mutex_lock+0x6a7/0xd70 [ 500.450241][ T30] ? xas_find_marked+0xf5d/0x10e0 [ 500.470277][ T30] ? __mutex_lock+0x52a/0xd70 [ 500.475713][ T30] ? add_one_compat_dev+0x10d/0x710 [ 500.490484][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 500.495575][ T30] ? xa_find+0x36c/0x420 [ 500.499861][ T30] ? __pfx_down_read+0x10/0x10 [ 500.517276][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.526706][ T30] add_one_compat_dev+0x10d/0x710 [ 500.536702][ T30] ? fs_reclaim_acquire+0x93/0x130 [ 500.550961][ T30] rdma_dev_init_net+0x1f1/0x280 [ 500.561995][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 500.567533][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.581861][ T30] ops_init+0x320/0x590 [ 500.586069][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 500.598689][ T30] setup_net+0x287/0x9e0 [ 500.606303][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 500.620778][ T30] ? __pfx_setup_net+0x10/0x10 [ 500.625588][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.639700][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.647231][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.667777][ T30] copy_net_ns+0x33f/0x570 [ 500.674990][ T30] create_new_namespaces+0x425/0x7b0 [ 500.686482][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 500.694831][ T30] ksys_unshare+0x57d/0xa70 [ 500.699380][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 500.712804][ T5859] Bluetooth: hci26: command tx timeout [ 500.719001][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.736365][ T30] ? do_syscall_64+0x100/0x230 [ 500.741723][ T30] __x64_sys_unshare+0x38/0x40 [ 500.746521][ T30] do_syscall_64+0xf3/0x230 [ 500.760065][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.781036][ T30] RIP: 0033:0x7f35a477ff17 [ 500.785497][ T30] RSP: 002b:00007fff8452cac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 500.805330][ T30] RAX: ffffffffffffffda RBX: 00007f35a4935f40 RCX: 00007f35a477ff17 [ 500.819037][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 500.835384][ T30] RBP: 00007f35a4936a38 R08: 0000000000000000 R09: 0000000000000000 [ 500.846922][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 500.860530][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 500.868554][ T30] [ 500.886120][ T30] [ 500.886120][ T30] Showing all locks held in the system: [ 500.898929][ T30] 3 locks held by kworker/u8:0/11: [ 500.909480][ T30] #0: ffff8880308c9948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 500.936072][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 500.969033][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.984481][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.005605][ T30] #2: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 501.025311][ T30] 1 lock held by ksoftirqd/0/16: [ 501.030289][ T30] 1 lock held by khungtaskd/30: [ 501.038818][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 501.055748][ T30] 3 locks held by kworker/u8:3/53: [ 501.064422][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 501.084555][ T30] #1: ffffc90000be7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 501.107926][ T30] #2: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 501.132228][ T30] 4 locks held by kworker/u8:6/1093: [ 501.137586][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 501.156590][ T30] #1: ffffc90003c87d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 501.170671][ T30] #2: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 501.180175][ T30] #3: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x236/0xb00 [ 501.207711][ T30] 3 locks held by kworker/1:2/3575: [ 501.214323][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 501.240852][ T30] #1: ffffc9000c84fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 501.261079][ T30] #2: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 501.280127][ T30] 2 locks held by getty/5594: [ 501.285238][ T30] #0: ffff8880353520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 501.300500][ T30] #1: ffffc900032532f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 501.326037][ T30] 3 locks held by kworker/u9:3/5849: [ 501.339652][ T30] #0: ffff888081770948 ((wq_completion)hci15){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 501.360946][ T30] #1: ffffc90004c2fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 501.380509][ T30] #2: ffff8880387e4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 501.398093][ T30] 3 locks held by kworker/u9:5/5852: [ 501.404694][ T30] #0: ffff888040dfe148 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 501.425505][ T30] #1: ffffc900043c7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 501.439478][ T5851] Bluetooth: hci27: command tx timeout [ 501.458421][ T30] #2: ffff8880647c4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 501.478430][ T30] 3 locks held by kworker/u9:7/5856: [ 501.485823][ T30] #0: ffff888086e70948 ((wq_completion)hci14){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 501.500572][ T30] #1: ffffc90003b97d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 501.520920][ T30] #2: ffff8880387e0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 501.542287][ T30] 3 locks held by kworker/u9:9/5859: [ 501.547608][ T30] #0: ffff8880847ae148 ((wq_completion)hci17){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 501.568795][ T30] #1: ffffc90003b57d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 501.591502][ T30] #2: ffff88804ad94d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 501.608591][ T30] 3 locks held by kworker/u9:10/5860: [ 501.615503][ T30] #0: ffff88806a6d9948 ((wq_completion)hci16){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 501.635435][ T30] #1: ffffc90003b47d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 501.660626][ T30] #2: ffff88806a7c0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 501.680522][ T30] 2 locks held by syz-executor/9994: [ 501.686102][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 501.705978][ T30] #1: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x8e/0x350 [ 501.720215][ T30] 2 locks held by syz-executor/9996: [ 501.734240][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 501.748717][ T30] #1: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x8e/0x350 [ 501.770636][ T30] 2 locks held by syz-executor/9999: [ 501.775969][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 501.793861][ T30] #1: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x8e/0x350 [ 501.814974][ T30] 2 locks held by syz-executor/10002: [ 501.820373][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 501.836215][ T5851] Bluetooth: hci24: command tx timeout [ 501.850882][ T30] #1: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x8e/0x350 [ 501.869281][ T30] 2 locks held by syz-executor/10005: [ 501.888884][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 501.898845][ T30] #1: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x8e/0x350 [ 501.917592][ T30] 3 locks held by syz-executor/10008: [ 501.924719][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 501.944055][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 501.956836][ T30] #2: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 501.978302][ T30] 4 locks held by syz-executor/10015: [ 501.988480][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.007175][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.018463][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.042219][ T30] #3: ffff88805b2b4f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 502.059135][ T30] 2 locks held by syz-executor/10017: [ 502.067129][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.089651][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 502.111001][ T30] 4 locks held by syz-executor/10019: [ 502.116680][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.138366][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.159001][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.169386][ T30] #3: ffff88805b2b4f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 502.189570][ T30] 6 locks held by syz-executor/10022: [ 502.196163][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.226168][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.253521][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.269464][ T30] #3: ffff88805b2b4f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 502.290448][ T30] #4: ffff88805b2b5230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 502.300133][ T30] #5: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 502.323951][ T5851] Bluetooth: hci28: command tx timeout [ 502.340027][ T30] 2 locks held by syz-executor/10024: [ 502.348999][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.368969][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 502.379098][ T30] 2 locks held by syz-executor/10025: [ 502.390593][ T5851] Bluetooth: hci25: command tx timeout [ 502.406725][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.417836][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 502.435858][ T30] 3 locks held by syz-executor/10034: [ 502.447171][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.468164][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.487878][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.499363][ T30] 3 locks held by syz-executor/10037: [ 502.510444][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.519939][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.537652][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.559977][ T30] 3 locks held by syz-executor/10041: [ 502.575478][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.588186][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.606854][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.618367][ T30] 3 locks held by syz-executor/10043: [ 502.632053][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.647472][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.674466][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.691273][ T30] 2 locks held by syz-executor/10046: [ 502.696672][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.715561][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: fib6_rules_net_exit_batch+0x20/0xc0 [ 502.734160][ T30] 3 locks held by syz-executor/10049: [ 502.739558][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.755007][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.785559][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.795955][ T5851] Bluetooth: hci26: command tx timeout [ 502.810507][ T30] 3 locks held by syz-executor/10052: [ 502.815907][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.833450][ T30] #1: ffffffff8fa42bf0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 502.848091][ T30] #2: ffffffff8fa42db0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 502.869816][ T30] 2 locks held by syz-executor/10055: [ 502.879391][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.900740][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 502.909531][ T30] 2 locks held by syz-executor/10058: [ 502.924081][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.938307][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 502.951016][ T30] 2 locks held by syz-executor/10061: [ 502.956498][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 502.978450][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 502.997050][ T30] 2 locks held by syz-executor/10064: [ 503.009070][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 503.028420][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 503.049836][ T5851] Bluetooth: hci12: command 0x0406 tx timeout [ 503.056047][ T55] Bluetooth: hci13: command 0x0406 tx timeout [ 503.064417][ T55] Bluetooth: hci14: command 0x0406 tx timeout [ 503.071532][ T5851] Bluetooth: hci15: command 0x0406 tx timeout [ 503.077651][ T5851] Bluetooth: hci16: command 0x0406 tx timeout [ 503.084210][ T5146] Bluetooth: hci17: command 0x0406 tx timeout [ 503.103096][ T30] 2 locks held by syz-executor/10067: [ 503.108500][ T30] #0: ffffffff8fcc70d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 503.136104][ T30] #1: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 503.148551][ T30] 5 locks held by kworker/u9:6/10069: [ 503.158616][ T30] #0: ffff888039c12148 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 503.179784][ T30] #1: ffffc90002eefd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 503.205368][ T30] #2: ffff8880299b0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 503.219620][ T30] #3: ffff8880299b0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xe00 [ 503.241229][ T30] #4: ffffffff8fe404a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 503.258795][ T30] 1 lock held by syz-executor/10077: [ 503.264385][ T30] #0: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.290530][ T30] 1 lock held by syz-executor/10080: [ 503.295844][ T30] #0: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.316165][ T30] 1 lock held by syz-executor/10083: [ 503.324110][ T30] #0: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.340041][ T30] 1 lock held by syz-executor/10086: [ 503.363174][ T30] #0: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.382034][ T30] 1 lock held by syz-executor/10089: [ 503.387350][ T30] #0: ffffffff8fcd3c08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.420672][ T30] [ 503.423036][ T30] ============================================= [ 503.423036][ T30] [ 503.472691][ T30] NMI backtrace for cpu 1 [ 503.477060][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 503.487584][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 503.497656][ T30] Call Trace: [ 503.500951][ T30] [ 503.503905][ T30] dump_stack_lvl+0x241/0x360 [ 503.508626][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.513859][ T30] ? __pfx__printk+0x10/0x10 [ 503.518492][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 503.523475][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 503.528977][ T30] ? _printk+0xd5/0x120 [ 503.533163][ T30] ? __pfx__printk+0x10/0x10 [ 503.537781][ T30] ? __wake_up_klogd+0xcc/0x110 [ 503.542667][ T30] ? __pfx__printk+0x10/0x10 [ 503.547287][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.553043][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 