last executing test programs: 32.227433628s ago: executing program 2 (id=521): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 30.652361547s ago: executing program 2 (id=526): unshare(0xc040480) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x38, &(0x7f0000000400)=""/56, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000540), 0x10, 0x0, r0, 0x5, 0x0, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}]}, 0x90) 28.589474685s ago: executing program 2 (id=530): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000009c0)={0x0, 0x0}) capget(&(0x7f0000000a40)={0x19980330, r6}, &(0x7f0000000a80)={0x101, 0x80000000, 0x80000001, 0x7, 0x4, 0x8}) poll(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r4, r0, &(0x7f0000002080)=0x58, 0x23b) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00040008000300", @ANYRES32=r12, @ANYBLOB="2f00330040000000080211000000080211000001"], 0x4c}}, 0x46) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 21.284985222s ago: executing program 0 (id=542): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x20002e) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x0, 0x2002) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000380)={{0x4, 0x4}, 'port1\x00', 0x50, 0x1100c, 0x0, 0x0, 0xcf4, 0x1, 0x0, 0x0, 0x0, 0x6}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_val={0x18, 0x2}, @alu={0x7, 0x0, 0x8, 0xf, 0x6, 0x6, 0x4}, @map_fd={0x18, 0xa}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ldst={0x0, 0x1, 0x6, 0x8, 0x0, 0x18, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000840)=""/196, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5671}, 0x62) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x10001, 0x7ff, 0x4, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xf7}, 0x48) 19.890584296s ago: executing program 0 (id=543): socket$packet(0x11, 0x3, 0x300) unshare(0x2a020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081074e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xfffffd21, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 19.71936222s ago: executing program 0 (id=545): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000880)={0x8, 0x0, &(0x7f00000004c0)=[@decrefs], 0x0, 0xfeffff, 0x0}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(&(0x7f0000000040)='./file0\x00', 0x81000, 0x80) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 19.493517498s ago: executing program 2 (id=546): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000300), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24}, 0x24}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) 18.697700583s ago: executing program 0 (id=548): fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r3, &(0x7f0000000000)={0x10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000780)=[0x0]) 16.699198456s ago: executing program 0 (id=551): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$xfs(&(0x7f00000005c0), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c10, &(0x7f0000000040)={[{@uquota}, {@dax}, {@filestreams}, {}]}, 0x6, 0x9684, &(0x7f0000009700)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x18, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) rmdir(&(0x7f0000000040)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) dup(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xd, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x0) 16.624126953s ago: executing program 2 (id=552): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffff1) open(0x0, 0x8060, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @thr={&(0x7f0000000300)="e9a8c6c37229fef72eb30bd66ecd37de639ff4faae8d1b2e7ba6ab9e978fe0143c758dfa", &(0x7f0000002500)}}, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="d20a9acfd55a6f12c93cc6fbffd4c9bc8e8bfba27311b8078a963c039529318a8e36c0142c3b783cbc774769fa80c8b8e163d72409275c287e74de93197d1630a48c5fb0feaa5fedbc866a63284bd80d8cd9a1e18c0c95767aa4706cf8894359d7d09d8ea24c60c718b94fedaf"], 0x38}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x2000) 15.198918899s ago: executing program 2 (id=556): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000009c0)={0x0, 0x0}) capget(&(0x7f0000000a40)={0x19980330, r6}, &(0x7f0000000a80)={0x101, 0x80000000, 0x80000001, 0x7, 0x4, 0x8}) poll(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r4, r0, &(0x7f0000002080)=0x58, 0x23b) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00040008000300", @ANYRES32=r12, @ANYBLOB="2f00330040000000080211000000080211000001"], 0x4c}}, 0x46) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14.700430249s ago: executing program 0 (id=557): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8.222701399s ago: executing program 3 (id=570): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000001000000100002800c000180080001001400000018000180140002007866726d30000000000000000000e500"], 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x4000}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0xec4, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) r11 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3a80, 0x2) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r12, 0xc0182101, &(0x7f0000000180)={r13, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r12, 0x40182103, &(0x7f0000000080)={r14, 0x0, r11, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000000240)={r14, 0x7, r0, 0x1, 0x80000}) 7.051014034s ago: executing program 3 (id=573): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r2, 0x9) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r8) 7.018532617s ago: executing program 1 (id=574): fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r3, &(0x7f0000000000)={0x10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000780)=[0x0]) 5.230295213s ago: executing program 1 (id=576): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) r2 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x1) fallocate(r2, 0x5, 0xffffffffffff8000, 0x400000) fcntl$addseals(r2, 0x409, 0x3) ftruncate(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0xfde4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000071100a00000000000f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.033956259s ago: executing program 3 (id=578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.02754143s ago: executing program 4 (id=579): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x3, "966012d5"}, 0x7ff, 0x4, {}, 0x5}) 4.843921805s ago: executing program 4 (id=580): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x0) 4.621540333s ago: executing program 4 (id=582): syz_usb_connect(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c46f3d08a905302612550000000109026000010000000009040000000e"], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$BLKROSET(0xffffffffffffffff, 0x40101287, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x70, 0x0, &(0x7f0000000580)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) sched_setscheduler(0x0, 0x0, 0x0) 3.513672503s ago: executing program 1 (id=583): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x0, 0x8000, 0x2202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000540)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@nombcache}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x53d, &(0x7f0000001100)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000005c0)={0x1, {{0x2, 0x810, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x3e}}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000003000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00"/395], 0x210) syz_open_procfs(0x0, &(0x7f0000000c80)='net/ptype\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x3, &(0x7f0000000240)=[{0x5, 0x2, 0x0, 0x401}, {0x7fff, 0x9, 0x80, 0x6}, {0x4, 0x2f, 0x40, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) pipe2(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000001080), &(0x7f00000010c0)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000500)={r2, 0x0, 0x1}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = memfd_create(0x0, 0x0) finit_module(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r5, 0x3, r1, 0x5}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000040)) 2.771346634s ago: executing program 3 (id=584): ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 2.669042792s ago: executing program 1 (id=585): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2) 2.598460338s ago: executing program 1 (id=586): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x0, 0x0, 0x2, "89a1"}, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x8, 0x9, {{0x1c, 0x4, 0x3, 0x31, 0x70, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ssrr={0x89, 0x17, 0xd9, [@empty, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xe0, 0x0, 0xa, [0x7, 0x0, 0x6]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x45, 0x1, 0xc, [{@multicast2, 0x9}, {@remote}, {@multicast1, 0x1}, {@private=0xa010101, 0x3a658207}]}, @lsrr={0x83, 0x7, 0xa7, [@loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', r2, 0x8048, 0x7, 0x4, 0x6, {{0x37, 0x4, 0x3, 0x7, 0xdc, 0x68, 0x0, 0x0, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x0, [{@loopback, 0x4}, {@private=0xa010100, 0x6}]}, @cipso={0x86, 0x31, 0x3, [{0x5, 0xd, "f0df9420e78e7284c590a5"}, {0x0, 0xf, "3effedf876d2f0665e8e203c90"}, {0x6, 0xf, "28e873b9d9c269457b771170ad"}]}, @timestamp={0x44, 0x28, 0x70, 0x0, 0xd, [0x1, 0x636, 0xffffffe9, 0xfeae, 0x10, 0xb56, 0xffffff80, 0x31a, 0xfffffff9]}, @timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x1, [{@broadcast, 0xc}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x2}, {@loopback, 0x9}]}, @rr={0x7, 0x1f, 0x24, [@loopback, @broadcast, @rand_addr=0x64010102, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x2, [{@loopback, 0xbd}, {@local, 0x7}]}, @generic={0x94, 0xa, "50b1aad0ae65dcb5"}]}}}}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="40eb0f000000338d62e19ae4d189f3060000006f"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.742742828s ago: executing program 3 (id=587): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000009c0)={0x0, 0x0}) capget(&(0x7f0000000a40)={0x19980330, r6}, &(0x7f0000000a80)={0x101, 0x80000000, 0x80000001, 0x7, 0x4, 0x8}) poll(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r4, r0, &(0x7f0000002080)=0x58, 0x23b) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00040008000300", @ANYRES32=r12, @ANYBLOB="2f00330040000000080211000000080211000001"], 0x4c}}, 0x46) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.538290105s ago: executing program 4 (id=588): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 1.446936862s ago: executing program 4 (id=589): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000002000)=@framed, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r2, 0x0, 0x100000000000000}, 0x38) 1.35309181s ago: executing program 4 (id=590): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.044238925s ago: executing program 3 (id=591): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) r2 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x1) fallocate(r2, 0x5, 0xffffffffffff8000, 0x400000) fcntl$addseals(r2, 0x409, 0x3) ftruncate(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0xfde4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 1 (id=592): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r2, 0x9) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r8) kernel console output (not intermixed with test programs): ) [ 88.325420][ T4031] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 91.401177][ T4103] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 91.510773][ T26] audit: type=1326 audit(1722895746.533:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4090 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 92.644745][ T26] audit: type=1804 audit(1722895747.673:5): pid=4114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.99" name="/newroot/21/file0" dev="fuse" ino=1 res=1 errno=0 [ 94.885671][ T4155] loop4: detected capacity change from 0 to 512 [ 94.892139][ T3695] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.927280][ T4155] EXT4-fs (loop4): first meta block group too large: 4278190080 (group descriptor block count 1) [ 95.050268][ T26] audit: type=1326 audit(1722895750.073:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4152 comm="syz.4.107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde037779f9 code=0x0 [ 95.991029][ T3695] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 96.002266][ T3695] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 96.014022][ T3695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.051124][ T3695] usb 2-1: config 0 descriptor?? [ 96.418672][ T4022] syz.2.74 (4022): drop_caches: 1 [ 96.459061][ T26] audit: type=1804 audit(1722895751.483:7): pid=4175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.111" name="/newroot/20/file0" dev="fuse" ino=1 res=1 errno=0 [ 96.924063][ T26] audit: type=1326 audit(1722895751.953:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x7fc00000 [ 97.090594][ T3695] ath6kl: Failed to submit usb control message: -71 [ 97.097546][ T3695] ath6kl: unable to send the bmi data to the device: -71 [ 97.149371][ T26] audit: type=1326 audit(1722895751.953:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32c5b779f9 code=0x7fc00000 [ 97.159931][ T3695] ath6kl: Unable to send get target info: -71 [ 97.176526][ T26] audit: type=1326 audit(1722895751.953:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x7fc00000 [ 97.178809][ T3649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.206955][ T26] audit: type=1326 audit(1722895751.953:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x7fc00000 [ 97.243160][ T3649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.251243][ T3649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.265467][ T3649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.273547][ T3649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.277797][ T26] audit: type=1326 audit(1722895751.953:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x7fc00000 [ 97.281284][ T3695] ath6kl: Failed to init ath6kl core: -71 [ 97.315766][ T3649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.421163][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.436034][ T3654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.445913][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.458172][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.476307][ T26] audit: type=1326 audit(1722895751.953:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x7fc00000 [ 97.499171][ T26] audit: type=1326 audit(1722895751.953:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x7fc00000 [ 97.743641][ T26] audit: type=1326 audit(1722895751.953:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4172 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x7fc00000 [ 99.131964][ T3654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.146687][ T3695] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 99.155114][ T3654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.286661][ T3695] usb 2-1: USB disconnect, device number 3 [ 99.637938][ T4231] loop4: detected capacity change from 0 to 512 [ 99.662524][ T4231] EXT4-fs (loop4): first meta block group too large: 4278190080 (group descriptor block count 1) [ 99.724709][ T102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.636506][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 100.636519][ T26] audit: type=1326 audit(1722895755.663:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4228 comm="syz.4.