last executing test programs: 9.657311071s ago: executing program 0 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) 9.355243446s ago: executing program 0 (id=650): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0xf13}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) 9.242101945s ago: executing program 0 (id=651): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x1004010, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x10000014}) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) 8.840541198s ago: executing program 0 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv6_newrule={0x30, 0x20, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pimreg\x00'}]}, 0x30}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) 8.656893093s ago: executing program 0 (id=659): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='ext4_da_reserve_space\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x7fff, 0x0, 0x0) 8.20616142s ago: executing program 0 (id=664): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_tos_int={{0x14}}], 0x18, 0x4c00}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.721491773s ago: executing program 3 (id=680): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_tos_int={{0x14}}], 0x18, 0x4c00}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.556778766s ago: executing program 3 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv6_newrule={0x30, 0x20, 0x0, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pimreg\x00'}]}, 0x30}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) 5.405642148s ago: executing program 4 (id=683): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0}, 0x90) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xe0ca, 0x8}, 0xc) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x0, 0x101) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f00000004c0)='./cgroup.net/cgroup.procs\x00', r3, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x1, 0x800, 0x851, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xe}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000003380)) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000001c0)={0x0, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="5f8af8ff10000000180000005c0000000000000009000000185100000a00000000000000000000772087a3c5df9314ded300d486d931"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x52, &(0x7f0000000100)=""/82, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xd, 0xfff, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r1, r2, r3, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, r0, r4], &(0x7f0000000440)=[{0x4, 0x3, 0xd, 0x2}, {0x4, 0x5, 0x0, 0x5}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x1, 0x9}], 0x10, 0x7}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) delete_module(0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000a00)={&(0x7f00000005c0)={{@hyper, 0x80}, {@my=0x1, 0x6}, 0x400, "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"}, 0x418}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_open_dev$video(&(0x7f0000000580), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000000080)={0x0, 0x4001, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 5.290594768s ago: executing program 3 (id=684): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000600000097a640d44e90"], 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0x20, 0xc, 0xba, {0xba, 0xb, "597973f44be7ac8d89597a911061de789105d89747e7d4d599ef9269ad5a2a914bc84b58b6436f8213cc815e34ab3513d9864b2a009e4844dceff69d8f624e6cb3671a7a5b800e04cb69d8b978bcce0ec3d514e922ee9705efc5b9976a63126986e20a731cf0e2ffcfe941db6ff5d56b649b0eb1a941b8738fd0934a3e937839476483edc649ac954c1514d46e24c2383511d49c3c0c9bfc2fc3b813fc87e3b00937dc1b3fe4ef5fa4ba5bd903f23f59cc36b49445a310dc"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, &(0x7f0000000280)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x3, '#'}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x4b6}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x60, 0x31, 0xa3, "1ab8479f3b8d8ef3aa0bfd2633f33c89ae5e57c37328b79d88c754dbecc82f99c26a702ec213e981fea7aeb66cccffb8d388252ad48a9f80bdd14d7569287a2d82b885e91c90c33ea0bd6747318bd77f05c348bf6abc299696a87d220bc02e49b867f28325f21b043ff41e7d401e380da41f6f9a645440ba4cfa227711ce8c12758dfed30498756efcec7cf476dd5e8b8909701e6e7bb54e41a191294f422a3374057e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x1, 0x8b, "853ebc9b3d388b6757b987ede9efad4b3c44982fea890b82a574621e2efb7c57524f0acd2abc792749ba0d41804285a3f5295ef958ec3b95aca68c628ecf88f00a845eb7d4aeb5c08a0ea483a39ce8e6c3de259911067c11edb6ae490c98f66598d813efbbf2eafbb3448382f41951fadec135521a1ff257549e3aed41c6458f79aa72b79ea7f8b69db2d0"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x38}}) 4.487198133s ago: executing program 1 (id=688): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000006c0)={@can, {&(0x7f00000005c0)=""/218, 0xda}, &(0x7f0000000500), 0x22}, 0xa0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000080)=0x1ff, 0x4) 4.178585038s ago: executing program 4 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0xff}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x68}}, 0x0) 3.483792645s ago: executing program 4 (id=691): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000140)={[{@acl}, {@noblock_validity}]}, 0x1, 0x5de, &(0x7f0000000600)="$eJzs3c9vFFUcAPDv2/6gpWgLMSoepIkxkCgtLWCI8QBXQxr8ES9erLQgUqChNVo0oSR4MTFejDHx5EH8L5TIlZOePHjxZEiIGo4mrtntTum2sy0t7U5lPp9k6cy8Hd53uv32vX19bzaA0hqs/VOJ2BsR0ymiP80vlnVGo3Bw4Xn3/v7kdO2Rolp9488UqXEse35qfO1rnNwTET//lGJPx8p6Z+aunB+fmpq83Ngfnr0wPTwzd+XguQvjZyfPTl4cfWn02NEjR4+NHNrQdV3NOXby+vsf9n829vZ33/yTRr7/bSzF8Xi18cSl17FZBmOw/j1JK4v6jm12ZQXpaPycLH2JU2eBAbEu2evXFRFPRX90xP0Xrz8+fa3Q4IAtVU0RVaCkkvyHksr6Adl7++XvgyuF9EqAdrh7YmEAYGX+dy6MDUZPfWxg570US4d1UkRsbGSu2a6IuH1r7PqZW2PXY4vG4YB889ci4um8/E/1/B+Inhio53+lKf9r/YJTja+1469vsP7lQ8XyH9pnIf97Vs3/aJH/7yzJ/3c3WP/g/c33epvyv3ejlwQAAAAAAACldfNERLyY9/f/yuL8n8iZ/9MXEcc3of7BZfsr//5fubMJ1QA57p6IeCV3/m8lm/070NHYeqw+H6ArnTk3NXkoIh6PiAPRtaO2P7JKHQc/3/N1q7LBxvy/7FGr/3ZjLmAjjjudO5rPmRifHX/Y6wYi7l6LeCZ3/m9abP9TTvtf+30w/YB17Hn+xqlWZWvnP7BVqt9G7M9t/+/ftSKtfn+O4Xp/YDjrFaz07Mdf/NCq/o3mv1tMwMOrtf87V8//gbT0fj0z66/j8FxntVXZRvv/3enN+i1nuhvHPhqfnb08EtGdTnbUjjYdH11/zPAoyvIhy5da/h94bvXxv7z+f29EzC/7v9NfzWuKM0/+2/d7q3j0/6E4tfyfWFf7v/6N0RsDP7aq/8Ha/yP1tv5A44jxP1jwVZam3c3Hc9KxM6+o3fECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKOgEhG7IlWGFrcrlaGhiL6IeCJ2VqYuzcy+cObSBxcnamX1z/+vZJ/027+wn7LP/x9Ysj+6bP9wROyOiC87euv7Q6cvTU0UffEAAAAAAAAAAAAAAAAAAACwTfS1WP9f80dH0dEBW66z6ACAwuTk/y9FxAG0X3773932OID20/+H8pL/UF7yH8pL/kN5yX8oL/kP5SX/AQAAAADgkbJ7381fU0TMv9xbf8SShT9dhUYGbLVK0QEAhXGLHygvU3+gvLzHB9Ia5T0tT1rrzNVMn36IkwEAAAAAAAAAAACgdPbvtf4fysr6fygv6/+hvLL1//sKjgNoP+/xgVhjJX/u+v81zwIAAAAAAAAAAAAANtPM3JXz41NTk5dtvLU9wmjnRrVavVr7Kdgu8fzPN7Kp8NslnmUb2Vq/BzuruN9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAs/8CAAD//8/XJMs=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000004c0)="123645607835e16d366e5cc81819c0eef5e68b206c149809493f", 0x1a}, {&(0x7f0000000540)="ea653532e8a7a89e13f40458d8b29f4b2fa5a6a1ecd7b9ea5cb4e0fa27c8dda3", 0x20}], 0x2}, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$nci(0xffffffffffffffff, &(0x7f0000000a80)=""/218, 0xda) 3.42721414s ago: executing program 2 (id=692): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="8000f2000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.378828114s ago: executing program 1 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) 3.229154096s ago: executing program 1 (id=694): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200088, &(0x7f0000000840)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@tz_utc}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@check_normal}, {@fat=@allow_utime}, {@dots}, {@dots}, {@dots}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dots}, {@dots}, {@fat=@gid}, {@fat=@sys_immutable}, {@dots}, {@fat=@check_strict}, {@nodots}, {@fat=@showexec}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1cd, &(0x7f0000000100)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 3.160056512s ago: executing program 4 (id=695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000000c6"], 0x10}, 0x0) 3.159597612s ago: executing program 2 (id=696): setuid(0xee00) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000000000/0xc00000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 3.06075361s ago: executing program 2 (id=697): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000800)=@framed, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x7fff, 0x0, 0x0) 3.05997101s ago: executing program 1 (id=698): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0}, 0x90) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xe0ca, 0x8}, 0xc) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x0, 0x101) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f00000004c0)='./cgroup.net/cgroup.procs\x00', r3, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x1, 0x800, 0x851, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xe}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000003380)) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000001c0)={0x0, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="5f8af8ff10000000180000005c0000000000000009000000185100000a00000000000000000000772087a3c5df9314ded300d486d931"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x52, &(0x7f0000000100)=""/82, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xd, 0xfff, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r1, r2, r3, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, r0, r4], &(0x7f0000000440)=[{0x4, 0x3, 0xd, 0x2}, {0x4, 0x5, 0x2}, {0x5, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x1, 0x9}], 0x10, 0x7}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) delete_module(0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000a00)={&(0x7f00000005c0)={{@hyper, 0x80}, {@my=0x1, 0x6}, 0x400, "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"}, 0x418}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_open_dev$video(&(0x7f0000000580), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205649, &(0x7f0000000080)={0x0, 0x4001, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r11, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 2.923791861s ago: executing program 4 (id=699): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r1) execve(0x0, 0x0, &(0x7f0000000140)=[&(0x7f00000021c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'/1142, &(0x7f0000001080)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1', &(0x7f0000001d80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"S\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf2/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO3LC\xb0\x80\xbe\xd5\xa9\xc3F\x89\x89\xebx\xbd\x0fVCE\xc1\xdat\x0f\xbc[,\xba\x85\xba\xd6\xc8\x0en\x89\x0f\xf5\x14\xa2\xbeqd\xc6\x1b\xa6h\xae\x95\xf0\xd3\x92\v)\xad\x94\x88\xff54Vv\xc2\xe3\x8b\x18\xc9\xf4C\xee\xbb\xa4W\xc7e/1', 0x0]) 2.405499243s ago: executing program 2 (id=700): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.091488799s ago: executing program 1 (id=701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0xfe6c) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 1.804516912s ago: executing program 3 (id=702): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000006c0)={@can, {&(0x7f00000005c0)=""/218, 0xda}, &(0x7f0000000500), 0x22}, 0xa0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000080)=0x1ff, 0x4) 543.918025ms ago: executing program 3 (id=703): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 495.673489ms ago: executing program 1 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) 444.086953ms ago: executing program 2 (id=705): timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) msgget$private(0x0, 0x0) 211.859562ms ago: executing program 2 (id=706): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000111001000000000000000000d98ad0dcdd563cfc0000000000000000000a003300efc1e5ea560bded694393d9a72f2c1f858"], 0x28}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xb, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 63.339594ms ago: executing program 4 (id=707): setuid(0xee00) shmctl$SHM_LOCK(0x0, 0xb) 0s ago: executing program 3 (id=708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000000c6"], 0x10}, 0x0) kernel console output (not intermixed with test programs): evice=ec.c3 [ 90.870345][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.879547][ T4222] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 90.893934][ T3596] usb 4-1: config 0 descriptor?? [ 91.046057][ T120] block nbd2: Possible stuck request ffff88801f778000: control (read@0,4096B). Runtime 30 seconds [ 91.073139][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.094386][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.113098][ T3566] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 91.152002][ T3596] usb 4-1: USB disconnect, device number 4 [ 91.203234][ T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.227829][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.250334][ T26] usb 2-1: SerialNumber: syz [ 91.422594][ T4227] loop4: detected capacity change from 0 to 32768 [ 91.495161][ T4227] XFS (loop4): Mounting V5 Filesystem [ 91.531884][ T4227] XFS (loop4): Ending clean mount [ 91.543857][ T3768] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.554390][ T26] usb 2-1: 0:2 : does not exist [ 91.559288][ T26] usb 2-1: unit 5 not found! [ 91.599874][ T26] usb 2-1: USB disconnect, device number 6 [ 91.626203][ T4227] XFS (loop4): Quotacheck needed: Please wait. [ 91.675957][ T4227] XFS (loop4): Quotacheck: Done. [ 91.770557][ T3552] XFS (loop4): Unmounting Filesystem [ 91.867798][ T4091] udevd[4091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.943278][ T3768] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.979517][ T3768] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.003355][ T3768] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.012419][ T3768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.083471][ T4230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.321026][ T3768] usb 1-1: USB disconnect, device number 6 [ 92.395743][ T4254] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 92.471150][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.478516][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.494930][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.502202][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.509620][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.516763][ T4254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.634285][ T3566] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 92.646446][ T3566] Bluetooth: hci0: Injecting HCI hardware error event [ 92.658382][ T3567] Bluetooth: hci0: hardware error 0x00 [ 92.983303][ T3596] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.073072][ T27] audit: type=1326 audit(1720761247.325:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x0 [ 93.094706][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.128310][ T4254] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.392991][ T3596] usb 5-1: Using ep0 maxpacket: 8 [ 93.513614][ T3596] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 93.531254][ T3596] usb 5-1: config 0 has no interface number 0 [ 93.716220][ T3601] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.724149][ T3596] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 93.766751][ T3596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.822586][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 93.824126][ T3596] usb 5-1: Product: syz [ 93.833968][ T4281] 8021q: VLANs not supported on ipvlan1 [ 93.885390][ T3596] usb 5-1: Manufacturer: syz [ 93.894719][ T4287] loop2: detected capacity change from 0 to 512 [ 93.908462][ T3596] usb 5-1: SerialNumber: syz [ 93.909092][ T4287] EXT4-fs: Ignoring removed orlov option [ 93.929185][ T3596] usb 5-1: config 0 descriptor?? [ 94.075626][ T4287] EXT4-fs (loop2): Test dummy encryption mode enabled [ 94.100341][ T4287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 94.108542][ T4287] System zones: 1-12 [ 94.118623][ T3601] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.139113][ T3601] usb 1-1: config 0 has no interfaces? [ 94.147220][ T4287] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.201: casefold flag without casefold feature [ 94.160532][ T3601] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 94.169886][ T3601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.170250][ T4287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.201: missing EA_INODE flag [ 94.187333][ T3601] usb 1-1: config 0 descriptor?? [ 94.198631][ T4287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.201: error while reading EA inode 12 err=-117 [ 94.218730][ T4287] EXT4-fs (loop2): 1 orphan inode deleted [ 94.225995][ T4287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.363558][ T3596] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.423028][ T3566] Bluetooth: hci0: unexpected event for opcode 0x080c [ 94.758792][ T4287] fscrypt (loop2): Error allocating 'cts(cbc(aes))' transform: -4 [ 94.802985][ T3567] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 94.860608][ T3597] usb 1-1: USB disconnect, device number 7 [ 95.031126][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 95.070667][ T4317] netlink: 'syz.2.207': attribute type 10 has an invalid length. [ 95.079017][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.086285][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.173360][ T3594] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.201697][ T3596] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 95.211586][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.221926][ T3596] usb 4-1: config 0 descriptor?? [ 95.232102][ T27] audit: type=1326 audit(1720761249.545:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.2.210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x0 [ 95.281535][ T3567] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 95.290386][ T3567] Bluetooth: hci4: Injecting HCI hardware error event [ 95.302501][ T3566] Bluetooth: hci4: hardware error 0x00 [ 95.460163][ T26] usb 5-1: USB disconnect, device number 4 [ 95.565405][ T3594] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.078109][ T4330] loop0: detected capacity change from 0 to 1024 [ 96.196098][ T3594] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.236880][ T3594] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.249579][ T3594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.503746][ T4308] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 96.633472][ T4330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.669250][ T4330] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 96.687054][ T4330] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 96.700657][ T4330] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.700657][ T4330] [ 96.711245][ T4330] EXT4-fs (loop0): Total free blocks count 0 [ 96.741728][ T4330] EXT4-fs (loop0): Free/Dirty block details [ 96.755390][ T4330] EXT4-fs (loop0): free_blocks=68451041280 [ 96.766971][ T4330] EXT4-fs (loop0): dirty_blocks=32 [ 96.783171][ T3596] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 96.793286][ T4330] EXT4-fs (loop0): Block reservation details [ 96.803423][ T3596] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 96.816107][ T4330] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 96.832455][ T3596] asix: probe of 4-1:0.0 failed with error -71 [ 96.841314][ T3596] usb 4-1: USB disconnect, device number 5 [ 96.872163][ T3705] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.896888][ T3594] usb 2-1: USB disconnect, device number 7 [ 97.103073][ T3598] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.236344][ T4349] loop0: detected capacity change from 0 to 512 [ 97.265274][ T4349] EXT4-fs: Ignoring removed i_version option [ 97.279188][ T4349] EXT4-fs: Ignoring removed nobh option [ 97.286244][ T4349] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.351690][ T4349] EXT4-fs (loop0): 1 truncate cleaned up [ 97.353160][ T3566] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 97.363906][ T4349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.373516][ T4352] device tunl0 entered promiscuous mode [ 97.385057][ T4352] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 97.392707][ T4352] netlink: 9 bytes leftover after parsing attributes in process `syz.3.218'. [ 97.439914][ T27] audit: type=1800 audit(1720761251.745:10): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.217" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 97.453476][ T4354] netlink: 'syz.1.219': attribute type 10 has an invalid length. [ 97.468108][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.475322][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.503289][ T3598] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 97.533202][ T3598] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 97.545247][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 97.732201][ T3598] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 97.751516][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.766211][ T3598] usb 5-1: Product: syz [ 97.780640][ T3598] usb 5-1: Manufacturer: syz [ 97.790736][ T3598] usb 5-1: SerialNumber: syz [ 97.821473][ T3598] usb 5-1: config 0 descriptor?? [ 97.853215][ T4342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.863208][ T4342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.973086][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.082889][ T4342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.105588][ T4342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.161297][ T4356] loop1: detected capacity change from 0 to 32768 [ 98.252430][ T4356] XFS (loop1): Mounting V5 Filesystem [ 98.329113][ T4362] loop0: detected capacity change from 0 to 32768 [ 98.341602][ T4362] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.223 (4362) [ 98.387337][ T4362] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.391739][ T4356] XFS (loop1): Ending clean mount [ 98.409719][ T4362] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 98.419853][ T4362] BTRFS info (device loop0): doing ref verification [ 98.423122][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.434616][ T4362] BTRFS info (device loop0): enabling ssd optimizations [ 98.452997][ T4362] BTRFS info (device loop0): turning on sync discard [ 98.460413][ T26] usb 4-1: config 0 has no interfaces? [ 98.463531][ T4362] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.476325][ T26] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 98.483014][ T4362] BTRFS info (device loop0): use zstd compression, level 3 [ 98.501268][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.503169][ T4362] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 98.533037][ T4362] BTRFS info (device loop0): trying to use backup root at mount time [ 98.554333][ T26] usb 4-1: config 0 descriptor?? [ 98.570897][ T4362] BTRFS info (device loop0): using free space tree [ 98.612604][ T3551] XFS (loop1): Unmounting Filesystem [ 98.809032][ T3598] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 98.876284][ T3598] usb 5-1: USB disconnect, device number 5 [ 99.060648][ T3768] usb 4-1: USB disconnect, device number 6 [ 99.065449][ T3564] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.715211][ T4400] loop1: detected capacity change from 0 to 164 [ 100.032164][ T4411] netlink: 52 bytes leftover after parsing attributes in process `syz.3.229'. [ 100.081522][ T4411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.229'. [ 100.209578][ T4413] loop0: detected capacity change from 0 to 512 [ 100.246092][ T4413] EXT4-fs: Ignoring removed i_version option [ 100.284305][ T4413] EXT4-fs: Ignoring removed nobh option [ 100.315058][ T4413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.371840][ T4413] EXT4-fs (loop0): 1 truncate cleaned up [ 100.392605][ T4413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.423679][ T27] audit: type=1800 audit(1720761254.735:11): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.230" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 100.564305][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 100.775023][ T4420] netlink: 'syz.3.232': attribute type 10 has an invalid length. [ 100.814799][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.822053][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.887173][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.894413][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.901739][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.908827][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.946468][ T4426] nbd0: detected capacity change from 0 to 8388607 [ 100.959874][ T4420] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.363098][ T3595] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.577957][ T4423] loop4: detected capacity change from 0 to 32768 [ 101.605022][ T3596] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.764043][ T3595] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 101.769342][ T4423] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.234 (4423) [ 101.774115][ T3566] block nbd0: Receive control failed (result -104) [ 101.797432][ T4426] block nbd0: shutting down sockets [ 101.797665][ T3595] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 101.904806][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.914070][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.930249][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.941946][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.949122][ T4423] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.951403][ T4428] ldm_validate_partition_table(): Disk read failed. [ 102.003043][ T4423] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 102.034104][ T3595] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 102.045446][ T4423] BTRFS info (device loop4): disabling free space tree [ 102.057191][ T3595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.143327][ T4428] Dev nbd0: unable to read RDB block 0 [ 102.149521][ T4428] nbd0: unable to read partition table [ 102.153683][ T4423] BTRFS info (device loop4): setting nodatacow, compression disabled [ 102.156962][ T4428] nbd0: partition table beyond EOD, truncated [ 102.169400][ T3595] usb 3-1: Product: syz [ 102.211818][ T3596] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.223730][ T4423] BTRFS info (device loop4): turning off barriers [ 102.240730][ T3595] usb 3-1: Manufacturer: syz [ 102.241096][ T4423] BTRFS info (device loop4): use no compression [ 102.245664][ T3596] usb 4-1: config 0 has no interfaces? [ 102.251754][ T4423] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 102.262728][ T3595] usb 3-1: SerialNumber: syz [ 102.301087][ T3595] usb 3-1: config 0 descriptor?? [ 102.303742][ T4423] BTRFS info (device loop4): trying to use backup root at mount time [ 102.310985][ T3596] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.323931][ T4423] BTRFS error (device loop4): cannot disable free space tree [ 102.335777][ T4423] BTRFS error (device loop4): open_ctree failed [ 102.343321][ T4430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.362698][ T4441] loop1: detected capacity change from 0 to 1024 [ 102.364894][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.377291][ T4430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.395900][ T3596] usb 4-1: config 0 descriptor?? [ 102.450593][ T4441] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.485167][ T4446] netlink: 52 bytes leftover after parsing attributes in process `syz.0.242'. [ 102.494303][ T4446] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'. [ 102.579204][ T4441] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 102.604925][ T4430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.619480][ T4430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.627114][ T4451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.243'. [ 102.636051][ T27] audit: type=1326 audit(1720761256.945:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4448 comm="syz.0.244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbae8575bd9 code=0x0 [ 102.650219][ T4441] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 102.672357][ T4441] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.672357][ T4441] [ 102.682868][ T4441] EXT4-fs (loop1): Total free blocks count 0 [ 102.689341][ T4441] EXT4-fs (loop1): Free/Dirty block details [ 102.703365][ T4441] EXT4-fs (loop1): free_blocks=68451041280 [ 102.714473][ T4441] EXT4-fs (loop1): dirty_blocks=32 [ 102.723939][ T4441] EXT4-fs (loop1): Block reservation details [ 102.829711][ T4441] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 102.839955][ T3596] usb 4-1: USB disconnect, device number 7 [ 102.931232][ T1178] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.653076][ T3595] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 103.682082][ T3595] usb 3-1: USB disconnect, device number 3 [ 103.783097][ T4406] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.808474][ T4463] loop3: detected capacity change from 0 to 8192 [ 103.934575][ T4467] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 103.954816][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.962264][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.015344][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.022513][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.029957][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.037567][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.054506][ T4467] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.153850][ T4406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.173172][ T3595] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.239446][ T4406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.258687][ T4474] loop2: detected capacity change from 0 to 512 [ 104.299662][ T4474] EXT4-fs: Ignoring removed orlov option [ 104.327296][ T4406] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 104.330249][ T4474] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.421624][ T4474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 104.451199][ T4474] System zones: 1-12 [ 104.465383][ T3595] usb 4-1: Using ep0 maxpacket: 16 [ 104.472249][ T4406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.514511][ T4474] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.252: casefold flag without casefold feature [ 104.614108][ T4474] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.252: missing EA_INODE flag [ 104.627583][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 104.743625][ T4406] usb 5-1: config 0 descriptor?? [ 104.753317][ T3595] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 