503.558108][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 503.564131][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 503.570159][ T30] watchdog+0xff4/0x1040 [ 503.574440][ T30] ? watchdog+0x1ea/0x1040 [ 503.578896][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.583608][ T30] kthread+0x2f2/0x390 [ 503.587788][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.592499][ T30] ? __pfx_kthread+0x10/0x10 [ 503.597116][ T30] ret_from_fork+0x4d/0x80 [ 503.601570][ T30] ? __pfx_kthread+0x10/0x10 [ 503.606185][ T30] ret_from_fork_asm+0x1a/0x30 [ 503.611012][ T30] [ 503.615415][ T30] Sending NMI from CPU 1 to CPUs 0: [ 503.621260][ C0] NMI backtrace for cpu 0 [ 503.621275][ C0] CPU: 0 UID: 0 PID: 964 Comm: kworker/0:2 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 503.621301][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 503.621316][ C0] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 503.621357][ C0] RIP: 0010:unwind_next_frame+0x148a/0x22d0 [ 503.621396][ C0] Code: 44 24 38 80 3c 28 00 74 08 4c 89 ff e8 bf 4c bd 00 49 89 1f 41 0f b6 04 2c 84 c0 0f 85 1d 0c 00 00 41 c6 06 00 48 8b 5c 24 40 5b 01 00 00 48 89 ef 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 [ 503.621416][ C0] RSP: 0018:ffffc90000007750 EFLAGS: 00000202 [ 503.621435][ C0] RAX: ffffc90000007870 RBX: 1ffffffff21e70df RCX: 0000000000000000 [ 503.621452][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000007880 [ 503.621468][ C0] RBP: dffffc0000000000 R08: ffffc9000000787f R09: ffffc90000007870 [ 503.621485][ C0] R10: dffffc0000000000 R11: fffff52000000f10 R12: ffffc900038c0000 [ 503.621503][ C0] R13: ffffc90000007820 R14: ffffffff815ea925 R15: ffffc90000007870 [ 503.621523][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 503.621543][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.621560][ C0] CR2: 00007f2214f062d8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 503.621578][ C0] Call Trace: [ 503.621586][ C0] [ 503.621594][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 503.621631][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 503.621668][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 503.621703][ C0] ? nmi_handle+0x2a/0x5a0 [ 503.621745][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 503.621777][ C0] ? nmi_handle+0x151/0x5a0 [ 503.621800][ C0] ? nmi_handle+0x2a/0x5a0 [ 503.621825][ C0] ? unwind_next_frame+0x148a/0x22d0 [ 503.621861][ C0] ? default_do_nmi+0x63/0x160 [ 503.621884][ C0] ? exc_nmi+0x123/0x1f0 [ 503.621905][ C0] ? end_repeat_nmi+0xf/0x53 [ 503.621935][ C0] ? process_scheduled_works+0xa65/0x1850 [ 503.621975][ C0] ? unwind_next_frame+0x148a/0x22d0 [ 503.622011][ C0] ? unwind_next_frame+0x148a/0x22d0 [ 503.622050][ C0] ? unwind_next_frame+0x148a/0x22d0 [ 503.622087][ C0] [ 503.622094][ C0] [ 503.622108][ C0] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 503.622148][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 503.622178][ C0] arch_stack_walk+0x11c/0x150 [ 503.622206][ C0] ? process_scheduled_works+0xa65/0x1850 [ 503.622242][ C0] stack_trace_save+0x118/0x1d0 [ 503.622271][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 503.622300][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.622331][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.622371][ C0] kasan_save_track+0x3f/0x80 [ 503.622394][ C0] ? kasan_save_track+0x3f/0x80 [ 503.622417][ C0] ? kasan_save_free_info+0x40/0x50 [ 503.622450][ C0] ? __kasan_slab_free+0x59/0x70 [ 503.622473][ C0] ? kfree+0x1a0/0x440 [ 503.622501][ C0] ? slab_free_after_rcu_debug+0x62/0x290 [ 503.622525][ C0] ? rcu_core+0xaac/0x17a0 [ 503.622547][ C0] ? handle_softirqs+0x2c7/0x980 [ 503.622577][ C0] ? do_softirq+0x11b/0x1e0 [ 503.622604][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 503.622634][ C0] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 503.622701][ C0] kasan_save_free_info+0x40/0x50 [ 503.622739][ C0] __kasan_slab_free+0x59/0x70 [ 503.622763][ C0] ? slab_free_after_rcu_debug+0x62/0x290 [ 503.622788][ C0] kfree+0x1a0/0x440 [ 503.622816][ C0] ? slab_free_after_rcu_debug+0x62/0x290 [ 503.622844][ C0] slab_free_after_rcu_debug+0x62/0x290 [ 503.622869][ C0] ? rcu_core+0xa37/0x17a0 [ 503.622891][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 503.622917][ C0] rcu_core+0xaac/0x17a0 [ 503.622949][ C0] ? __pfx_rcu_core+0x10/0x10 [ 503.622975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.623007][ C0] ? sched_balance_domains+0x91b/0xa90 [ 503.623041][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 503.623069][ C0] ? __pfx_sched_balance_domains+0x10/0x10 [ 503.623103][ C0] handle_softirqs+0x2c7/0x980 [ 503.623138][ C0] ? do_softirq+0x11b/0x1e0 [ 503.623169][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 