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde037779f9 code=0x0 [ 100.846201][ T102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.995413][ T102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.009976][ T26] audit: type=1804 audit(1722895756.033:75): pid=4258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.124" name="/newroot/24/file0" dev="fuse" ino=1 res=1 errno=0 [ 101.078057][ T102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.113336][ T4257] netlink: 44 bytes leftover after parsing attributes in process `syz.0.126'. [ 101.124276][ T4257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.126'. [ 101.137409][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 101.863900][ T26] audit: type=1326 audit(1722895756.893:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4246 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 101.886424][ T26] audit: type=1326 audit(1722895756.893:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4246 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 101.926975][ T26] audit: type=1326 audit(1722895756.893:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4246 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 101.949661][ T26] audit: type=1326 audit(1722895756.893:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4246 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 102.052637][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.163392][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.174887][ T26] audit: type=1326 audit(1722895756.893:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4246 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 102.181818][ T4197] device bridge_slave_0 entered promiscuous mode [ 102.247459][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.957760][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.969875][ T4197] device bridge_slave_1 entered promiscuous mode [ 103.987322][ T26] audit: type=1326 audit(1722895756.893:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4246 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 104.030526][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.185258][ T26] audit: type=1326 audit(1722895756.893:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4246 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 104.214440][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.293583][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.313276][ T26] audit: type=1326 audit(1722895756.893:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4246 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 104.366632][ T4282] syz.4.130 (4282): drop_caches: 2 [ 104.425422][ T4197] team0: Port device team_slave_0 added [ 104.470666][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 104.488975][ T4197] team0: Port device team_slave_1 added [ 104.506026][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 104.537167][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.564979][ T7] usb 1-1: config 0 descriptor?? [ 104.818850][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.587796][ T4312] loop1: detected capacity change from 0 to 512 [ 105.594803][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.653019][ T4312] EXT4-fs (loop1): first meta block group too large: 4278190080 (group descriptor block count 1) [ 105.666543][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.691743][ T7] ath6kl: Failed to submit usb control message: -110 [ 105.700540][ T7] ath6kl: unable to send the bmi data to the device: -110 [ 105.707692][ T7] ath6kl: Unable to send get target info: -110 [ 105.800828][ T7] ath6kl: Failed to init ath6kl core: -110 [ 105.830605][ T7] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 106.555153][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.584664][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.646138][ T7] usb 1-1: USB disconnect, device number 3 [ 106.646792][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.668271][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 106.668285][ T26] audit: type=1326 audit(1722895761.693:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.1.137" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x0 [ 106.879660][ T4197] device hsr_slave_0 entered promiscuous mode [ 106.895618][ T4197] device hsr_slave_1 entered promiscuous mode [ 106.910127][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.919538][ T4197] Cannot create hsr debugfs directory [ 106.965918][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 107.271636][ C1] sd 0:0:1:0: [sda] tag#1860 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 107.282138][ C1] sd 0:0:1:0: [sda] tag#1860 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 107.813106][ T4353] loop4: detected capacity change from 0 to 512 [ 107.989006][ T4353] EXT4-fs (loop4): first meta block group too large: 4278190080 (group descriptor block count 1) [ 108.036834][ T4354] syz.0.143 (4354): drop_caches: 1 [ 108.151849][ T26] audit: type=1326 audit(1722895763.183:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4352 comm="syz.4.144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde037779f9 code=0x0 [ 108.349369][ T4354] syz.0.143 (4354): drop_caches: 1 [ 108.501281][ T102] device hsr_slave_0 left promiscuous mode [ 108.507980][ T102] device hsr_slave_1 left promiscuous mode [ 108.523603][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.542576][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.544272][ T4364] syz.3.145 (4364): drop_caches: 1 [ 110.151060][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.191441][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.216677][ T102] device bridge_slave_1 left promiscuous mode [ 110.229512][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.258301][ T4386] loop4: detected capacity change from 0 to 512 [ 110.287140][ T102] device bridge_slave_0 left promiscuous mode [ 110.287741][ T4386] EXT4-fs (loop4): first meta block group too large: 4278190080 (group descriptor block count 1) [ 110.311970][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.464846][ T102] device veth1_macvtap left promiscuous mode [ 110.476938][ T102] device veth0_macvtap left promiscuous mode [ 110.490843][ T102] device veth1_vlan left promiscuous mode [ 110.496973][ T102] device veth0_vlan left promiscuous mode [ 110.503161][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.527809][ T26] audit: type=1326 audit(1722895765.553:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.4.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde037779f9 code=0x0 [ 110.587868][ T4364] syz.3.145 (4364): drop_caches: 1 [ 110.900820][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 110.924279][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 110.936024][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.973132][ T7] usb 1-1: config 0 descriptor?? [ 111.215724][ C1] sd 0:0:1:0: [sda] tag#1917 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 111.226203][ C1] sd 0:0:1:0: [sda] tag#1917 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 111.731503][ T7] ath6kl: Failed to submit usb control message: -71 [ 111.738172][ T7] ath6kl: unable to send the bmi data to the device: -71 [ 111.761387][ T7] ath6kl: Unable to send get target info: -71 [ 111.768921][ T7] ath6kl: Failed to init ath6kl core: -71 [ 111.788209][ T7] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 111.807602][ T7] usb 1-1: USB disconnect, device number 4 [ 111.846032][ T4428] syz.1.157 (4428): drop_caches: 2 [ 111.882806][ T4428] syz.1.157 (4428): drop_caches: 2 [ 111.906262][ T102] team0 (unregistering): Port device team_slave_1 removed [ 111.947684][ T102] team0 (unregistering): Port device team_slave_0 removed [ 112.023573][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.052102][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.293146][ T102] bond0 (unregistering): Released all slaves [ 113.093609][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.326156][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.098996][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.193546][ C1] sd 0:0:1:0: [sda] tag#1874 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 114.204057][ C1] sd 0:0:1:0: [sda] tag#1874 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 114.240468][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.848841][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.919700][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.947543][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.012359][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.038912][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.052383][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.075558][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.082744][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.099175][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.108478][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.117853][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.129151][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.136274][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.164492][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 115.219763][ T4453] syz.3.164 (4453): drop_caches: 1 [ 115.309723][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.330033][ T4453] syz.3.164 (4453): drop_caches: 1 [ 115.394937][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.419315][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.489087][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.552962][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.568017][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.604351][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.644848][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.671334][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.801013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.821233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.833158][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.735327][ T4510] loop0: detected capacity change from 0 to 2048 [ 117.059852][ T4510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.153864][ T4525] fuse: Bad value for 'fd' [ 117.976916][ T4510] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.992049][ T4510] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 118.004456][ T4510] EXT4-fs (loop0): This should not happen!! Data will be lost [ 118.004456][ T4510] [ 118.014363][ T4510] EXT4-fs (loop0): Total free blocks count 0 [ 118.020431][ T4510] EXT4-fs (loop0): Free/Dirty block details [ 118.026394][ T4510] EXT4-fs (loop0): free_blocks=2415919104 [ 118.032204][ T4510] EXT4-fs (loop0): dirty_blocks=16 [ 118.037331][ T4510] EXT4-fs (loop0): Block reservation details [ 118.043518][ T4510] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 118.053261][ T4527] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 118.236779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.255080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.289079][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.402409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.455663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.509644][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.538653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.581944][ T4197] device veth0_vlan entered promiscuous mode [ 118.617605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.631950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.672830][ T4197] device veth1_vlan entered promiscuous mode [ 118.812227][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.833783][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.983841][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.002873][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.145583][ T4197] device veth0_macvtap entered promiscuous mode [ 119.250049][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.761862][ T4197] device veth1_macvtap entered promiscuous mode [ 119.832675][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.951599][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 120.009010][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.040037][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.096777][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.108884][ T4583] fuse: Bad value for 'fd' [ 