104.762373][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.771285][ T4474] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.252: error while reading EA inode 12 err=-117 [ 104.794089][ T4474] EXT4-fs (loop2): 1 orphan inode deleted [ 104.799846][ T4474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.818159][ T3595] usb 4-1: config 0 descriptor?? [ 104.877765][ T4474] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 104.909830][ T4480] loop0: detected capacity change from 0 to 736 [ 104.998720][ T4480] rock: directory entry would overflow storage [ 105.019005][ T4480] rock: sig=0x3b10, size=4, remaining=3 [ 105.685460][ T4487] netlink: 52 bytes leftover after parsing attributes in process `syz.0.254'. [ 105.730884][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 105.744166][ T4487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.254'. [ 105.787409][ T4463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.803359][ T4463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.844867][ T3595] hid (null): invalid report_size 18828 [ 105.860992][ T3595] hid (null): invalid report_count 336899251 [ 105.888418][ T3595] hid (null): unknown global tag 0xe [ 105.912076][ T3595] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 105.931639][ T3595] hid-generic 0003:0158:0100.0001: unexpected long global item [ 105.952565][ T3595] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 106.083809][ T3595] usb 4-1: USB disconnect, device number 8 [ 106.255135][ T4406] usbhid 5-1:0.0: can't add hid device: -71 [ 106.268265][ T4406] usbhid: probe of 5-1:0.0 failed with error -71 [ 106.310882][ T4406] usb 5-1: USB disconnect, device number 6 [ 106.351259][ T27] audit: type=1326 audit(1720761260.655:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.4.258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x0 [ 106.375684][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.291049][ T4490] loop2: detected capacity change from 0 to 32768 [ 107.463236][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.474346][ T4490] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.255 (4490) [ 107.533517][ T7] usb 1-1: config 0 has no interfaces? [ 107.539068][ T7] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.548924][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.953267][ T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.012937][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 108.020565][ T3598] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.052971][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 108.193318][ T26] usb 4-1: device descriptor read/64, error -32 [ 108.213257][ T3598] usb 5-1: device descriptor read/64, error -32 [ 108.274018][ T7] usb 1-1: config 0 descriptor?? [ 108.300937][ T4490] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.336289][ T4490] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 108.368976][ T4490] BTRFS info (device loop2): disabling free space tree [ 108.393283][ T4490] BTRFS info (device loop2): setting nodatacow, compression disabled [ 108.421837][ T4490] BTRFS info (device loop2): turning off barriers [ 108.435026][ T4490] BTRFS info (device loop2): use no compression [ 108.441303][ T4490] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 108.459515][ T4490] BTRFS info (device loop2): trying to use backup root at mount time [ 108.471264][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 108.480706][ T4490] BTRFS error (device loop2): cannot disable free space tree [ 108.488748][ T3598] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.500418][ T4490] BTRFS error (device loop2): open_ctree failed [ 108.531195][ T7] usb 1-1: USB disconnect, device number 8 [ 108.716198][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 108.749532][ T4511] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 108.983219][ T26] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 108.992591][ T26] usb 4-1: config 0 has no interface number 0 [ 109.763220][ T3598] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 109.783027][ T3598] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 109.899109][ T4522] loop0: detected capacity change from 0 to 512 [ 109.907067][ T4522] EXT4-fs: Ignoring removed orlov option [ 109.913376][ T26] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 109.913402][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.913421][ T26] usb 4-1: Product: syz [ 109.925819][ T4522] EXT4-fs (loop0): Test dummy encryption mode enabled [ 109.941811][ T26] usb 4-1: Manufacturer: syz [ 109.946953][ T26] usb 4-1: SerialNumber: syz [ 109.953723][ T4522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 109.961699][ T4522] System zones: 1-12 [ 109.965534][ T26] usb 4-1: config 0 descriptor?? [ 109.969181][ T4522] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.266: casefold flag without casefold feature [ 109.984671][ T4522] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.266: missing EA_INODE flag [ 109.999007][ T3598] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 110.002237][ T4522] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.266: error while reading EA inode 12 err=-117 [ 110.008210][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.028361][ T4522] EXT4-fs (loop0): 1 orphan inode deleted [ 110.036391][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.040229][ T3598] usb 5-1: Product: syz [ 110.049818][ T3598] usb 5-1: Manufacturer: syz [ 110.053967][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.069101][ T3598] usb 5-1: SerialNumber: syz [ 110.193718][ T3768] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.202206][ T3598] usb 5-1: config 0 descriptor?? [ 110.223210][ T4504] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 110.230727][ T4504] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 110.467785][ T4504] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 110.493174][ T3768] usb 2-1: Using ep0 maxpacket: 16 [ 110.506823][ T4504] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 110.643549][ T3768] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 110.984647][ T3768] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 110.996381][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 111.000779][ T3768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.011016][ T3768] usb 2-1: Product: syz [ 111.015562][ T3768] usb 2-1: Manufacturer: syz [ 111.020200][ T3768] usb 2-1: SerialNumber: syz [ 111.050794][ T3768] usb 2-1: config 0 descriptor?? [ 111.133350][ T7] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 111.148832][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.172093][ T7] usb 3-1: config 0 descriptor?? [ 111.244521][ T3768] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 111.253966][ T3768] usb 2-1: Detected FT232R [ 111.313229][ T3598] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 111.328952][ T3598] usb 5-1: USB disconnect, device number 8 [ 111.416944][ T3597] usb 4-1: USB disconnect, device number 10 [ 111.453137][ T3768] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 111.746901][ T4533] syz.3.268 uses obsolete (PF_INET,SOCK_PACKET) [ 111.804362][ T3768] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 112.025617][ T3768] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 112.443808][ T3768] usb 2-1: USB disconnect, device number 8 [ 112.473202][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 112.510887][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 112.513595][ T3768] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 112.543015][ T27] audit: type=1326 audit(1720761266.845:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.4.270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x0 [ 112.553625][ T3768] ftdi_sio 2-1:0.0: device disconnected [ 112.574988][ T7] asix: probe of 3-1:0.0 failed with error -71 [ 112.605947][ T7] usb 3-1: USB disconnect, device number 4 [ 112.812070][ T4536] loop0: detected capacity change from 0 to 8192 [ 113.112092][ T4546] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 113.320599][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.327891][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.913114][ T4117] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.193133][ T4117] usb 1-1: Using ep0 maxpacket: 16 [ 114.418136][ T3768] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 114.456569][ T4117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 114.503503][ T4117] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 114.540939][ T4117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.563713][ T4117] usb 1-1: config 0 descriptor?? [ 114.743793][ T4568] loop2: detected capacity change from 0 to 512 [ 114.751990][ T4568] EXT4-fs: Ignoring removed i_version option [ 114.758335][ T4568] EXT4-fs: Ignoring removed nobh option [ 114.773685][ T4568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.803390][ T3768] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.815258][ T4568] EXT4-fs (loop2): 1 truncate cleaned up [ 114.822264][ T3768] usb 4-1: config 0 has no interfaces? [ 114.829010][ T4568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.837638][ T3768] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.847815][ T3768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.857697][ T3768] usb 4-1: config 0 descriptor?? [ 114.862674][ T27] audit: type=1800 audit(1720761269.165:15): pid=4568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.281" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 114.966498][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 115.137290][ T4406] usb 4-1: USB disconnect, device number 11 [ 115.190613][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.213353][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.264676][ T4117] hid (null): invalid report_size 18828 [ 115.265224][ T4578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.270473][ T4117] hid (null): invalid report_count 336899251 [ 115.296218][ T4578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 115.303280][ T4117] hid (null): unknown global tag 0xe [ 115.321503][ T4578] device bridge_slave_1 left promiscuous mode [ 115.323661][ T4117] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 115.337940][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.345313][ T4117] hid-generic 0003:0158:0100.0002: unexpected long global item [ 115.355086][ T4117] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 115.364829][ T4578] bridge1: port 1(bridge_slave_1) entered blocking state [ 115.383217][ T3768] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.390303][ T4578] bridge1: port 1(bridge_slave_1) entered disabled state [ 115.399384][ T4578] device bridge_slave_1 entered promiscuous mode [ 115.420528][ T4579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.462418][ T4578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.284'. [ 115.483317][ T3594] usb 1-1: USB disconnect, device number 9 [ 115.643061][ T3768] usb 3-1: Using ep0 maxpacket: 16 [ 115.763162][ T3768] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 115.786438][ T4583] loop3: detected capacity change from 0 to 512 [ 115.829456][ T4583] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.848584][ T4583] ext4 filesystem being mounted at /56/bus supports timestamps until 2038 (0x7fffffff) [ 115.953199][ T3768] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 115.972977][ T3768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.023402][ T3768] usb 3-1: Product: syz [ 116.053016][ T3768] usb 3-1: Manufacturer: syz [ 116.078482][ T3768] usb 3-1: SerialNumber: syz [ 116.117438][ T3768] usb 3-1: config 0 descriptor?? [ 116.163392][ T3768] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 116.171696][ T3768] usb 3-1: Detected FT232R [ 116.376426][ T3768] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 116.673215][ T3768] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 116.690193][ T3768] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 116.739690][ T3768] usb 3-1: USB disconnect, device number 5 [ 116.787784][ T3768] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.815598][ T3768] ftdi_sio 3-1:0.0: device disconnected [ 117.274256][ T27] audit: type=1326 audit(1720761271.585:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.345372][ T27] audit: type=1326 audit(1720761271.585:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.366901][ T4613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.401894][ T27] audit: type=1326 audit(1720761271.615:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.454037][ T27] audit: type=1326 audit(1720761271.615:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.530205][ T27] audit: type=1326 audit(1720761271.615:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.583145][ T27] audit: type=1326 audit(1720761271.615:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.616971][ T27] audit: type=1326 audit(1720761271.615:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.619487][ T3559] EXT4-fs (loop3): unmounting filesystem. [ 117.661254][ T27] audit: type=1326 audit(1720761271.615:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.736701][ T27] audit: type=1326 audit(1720761271.615:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37af774610 code=0x7ffc0000 [ 117.759571][ T27] audit: type=1326 audit(1720761271.615:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.782103][ T27] audit: type=1326 audit(1720761271.615:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.807198][ T27] audit: type=1326 audit(1720761271.615:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.830024][ T27] audit: type=1326 audit(1720761271.615:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.853939][ T27] audit: type=1326 audit(1720761271.615:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.876712][ T27] audit: type=1326 audit(1720761271.625:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 117.994844][ T4613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.023059][ T3594] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 118.147210][ T4626] loop2: detected capacity change from 0 to 1024 [ 118.193508][ T4626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.270526][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 118.425541][ T4639] loop0: detected capacity change from 0 to 1024 [ 118.533285][ T3594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.548630][ T3594] usb 4-1: config 0 has no interfaces? [ 118.731128][ T3594] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.791682][ T4639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.919883][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.034575][ T3594] usb 4-1: config 0 descriptor?? [ 119.101529][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 119.357854][ T3594] usb 4-1: USB disconnect, device number 12 [ 119.783302][ T3567] Bluetooth: hci5: command tx timeout [ 120.409088][ T4664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.343394][ T120] block nbd2: Possible stuck request ffff88801f778000: control (read@0,4096B). Runtime 60 seconds [ 121.524036][ T4677] loop4: detected capacity change from 0 to 1024 [ 121.602108][ T4677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.655948][ T4664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.726499][ T3552] EXT4-fs (loop4): unmounting filesystem. [ 121.850581][ T4693] loop4: detected capacity change from 0 to 1024 [ 121.893716][ T4693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.926237][ T4693] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 121.957974][ T4693] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 122.003602][ T4693] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.003602][ T4693] [ 122.013446][ T4693] EXT4-fs (loop4): Total free blocks count 0 [ 122.019450][ T4693] EXT4-fs (loop4): Free/Dirty block details [ 122.033099][ T4693] EXT4-fs (loop4): free_blocks=68451041280 [ 122.039891][ T4693] EXT4-fs (loop4): dirty_blocks=32 [ 122.050894][ T4693] EXT4-fs (loop4): Block reservation details [ 122.058277][ T4693] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 122.131679][ T4117] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.141723][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 122.554518][ T4117] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 122.638358][ T4117] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 122.885202][ T4117] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 122.935742][ T4117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.949028][ T4117] usb 3-1: Product: syz [ 123.079457][ T4117] usb 3-1: Manufacturer: syz [ 123.084751][ T4117] usb 3-1: SerialNumber: syz [ 123.095630][ T4117] usb 3-1: config 0 descriptor?? [ 123.123308][ T4689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.130527][ T4689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.710649][ T4689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.813149][ T4689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.533047][ T4117] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 124.571901][ T4117] usb 3-1: USB disconnect, device number 6 [ 124.889291][ T4727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.992160][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 124.992174][ T27] audit: type=1326 audit(1720761279.295:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 125.140573][ T27] audit: type=1326 audit(1720761279.295:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 125.835764][ T27] audit: type=1326 audit(1720761279.335:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 125.969210][ T27] audit: type=1326 audit(1720761279.335:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 126.026583][ T4727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.039343][ T4737] loop2: detected capacity change from 0 to 1024 [ 126.059701][ T4738] loop1: detected capacity change from 0 to 1024 [ 126.070977][ T27] audit: type=1326 audit(1720761279.335:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 126.135912][ T27] audit: type=1326 audit(1720761279.335:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 126.180512][ T4745] netlink: 'syz.3.328': attribute type 10 has an invalid length. [ 126.185537][ T27] audit: type=1326 audit(1720761279.335:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 126.227958][ T4737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.240830][ T4738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.271898][ T27] audit: type=1326 audit(1720761279.335:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 126.334697][ T4738] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 126.383085][ T4738] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 126.404913][ T4738] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.404913][ T4738] [ 126.421063][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 126.433024][ T27] audit: type=1326 audit(1720761279.335:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 126.455251][ T4738] EXT4-fs (loop1): Total free blocks count 0 [ 126.461249][ T4738] EXT4-fs (loop1): Free/Dirty block details [ 126.473170][ T4738] EXT4-fs (loop1): free_blocks=68451041280 [ 126.488603][ T27] audit: type=1326 audit(1720761279.335:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.1.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 126.529607][ T4738] EXT4-fs (loop1): dirty_blocks=32 [ 126.547417][ T4738] EXT4-fs (loop1): Block reservation details [ 126.576688][ T4738] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 126.649492][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 128.793575][ T4753] loop3: detected capacity change from 0 to 32768 [ 128.875912][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 128.918009][ T4753] XFS (loop3): Mounting V5 Filesystem [ 129.024581][ T4753] XFS (loop3): Ending clean mount [ 129.151238][ T3559] XFS (loop3): Unmounting Filesystem [ 129.342803][ T4767] loop1: detected capacity change from 0 to 32768 [ 129.373168][ T4767] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.333 (4767) [ 129.430052][ T4767] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.469401][ T3594] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 129.473016][ T4767] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 129.523031][ T4767] BTRFS info (device loop1): doing ref verification [ 129.529657][ T4767] BTRFS info (device loop1): enabling ssd optimizations [ 129.557655][ T4767] BTRFS info (device loop1): turning on sync discard [ 129.568852][ T4767] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 129.589561][ T4767] BTRFS info (device loop1): use zstd compression, level 3 [ 129.599141][ T4767] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.616596][ T4767] BTRFS info (device loop1): trying to use backup root at mount time [ 129.629067][ T4767] BTRFS info (device loop1): using free space tree [ 129.752199][ T4797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.853695][ T3594] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 129.863927][ T3594] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 130.000709][ T3551] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.037416][ T3594] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 130.048519][ T3594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.057953][ T3594] usb 1-1: Product: syz [ 130.065281][ T3594] usb 1-1: Manufacturer: syz [ 130.070005][ T3594] usb 1-1: SerialNumber: syz [ 130.100232][ T3594] usb 1-1: config 0 descriptor?? [ 130.126838][ T4782] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.173124][ T4782] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.404468][ T4782] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.469974][ T4782] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.627895][ T4797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.263615][ T4820] loop3: detected capacity change from 0 to 1024 [ 131.306065][ T4823] netlink: 'syz.2.341': attribute type 10 has an invalid length. [ 131.405988][ T4820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.415730][ T3594] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 131.417718][ T4830] Bluetooth: MGMT ver 1.22 [ 131.469217][ T3594] usb 1-1: USB disconnect, device number 10 [ 131.612480][ T3559] EXT4-fs (loop3): unmounting filesystem. [ 132.571959][ T4851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.637004][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.655989][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 132.656002][ T27] audit: type=1326 audit(1720761286.965:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 132.740537][ T27] audit: type=1326 audit(1720761286.965:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 132.789175][ T27] audit: type=1326 audit(1720761286.965:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 132.811655][ T27] audit: type=1326 audit(1720761286.965:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 132.843148][ T27] audit: type=1326 audit(1720761286.965:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 132.889980][ T27] audit: type=1326 audit(1720761287.005:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 132.935592][ T27] audit: type=1326 audit(1720761287.005:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 133.015491][ T27] audit: type=1326 audit(1720761287.005:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 133.079254][ T27] audit: type=1326 audit(1720761287.005:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 133.140941][ T27] audit: type=1326 audit(1720761287.005:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x7ffc0000 [ 133.152044][ T4851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.241410][ T4874] loop0: detected capacity change from 0 to 1024 [ 134.337745][ T4874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.534447][ T4881] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.357'. [ 135.181888][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 135.483157][ T3596] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.499478][ T4891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.448306][ T3596] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 136.547165][ T3596] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 136.688745][ T4891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.883400][ T3596] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 136.910211][ T3596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.935513][ T3596] usb 5-1: Product: syz [ 137.112318][ T3596] usb 5-1: Manufacturer: syz [ 137.119109][ T3596] usb 5-1: SerialNumber: syz [ 137.125840][ T3596] usb 5-1: config 0 descriptor?? [ 137.146184][ T4883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.191964][ T4883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.471722][ T4883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.487315][ T4883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.927986][ T4916] loop3: detected capacity change from 0 to 512 [ 138.006813][ T4916] EXT4-fs: Ignoring removed i_version option [ 138.012837][ T4916] EXT4-fs: Ignoring removed nobh option [ 138.025796][ T4916] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.182231][ T4916] EXT4-fs (loop3): 1 truncate cleaned up [ 138.201253][ T4916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.226739][ T3596] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 138.250159][ T3596] usb 5-1: USB disconnect, device number 9 [ 138.268118][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 138.268130][ T27] audit: type=1800 audit(1720761292.575:131): pid=4916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.368" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 138.901885][ T3559] EXT4-fs (loop3): unmounting filesystem. [ 139.191862][ T4926] netlink: 'syz.4.372': attribute type 10 has an invalid length. [ 139.340437][ T4934] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.371'. [ 141.052921][ C0] sched: RT throttling activated [ 141.069160][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.069778][ T4926] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.076998][ T4926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.173709][ T3003] udevd[3003]: worker [3663] /devices/virtual/block/nbd2 is taking a long time [ 142.223308][ T4926] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.480199][ T27] audit: type=1326 audit(1720761297.785:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 143.547673][ T27] audit: type=1326 audit(1720761297.785:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 143.757364][ T27] audit: type=1326 audit(1720761297.785:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 143.884648][ T27] audit: type=1326 audit(1720761297.785:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 143.884971][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 143.908338][ T27] audit: type=1326 audit(1720761297.785:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 144.008199][ T27] audit: type=1326 audit(1720761297.785:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 144.032701][ T27] audit: type=1326 audit(1720761297.785:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 144.055953][ T27] audit: type=1326 audit(1720761297.785:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 144.267417][ T27] audit: type=1326 audit(1720761297.835:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 144.281847][ T4961] loop2: detected capacity change from 0 to 512 [ 144.333108][ T27] audit: type=1326 audit(1720761297.835:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 144.360803][ T4961] EXT4-fs: Ignoring removed i_version option [ 144.370136][ T4961] EXT4-fs: Ignoring removed nobh option [ 144.390923][ T4961] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.453884][ T4961] EXT4-fs (loop2): 1 truncate cleaned up [ 144.459564][ T4961] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.463325][ T4963] ebtables: ebtables: counters copy to user failed while replacing table [ 144.572478][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 144.816668][ T4975] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 145.744619][ T4983] loop3: detected capacity change from 0 to 736 [ 145.889722][ T4983] rock: directory entry would overflow storage [ 145.903065][ T3768] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.916218][ T4983] rock: sig=0x3b10, size=4, remaining=3 [ 146.120130][ T4969] loop1: detected capacity change from 0 to 32768 [ 146.191051][ T4969] XFS (loop1): Mounting V5 Filesystem [ 146.282865][ T4969] XFS (loop1): Ending clean mount [ 146.288641][ T3768] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 146.327527][ T3768] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 146.338567][ T3551] XFS (loop1): Unmounting Filesystem [ 146.583450][ T3768] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 146.595656][ T3768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.604675][ T3768] usb 3-1: Product: syz [ 146.608858][ T3768] usb 3-1: Manufacturer: syz [ 146.620142][ T3768] usb 3-1: SerialNumber: syz [ 146.637644][ T3768] usb 3-1: config 0 descriptor?? [ 146.663339][ T4971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.677920][ T4971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.734865][ T5007] loop1: detected capacity change from 0 to 512 [ 146.760002][ T5007] EXT4-fs: Ignoring removed i_version option [ 146.773901][ T5007] EXT4-fs: Ignoring removed nobh option [ 146.798322][ T5007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.818915][ T5007] EXT4-fs (loop1): 1 truncate cleaned up [ 146.828548][ T5007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.910807][ T4971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.929936][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 146.937141][ T4971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.168958][ T5019] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 147.663335][ T3768] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 147.844604][ T3768] usb 3-1: USB disconnect, device number 7 [ 148.096144][ T5027] loop1: detected capacity change from 0 to 736 [ 148.272815][ T5027] rock: directory entry would overflow storage [ 148.290801][ T5027] rock: sig=0x3b10, size=4, remaining=3 [ 148.473863][ T5036] loop0: detected capacity change from 0 to 1024 [ 148.500970][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 148.500984][ T27] audit: type=1326 audit(1720761302.805:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.550981][ T5036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 148.604299][ T27] audit: type=1326 audit(1720761302.805:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.629777][ T27] audit: type=1326 audit(1720761302.805:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.657722][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 148.658845][ T27] audit: type=1326 audit(1720761302.805:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.686375][ T27] audit: type=1326 audit(1720761302.805:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.708686][ T27] audit: type=1326 audit(1720761302.805:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.739992][ T27] audit: type=1326 audit(1720761302.805:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.782847][ T27] audit: type=1326 audit(1720761302.805:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.838412][ T27] audit: type=1326 audit(1720761302.805:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.894708][ T27] audit: type=1326 audit(1720761302.805:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x7ffc0000 [ 148.933764][ T5047] loop0: detected capacity change from 0 to 512 [ 148.941990][ T5047] EXT4-fs: Ignoring removed i_version option [ 148.968595][ T5047] EXT4-fs: Ignoring removed nobh option [ 148.994952][ T5047] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.043063][ T5047] EXT4-fs (loop0): 1 truncate cleaned up [ 149.066075][ T5047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.160780][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 149.501194][ T5055] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 149.544302][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.551549][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.807146][ T5029] loop3: detected capacity change from 0 to 32768 [ 149.825592][ T5066] loop0: detected capacity change from 0 to 1024 [ 149.832541][ T5066] EXT4-fs: Ignoring removed nobh option [ 149.834872][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 149.851141][ T5066] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.904714][ T5066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.917573][ T5029] XFS (loop3): Mounting V5 Filesystem [ 150.030471][ T5029] XFS (loop3): Ending clean mount [ 150.046518][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 150.168435][ T3559] XFS (loop3): Unmounting Filesystem [ 150.331992][ T5083] loop2: detected capacity change from 0 to 736 [ 150.388949][ T5083] rock: directory entry would overflow storage [ 150.397955][ T5083] rock: sig=0x3b10, size=4, remaining=3 [ 150.452988][ T4117] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.613998][ T5089] loop2: detected capacity change from 0 to 512 [ 150.678989][ T5088] loop3: detected capacity change from 0 to 1024 [ 150.691145][ T5085] loop2: detected capacity change from 0 to 512 [ 150.708825][ T5088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 150.786563][ T5095] loop1: detected capacity change from 0 to 128 [ 150.793706][ T5095] EXT4-fs: Ignoring removed nobh option [ 150.826254][ T5095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.843287][ T4117] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 150.855292][ T3559] EXT4-fs (loop3): unmounting filesystem. [ 150.862939][ T4117] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 150.876988][ T5095] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038 (0x7fffffff) [ 150.961049][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 151.053589][ T4117] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 151.071109][ T4117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.078601][ T5102] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 151.102613][ T4117] usb 1-1: Product: syz [ 151.126856][ T5106] loop1: detected capacity change from 0 to 512 [ 151.136344][ T4117] usb 1-1: Manufacturer: syz [ 151.143125][ T4117] usb 1-1: SerialNumber: syz [ 151.158541][ T4117] usb 1-1: config 0 descriptor?? [ 151.210834][ T5079] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.234157][ T5106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.249288][ T5079] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.292669][ T5106] ext4 filesystem being mounted at /89/bus supports timestamps until 2038 (0x7fffffff) [ 151.307124][ T5113] loop2: detected capacity change from 0 to 1024 [ 151.331909][ T5113] EXT4-fs: Ignoring removed nobh option [ 151.346046][ T5113] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.394632][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 151.426410][ T5113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.524883][ T5079] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.545224][ T5079] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.606576][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 151.712698][ T5122] loop2: detected capacity change from 0 to 736 [ 151.825420][ T5122] rock: directory entry would overflow storage [ 151.849279][ T120] block nbd2: Possible stuck request ffff88801f778000: control (read@0,4096B). Runtime 90 seconds [ 151.870358][ T5122] rock: sig=0x3b10, size=4, remaining=3 [ 151.989670][ T5126] loop4: detected capacity change from 0 to 256 [ 152.011654][ T5128] loop2: detected capacity change from 0 to 1024 [ 152.047638][ T5128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.160861][ T5133] loop3: detected capacity change from 0 to 512 [ 152.213209][ T4117] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 152.235990][ T4117] usb 1-1: USB disconnect, device number 11 [ 152.257975][ T5133] loop3: detected capacity change from 0 to 512 [ 152.488288][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 152.958214][ T5119] loop1: detected capacity change from 0 to 32768 [ 152.961062][ T3669] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.030853][ T5143] netlink: 'syz.0.438': attribute type 10 has an invalid length. [ 153.121695][ T5119] XFS (loop1): Mounting V5 Filesystem [ 153.129619][ T5147] loop2: detected capacity change from 0 to 1024 [ 153.191876][ T5147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.232176][ T5119] XFS (loop1): Ending clean mount [ 153.244924][ T5147] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 153.348647][ T5147] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 153.395771][ T3551] XFS (loop1): Unmounting Filesystem [ 153.411734][ T5147] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.411734][ T5147] [ 153.487462][ T5147] EXT4-fs (loop2): Total free blocks count 0 [ 153.503566][ T5147] EXT4-fs (loop2): Free/Dirty block details [ 153.528340][ T5147] EXT4-fs (loop2): free_blocks=68451041280 [ 153.572501][ T5147] EXT4-fs (loop2): dirty_blocks=32 [ 153.594837][ T5166] loop4: detected capacity change from 0 to 736 [ 153.619351][ T5147] EXT4-fs (loop2): Block reservation details [ 153.660521][ T5147] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 153.709477][ T4118] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 153.778073][ T5166] rock: directory entry would overflow storage [ 153.802861][ T5166] rock: sig=0x3b10, size=4, remaining=3 [ 153.934675][ T5168] loop2: detected capacity change from 0 to 1024 [ 153.969365][ T5168] EXT4-fs: Ignoring removed nobh option [ 154.012467][ T5168] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.137190][ T5171] loop0: detected capacity change from 0 to 1024 [ 154.243904][ T5168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.284706][ T5175] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.446'. [ 154.890772][ T5171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.035615][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 155.188985][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 155.262313][ T5189] loop4: detected capacity change from 0 to 256 [ 155.543165][ T153] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.264907][ T5194] loop0: detected capacity change from 0 to 512 [ 156.320568][ T5200] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 156.342302][ T5194] loop0: detected capacity change from 0 to 512 [ 156.485229][ T153] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 156.538451][ T153] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 156.813219][ T153] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 156.827295][ T153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.848241][ T153] usb 3-1: Product: syz [ 156.852483][ T153] usb 3-1: Manufacturer: syz [ 156.860889][ T153] usb 3-1: SerialNumber: syz [ 156.875993][ T153] usb 3-1: config 0 descriptor?? [ 156.893291][ T5188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.900694][ T5188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.120802][ T5188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.148514][ T5188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.562483][ T5202] loop4: detected capacity change from 0 to 32768 [ 157.649561][ T5221] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.457'. [ 157.658422][ T5217] loop0: detected capacity change from 0 to 1024 [ 157.735224][ T5217] EXT4-fs: Ignoring removed nobh option [ 157.771058][ T5217] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.856976][ T153] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 157.972502][ T153] usb 3-1: USB disconnect, device number 8 [ 158.366871][ T5202] XFS (loop4): Mounting V5 Filesystem [ 158.419591][ T5217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.429281][ T5202] XFS (loop4): Ending clean mount [ 158.491989][ T5233] loop1: detected capacity change from 0 to 1024 [ 158.501722][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 158.511277][ T3552] XFS (loop4): Unmounting Filesystem [ 158.542564][ T5235] loop3: detected capacity change from 0 to 256 [ 158.556356][ T5233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.792490][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 159.201394][ T5243] loop0: detected capacity change from 0 to 512 [ 159.472473][ T4091] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.486432][ T5240] loop0: detected capacity change from 0 to 512 [ 159.508564][ T5247] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 159.526790][ T4091] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.556743][ T5249] loop2: detected capacity change from 0 to 128 [ 159.574234][ T4091] Buffer I/O error on dev loop0, logical block 0, async page read [ 159.922995][ T153] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.939941][ T5269] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.469'. [ 160.444505][ T153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.454956][ T153] usb 2-1: config 0 has no interfaces? [ 160.463015][ T153] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.472991][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.546766][ T153] usb 2-1: config 0 descriptor?? [ 162.136195][ T153] usb 2-1: USB disconnect, device number 9 [ 162.243212][ T5275] loop2: detected capacity change from 0 to 512 [ 162.272345][ T5275] EXT4-fs: Ignoring removed i_version option [ 162.298878][ T5275] EXT4-fs: Ignoring removed nobh option [ 162.328186][ T5275] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.385167][ T5275] EXT4-fs (loop2): 1 truncate cleaned up [ 162.418949][ T5275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.439249][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 162.439263][ T27] audit: type=1800 audit(1720761316.745:198): pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.472" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 162.510555][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 162.558907][ T5281] loop4: detected capacity change from 0 to 256 [ 162.724097][ T5282] loop0: detected capacity change from 0 to 1024 [ 162.747098][ T5285] loop2: detected capacity change from 0 to 1024 [ 162.763668][ T5285] EXT4-fs: Ignoring removed nobh option [ 162.784731][ T5285] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.486824][ T27] audit: type=1326 audit(1720761317.795:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.1.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37af775bd9 code=0x0 [ 163.531124][ T5282] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.547064][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.737682][ T5295] netlink: 'syz.4.478': attribute type 10 has an invalid length. [ 163.783304][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.832599][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 164.240202][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 164.439571][ T5300] loop1: detected capacity change from 0 to 2048 [ 164.512719][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.624335][ T3754] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.644283][ T3754] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 164.657245][ T3754] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.657245][ T3754] [ 164.673059][ T3754] EXT4-fs (loop1): Total free blocks count 0 [ 164.734164][ T3754] EXT4-fs (loop1): Free/Dirty block details [ 164.740115][ T3754] EXT4-fs (loop1): free_blocks=2415919104 [ 166.191713][ T3754] EXT4-fs (loop1): dirty_blocks=16 [ 166.213875][ T5324] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.483'. [ 166.343769][ T3754] EXT4-fs (loop1): Block reservation details [ 166.353885][ T3754] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 166.374789][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 166.433065][ T4810] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.760806][ T5332] loop0: detected capacity change from 0 to 1024 [ 166.769732][ T27] audit: type=1326 audit(1720761321.075:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.4.