503.623203][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.623237][ C0] do_softirq+0x11b/0x1e0 [ 503.623265][ C0] [ 503.623273][ C0] [ 503.623282][ C0] ? __pfx_do_softirq+0x10/0x10 [ 503.623313][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 503.623347][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 503.623382][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.623413][ C0] ? rcu_is_watching+0x15/0xb0 [ 503.623441][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 503.623472][ C0] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 503.623509][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 503.623539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.623573][ C0] ? wg_packet_encrypt_worker+0xd5/0x1610 [ 503.623613][ C0] wg_packet_encrypt_worker+0x2e8/0x1610 [ 503.623666][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 503.623714][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.623750][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.623782][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.623813][ C0] ? look_up_lock_class+0x77/0x170 [ 503.623842][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.623874][ C0] ? register_lock_class+0x102/0x980 [ 503.623907][ C0] ? try_to_wake_up+0x609/0x14b0 [ 503.623928][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 503.623958][ C0] ? __pfx_lock_release+0x10/0x10 [ 503.623993][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 503.624030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.624061][ C0] ? mark_lock+0x9a/0x360 [ 503.624085][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.624117][ C0] ? __lock_acquire+0x1384/0x2050 [ 503.624164][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.624201][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 503.624236][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.624267][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.624303][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.624346][ C0] ? process_scheduled_works+0x976/0x1850 [ 503.624378][ C0] process_scheduled_works+0xa65/0x1850 [ 503.624429][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 503.624467][ C0] ? assign_work+0x364/0x3d0 [ 503.624501][ C0] worker_thread+0x870/0xd30 [ 503.624536][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.624569][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.624601][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 503.624632][ C0] ? __kthread_parkme+0x169/0x1d0 [ 503.624668][ C0] ? __pfx_worker_thread+0x10/0x10 [ 503.624701][ C0] kthread+0x2f2/0x390 [ 503.624727][ C0] ? __pfx_worker_thread+0x10/0x10 [ 503.624759][ C0] ? __pfx_kthread+0x10/0x10 [ 503.624782][ C0] ret_from_fork+0x4d/0x80 [ 503.624815][ C0] ? __pfx_kthread+0x10/0x10 [ 503.624837][ C0] ret_from_fork_asm+0x1a/0x30 [ 503.624880][ C0] [ 503.698298][ T5859] Bluetooth: hci27: command tx timeout [ 503.919550][T10069] Bluetooth: hci24: command tx timeout [ 503.975730][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 503.975757][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 503.975791][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 503.975807][ T30] Call Trace: [ 503.975818][ T30] [ 503.975831][ T30] dump_stack_lvl+0x241/0x360 [ 503.975878][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.975915][ T30] ? __pfx__printk+0x10/0x10 [ 503.975947][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.976004][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.976043][ T30] ? vscnprintf+0x5d/0x90 [ 503.976087][ T30] panic+0x349/0x880 [ 503.976119][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.976158][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 503.976204][ T30] ? __pfx_panic+0x10/0x10 [ 503.976233][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 503.976264][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.976301][ T30] ? __irq_work_queue_local+0x137/0x410 [ 503.976339][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.976375][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 503.976406][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 503.976448][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 503.976493][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.976530][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 503.976576][ T30] watchdog+0x1033/0x1040 [ 503.976616][ T30] ? watchdog+0x1ea/0x1040 [ 503.976658][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.976695][ T30] kthread+0x2f2/0x390 [ 503.976721][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.976757][ T30] ? __pfx_kthread+0x10/0x10 [ 503.976785][ T30] ret_from_fork+0x4d/0x80 [ 503.976825][ T30] ? __pfx_kthread+0x10/0x10 [ 503.976852][ T30] ret_from_fork_asm+0x1a/0x30 [ 503.976907][ T30] [ 503.977131][ T30] Kernel Offset: disabled