120.762370][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.803627][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.844067][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.903831][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.018503][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.033225][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.066842][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.105737][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.140579][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.190529][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.224474][ T4593] fuse: Bad value for 'fd' [ 121.240569][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.315998][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.446083][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.461624][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.470201][ T4597] loop4: detected capacity change from 0 to 2048 [ 121.478729][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.491193][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.506959][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.520787][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.535385][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.544467][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.574039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.593968][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.641186][ T4597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.888996][ T4582] syz.0.186 (4582): drop_caches: 1 [ 121.980501][ T4616] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.996625][ T4616] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 122.008995][ T4616] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.008995][ T4616] [ 122.018724][ T4616] EXT4-fs (loop4): Total free blocks count 0 [ 122.024800][ T4616] EXT4-fs (loop4): Free/Dirty block details [ 122.030791][ T4616] EXT4-fs (loop4): free_blocks=2415919104 [ 122.036552][ T4616] EXT4-fs (loop4): dirty_blocks=16 [ 122.041780][ T4616] EXT4-fs (loop4): Block reservation details [ 122.047823][ T4616] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 122.075351][ T4616] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 122.333387][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.523899][ T3777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.575753][ T3777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.593538][ T2549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.619369][ T2549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.630671][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 122.643801][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.679649][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.750724][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.882190][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 122.972635][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.030477][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.195454][ T7] usb 4-1: config 0 descriptor?? [ 125.008165][ T7] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 126.198483][ T4582] syz.0.186 (4582): drop_caches: 1 [ 126.457302][ T3685] usb 4-1: USB disconnect, device number 3 [ 127.624004][ T4665] fuse: Bad value for 'fd' [ 127.648345][ T4666] loop1: detected capacity change from 0 to 512 [ 127.683710][ T4666] EXT4-fs (loop1): first meta block group too large: 4278190080 (group descriptor block count 1) [ 127.877869][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 128.370642][ T26] audit: type=1326 audit(1722895783.393:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.1.201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x0 [ 128.628972][ C1] eth0: bad gso: type: 1, size: 1408 [ 129.010566][ T3685] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.710036][ T4707] syz.1.208 (4707): drop_caches: 2 [ 129.723646][ T3685] usb 1-1: Using ep0 maxpacket: 16 [ 129.879684][ T4707] syz.1.208 (4707): drop_caches: 2 [ 130.530704][ T3685] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.550738][ T3685] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 130.631025][ T3685] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.862040][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.198987][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.545303][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.878243][ T3685] usb 1-1: config 0 descriptor?? [ 134.941380][ T3685] usb 1-1: can't set config #0, error -71 [ 134.978835][ T3685] usb 1-1: USB disconnect, device number 5 [ 134.991025][ T4729] fuse: Bad value for 'fd' [ 135.277360][ T4734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.215'. [ 135.310633][ T4734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.215'. [ 135.425773][ C1] eth0: bad gso: type: 1, size: 1408 [ 135.442307][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 135.525940][ T4751] loop0: detected capacity change from 0 to 512 [ 135.570814][ T4751] EXT4-fs (loop0): first meta block group too large: 4278190080 (group descriptor block count 1) [ 135.754548][ T26] audit: type=1326 audit(1722895790.763:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.0.219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x0 [ 136.452847][ T4764] loop3: detected capacity change from 0 to 2048 [ 136.543384][ T4764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.755033][ T4777] autofs4:pid:4777:autofs_fill_super: called with bogus options [ 137.670188][ T4786] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.687135][ T4786] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 137.699522][ T4786] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.699522][ T4786] [ 137.709443][ T4786] EXT4-fs (loop3): Total free blocks count 0 [ 137.715588][ T4786] EXT4-fs (loop3): Free/Dirty block details [ 137.721590][ T4786] EXT4-fs (loop3): free_blocks=2415919104 [ 137.727372][ T4786] EXT4-fs (loop3): dirty_blocks=16 [ 137.732578][ T4786] EXT4-fs (loop3): Block reservation details [ 137.738792][ T4786] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 137.843352][ T4789] syz.4.223 (4789): drop_caches: 2 [ 137.854401][ T26] audit: type=1800 audit(1722895792.883:148): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 137.912837][ T4789] syz.4.223 (4789): drop_caches: 2 [ 138.190736][ T3986] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.210283][ T102] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 138.480509][ T3986] usb 2-1: Using ep0 maxpacket: 16 [ 138.621946][ T3986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.728287][ T3986] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 138.966115][ T3986] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.016378][ T3986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.023306][ T4807] loop3: detected capacity change from 0 to 2048 [ 139.058721][ T4807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.101367][ T3986] usb 2-1: config 0 descriptor?? [ 139.109481][ T4808] netlink: 44 bytes leftover after parsing attributes in process `syz.4.230'. [ 139.130745][ T4808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.230'. [ 139.143803][ T3986] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 139.155719][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 139.820258][ T26] audit: type=1326 audit(1722895794.843:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 139.844536][ C1] eth0: bad gso: type: 1, size: 1408 [ 139.860916][ T26] audit: type=1326 audit(1722895794.843:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 139.884294][ T26] audit: type=1326 audit(1722895794.843:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 139.907365][ T26] audit: type=1326 audit(1722895794.843:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 139.939845][ T26] audit: type=1326 audit(1722895794.843:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 140.051111][ T4830] loop0: detected capacity change from 0 to 512 [ 140.058586][ T26] audit: type=1326 audit(1722895794.843:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 140.099386][ T4830] EXT4-fs (loop0): first meta block group too large: 4278190080 (group descriptor block count 1) [ 140.122789][ T26] audit: type=1326 audit(1722895794.843:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 140.403752][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 140.631574][ T26] audit: type=1326 audit(1722895794.843:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 140.830323][ T154] usb 2-1: USB disconnect, device number 4 [ 140.857593][ T26] audit: type=1326 audit(1722895794.843:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 140.951857][ T26] audit: type=1326 audit(1722895794.843:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 141.039331][ T26] audit: type=1326 audit(1722895794.843:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 141.076391][ T4843] autofs4:pid:4843:autofs_fill_super: called with bogus options [ 141.085327][ T26] audit: type=1326 audit(1722895794.843:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 141.164932][ T26] audit: type=1326 audit(1722895794.843:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 141.190079][ T26] audit: type=1326 audit(1722895794.843:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 141.212853][ T26] audit: type=1326 audit(1722895794.843:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 143.648315][ T26] audit: type=1326 audit(1722895794.843:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 144.176044][ T26] audit: type=1326 audit(1722895794.843:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 144.393996][ T26] audit: type=1326 audit(1722895794.843:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4809 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08595779f9 code=0x7fc00000 [ 144.493329][ T4850] loop4: detected capacity change from 0 to 2048 [ 144.612118][ T4859] syz.3.239 (4859): drop_caches: 2 [ 144.685260][ T4859] syz.3.239 (4859): drop_caches: 2 [ 144.721424][ T4850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.340189][ T4873] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.355524][ T4873] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 145.368002][ T4873] EXT4-fs (loop4): This should not happen!! Data will be lost [ 145.368002][ T4873] [ 145.377739][ T4873] EXT4-fs (loop4): Total free blocks count 0 [ 145.383810][ T4873] EXT4-fs (loop4): Free/Dirty block details [ 145.389812][ T4873] EXT4-fs (loop4): free_blocks=2415919104 [ 145.395630][ T4873] EXT4-fs (loop4): dirty_blocks=16 [ 145.400825][ T4873] EXT4-fs (loop4): Block reservation details [ 145.406877][ T4873] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 145.415762][ T4873] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 145.744112][ T4878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.244'. [ 145.757718][ T4877] loop1: detected capacity change from 0 to 2048 [ 145.771235][ T4878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.244'. [ 146.567724][ T4877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.823667][ C1] eth0: bad gso: type: 1, size: 1408 [ 146.956714][ T3639] EXT4-fs (loop1): unmounting filesystem. [ 147.019871][ T4902] loop0: detected capacity change from 0 to 16 [ 147.080077][ T4902] erofs: (device loop0): mounted with root inode @ nid 36. [ 147.409527][ T3680] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.597120][ T4913] syz.0.252: attempt to access beyond end of device [ 147.597120][ T4913] loop0: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 147.611843][ T4913] syz.0.252: attempt to access beyond end of device [ 147.611843][ T4913] loop0: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 147.673112][ T4912] loop1: detected capacity change from 0 to 16 [ 148.458587][ T4912] erofs: (device loop1): mounted with root inode @ nid 36. [ 148.867592][ T4919] loop4: detected capacity change from 0 to 2048 [ 148.902341][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 149.021186][ T3680] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 149.202638][ T4919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.214312][ T3680] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.511153][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.398257][ T3680] usb 4-1: config 0 descriptor?? [ 150.431534][ T3680] usb 4-1: can't set config #0, error -71 [ 150.459018][ T4932] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.474603][ T4932] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 150.487455][ T4932] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.487455][ T4932] [ 150.497208][ T4932] EXT4-fs (loop4): Total free blocks count 0 [ 150.503303][ T4932] EXT4-fs (loop4): Free/Dirty block details [ 150.509590][ T4932] EXT4-fs (loop4): free_blocks=2415919104 [ 150.516823][ T4932] EXT4-fs (loop4): dirty_blocks=16 [ 150.522381][ T4932] EXT4-fs (loop4): Block reservation details [ 150.528388][ T4932] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 150.536018][ T4937] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 151.168926][ T4936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.259'. [ 151.224043][ T4936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.259'. [ 151.233904][ T3680] usb 4-1: USB disconnect, device number 4 [ 152.021488][ C1] eth0: bad gso: type: 1, size: 1408 [ 152.080677][ T4852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.105726][ T4952] loop4: detected capacity change from 0 to 2048 [ 152.169481][ T4952] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.214596][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 152.340634][ T4852] usb 3-1: Using ep0 maxpacket: 8 [ 152.487959][ T4852] usb 3-1: config 0 has no interfaces? [ 152.494548][ T4852] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 152.559007][ T4852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.137676][ T4852] usb 3-1: config 0 descriptor?? [ 153.149468][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 153.149484][ T26] audit: type=1326 audit(1722895808.173:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.179404][ T26] audit: type=1326 audit(1722895808.173:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.202015][ T26] audit: type=1326 audit(1722895808.173:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.228087][ T26] audit: type=1326 audit(1722895808.173:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.252293][ T26] audit: type=1326 audit(1722895808.173:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.275402][ T26] audit: type=1326 audit(1722895808.173:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.309421][ T4978] loop4: detected capacity change from 0 to 2048 [ 153.359694][ T26] audit: type=1326 audit(1722895808.173:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.384774][ T26] audit: type=1326 audit(1722895808.173:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.414426][ T26] audit: type=1326 audit(1722895808.173:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.458068][ T26] audit: type=1326 audit(1722895808.173:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x7fc00000 [ 153.485611][ T22] usb 3-1: USB disconnect, device number 3 [ 153.550562][ T4978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.720350][ T4985] loop3: detected capacity change from 0 to 2048 [ 154.589016][ T4978] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 154.605145][ T4978] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 154.605203][ T4978] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.605203][ T4978] [ 154.605218][ T4978] EXT4-fs (loop4): Total free blocks count 0 [ 154.605231][ T4978] EXT4-fs (loop4): Free/Dirty block details [ 154.605245][ T4978] EXT4-fs (loop4): free_blocks=2415919104 [ 154.605260][ T4978] EXT4-fs (loop4): dirty_blocks=16 [ 154.605271][ T4978] EXT4-fs (loop4): Block reservation details [ 154.605283][ T4978] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 154.606772][ T4978] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 154.731400][ T4985] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.918838][ T5002] loop1: detected capacity change from 0 to 2048 [ 154.970195][ T5001] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 154.985569][ T5001] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 154.998490][ T5001] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.998490][ T5001] [ 155.008298][ T5001] EXT4-fs (loop3): Total free blocks count 0 [ 155.022465][ T5001] EXT4-fs (loop3): Free/Dirty block details [ 155.028469][ T5001] EXT4-fs (loop3): free_blocks=2415919104 [ 155.034369][ T5001] EXT4-fs (loop3): dirty_blocks=16 [ 155.039627][ T5001] EXT4-fs (loop3): Block reservation details [ 155.045806][ T5001] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 155.073882][ T5001] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 155.591428][ T5002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.652022][ T4994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.275'. [ 155.701978][ T4994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.275'. [ 155.769256][ T3639] EXT4-fs (loop1): unmounting filesystem. [ 155.902356][ C1] eth0: bad gso: type: 1, size: 1408 [ 156.246203][ T5031] syz.0.285[5031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.248455][ T5031] syz.0.285[5031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.941218][ T5047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.287'. [ 156.991416][ T3695] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.119892][ T3695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.334902][ T3695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.710617][ T3695] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 158.729425][ T3695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.747149][ T3695] usb 4-1: config 0 descriptor?? [ 159.519350][ T5060] loop2: detected capacity change from 0 to 2048 [ 159.635824][ T3695] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 159.644356][ T5060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.654432][ T3695] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 159.671759][ T3695] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 159.908291][ T3695] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 159.916966][ T3695] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 159.965362][ T5070] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 159.980625][ T5070] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 159.993114][ T5070] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.993114][ T5070] [ 160.003029][ T5070] EXT4-fs (loop2): Total free blocks count 0 [ 160.009124][ T5070] EXT4-fs (loop2): Free/Dirty block details [ 160.015196][ T5070] EXT4-fs (loop2): free_blocks=2415919104 [ 160.021088][ T5070] EXT4-fs (loop2): dirty_blocks=16 [ 160.026291][ T5070] EXT4-fs (loop2): Block reservation details [ 160.032579][ T5070] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 160.041192][ T5070] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 160.301432][ T3695] arvo: probe of 0003:1E7D:30D4.0001 failed with error -5 [ 160.326283][ T3695] usb 4-1: USB disconnect, device number 5 [ 160.636915][ T5077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.295'. [ 161.410555][ T5077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.295'. [ 161.560765][ C1] eth0: bad gso: type: 1, size: 1408 [ 161.786488][ T5104] syz.2.300 (5104): drop_caches: 2 [ 161.981892][ T3695] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.041659][ T4852] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.502912][ T3695] usb 5-1: Using ep0 maxpacket: 16 [ 163.051507][ T4852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.109806][ T4852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.208873][ T4852] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.257701][ T4852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.002539][ T3695] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 164.053868][ T3695] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.145569][ T3695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.263003][ T4852] usb 1-1: config 0 descriptor?? [ 166.268896][ T3695] usb 5-1: config 0 descriptor?? [ 166.310606][ T3695] usb 5-1: can't set config #0, error -71 [ 166.330656][ T4852] usb 1-1: can't set config #0, error -71 [ 166.369463][ T4852] usb 1-1: USB disconnect, device number 6 [ 166.377087][ T3695] usb 5-1: USB disconnect, device number 2 [ 167.283926][ T5115] loop4: detected capacity change from 0 to 2048 [ 167.490584][ T5126] devpts: called with bogus options [ 168.293763][ T5123] loop2: detected capacity change from 0 to 2048 [ 168.331157][ T5115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 168.370695][ T5123] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.383641][ T5078] syz.1.296 (5078): drop_caches: 2 [ 168.508575][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 168.607263][ T5123] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.622992][ T5123] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 168.635405][ T5123] EXT4-fs (loop2): This should not happen!! Data will be lost [ 168.635405][ T5123] [ 168.645103][ T5123] EXT4-fs (loop2): Total free blocks count 0 [ 168.651261][ T5123] EXT4-fs (loop2): Free/Dirty block details [ 168.657264][ T5123] EXT4-fs (loop2): free_blocks=2415919104 [ 168.663091][ T5123] EXT4-fs (loop2): dirty_blocks=16 [ 168.668231][ T5123] EXT4-fs (loop2): Block reservation details [ 168.674262][ T5123] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 168.681159][ T5140] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 168.987070][ T5146] netlink: 44 bytes leftover after parsing attributes in process `syz.3.310'. [ 169.258735][ T5146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.310'. [ 169.651779][ C1] eth0: bad gso: type: 1, size: 1408 [ 170.161507][ T151] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.571224][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 170.697247][ T5173] loop1: detected capacity change from 0 to 2048 [ 170.739335][ T5178] syz.4.316 (5178): drop_caches: 2 [ 170.757698][ T5177] loop2: detected capacity change from 0 to 1024 [ 170.770621][ T151] usb 4-1: Using ep0 maxpacket: 16 [ 170.777516][ T5178] syz.4.316 (5178): drop_caches: 2 [ 170.819938][ T5173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.839459][ T5177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.890880][ T151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.902312][ T151] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.915552][ T151] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.924848][ T151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.935526][ T151] usb 4-1: config 0 descriptor?? [ 171.063918][ T151] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 171.085524][ T3639] EXT4-fs (loop1): unmounting filesystem. [ 171.843338][ T4197] EXT4-fs (loop2): unmounting filesystem. [ 171.917991][ T4634] Bluetooth: hci5: Frame reassembly failed (-84) [ 171.938290][ T3649] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 173.134519][ T151] usb 4-1: USB disconnect, device number 6 [ 173.347250][ T5213] loop2: detected capacity change from 0 to 2048 [ 173.365794][ T5193] loop0: detected capacity change from 0 to 40427 [ 173.376888][ T5193] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 173.388635][ T5210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.325'. [ 173.399023][ T5210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'. [ 173.403002][ T5193] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.428692][ T5193] F2FS-fs (loop0): invalid crc value [ 173.436640][ T5193] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 173.443954][ T5193] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 173.460225][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 173.603090][ C1] eth0: bad gso: type: 1, size: 1408 [ 173.766037][ T5222] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.781172][ T5222] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 173.793892][ T5222] EXT4-fs (loop2): This should not happen!! Data will be lost [ 173.793892][ T5222] [ 173.803635][ T5222] EXT4-fs (loop2): Total free blocks count 0 [ 173.809646][ T5222] EXT4-fs (loop2): Free/Dirty block details [ 173.815730][ T5222] EXT4-fs (loop2): free_blocks=2415919104 [ 173.822015][ T5222] EXT4-fs (loop2): dirty_blocks=16 [ 173.827148][ T5222] EXT4-fs (loop2): Block reservation details [ 173.833304][ T5222] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 173.840050][ T5223] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 173.900552][ T5106] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.980591][ T3654] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 173.981246][ T3649] Bluetooth: hci5: command 0x1003 tx timeout [ 174.150557][ T5106] usb 2-1: Using ep0 maxpacket: 8 [ 174.257867][ T5226] loop4: detected capacity change from 0 to 2048 [ 174.290880][ T5106] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.305145][ T5226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.313854][ T5106] usb 2-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 174.332094][ T5106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.440362][ T5106] usb 2-1: config 0 descriptor?? [ 174.476522][ T5226] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.491488][ T5226] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 174.503920][ T5226] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.503920][ T5226] [ 174.513733][ T5226] EXT4-fs (loop4): Total free blocks count 0 [ 174.519716][ T5226] EXT4-fs (loop4): Free/Dirty block details [ 174.525716][ T5226] EXT4-fs (loop4): free_blocks=2415919104 [ 174.531523][ T5226] EXT4-fs (loop4): dirty_blocks=16 [ 174.536632][ T5226] EXT4-fs (loop4): Block reservation details [ 174.542646][ T5226] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 174.550222][ T5233] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 174.992293][ T5247] ubi0: attaching mtd0 [ 175.004085][ T5247] ubi0: scanning is finished [ 175.008848][ T5247] ubi0: empty MTD device detected [ 175.543933][ T5247] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 175.551512][ T5247] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 175.558744][ T5247] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 175.565765][ T5247] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 175.573218][ T5247] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 175.580012][ T5247] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 175.588123][ T5247] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2685161429 [ 175.598342][ T5247] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 175.618779][ T5254] syz.4.332 (5254): drop_caches: 2 [ 175.624007][ T5252] ubi0: background thread "ubi_bgt0d" started, PID 5252 [ 175.674884][ T5254] syz.4.332 (5254): drop_caches: 2 [ 175.685286][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 175.924354][ T5264] loop2: detected capacity change from 0 to 256 [ 175.935118][ T5264] FAT-fs (loop2): bogus sectors per cluster 0 [ 175.943857][ T5264] FAT-fs (loop2): Can't find a valid FAT filesystem [ 175.983508][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 175.990055][ T5264] fuse: Unknown parameter '0x0000000000000003' [ 175.991611][ T5136] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.002245][ T5264] loop2: detected capacity change from 0 to 256 [ 176.021695][ T5264] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.078837][ T5264] ======================================================= [ 176.078837][ T5264] WARNING: The mand mount option has been deprecated and [ 176.078837][ T5264] and is ignored by this kernel. Remove the mand [ 176.078837][ T5264] option from the mount to silence this warning. [ 176.078837][ T5264] ======================================================= [ 176.321900][ T5271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.338'. [ 176.369023][ T5271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'. [ 176.495188][ C1] eth0: bad gso: type: 1, size: 1408 [ 176.585665][ T5277] loop0: detected capacity change from 0 to 2048 [ 176.610774][ T5277] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.803806][ T5282] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.820561][ T5282] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 176.834801][ T5282] EXT4-fs (loop0): This should not happen!! Data will be lost [ 176.834801][ T5282] [ 176.844505][ T5282] EXT4-fs (loop0): Total free blocks count 0 [ 176.850562][ T5282] EXT4-fs (loop0): Free/Dirty block details [ 176.856489][ T5282] EXT4-fs (loop0): free_blocks=2415919104 [ 176.862281][ T5282] EXT4-fs (loop0): dirty_blocks=16 [ 176.867421][ T5282] EXT4-fs (loop0): Block reservation details [ 176.873464][ T5282] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 176.880246][ T5283] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 176.926662][ T3776] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.999850][ T22] usb 2-1: USB disconnect, device number 5 [ 177.133719][ T3776] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.190641][ T3776] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.255466][ T3776] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.366452][ T3649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.452369][ T3649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.460968][ T3649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.468915][ T3649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.478440][ T3649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.487569][ T3649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.216751][ T5307] dhcpcd-run-hook (5307) used greatest stack depth: 19616 bytes left [ 179.290591][ T3682] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.580643][ T3682] usb 5-1: Using ep0 maxpacket: 8 [ 179.631405][ T3654] Bluetooth: hci0: command tx timeout [ 179.669671][ T5327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.351'. [ 179.703588][ T5327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.351'. [ 179.840549][ T3682] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.859822][ T3682] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 179.870566][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.881476][ T3682] usb 5-1: config 0 descriptor?? [ 180.088681][ T5344] loop1: detected capacity change from 0 to 2048 [ 180.116412][ T5341] loop0: detected capacity change from 0 to 2048 [ 180.158525][ T5344] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.246802][ T5292] chnl_net:caif_netlink_parms(): no params data found [ 180.289838][ T5341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.392205][ T5355] ubi: mtd0 is already attached to ubi0 [ 180.466284][ T3639] EXT4-fs (loop1): unmounting filesystem. [ 180.976394][ T5360] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 180.991688][ T5360] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 181.004010][ T5360] EXT4-fs (loop0): This should not happen!! Data will be lost [ 181.004010][ T5360] [ 181.013797][ T5360] EXT4-fs (loop0): Total free blocks count 0 [ 181.020982][ T5360] EXT4-fs (loop0): Free/Dirty block details [ 181.026942][ T5360] EXT4-fs (loop0): free_blocks=2415919104 [ 181.032713][ T5360] EXT4-fs (loop0): dirty_blocks=16 [ 181.037880][ T5360] EXT4-fs (loop0): Block reservation details [ 181.044011][ T5360] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 181.051820][ T5361] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 181.236046][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.256671][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.280861][ T5292] device bridge_slave_0 entered promiscuous mode [ 181.342100][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.349315][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.375625][ T5292] device bridge_slave_1 entered promiscuous mode [ 181.532721][ T5292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.592782][ T5292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.660525][ T3654] Bluetooth: hci0: command tx timeout [ 181.726781][ T5388] loop3: detected capacity change from 0 to 2048 [ 181.781902][ T5388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.832504][ T5381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.367'. [ 181.851552][ T5381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.367'. [ 181.875078][ T5292] team0: Port device team_slave_0 added [ 181.896294][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 181.927487][ T5292] team0: Port device team_slave_1 added [ 182.010937][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 182.038495][ T5106] usb 5-1: USB disconnect, device number 3 [ 182.186634][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 182.261753][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 182.311508][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.349872][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.437034][ T5292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.518413][ T3776] device hsr_slave_0 left promiscuous mode [ 182.551596][ T3776] device hsr_slave_1 left promiscuous mode [ 182.568522][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.587988][ T3776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.627245][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.666099][ T3776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.686133][ T3776] device bridge_slave_1 left promiscuous mode [ 182.748342][ T3776] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.770607][ T3776] device bridge_slave_0 left promiscuous mode [ 182.777049][ T3776] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.832317][ T3776] device veth1_macvtap left promiscuous mode [ 182.889843][ T3776] device veth0_macvtap left promiscuous mode [ 182.896881][ T3776] device veth1_vlan left promiscuous mode [ 182.903758][ T3776] device veth0_vlan left promiscuous mode [ 183.190580][ T3986] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.282148][ T3776] team0 (unregistering): Port device team_slave_1 removed [ 183.312743][ T3776] team0 (unregistering): Port device team_slave_0 removed [ 183.338963][ T3776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.369621][ T3776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.430603][ T3986] usb 1-1: Using ep0 maxpacket: 8 [ 183.550559][ T3986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.566793][ T3986] usb 1-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 183.575983][ T3986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.585868][ T3986] usb 1-1: config 0 descriptor?? [ 183.664420][ T3776] bond0 (unregistering): Released all slaves [ 183.738635][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.750533][ T3652] Bluetooth: hci0: command tx timeout [ 183.760266][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.787912][ T5292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.876892][ T5431] device bond0 entered promiscuous mode [ 183.897177][ T5431] device bond_slave_0 entered promiscuous mode [ 183.918655][ T5431] device bond_slave_1 entered promiscuous mode [ 183.939781][ T5431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.975098][ T5431] device bond0 left promiscuous mode [ 184.003087][ T5431] device bond_slave_0 left promiscuous mode [ 184.009855][ T5431] device bond_slave_1 left promiscuous mode [ 184.107063][ T5449] ubi: mtd0 is already attached to ubi0 [ 184.607728][ T5451] syz.1.383 uses obsolete (PF_INET,SOCK_PACKET) [ 184.733973][ T5446] netlink: 44 bytes leftover after parsing attributes in process `syz.4.382'. [ 184.756330][ T5446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.382'. [ 184.789656][ T5292] device hsr_slave_0 entered promiscuous mode [ 184.801598][ T5292] device hsr_slave_1 entered promiscuous mode [ 184.822954][ T5292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.838396][ T5292] Cannot create hsr debugfs directory [ 185.122982][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 185.122997][ T26] audit: type=1326 audit(1722895840.143:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.4.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde037779f9 code=0x0 [ 185.820708][ T3652] Bluetooth: hci0: command tx timeout [ 185.956501][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 186.011390][ T3684] usb 1-1: USB disconnect, device number 7 [ 186.365356][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 186.441927][ T5495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.395'. [ 186.474453][ T5495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.395'. [ 186.560039][ C1] eth0: bad gso: type: 1, size: 1408 [ 186.561375][ T5292] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.637155][ T5292] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.697429][ T5292] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.736446][ T5292] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 187.037468][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.084236][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.090695][ T3682] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.094645][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.123135][ T5292] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.286748][ T26] audit: type=1326 audit(1722895842.213:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.0.401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32c5b779f9 code=0x0 [ 187.350601][ T3682] usb 4-1: Using ep0 maxpacket: 8 [ 187.848492][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.897707][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.930916][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.938000][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.960713][ T3682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.990717][ T3682] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 188.008554][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.019567][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.031117][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.035198][ T3682] usb 4-1: config 0 descriptor?? [ 188.039928][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.201656][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.208782][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.252812][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.271707][ T5518] syz.4.399 (5518): drop_caches: 1 [ 188.288856][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.338470][ T5537] loop0: detected capacity change from 0 to 1024 [ 188.350064][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.378172][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.407494][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.416128][ T5537] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 7696581394437)! [ 188.433394][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.500651][ T5537] EXT4-fs (loop0): group descriptors corrupted! [ 188.517887][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.579326][ T5541] ubi: mtd0 is already attached to ubi0 [ 188.614019][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.797412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.185377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.194305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.209855][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.284743][ T5544] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 189.447006][ T5518] syz.4.399 (5518): drop_caches: 1 [ 189.644181][ T5549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.406'. [ 189.678945][ T5549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'. [ 189.910622][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.917204][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.965744][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.975919][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 190.005832][ T5292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.058459][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.074020][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.109912][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.129751][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.141932][ T5292] device veth0_vlan entered promiscuous mode [ 190.152369][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.161081][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.180641][ T5292] device veth1_vlan entered promiscuous mode [ 190.224494][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.258313][ T3680] usb 4-1: USB disconnect, device number 7 [ 190.268730][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.292034][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.321885][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.333971][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.342407][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.355115][ T5292] device veth0_macvtap entered promiscuous mode [ 190.364929][ T5292] device veth1_macvtap entered promiscuous mode [ 190.446468][ T26] audit: type=1326 audit(1722895845.473:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.3.412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x0 [ 190.481171][ T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.551575][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.572909][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.695637][ T7] usb 2-1: SerialNumber: syz [ 190.742795][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.013106][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.052739][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.076201][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.089525][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.103324][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.125146][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.136766][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.147796][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.158531][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.172049][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.187482][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.204453][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.216821][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.243126][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.259487][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.286270][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.308036][ T7] usb 2-1: 0:2 : does not exist [ 191.328395][ T7] usb 2-1: USB disconnect, device number 6 [ 191.406068][ T5590] loop3: detected capacity change from 0 to 2048 [ 191.459042][ T26] audit: type=1804 audit(1722895846.483:233): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.413" name="/newroot/90/file0" dev="fuse" ino=1 res=1 errno=0 [ 191.517466][ T5590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.667270][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.683961][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.713669][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.733904][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.744498][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.753923][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.767176][ T5587] netlink: 72 bytes leftover after parsing attributes in process `syz.4.414'. [ 191.777200][ T5587] netlink: 72 bytes leftover after parsing attributes in process `syz.4.414'. [ 191.787836][ T5596] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.790038][ T5292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.803122][ T5596] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 191.824194][ T5596] EXT4-fs (loop3): This should not happen!! Data will be lost [ 191.824194][ T5596] [ 191.833907][ T5596] EXT4-fs (loop3): Total free blocks count 0 [ 191.840017][ T5596] EXT4-fs (loop3): Free/Dirty block details [ 191.846020][ T5596] EXT4-fs (loop3): free_blocks=2415919104 [ 191.851888][ T5596] EXT4-fs (loop3): dirty_blocks=16 [ 191.857029][ T5596] EXT4-fs (loop3): Block reservation details [ 191.863104][ T5596] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 191.869962][ T5598] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 191.922623][ T5292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.940988][ T5292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.955142][ T5292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.965882][ T5136] udevd[5136]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.010189][ T5603] loop1: detected capacity change from 0 to 1024 [ 192.052538][ T5603] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 7696581394437)! [ 192.103185][ T5603] EXT4-fs (loop1): group descriptors corrupted! [ 192.311877][ T4723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.342392][ T4723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.366183][ T3760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.379681][ T5611] netlink: 44 bytes leftover after parsing attributes in process `syz.1.418'. [ 192.388791][ T3760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.410524][ T5611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'. [ 192.469776][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.491320][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.557161][ C1] eth0: bad gso: type: 1, size: 1408 [ 192.949366][ T5638] hub 9-0:1.0: USB hub found [ 192.955636][ T5638] hub 9-0:1.0: 8 ports detected [ 193.784958][ T5644] loop3: detected capacity change from 0 to 512 [ 193.836935][ T5644] EXT4-fs (loop3): first meta block group too large: 4278190080 (group descriptor block count 1) [ 194.062348][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 194.559546][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.566127][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581209][ T5136] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.619593][ T26] audit: type=1326 audit(1722895849.643:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5641 comm="syz.3.425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x0 [ 194.871324][ T5656] loop2: detected capacity change from 0 to 1024 [ 194.914648][ T5656] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 7696581394437)! [ 194.932702][ T5656] EXT4-fs (loop2): group descriptors corrupted! [ 194.968842][ T5605] syz.4.417 (5605): drop_caches: 1 [ 195.133233][ T3684] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.323181][ T5672] loop2: detected capacity change from 0 to 2048 [ 195.403368][ T5677] netlink: 72 bytes leftover after parsing attributes in process `syz.4.431'. [ 195.407023][ T5672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.419878][ T5677] netlink: 72 bytes leftover after parsing attributes in process `syz.4.431'. [ 195.467508][ T5675] netlink: 44 bytes leftover after parsing attributes in process `syz.1.430'. [ 195.486575][ T5675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.430'. [ 195.520677][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.690145][ T3684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.796329][ T3684] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 195.809693][ T5672] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.825245][ T5672] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 195.837753][ T5672] EXT4-fs (loop2): This should not happen!! Data will be lost [ 195.837753][ T5672] [ 195.847477][ T5672] EXT4-fs (loop2): Total free blocks count 0 [ 195.853531][ T5672] EXT4-fs (loop2): Free/Dirty block details [ 195.859442][ T5672] EXT4-fs (loop2): free_blocks=2415919104 [ 195.865272][ T5672] EXT4-fs (loop2): dirty_blocks=16 [ 195.870638][ T5672] EXT4-fs (loop2): Block reservation details [ 195.876999][ T5672] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 195.884078][ T5692] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 195.888933][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.904740][ T5693] loop4: detected capacity change from 0 to 256 [ 195.906303][ T3684] usb 1-1: SerialNumber: syz [ 195.974889][ T5693] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 196.183180][ T151] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 196.233200][ T3684] usb 1-1: 0:2 : does not exist [ 196.883375][ T3684] usb 1-1: USB disconnect, device number 8 [ 197.101526][ T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.148040][ T5136] udevd[5136]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.415504][ T151] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.568646][ T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.672932][ T151] usb 2-1: config 0 descriptor?? [ 197.761019][ T5717] loop2: detected capacity change from 0 to 1024 [ 197.845865][ T5717] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 7696581394437)! [ 197.871162][ T5717] EXT4-fs (loop2): group descriptors corrupted! [ 198.020752][ T26] audit: type=1804 audit(1722895853.023:235): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.436" name="/newroot/98/file0" dev="fuse" ino=1 res=1 errno=0 [ 198.143886][ T151] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 198.166443][ T5725] loop3: detected capacity change from 0 to 2048 [ 198.212570][ T151] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input10 [ 198.242361][ T5725] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.968458][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 199.095131][ T151] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 199.127374][ T5740] netlink: 44 bytes leftover after parsing attributes in process `syz.2.442'. [ 199.169470][ T5740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.442'. [ 199.228161][ C1] eth0: bad gso: type: 1, size: 1408 [ 199.442158][ T3695] usb 2-1: USB disconnect, device number 7 [ 199.461405][ T5751] loop2: detected capacity change from 0 to 2048 [ 199.491287][ T5751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 199.727247][ T5735] syz.0.441 (5735): drop_caches: 1 [ 199.813913][ T5758] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 199.828968][ T5758] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 199.841499][ T5758] EXT4-fs (loop2): This should not happen!! Data will be lost [ 199.841499][ T5758] [ 199.851213][ T5758] EXT4-fs (loop2): Total free blocks count 0 [ 199.857278][ T5758] EXT4-fs (loop2): Free/Dirty block details [ 199.863201][ T5758] EXT4-fs (loop2): free_blocks=2415919104 [ 199.868954][ T5758] EXT4-fs (loop2): dirty_blocks=16 [ 199.874131][ T5758] EXT4-fs (loop2): Block reservation details [ 199.880125][ T5758] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 199.887158][ T5751] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 200.250588][ T5735] syz.0.441 (5735): drop_caches: 1 [ 200.450563][ C1] sd 0:0:1:0: [sda] tag#1868 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 200.460985][ C1] sd 0:0:1:0: [sda] tag#1868 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 200.580804][ T3695] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.101536][ T3695] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.111914][ T3695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.306981][ T151] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.455538][ T5787] input: syz0 as /devices/virtual/input/input11 [ 202.640825][ T151] usb 2-1: Using ep0 maxpacket: 8 [ 202.760768][ T151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.791754][ T151] usb 2-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 202.815124][ T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.831195][ T5796] netlink: 44 bytes leftover after parsing attributes in process `syz.2.454'. [ 202.860252][ T151] usb 2-1: config 0 descriptor?? [ 202.870827][ T5796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.454'. [ 202.987326][ T3695] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.000081][ T3695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.013721][ T3695] usb 4-1: SerialNumber: syz [ 203.027079][ C1] eth0: bad gso: type: 1, size: 1408 [ 205.849828][ T5799] can: request_module (can-proto-0) failed. [ 206.513813][ T3682] usb 2-1: USB disconnect, device number 8 [ 206.544754][ T3695] usb 4-1: can't set config #1, error -71 [ 206.552480][ T3695] usb 4-1: USB disconnect, device number 8 [ 206.582433][ T5813] loop4: detected capacity change from 0 to 2048 [ 206.597401][ T5812] loop2: detected capacity change from 0 to 2048 [ 206.641925][ T5813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 206.699130][ T5812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.637025][ T5824] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.697562][ T5824] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 207.709888][ T5824] EXT4-fs (loop4): This should not happen!! Data will be lost [ 207.709888][ T5824] [ 207.719568][ T5824] EXT4-fs (loop4): Total free blocks count 0 [ 207.725583][ T5824] EXT4-fs (loop4): Free/Dirty block details [ 207.731537][ T5824] EXT4-fs (loop4): free_blocks=2415919104 [ 207.737235][ T5824] EXT4-fs (loop4): dirty_blocks=16 [ 207.742346][ T5824] EXT4-fs (loop4): Block reservation details [ 207.748302][ T5824] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 207.897918][ C1] sd 0:0:1:0: [sda] tag#1878 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 207.908420][ C1] sd 0:0:1:0: [sda] tag#1878 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 207.965844][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 208.018799][ T5292] EXT4-fs (loop2): unmounting filesystem. [ 209.222036][ T26] audit: type=1804 audit(1722895864.153:236): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.460" name="/newroot/97/file0" dev="fuse" ino=1 res=1 errno=0 [ 209.414817][ T5851] input: syz0 as /devices/virtual/input/input12 [ 209.898492][ T5859] netlink: 44 bytes leftover after parsing attributes in process `syz.1.467'. [ 210.116904][ T5859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.467'. [ 210.420791][ C1] eth0: bad gso: type: 1, size: 1408 [ 210.662831][ T5845] loop3: detected capacity change from 0 to 32768 [ 210.676255][ T5845] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.464 (5845) [ 210.721588][ T5870] loop1: detected capacity change from 0 to 512 [ 211.987925][ T5845] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.989307][ T5870] EXT4-fs (loop1): 1 orphan inode deleted [ 212.005888][ T5870] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 212.015486][ T5870] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038 (0x7fffffff) [ 212.219682][ T5845] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 212.244070][ T5845] BTRFS info (device loop3): using free space tree [ 212.429673][ T5883] loop2: detected capacity change from 0 to 2048 [ 212.463861][ T3687] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.475087][ T5845] BTRFS error (device loop3): open_ctree failed [ 212.491459][ T3639] EXT4-fs (loop1): unmounting filesystem. [ 212.667964][ T5883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.833014][ T3687] usb 1-1: Using ep0 maxpacket: 8 [ 214.506489][ T5912] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 214.521455][ T5912] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 214.533748][ T5912] EXT4-fs (loop2): This should not happen!! Data will be lost [ 214.533748][ T5912] [ 214.543449][ T5912] EXT4-fs (loop2): Total free blocks count 0 [ 214.549437][ T5912] EXT4-fs (loop2): Free/Dirty block details [ 214.555377][ T5912] EXT4-fs (loop2): free_blocks=2415919104 [ 214.561159][ T5912] EXT4-fs (loop2): dirty_blocks=16 [ 214.566274][ T5912] EXT4-fs (loop2): Block reservation details [ 214.572299][ T5912] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 214.580578][ T5912] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 214.782465][ T3687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.813787][ T3687] usb 1-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 214.941964][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.944482][ T5918] netlink: 44 bytes leftover after parsing attributes in process `syz.4.480'. [ 214.959428][ C1] sd 0:0:1:0: [sda] tag#1908 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 214.969855][ C1] sd 0:0:1:0: [sda] tag#1908 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 