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x0 [ 166.803070][ T4810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.813532][ T26] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.830071][ T4810] usb 3-1: config 0 has no interfaces? [ 166.843258][ T4810] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.856747][ T5332] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.858752][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.110899][ T4810] usb 3-1: config 0 descriptor?? [ 167.628661][ T3596] usb 3-1: USB disconnect, device number 9 [ 167.646638][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 167.846516][ T5343] netlink: 'syz.4.493': attribute type 10 has an invalid length. [ 167.871296][ T5341] loop0: detected capacity change from 0 to 8192 [ 167.883166][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.964368][ T5347] loop4: detected capacity change from 0 to 1024 [ 168.025272][ T5347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 168.055019][ T5347] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 168.070628][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.080834][ T5347] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 168.093606][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.097682][ T5347] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.097682][ T5347] [ 168.101591][ T26] usb 2-1: Product: syz [ 168.101609][ T26] usb 2-1: Manufacturer: syz [ 168.101624][ T26] usb 2-1: SerialNumber: syz [ 168.126250][ T5347] EXT4-fs (loop4): Total free blocks count 0 [ 168.132247][ T5347] EXT4-fs (loop4): Free/Dirty block details [ 168.138201][ T5347] EXT4-fs (loop4): free_blocks=68451041280 [ 168.144082][ T5347] EXT4-fs (loop4): dirty_blocks=32 [ 168.149205][ T5347] EXT4-fs (loop4): Block reservation details [ 168.155436][ T5347] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 168.176588][ T3630] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.273035][ T3596] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.323099][ T4810] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 168.583166][ T3596] usb 1-1: Using ep0 maxpacket: 16 [ 168.673479][ T4810] usb 4-1: Using ep0 maxpacket: 16 [ 168.743182][ T4811] usb 2-1: USB disconnect, device number 10 [ 168.783770][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 168.800109][ T4810] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 168.971617][ T3596] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 169.023661][ T4810] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 169.032817][ T4810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.068796][ T4810] usb 4-1: Product: syz [ 169.109578][ T4810] usb 4-1: Manufacturer: syz [ 169.116944][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.168203][ T4810] usb 4-1: SerialNumber: syz [ 169.255073][ T3596] usb 1-1: config 0 descriptor?? [ 169.271683][ T4810] usb 4-1: config 0 descriptor?? [ 169.329893][ T4810] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 169.395181][ T4810] usb 4-1: Detected FT232R [ 169.455012][ T3594] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.463815][ T5370] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.500'. [ 169.793477][ T3594] usb 5-1: Using ep0 maxpacket: 8 [ 169.816184][ T4810] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 169.934290][ T3594] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 170.026420][ T3594] usb 5-1: config 0 has no interface number 0 [ 171.113164][ T4810] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 171.123689][ T4810] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.163136][ T3594] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 171.200435][ T4810] usb 4-1: USB disconnect, device number 13 [ 171.232807][ T3594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.241172][ T3596] usbhid 1-1:0.0: can't add hid device: -71 [ 171.248397][ T3596] usbhid: probe of 1-1:0.0 failed with error -71 [ 171.273621][ T4810] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.291832][ T3594] usb 5-1: Product: syz [ 171.303127][ T3596] usb 1-1: USB disconnect, device number 12 [ 171.313546][ T3594] usb 5-1: Manufacturer: syz [ 171.318161][ T3594] usb 5-1: SerialNumber: syz [ 171.325158][ T5376] loop3: detected capacity change from 0 to 1024 [ 171.344619][ T4810] ftdi_sio 4-1:0.0: device disconnected [ 171.356882][ T3594] usb 5-1: config 0 descriptor?? [ 171.361947][ T27] audit: type=1326 audit(1720761325.665:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.2.504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa32a975bd9 code=0x0 [ 171.473029][ T3594] usb 5-1: can't set config #0, error -71 [ 171.498082][ T3594] usb 5-1: USB disconnect, device number 10 [ 173.360032][ T5376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.539356][ T3559] EXT4-fs (loop3): unmounting filesystem. [ 173.683086][ T4810] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 173.693208][ T153] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.063259][ T153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.073561][ T4810] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 174.086051][ T4810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.101922][ T5413] netlink: 'syz.3.512': attribute type 10 has an invalid length. [ 174.111019][ T153] usb 3-1: config 0 has no interfaces? [ 174.136026][ T153] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.157335][ T4810] usb 1-1: config 0 descriptor?? [ 174.172117][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.197739][ T153] usb 3-1: config 0 descriptor?? [ 174.568100][ T5423] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.514'. [ 175.261011][ T4117] usb 3-1: USB disconnect, device number 10 [ 175.673097][ T3566] Bluetooth: hci2: command 0x0406 tx timeout [ 175.673139][ T3563] Bluetooth: hci1: command 0x0406 tx timeout [ 175.685952][ T4810] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 175.699686][ T4810] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 176.381238][ T4810] asix: probe of 1-1:0.0 failed with error -71 [ 176.407578][ T4810] usb 1-1: USB disconnect, device number 13 [ 176.869143][ T5437] loop0: detected capacity change from 0 to 1024 [ 176.911750][ T5437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.441876][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 177.524580][ T5448] loop1: detected capacity change from 0 to 512 [ 177.573408][ T5453] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 177.605433][ T4091] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.634476][ T5448] loop1: detected capacity change from 0 to 512 [ 178.026312][ T5463] loop1: detected capacity change from 0 to 1024 [ 178.083677][ T5466] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.527'. [ 178.728444][ T5463] EXT4-fs: Ignoring removed nobh option [ 178.749267][ T5463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.796964][ T5463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 178.951449][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 179.163148][ T153] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 179.253168][ T3594] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.345452][ T5482] loop4: detected capacity change from 0 to 1024 [ 179.406970][ T5482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 179.520727][ T3552] EXT4-fs (loop4): unmounting filesystem. [ 179.533337][ T153] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 179.555426][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.605379][ T153] usb 1-1: config 0 descriptor?? [ 179.623460][ T3594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.645945][ T3594] usb 3-1: config 0 has no interfaces? [ 179.666656][ T3594] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.670738][ T5486] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 179.685293][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.719192][ T3594] usb 3-1: config 0 descriptor?? [ 180.036948][ T3597] usb 3-1: USB disconnect, device number 11 [ 180.839751][ T5497] loop1: detected capacity change from 0 to 512 [ 180.911280][ T5494] loop1: detected capacity change from 0 to 512 [ 180.976511][ T153] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 181.005761][ T153] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 181.044880][ T153] asix: probe of 1-1:0.0 failed with error -71 [ 181.191062][ T153] usb 1-1: USB disconnect, device number 14 [ 181.197765][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 181.491243][ T5508] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.539'. [ 182.067884][ T120] block nbd2: Possible stuck request ffff88801f778000: control (read@0,4096B). Runtime 120 seconds [ 182.598093][ T5520] loop3: detected capacity change from 0 to 1024 [ 182.690173][ T5520] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 182.739520][ T5524] loop4: detected capacity change from 0 to 1024 [ 182.804799][ T5520] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 182.861209][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.914616][ T5520] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 182.967017][ T5520] EXT4-fs (loop3): This should not happen!! Data will be lost [ 182.967017][ T5520] [ 182.996367][ T3552] EXT4-fs (loop4): unmounting filesystem. [ 183.000795][ T5520] EXT4-fs (loop3): Total free blocks count 0 [ 183.020498][ T5520] EXT4-fs (loop3): Free/Dirty block details [ 183.035360][ T5520] EXT4-fs (loop3): free_blocks=68451041280 [ 183.054881][ T5520] EXT4-fs (loop3): dirty_blocks=32 [ 183.060031][ T5520] EXT4-fs (loop3): Block reservation details [ 183.089311][ T5520] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 183.192880][ T4334] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 183.237941][ T5502] loop2: detected capacity change from 0 to 32768 [ 183.279262][ T5502] XFS (loop2): Mounting V5 Filesystem [ 183.381302][ T5537] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 183.399683][ T5502] XFS (loop2): Ending clean mount [ 183.525492][ T3845] XFS (loop2): Unmounting Filesystem [ 183.736037][ T5542] loop3: detected capacity change from 0 to 4096 [ 183.817791][ T4091] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.170749][ T3594] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 184.356247][ T5556] netlink: 'syz.4.553': attribute type 11 has an invalid length. [ 184.364130][ T5556] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.553'. [ 184.410467][ T4117] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 186.093644][ T5558] loop1: detected capacity change from 0 to 512 [ 186.101186][ T5558] EXT4-fs: Ignoring removed i_version option [ 186.107775][ T5558] EXT4-fs: Ignoring removed nobh option [ 186.115843][ T5558] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.153227][ T3594] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.179132][ T3594] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.193147][ T3594] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.203295][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.206057][ T5558] EXT4-fs (loop1): 1 truncate cleaned up [ 186.234418][ T5542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.244951][ T5558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 186.306285][ T27] audit: type=1800 audit(1720761340.615:202): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.554" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 186.463028][ T4117] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.559781][ T4117] usb 3-1: config 0 has no interfaces? [ 186.578367][ T4117] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.594368][ T4117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.620546][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 186.632094][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 186.674683][ T4117] usb 3-1: config 0 descriptor?? [ 186.824007][ T5567] loop1: detected capacity change from 0 to 1024 [ 186.890059][ T5567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.979685][ T3597] usb 3-1: USB disconnect, device number 12 [ 187.049855][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 187.238566][ T5570] loop1: detected capacity change from 0 to 1024 [ 187.273824][ T5570] EXT4-fs: Ignoring removed nobh option [ 187.315253][ T5570] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.376065][ T5570] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 187.489876][ T5574] loop4: detected capacity change from 0 to 1024 [ 187.546858][ T5574] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.562552][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 187.602200][ T5574] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 187.668908][ T5574] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 187.698144][ T5574] EXT4-fs (loop4): This should not happen!! Data will be lost [ 187.698144][ T5574] [ 187.703087][ T4117] usb 4-1: USB disconnect, device number 14 [ 187.715856][ T5574] EXT4-fs (loop4): Total free blocks count 0 [ 187.738546][ T5574] EXT4-fs (loop4): Free/Dirty block details [ 187.753512][ T5574] EXT4-fs (loop4): free_blocks=68451041280 [ 187.781775][ T5574] EXT4-fs (loop4): dirty_blocks=32 [ 187.811950][ T5574] EXT4-fs (loop4): Block reservation details [ 187.819463][ T5587] netlink: 'syz.1.560': attribute type 10 has an invalid length. [ 187.846908][ T5574] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 187.924316][ T3754] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 188.550268][ T5602] loop2: detected capacity change from 0 to 512 [ 188.567534][ T5586] loop0: detected capacity change from 0 to 32768 [ 188.579307][ T5602] EXT4-fs: Ignoring removed i_version option [ 188.586738][ T5602] EXT4-fs: Ignoring removed nobh option [ 188.601837][ T5602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.642805][ T5586] XFS (loop0): Mounting V5 Filesystem [ 188.664729][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.766997][ T5586] XFS (loop0): Ending clean mount [ 188.796941][ T5602] EXT4-fs (loop2): 1 truncate cleaned up [ 188.813503][ T5602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.864940][ T27] audit: type=1800 audit(1720761343.175:203): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.567" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 188.921946][ T5614] loop3: detected capacity change from 0 to 1024 [ 188.929606][ T3564] XFS (loop0): Unmounting Filesystem [ 188.941948][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 188.986790][ T5614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.113318][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 189.170201][ T3559] EXT4-fs (loop3): unmounting filesystem. [ 189.311003][ T5619] loop3: detected capacity change from 0 to 1024 [ 189.323201][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 189.333078][ T5619] EXT4-fs: Ignoring removed nobh option [ 189.353049][ T3597] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 189.370912][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.379859][ T5619] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.402283][ T26] usb 2-1: Product: syz [ 189.406545][ T26] usb 2-1: Manufacturer: syz [ 189.411151][ T26] usb 2-1: SerialNumber: syz [ 189.558943][ T5619] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 189.589438][ T27] audit: type=1800 audit(1720761343.895:204): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.571" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 190.216002][ T3559] EXT4-fs (loop3): unmounting filesystem. [ 190.423175][ T3597] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.465653][ T3597] usb 3-1: config 0 has no interfaces? [ 190.525120][ T3597] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.575657][ T5640] loop0: detected capacity change from 0 to 1024 [ 190.584738][ T3597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.606740][ T5638] loop3: detected capacity change from 0 to 4096 [ 190.632453][ T5640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 190.669356][ T3597] usb 3-1: config 0 descriptor?? [ 190.686197][ T26] usb 2-1: USB disconnect, device number 11 [ 190.698575][ T4091] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.726701][ T5640] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 190.843204][ T5640] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 190.857183][ T5640] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.857183][ T5640] [ 190.867616][ T5640] EXT4-fs (loop0): Total free blocks count 0 [ 190.874042][ T5640] EXT4-fs (loop0): Free/Dirty block details [ 190.880244][ T5640] EXT4-fs (loop0): free_blocks=68451041280 [ 190.888597][ T5640] EXT4-fs (loop0): dirty_blocks=32 [ 190.894816][ T5640] EXT4-fs (loop0): Block reservation details [ 190.900930][ T5640] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 190.970030][ T3862] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 190.988955][ T153] usb 3-1: USB disconnect, device number 13 [ 191.052966][ T3597] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 191.137750][ T5646] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 191.433224][ T3597] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.480037][ T3597] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.506833][ T3597] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.540124][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.593236][ T5638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.765497][ T5659] loop2: detected capacity change from 0 to 1024 [ 191.823492][ T5659] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.020690][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 192.478381][ T5667] loop0: detected capacity change from 0 to 1024 [ 192.485601][ T5667] EXT4-fs: Ignoring removed nobh option [ 192.503695][ T5667] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.558616][ T5667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 192.591791][ T27] audit: type=1800 audit(1720761346.895:205): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.583" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 192.702057][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 192.839379][ T5656] loop1: detected capacity change from 0 to 32768 [ 193.846298][ T5656] XFS (loop1): Mounting V5 Filesystem [ 193.985112][ T5656] XFS (loop1): Ending clean mount [ 194.075011][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.106722][ T3551] XFS (loop1): Unmounting Filesystem [ 194.133534][ T5691] loop0: detected capacity change from 0 to 1024 [ 194.196599][ T3594] usb 4-1: USB disconnect, device number 15 [ 194.214274][ T5691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.339871][ T5691] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 194.383118][ T3768] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 194.393611][ T5691] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 194.433173][ T5691] EXT4-fs (loop0): This should not happen!! Data will be lost [ 194.433173][ T5691] [ 194.442839][ T5691] EXT4-fs (loop0): Total free blocks count 0 [ 194.503262][ T5691] EXT4-fs (loop0): Free/Dirty block details [ 194.509197][ T5691] EXT4-fs (loop0): free_blocks=68451041280 [ 194.563146][ T5691] EXT4-fs (loop0): dirty_blocks=32 [ 194.583923][ T5691] EXT4-fs (loop0): Block reservation details [ 194.610261][ T5691] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 194.671197][ T3862] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 194.793492][ T3768] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.844337][ T5702] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 194.850492][ T5704] loop0: detected capacity change from 0 to 1024 [ 194.952414][ T5704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.033471][ T3768] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 195.049253][ T3768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.109386][ T3768] usb 5-1: Product: syz [ 195.117553][ T3768] usb 5-1: Manufacturer: syz [ 195.122316][ T3768] usb 5-1: SerialNumber: syz [ 195.250857][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 196.217235][ T3567] Bluetooth: hci5: command 0x0406 tx timeout [ 196.506569][ T4810] usb 5-1: USB disconnect, device number 11 [ 196.678029][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 198.091329][ T3566] Bluetooth: hci1: unexpected event for opcode 0x080c [ 198.242975][ T3594] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.272583][ T5736] loop4: detected capacity change from 0 to 4096 [ 198.323207][ T26] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 198.362813][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.392820][ T26] usb 2-1: config 0 descriptor?? [ 198.401348][ T4091] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.493236][ T3594] usb 4-1: Using ep0 maxpacket: 8 [ 198.613319][ T3594] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 198.626427][ T3594] usb 4-1: config 0 has no interface number 0 [ 198.703115][ T4810] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 198.707836][ T5728] loop2: detected capacity change from 0 to 32768 [ 198.803300][ T3594] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 198.816480][ T3594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.828606][ T3594] usb 4-1: Product: syz [ 198.833313][ T3594] usb 4-1: Manufacturer: syz [ 198.838062][ T3594] usb 4-1: SerialNumber: syz [ 198.841055][ T5728] XFS (loop2): Mounting V5 Filesystem [ 198.855674][ T3594] usb 4-1: config 0 descriptor?? [ 198.960190][ T5728] XFS (loop2): Ending clean mount [ 199.012703][ T3845] XFS (loop2): Unmounting Filesystem [ 199.073087][ T4810] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.103173][ T4810] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.137435][ T4810] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.233948][ T4810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.283510][ T5736] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 199.333570][ T26] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 199.349013][ T26] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 199.372075][ T26] asix: probe of 2-1:0.0 failed with error -71 [ 199.404138][ T26] usb 2-1: USB disconnect, device number 12 [ 199.447036][ T5748] netlink: 'syz.2.603': attribute type 10 has an invalid length. [ 199.878640][ T5755] loop0: detected capacity change from 0 to 1024 [ 199.946071][ T5755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.150035][ T3597] usb 4-1: USB disconnect, device number 16 [ 200.281597][ T3564] EXT4-fs (loop0): unmounting filesystem. [ 201.332391][ T3594] usb 5-1: USB disconnect, device number 12 [ 201.334898][ T5777] kvm: emulating exchange as write [ 201.363084][ T4810] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 201.510758][ T5780] loop4: detected capacity change from 0 to 736 [ 201.657278][ T5780] rock: directory entry would overflow storage [ 201.674375][ T5780] rock: sig=0x3b10, size=4, remaining=3 [ 201.733354][ T4810] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 201.918666][ T4810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 201.934970][ T5786] netlink: 'syz.4.615': attribute type 10 has an invalid length. [ 201.949189][ T4810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.978603][ T4810] usb 2-1: Product: syz [ 201.982803][ T4810] usb 2-1: Manufacturer: syz [ 201.995803][ T4810] usb 2-1: SerialNumber: syz [ 202.138891][ T5794] loop4: detected capacity change from 0 to 1024 [ 202.151257][ T5794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.153641][ T3566] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 202.169962][ T3566] Bluetooth: hci1: Injecting HCI hardware error event [ 202.178954][ T3567] Bluetooth: hci1: hardware error 0x00 [ 202.194577][ T27] audit: type=1326 audit(1720761356.505:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.320181][ T27] audit: type=1326 audit(1720761356.535:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.387342][ T3552] EXT4-fs (loop4): unmounting filesystem. [ 202.412215][ T27] audit: type=1326 audit(1720761356.535:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.458352][ T4810] usb 2-1: USB disconnect, device number 13 [ 202.484103][ T27] audit: type=1326 audit(1720761356.535:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.548203][ T27] audit: type=1326 audit(1720761356.535:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.600090][ T27] audit: type=1326 audit(1720761356.535:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.652131][ T27] audit: type=1326 audit(1720761356.535:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.679472][ T27] audit: type=1326 audit(1720761356.535:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.734006][ T27] audit: type=1326 audit(1720761356.535:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.759966][ T27] audit: type=1326 audit(1720761356.535:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675c575bd9 code=0x7ffc0000 [ 202.880454][ T5826] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 203.311666][ T5839] loop2: detected capacity change from 0 to 1024 [ 203.592719][ T5839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.685725][ T3845] EXT4-fs (loop2): unmounting filesystem. [ 203.764399][ T5855] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 204.064423][ T3768] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.145577][ T5871] loop0: detected capacity change from 0 to 512 [ 204.176391][ T5871] loop0: detected capacity change from 0 to 512 [ 204.317053][ T3567] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 204.467429][ T3768] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 204.499135][ T3768] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 204.713478][ T3768] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 204.731210][ T3768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.768396][ T5886] loop3: detected capacity change from 0 to 1024 [ 204.776219][ T3768] usb 3-1: Product: syz [ 204.789699][ T3768] usb 3-1: Manufacturer: syz [ 204.800655][ T3768] usb 3-1: SerialNumber: syz [ 204.845927][ T3768] usb 3-1: config 0 descriptor?? [ 204.853762][ T5886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.893276][ T5857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.900578][ T5857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.991356][ T3559] EXT4-fs (loop3): unmounting filesystem. [ 205.019478][ T5895] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 205.134984][ T5857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.154610][ T5857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.296639][ T5906] loop0: detected capacity change from 0 to 1024 [ 205.311519][ T5910] loop1: detected capacity change from 0 to 512 [ 205.367528][ T5906] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.381770][ T5912] loop4: detected capacity change from 0 to 512 [ 205.406654][ T5906] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 205.439664][ T5910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 205.450208][ T5906] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 205.463184][ T5910] ext4 filesystem being mounted at /133/bus supports timestamps until 2038 (0x7fffffff) [ 205.485333][ T5905] loop4: detected capacity change from 0 to 512 [ 205.524118][ T5906] EXT4-fs (loop0): This should not happen!! Data will be lost [ 205.524118][ T5906] [ 205.536579][ T5906] EXT4-fs (loop0): Total free blocks count 0 [ 205.542780][ T5906] EXT4-fs (loop0): Free/Dirty block details [ 205.548897][ T5906] EXT4-fs (loop0): free_blocks=68451041280 [ 205.556228][ T5906] EXT4-fs (loop0): dirty_blocks=32 [ 205.557364][ T3669] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.561466][ T5906] EXT4-fs (loop0): Block reservation details [ 205.577402][ T5906] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 205.604303][ T5910] EXT4-fs (loop1): resizing filesystem from 128 to 1 blocks [ 205.637716][ T5910] EXT4-fs warning (device loop1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 205.662634][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 205.738095][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 205.830020][ T5931] loop1: detected capacity change from 0 to 1024 [ 205.851621][ T5931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 205.864401][ T3768] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 205.883564][ T3768] usb 3-1: USB disconnect, device number 14 [ 205.946296][ T5934] netlink: 'syz.4.667': attribute type 10 has an invalid length. [ 206.040187][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 206.129572][ T3566] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.142118][ T3566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.150174][ T3566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.157994][ T3566] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.168028][ T3566] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 206.175415][ T3566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.638520][ T5957] loop1: detected capacity change from 0 to 1024 [ 206.798266][ T5957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 206.835603][ T5957] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 206.881061][ T5957] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 206.908921][ T5954] loop3: detected capacity change from 0 to 512 [ 207.075117][ T5957] EXT4-fs (loop1): This should not happen!! Data will be lost [ 207.075117][ T5957] [ 207.140357][ T5954] loop3: detected capacity change from 0 to 512 [ 207.200765][ T5957] EXT4-fs (loop1): Total free blocks count 0 [ 207.251413][ T5957] EXT4-fs (loop1): Free/Dirty block details [ 207.318440][ T3753] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.329837][ T5957] EXT4-fs (loop1): free_blocks=68451041280 [ 207.350293][ T5957] EXT4-fs (loop1): dirty_blocks=32 [ 207.369164][ T5957] EXT4-fs (loop1): Block reservation details [ 207.451825][ T5969] loop3: detected capacity change from 0 to 256 [ 207.513205][ T5957] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 207.520944][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 207.899401][ T3753] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.036176][ T4478] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 208.198591][ T5974] loop1: detected capacity change from 0 to 1024 [ 208.224753][ T3753] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.243129][ T3567] Bluetooth: hci6: command tx timeout [ 208.270397][ T5974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.336051][ T5976] netlink: 'syz.4.679': attribute type 10 has an invalid length. [ 208.427219][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 208.447968][ T3753] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.694112][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.701292][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.720201][ T5938] device bridge_slave_0 entered promiscuous mode [ 208.740199][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.757233][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.772003][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 208.772017][ T27] audit: type=1326 audit(1720761363.085:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 208.777041][ T5938] device bridge_slave_1 entered promiscuous mode [ 208.802245][ T27] audit: type=1326 audit(1720761363.085:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 208.841523][ T27] audit: type=1326 audit(1720761363.085:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 208.864444][ T27] audit: type=1326 audit(1720761363.085:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 208.920846][ T5997] loop1: detected capacity change from 0 to 1024 [ 208.924104][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.940806][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.950407][ T27] audit: type=1326 audit(1720761363.085:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 208.993050][ T3597] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 209.005681][ T27] audit: type=1326 audit(1720761363.085:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 209.096568][ T5997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.119634][ T5938] team0: Port device team_slave_0 added [ 209.142530][ T27] audit: type=1326 audit(1720761363.085:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 209.144642][ T5997] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 209.191065][ T5997] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 209.218468][ T27] audit: type=1326 audit(1720761363.085:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 209.241514][ T5997] EXT4-fs (loop1): This should not happen!! Data will be lost [ 209.241514][ T5997] [ 209.257921][ T5997] EXT4-fs (loop1): Total free blocks count 0 [ 209.265531][ T5997] EXT4-fs (loop1): Free/Dirty block details [ 209.274484][ T5938] team0: Port device team_slave_1 added [ 209.280992][ T5997] EXT4-fs (loop1): free_blocks=68451041280 [ 209.293658][ T27] audit: type=1326 audit(1720761363.085:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 209.318277][ T27] audit: type=1326 audit(1720761363.085:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f20f75bd9 code=0x7ffc0000 [ 209.343428][ T5997] EXT4-fs (loop1): dirty_blocks=32 [ 209.348912][ T5997] EXT4-fs (loop1): Block reservation details [ 209.355225][ T5997] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 209.382124][ T4478] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 209.409014][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.416727][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.423345][ T3597] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 209.451233][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.469298][ T3597] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 209.476849][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.490577][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.663108][ T3597] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 209.703042][ T3597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.711077][ T3597] usb 4-1: Product: syz [ 209.750303][ T3597] usb 4-1: Manufacturer: syz [ 209.755275][ T3597] usb 4-1: SerialNumber: syz [ 209.769419][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.786758][ T3597] usb 4-1: config 0 descriptor?? [ 210.323848][ T3567] Bluetooth: hci6: command tx timeout [ 210.384393][ T5988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.433296][ T5988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.521960][ T6016] loop4: detected capacity change from 0 to 1024 [ 210.557703][ T6016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.610768][ T6023] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 210.659468][ T6027] loop1: detected capacity change from 0 to 256 [ 210.736784][ T5988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.744560][ T3552] EXT4-fs (loop4): unmounting filesystem. [ 210.746995][ T5938] device hsr_slave_0 entered promiscuous mode [ 210.784207][ T5988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.809332][ T5938] device hsr_slave_1 entered promiscuous mode [ 210.844935][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.852515][ T5938] Cannot create hsr debugfs directory [ 210.889122][ T6034] loop2: detected capacity change from 0 to 1024 [ 211.010164][ T6034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.075915][ T6034] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 211.188613][ T6034] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 211.288077][ T6034] EXT4-fs (loop2): This should not happen!! Data will be lost [ 211.288077][ T6034] [ 211.343076][ T6034] EXT4-fs (loop2): Total free blocks count 0 [ 211.349323][ T6034] EXT4-fs (loop2): Free/Dirty block details [ 211.370065][ T6034] EXT4-fs (loop2): free_blocks=68451041280 [ 211.377212][ T6034] EXT4-fs (loop2): dirty_blocks=32 [ 211.383310][ T6034] EXT4-fs (loop2): Block reservation details [ 211.390184][ T6034] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 211.466092][ T3862] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 211.513269][ T3597] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 211.558333][ T3597] usb 4-1: USB disconnect, device number 17 [ 212.181363][ T3753] device hsr_slave_0 left promiscuous mode [ 212.217960][ T3753] device hsr_slave_1 left promiscuous mode [ 212.303677][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.316128][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.343108][ T3753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.368433][ T3753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.393169][ T3563] Bluetooth: hci6: command tx timeout [ 212.423988][ T3753] device bridge_slave_1 left promiscuous mode [ 212.444625][ T3753] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.229531][ T120] block nbd2: Possible stuck request ffff88801f778000: control (read@0,4096B). Runtime 150 seconds [ 213.388288][ T3753] device bridge_slave_0 left promiscuous mode [ 213.430156][ T3753] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.555700][ T3753] device veth1_macvtap left promiscuous mode [ 213.584214][ T3753] device veth0_macvtap left promiscuous mode [ 213.590734][ T3753] device veth1_vlan left promiscuous mode [ 213.608489][ T3753] device veth0_vlan left promiscuous mode [ 213.913237][ T28] INFO: task syz.2.16:3675 blocked for more than 143 seconds. [ 213.920747][ T28] Not tainted 6.1.98-syzkaller #0 [ 213.943045][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.952314][ T28] task:syz.2.16 state:D stack:24544 pid:3675 ppid:3557 flags:0x00004006 [ 213.975054][ T28] Call Trace: [ 213.978652][ T28] [ 213.981686][ T28] __schedule+0x142d/0x4550 [ 213.992651][ T28] ? __sched_text_start+0x8/0x8 [ 213.999071][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 214.005091][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 214.010404][ T28] schedule+0xbf/0x180 [ 214.017552][ T28] schedule_preempt_disabled+0xf/0x20 [ 214.023555][ T28] __mutex_lock+0x6b9/0xd80 [ 214.028183][ T28] ? __mutex_lock+0x53c/0xd80 [ 214.033263][ T28] ? blkdev_put+0x100/0x750 [ 214.043199][ T28] ? mutex_lock_nested+0x10/0x10 [ 214.057300][ T28] ? __fsnotify_parent+0x50b/0x730 [ 214.062521][ T28] blkdev_put+0x100/0x750 [ 214.069236][ T28] blkdev_close+0x56/0x80 [ 214.077909][ T28] ? blkdev_open+0x2e0/0x2e0 [ 214.082588][ T28] __fput+0x3f6/0x8d0 [ 214.090138][ T28] task_work_run+0x246/0x300 [ 214.098785][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 214.104071][ T28] ? stack_trace_snprint+0xe0/0xe0 [ 214.109383][ T28] get_signal+0x15fc/0x17d0 [ 214.114052][ T28] ? kasan_save_stack+0x4d/0x60 [ 214.119014][ T28] ? kasan_save_stack+0x3b/0x60 [ 214.124332][ T28] ? __kasan_record_aux_stack+0xb0/0xc0 [ 214.130109][ T28] ? task_work_add+0x87/0x3a0 [ 214.135029][ T28] ? fput+0xe2/0x1b0 [ 214.139042][ T28] ? do_syscall_64+0x3b/0xb0 [ 214.149751][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.157669][ T28] ? ptrace_notify+0x370/0x370 [ 214.162458][ T28] arch_do_signal_or_restart+0xb0/0x1a10 [ 214.168357][ T28] ? get_sigframe_size+0x10/0x10 [ 214.173361][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 214.179378][ T28] ? blkdev_ioctl+0x3a9/0x760 [ 214.184206][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 214.189691][ T28] exit_to_user_mode_loop+0x6a/0x100 [ 214.196871][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 214.202429][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 214.208112][ T28] do_syscall_64+0x47/0xb0 [ 214.212540][ T28] ? clear_bhb_loop+0x45/0xa0 [ 214.217241][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.223292][ T28] RIP: 0033:0x7fbf4f975bd9 [ 214.227723][ T28] RSP: 002b:00007fbf506d4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.236693][ T28] RAX: 0000000000000000 RBX: 00007fbf4fb03f60 RCX: 00007fbf4f975bd9 [ 214.244817][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 214.252799][ T28] RBP: 00007fbf4f9e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 214.261333][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.269464][ T28] R13: 000000000000000b R14: 00007fbf4fb03f60 R15: 00007fff72c23de8 [ 214.277518][ T28] [ 214.280555][ T28] INFO: task syz.2.16:3677 blocked for more than 144 seconds. [ 214.290737][ T28] Not tainted 6.1.98-syzkaller #0 [ 214.296349][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.306506][ T28] task:syz.2.16 state:D stack:27560 pid:3677 ppid:3557 flags:0x00004004 [ 214.315991][ T28] Call Trace: [ 214.319342][ T28] [ 214.322299][ T28] __schedule+0x142d/0x4550 [ 214.327038][ T28] ? __sched_text_start+0x8/0x8 [ 214.331905][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 214.337417][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 214.342620][ T28] schedule+0xbf/0x180 [ 214.346801][ T28] schedule_preempt_disabled+0xf/0x20 [ 214.352179][ T28] __mutex_lock+0x6b9/0xd80 [ 214.356723][ T28] ? __mutex_lock+0x53c/0xd80 [ 214.361765][ T28] ? blkdev_get_by_dev+0x148/0xa10 [ 214.366990][ T28] ? mutex_lock_nested+0x10/0x10 [ 214.371932][ T28] ? _atomic_dec_and_lock+0x96/0x130 [ 214.377242][ T28] ? iput+0x401/0x980 [ 214.381228][ T28] ? ilookup+0x1c8/0x200 [ 214.385581][ T28] ? disk_block_events+0xa1/0x110 [ 214.390612][ T28] ? blkdev_get_by_dev+0xe7/0xa10 [ 214.395775][ T28] blkdev_get_by_dev+0x148/0xa10 [ 214.400735][ T28] blkdev_open+0x12e/0x2e0 [ 214.405325][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 214.409996][ T28] do_dentry_open+0x7f9/0x10f0 [ 214.416216][ T28] path_openat+0x2644/0x2e60 [ 214.420822][ T28] ? mark_lock+0x9a/0x340 [ 214.425306][ T28] ? do_filp_open+0x480/0x480 [ 214.430090][ T28] do_filp_open+0x230/0x480 [ 214.434747][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 214.439354][ T28] ? _raw_spin_unlock+0x24/0x40 [ 214.444367][ T28] ? alloc_fd+0x59c/0x640 [ 214.448703][ T28] do_sys_openat2+0x13b/0x4f0 [ 214.453434][ T28] ? do_sys_open+0x220/0x220 [ 214.458056][ T28] __x64_sys_openat+0x243/0x290 [ 214.466297][ T28] ? __ia32_sys_open+0x270/0x270 [ 214.471257][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 214.478058][ T3563] Bluetooth: hci6: command tx timeout [ 214.483705][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 214.488921][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 214.494942][ T28] do_syscall_64+0x3b/0xb0 [ 214.499365][ T28] ? clear_bhb_loop+0x45/0xa0 [ 214.506502][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.512556][ T28] RIP: 0033:0x7fbf4f974610 [ 214.517281][ T28] RSP: 002b:00007fbf506b2b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 214.539958][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbf4f974610 [ 214.548078][ T28] RDX: 0000000000000000 RSI: 00007fbf506b2c20 RDI: 00000000ffffff9c [ 214.556577][ T28] RBP: 00007fbf506b2c20 R08: 0000000000000000 R09: 002364626e2f7665 [ 214.565251][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 214.573679][ T28] R13: 000000000000006e R14: 00007fbf4fb04038 R15: 00007fff72c23de8 [ 214.581721][ T28] [ 214.587040][ T28] [ 214.587040][ T28] Showing all locks held in the system: [ 214.594894][ T28] 1 lock held by rcu_tasks_kthre/12: [ 214.600182][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 214.614636][ T28] 1 lock held by rcu_tasks_trace/13: [ 214.619934][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 214.631278][ T28] 1 lock held by khungtaskd/28: [ 214.638028][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 214.651513][ T28] 2 locks held by getty/3307: [ 214.656254][ T28] #0: ffff888028853098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 214.666751][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 214.677000][ T28] 3 locks held by kworker/0:3/3594: [ 214.682193][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 214.692650][ T28] #1: ffffc9000464fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 214.703241][ T28] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 214.712223][ T28] 2 locks held by kworker/1:6/3598: [ 214.717562][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 214.728068][ T28] #1: ffffc9000470fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 214.739573][ T28] 1 lock held by udevd/3663: [ 214.746154][ T28] #0: ffff88801f61c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 214.756253][ T28] 1 lock held by syz.2.16/3675: [ 214.761100][ T28] #0: ffff88801f61c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 214.771207][ T28] 1 lock held by syz.2.16/3677: [ 214.776134][ T28] #0: ffff88801f61c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 214.786294][ T28] 5 locks held by kworker/u4:9/3753: [ 214.791580][ T28] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 214.802467][ T28] #1: ffffc90004bf7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 214.812570][ T28] #2: ffffffff8e28d8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 214.821947][ T28] #3: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0x9d0 [ 214.832156][ T28] #4: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 214.843220][ T28] 3 locks held by kworker/1:8/3768: [ 214.848414][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 214.860272][ T28] #1: ffffc90004e57d20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 214.871471][ T28] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 214.882085][ T28] 7 locks held by syz-executor/5938: [ 214.887402][ T28] #0: ffff88807e3f0460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 214.896399][ T28] #1: ffff88805bf50488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 214.906213][ T28] #2: ffff888144f70a00 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 214.916978][ T28] #3: ffffffff8dc0cf88 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 214.927413][ T28] #4: ffff88805b4e20e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 214.936727][ T28] #5: ffff88806167a2f8 (&devlink->lock_key#6){+.+.}-{3:3}, at: nsim_drv_probe+0xc9/0xb20 [ 214.946723][ T28] #6: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 214.958159][ T28] 1 lock held by syz.1.704/6073: [ 214.963296][ T28] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 214.973211][ T28] 1 lock held by syz.1.704/6076: [ 214.978155][ T28] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15b/0x10c0 [ 215.001744][ T28] [ 215.004118][ T28] ============================================= [ 215.004118][ T28] [ 215.012543][ T28] NMI backtrace for cpu 1 [ 215.016886][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 215.024695][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 215.034755][ T28] Call Trace: [ 215.038044][ T28] [ 215.040958][ T28] dump_stack_lvl+0x1e3/0x2cb [ 215.045648][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 215.051119][ T28] ? panic+0x764/0x764 [ 215.055175][ T28] ? vprintk_emit+0x622/0x740 [ 215.059854][ T28] ? printk_sprint+0x490/0x490 [ 215.064606][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 215.069717][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 215.074655][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 215.080800][ T28] ? _printk+0xd1/0x111 [ 215.084944][ T28] ? panic+0x764/0x764 [ 215.089002][ T28] ? __wake_up_klogd+0xcc/0x100 [ 215.093843][ T28] ? panic+0x764/0x764 [ 215.097896][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 215.103954][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 215.110014][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 215.115989][ T28] watchdog+0xf88/0xfd0 [ 215.120142][ T28] ? watchdog+0x1f8/0xfd0 [ 215.124464][ T28] kthread+0x28d/0x320 [ 215.128520][ T28] ? hungtask_pm_notify+0x50/0x50 [ 215.133533][ T28] ? kthread_blkcg+0xd0/0xd0 [ 215.138108][ T28] ret_from_fork+0x1f/0x30 [ 215.142526][ T28] [ 215.146458][ T28] Sending NMI from CPU 1 to CPUs 0: [ 215.151693][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 215.161517][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 215.161529][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 215.161546][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 215.161555][ T28] Call Trace: [ 215.189462][ T28] [ 215.192379][ T28] dump_stack_lvl+0x1e3/0x2cb [ 215.197051][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 215.202497][ T28] ? panic+0x764/0x764 [ 215.206554][ T28] ? vscnprintf+0x59/0x80 [ 215.210872][ T28] panic+0x318/0x764 [ 215.214756][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 215.220899][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 215.226262][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 215.232401][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 215.238543][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 215.244690][ T28] watchdog+0xfc7/0xfd0 [ 215.248843][ T28] ? watchdog+0x1f8/0xfd0 [ 215.253160][ T28] kthread+0x28d/0x320 [ 215.257213][ T28] ? hungtask_pm_notify+0x50/0x50 [ 215.262222][ T28] ? kthread_blkcg+0xd0/0xd0 [ 215.266796][ T28] ret_from_fork+0x1f/0x30 [ 215.271208][ T28] [ 215.274319][ T28] Kernel Offset: disabled [ 215.278629][ T28] Rebooting in 86400 seconds..