215.018028][ T3687] usb 1-1: config 0 descriptor?? [ 215.090524][ T3687] usb 1-1: can't set config #0, error -71 [ 215.090945][ T5924] input: syz0 as /devices/virtual/input/input13 [ 215.106138][ T5918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.480'. [ 215.408913][ T3687] usb 1-1: USB disconnect, device number 9 [ 215.519443][ C1] eth0: bad gso: type: 1, size: 1408 [ 216.063694][ T5937] loop4: detected capacity change from 0 to 2048 [ 216.269042][ T5937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 217.035160][ T5961] loop2: detected capacity change from 0 to 512 [ 217.048375][ T3637] EXT4-fs (loop4): unmounting filesystem. [ 217.051366][ T5961] EXT4-fs: Ignoring removed bh option [ 217.114742][ T5961] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.487: inode #11614: comm syz.2.487: iget: illegal inode # [ 217.135524][ T5961] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.487: error while reading EA inode 11614 err=-117 [ 217.272339][ T5965] loop3: detected capacity change from 0 to 2048 [ 217.295457][ T5961] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 217.330851][ T5961] EXT4-fs (loop2): 1 truncate cleaned up [ 217.336550][ T5961] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.361747][ T5965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.238540][ T5952] loop1: detected capacity change from 0 to 32768 [ 218.322964][ T5952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.486 (5952) [ 218.338725][ T5974] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 218.353635][ T5974] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 218.365985][ T5974] EXT4-fs (loop3): This should not happen!! Data will be lost [ 218.365985][ T5974] [ 218.375663][ T5974] EXT4-fs (loop3): Total free blocks count 0 [ 218.381731][ T5974] EXT4-fs (loop3): Free/Dirty block details [ 218.387642][ T5974] EXT4-fs (loop3): free_blocks=2415919104 [ 218.393695][ T5974] EXT4-fs (loop3): dirty_blocks=16 [ 218.398964][ T5974] EXT4-fs (loop3): Block reservation details [ 218.405050][ T5974] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 218.413539][ T5974] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 218.515208][ T5952] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.764039][ T5952] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 218.773050][ T5952] BTRFS info (device loop1): using free space tree [ 218.896192][ T5957] xt_HMARK: spi-set and port-set can't be combined [ 218.986237][ T5952] BTRFS info (device loop1): enabling ssd optimizations [ 219.002668][ T5938] syz.0.481 (5938): drop_caches: 1 [ 219.165588][ T5292] EXT4-fs (loop2): unmounting filesystem. [ 219.210355][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.244100][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.276719][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.300864][ T154] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.373326][ T6001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.493'. [ 219.382654][ C1] sd 0:0:1:0: [sda] tag#1859 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 219.385985][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.393073][ C1] sd 0:0:1:0: [sda] tag#1859 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 219.412297][ T6001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.493'. [ 219.691741][ C1] eth0: bad gso: type: 1, size: 1408 [ 219.751437][ T154] usb 4-1: Using ep0 maxpacket: 8 [ 219.828657][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.837049][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.868820][ T6009] debugfs: Directory 'netdev:nicvf0' with parent 'phy7' already present! [ 219.875379][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.895797][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.909331][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.930602][ T154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.946460][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.957650][ T154] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 219.977505][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 219.994027][ T154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.038961][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.069841][ T154] usb 4-1: config 0 descriptor?? [ 220.075825][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.092067][ T6016] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 220.093707][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.112151][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.119726][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.131159][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.138763][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.154946][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.189882][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 220.204355][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.054192][ T6026] ubi: mtd0 is already attached to ubi0 [ 221.487562][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.495174][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.502789][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.510334][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.517899][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.525459][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.533085][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.552776][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.566010][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.576706][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.584801][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.593476][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.601324][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.608855][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.616358][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.623992][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.631582][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.639040][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.646583][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.650566][ T3680] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 221.654088][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.668897][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.676385][ T3687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 221.693539][ T3687] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 221.817828][ T3639] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.836932][ T6028] netlink: 72 bytes leftover after parsing attributes in process `syz.2.499'. [ 221.859998][ T6028] netlink: 72 bytes leftover after parsing attributes in process `syz.2.499'. [ 222.041083][ T3680] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.143515][ T3680] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.501748][ T3680] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.524440][ T3680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.533735][ T3680] usb 5-1: SerialNumber: syz [ 222.674832][ T151] usb 4-1: USB disconnect, device number 9 [ 222.886722][ T6041] netlink: 44 bytes leftover after parsing attributes in process `syz.3.504'. [ 222.934889][ C1] sd 0:0:1:0: [sda] tag#1865 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 222.945329][ C1] sd 0:0:1:0: [sda] tag#1865 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 223.310644][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.504'. [ 223.452138][ T3680] usb 5-1: 0:2 : does not exist [ 223.469837][ T6050] loop1: detected capacity change from 0 to 2048 [ 223.517545][ T3680] usb 5-1: USB disconnect, device number 4 [ 223.559149][ T6050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.581873][ T5136] udevd[5136]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.818988][ T6064] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.834391][ T6064] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 223.846770][ T6064] EXT4-fs (loop1): This should not happen!! Data will be lost [ 223.846770][ T6064] [ 223.856517][ T6064] EXT4-fs (loop1): Total free blocks count 0 [ 223.862581][ T6064] EXT4-fs (loop1): Free/Dirty block details [ 223.868569][ T6064] EXT4-fs (loop1): free_blocks=2415919104 [ 223.874376][ T6064] EXT4-fs (loop1): dirty_blocks=16 [ 223.879555][ T6064] EXT4-fs (loop1): Block reservation details [ 223.885616][ T6064] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 223.907314][ T6064] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 224.386166][ T6066] debugfs: Directory 'netdev:nicvf0' with parent 'phy11' already present! [ 224.499909][ T6040] syz.2.503 (6040): drop_caches: 1 [ 226.560533][ T3680] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 227.322608][ C1] sd 0:0:1:0: [sda] tag#1885 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 227.333078][ C1] sd 0:0:1:0: [sda] tag#1885 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 227.344260][ T3680] usb 2-1: Using ep0 maxpacket: 8 [ 227.490766][ T3680] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.511018][ T3680] usb 2-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 227.522421][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.574997][ T3680] usb 2-1: config 0 descriptor?? [ 227.855405][ T6101] loop3: detected capacity change from 0 to 2048 [ 228.104739][ T6105] ubi: mtd0 is already attached to ubi0 [ 228.111230][ T3680] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 228.514823][ T6108] loop2: detected capacity change from 0 to 512 [ 228.718018][ T6108] EXT4-fs (loop2): 1 orphan inode deleted [ 228.723985][ T6108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.733441][ T6108] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 229.010227][ T6101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.021064][ T3680] usb 1-1: Using ep0 maxpacket: 16 [ 229.219747][ T5292] EXT4-fs (loop2): unmounting filesystem. [ 229.370690][ T3680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.382856][ T3680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.394971][ T3680] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.442844][ T6120] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 229.457911][ T6120] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 229.470431][ T6120] EXT4-fs (loop3): This should not happen!! Data will be lost [ 229.470431][ T6120] [ 229.480218][ T6120] EXT4-fs (loop3): Total free blocks count 0 [ 229.486355][ T6120] EXT4-fs (loop3): Free/Dirty block details [ 229.492373][ T6120] EXT4-fs (loop3): free_blocks=2415919104 [ 229.498170][ T6120] EXT4-fs (loop3): dirty_blocks=16 [ 229.503472][ T6120] EXT4-fs (loop3): Block reservation details [ 229.509627][ T6120] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 229.526263][ T6120] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 229.710556][ T3680] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 229.786872][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.913902][ T5106] usb 2-1: USB disconnect, device number 9 [ 229.971462][ T3680] usb 1-1: config 0 descriptor?? [ 232.420968][ T3680] usbhid 1-1:0.0: can't add hid device: -71 [ 232.457948][ T3680] usbhid: probe of 1-1:0.0 failed with error -71 [ 232.686559][ T3680] usb 1-1: USB disconnect, device number 10 [ 234.341891][ C1] sd 0:0:1:0: [sda] tag#1891 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 234.352308][ C1] sd 0:0:1:0: [sda] tag#1891 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 234.741624][ T6164] netlink: 72 bytes leftover after parsing attributes in process `syz.3.531'. [ 234.762028][ T6164] netlink: 72 bytes leftover after parsing attributes in process `syz.3.531'. [ 235.105886][ T6174] loop1: detected capacity change from 0 to 512 [ 235.594722][ T3680] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 235.836785][ T6174] EXT4-fs (loop1): 1 orphan inode deleted [ 235.842821][ T6174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 235.851887][ T6174] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038 (0x7fffffff) [ 235.983874][ T3680] usb 4-1: Using ep0 maxpacket: 8 [ 236.001979][ T6180] loop0: detected capacity change from 0 to 2048 [ 236.087042][ T3639] EXT4-fs (loop1): unmounting filesystem. [ 236.101502][ T3680] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.122332][ T6180] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 236.138953][ T3680] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 236.265196][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.357504][ T6185] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.373029][ T6185] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 236.385788][ T6185] EXT4-fs (loop0): This should not happen!! Data will be lost [ 236.385788][ T6185] [ 236.395539][ T6185] EXT4-fs (loop0): Total free blocks count 0 [ 236.401609][ T6185] EXT4-fs (loop0): Free/Dirty block details [ 236.407600][ T6185] EXT4-fs (loop0): free_blocks=2415919104 [ 236.413408][ T6185] EXT4-fs (loop0): dirty_blocks=16 [ 236.418688][ T6185] EXT4-fs (loop0): Block reservation details [ 236.424770][ T6185] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 236.444947][ T6185] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 236.956237][ T3680] usb 4-1: config 0 descriptor?? [ 237.700465][ T6193] ubi: mtd0 is already attached to ubi0 [ 240.132945][ T151] usb 4-1: USB disconnect, device number 10 [ 241.082338][ T3695] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 241.131208][ C1] sd 0:0:1:0: [sda] tag#1900 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 241.141723][ C1] sd 0:0:1:0: [sda] tag#1900 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 241.230270][ T5896] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 241.555601][ T6165] syz.2.530 (6165): drop_caches: 1 [ 241.605813][ T6223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.543'. [ 241.630090][ T6223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.543'. [ 241.668424][ T26] audit: type=1326 audit(1722895896.693:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.3.544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x0 [ 241.690605][ T3695] usb 5-1: Using ep0 maxpacket: 16 [ 241.901334][ T3695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.912417][ T3695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.922590][ T3695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.007447][ T6231] hub 9-0:1.0: USB hub found [ 242.012545][ T6231] hub 9-0:1.0: 8 ports detected [ 242.026568][ T3695] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.035984][ T3695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.655350][ T5896] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 242.675984][ T3695] usb 5-1: config 0 descriptor?? [ 242.689391][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.754861][ T5896] usb 2-1: config 0 descriptor?? [ 242.825083][ T6233] loop2: detected capacity change from 0 to 2048 [ 242.826732][ T5896] pcwd_usb: The device isn't a Human Interface Device [ 242.976475][ T6233] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 243.041050][ T5896] usb 2-1: USB disconnect, device number 10 [ 244.354231][ T6252] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 244.370513][ T6252] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 244.383205][ T6252] EXT4-fs (loop2): This should not happen!! Data will be lost [ 244.383205][ T6252] [ 244.393141][ T6252] EXT4-fs (loop2): Total free blocks count 0 [ 244.399232][ T6252] EXT4-fs (loop2): Free/Dirty block details [ 244.405402][ T6252] EXT4-fs (loop2): free_blocks=2415919104 [ 244.411300][ T6252] EXT4-fs (loop2): dirty_blocks=16 [ 244.416561][ T6252] EXT4-fs (loop2): Block reservation details [ 244.422764][ T6252] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 244.464867][ T6253] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 244.883142][ T3695] usbhid 5-1:0.0: can't add hid device: -71 [ 244.889193][ T3695] usbhid: probe of 5-1:0.0 failed with error -71 [ 244.962783][ T3695] usb 5-1: USB disconnect, device number 5 [ 245.081091][ T6255] loop0: detected capacity change from 0 to 32768 [ 245.094274][ T3680] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 245.202266][ T6255] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 245.213874][ T6255] XFS (loop0): Mounting V5 Filesystem [ 245.252813][ T6255] XFS (loop0): Ending clean mount [ 245.263745][ T6255] XFS (loop0): Quotacheck needed: Please wait. [ 245.280509][ T5896] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 245.370717][ T3680] usb 4-1: Using ep0 maxpacket: 8 [ 245.975225][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.032509][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.062035][ T6255] XFS (loop0): Quotacheck: Done. [ 246.150726][ T5896] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.225301][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.251027][ T3680] usb 4-1: unable to read config index 0 descriptor/all [ 246.258072][ T3680] usb 4-1: can't read configurations, error -71 [ 246.275659][ T5896] usb 2-1: SerialNumber: syz [ 246.619549][ T6259] loop4: detected capacity change from 0 to 40427 [ 246.649393][ T6259] F2FS-fs (loop4): Invalid log sectorsize (2) [ 246.740939][ T6259] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 246.760330][ T3638] XFS (loop0): Unmounting Filesystem [ 246.907421][ T6259] F2FS-fs (loop4): Found nat_bits in checkpoint [ 247.025718][ T5896] usb 2-1: 0:2 : does not exist [ 247.047208][ T6259] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 247.062671][ T6259] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 247.072241][ T5896] usb 2-1: USB disconnect, device number 11 [ 247.085492][ T26] audit: type=1326 audit(1722895902.113:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.184608][ T5136] udevd[5136]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.270478][ T26] audit: type=1326 audit(1722895902.113:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.288860][ T6282] syz.2.556 (6282): drop_caches: 1 [ 247.332402][ T26] audit: type=1326 audit(1722895902.113:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.390577][ T26] audit: type=1326 audit(1722895902.113:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.467423][ T5106] kernel write not supported for file bpf-prog (pid: 5106 comm: kworker/0:9) [ 247.480148][ T26] audit: type=1326 audit(1722895902.113:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.634995][ T26] audit: type=1326 audit(1722895902.113:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.696607][ T26] audit: type=1326 audit(1722895902.113:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.735497][ T26] audit: type=1326 audit(1722895902.113:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.796453][ T26] audit: type=1326 audit(1722895902.113:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 247.889264][ T6282] syz.2.556 (6282): drop_caches: 1 [ 247.899210][ T26] audit: type=1326 audit(1722895902.113:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 249.006009][ T3637] syz-executor: attempt to access beyond end of device [ 249.006009][ T3637] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 249.406904][ T6317] loop4: detected capacity change from 0 to 2048 [ 249.432024][ T6317] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 249.553460][ T3685] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 249.561702][ T3680] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 249.693489][ T6322] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 249.708823][ T6322] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 249.721198][ T6322] EXT4-fs (loop4): This should not happen!! Data will be lost [ 249.721198][ T6322] [ 249.730926][ T6322] EXT4-fs (loop4): Total free blocks count 0 [ 249.737103][ T6322] EXT4-fs (loop4): Free/Dirty block details [ 249.743187][ T6322] EXT4-fs (loop4): free_blocks=2415919104 [ 249.748967][ T6322] EXT4-fs (loop4): dirty_blocks=16 [ 249.754182][ T6322] EXT4-fs (loop4): Block reservation details [ 249.760211][ T6322] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 249.780109][ T6322] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 249.920885][ T3685] usb 2-1: Using ep0 maxpacket: 16 [ 250.121581][ T3680] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.132561][ T3685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.146576][ T3680] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.155692][ T3685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.165724][ T3685] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.178837][ T3685] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.188082][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.200303][ T3685] usb 2-1: config 0 descriptor?? [ 250.240617][ T3680] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.252515][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.260988][ T3680] usb 4-1: SerialNumber: syz [ 250.620670][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 250.632352][ T3680] usb 4-1: 0:2 : does not exist [ 250.653425][ T3680] usb 4-1: USB disconnect, device number 13 [ 250.750655][ T3685] usbhid 2-1:0.0: can't add hid device: -71 [ 250.756773][ T3685] usbhid: probe of 2-1:0.0 failed with error -71 [ 250.765226][ T3685] usb 2-1: USB disconnect, device number 12 [ 250.872360][ T5137] udevd[5137]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.888351][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 251.020680][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.030936][ T5896] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 251.039976][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.050576][ T5896] usb 5-1: config 0 descriptor?? [ 252.212671][ T6336] ubi: mtd0 is already attached to ubi0 [ 252.756459][ T6341] loop1: detected capacity change from 0 to 64 [ 254.272710][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 254.272728][ T26] audit: type=1326 audit(1722895909.293:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1a9779f9 code=0x7fc00000 [ 254.409292][ T7] usb 5-1: USB disconnect, device number 6 [ 254.690799][ T6363] loop4: detected capacity change from 0 to 2048 [ 254.705470][ T6363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 256.110920][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.117246][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.134635][ T6373] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 256.149676][ T6373] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 256.162022][ T6373] EXT4-fs (loop4): This should not happen!! Data will be lost [ 256.162022][ T6373] [ 256.171732][ T6373] EXT4-fs (loop4): Total free blocks count 0 [ 256.177722][ T6373] EXT4-fs (loop4): Free/Dirty block details [ 256.184293][ T6373] EXT4-fs (loop4): free_blocks=2415919104 [ 256.190047][ T6373] EXT4-fs (loop4): dirty_blocks=16 [ 256.195281][ T6373] EXT4-fs (loop4): Block reservation details [ 256.201619][ T6373] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 256.208512][ T6374] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 256.510666][ T3683] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 256.800556][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 256.870592][ T3683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.890540][ T3683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.980608][ T3683] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.989689][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.997768][ T3683] usb 2-1: SerialNumber: syz [ 257.040553][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 257.110527][ T151] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.180772][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.191905][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.201764][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.214711][ T5896] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.223843][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.233813][ T5896] usb 4-1: config 0 descriptor?? [ 257.343208][ T3683] usb 2-1: 0:2 : does not exist [ 257.350954][ T151] usb 5-1: Using ep0 maxpacket: 8 [ 257.365112][ T3683] usb 2-1: USB disconnect, device number 13 [ 257.470687][ T151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.481323][ T151] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 257.490378][ T151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.500953][ T151] usb 5-1: config 0 descriptor?? [ 257.770641][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 257.777926][ T5896] usbhid: probe of 4-1:0.0 failed with error -71 [ 257.791471][ T5896] usb 4-1: USB disconnect, device number 14 [ 257.909659][ T6392] loop1: detected capacity change from 0 to 512 [ 257.918408][ T6392] EXT4-fs (loop1): first meta block group too large: 4278190080 (group descriptor block count 1) [ 257.938566][ T26] audit: type=1326 audit(1722895912.963:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz.1.583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf569779f9 code=0x0 [ 258.014487][ T6393] ubi: mtd0 is already attached to ubi0 [ 259.232730][ T151] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 259.862224][ T151] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 259.897119][ T5106] usb 5-1: USB disconnect, device number 7 [ 259.930507][ T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.963874][ T151] usb 2-1: config 0 descriptor?? [ 260.001919][ T151] cp210x 2-1:0.0: cp210x converter detected [ 260.076780][ T6411] syz.3.587 (6411): drop_caches: 1 [ 260.204967][ T6411] syz.3.587 (6411): drop_caches: 1 [ 260.450670][ T151] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 260.714525][ T151] usb 2-1: cp210x converter now attached to ttyUSB0 [ 260.918674][ T151] usb 2-1: USB disconnect, device number 14 [ 260.927400][ T151] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.941039][ T151] cp210x 2-1:0.0: device disconnected [ 317.105278][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111666][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.542140][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.548510][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.300805][ T27] INFO: task kworker/1:8:3684 blocked for more than 143 seconds. [ 400.308566][ T27] Not tainted 6.1.103-syzkaller #0 [ 400.315815][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.324626][ T27] task:kworker/1:8 state:D stack:20288 pid:3684 ppid:2 flags:0x00004000 [ 400.333926][ T27] Workqueue: events rfkill_global_led_trigger_worker [ 400.340750][ T27] Call Trace: [ 400.344035][ T27] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 400.346954][ T27] __schedule+0x143f/0x4570 [ 400.351703][ T27] ? release_firmware_map_entry+0x186/0x186 [ 400.357776][ T27] ? print_irqtrace_events+0x210/0x210 [ 400.363780][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 400.369021][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 400.374405][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 400.391225][ T27] schedule+0xbf/0x180 [ 400.395363][ T27] schedule_preempt_disabled+0xf/0x20 [ 400.422436][ T27] __mutex_lock+0x6b9/0xd80 [ 400.427018][ T27] ? __mutex_lock+0x53c/0xd80 [ 400.432922][ T27] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 400.439202][ T27] ? mutex_lock_nested+0x10/0x10 [ 400.444537][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 400.450616][ T27] ? print_irqtrace_events+0x210/0x210 [ 400.456085][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 400.462083][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 400.467291][ T27] ? process_one_work+0x7a9/0x11d0 [ 400.472463][ T27] rfkill_global_led_trigger_worker+0x23/0xd0 [ 400.478541][ T27] ? process_one_work+0x7a9/0x11d0 [ 400.483721][ T27] process_one_work+0x8a9/0x11d0 [ 400.488675][ T27] ? worker_detach_from_pool+0x260/0x260 [ 400.494361][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 400.499937][ T27] ? kthread_data+0x4e/0xc0 [ 400.504511][ T27] ? wq_worker_running+0x97/0x190 [ 400.509637][ T27] worker_thread+0xa47/0x1200 [ 400.514375][ T27] ? _raw_spin_unlock+0x40/0x40 [ 400.519236][ T27] kthread+0x28d/0x320 [ 400.523408][ T27] ? worker_clr_flags+0x190/0x190 [ 400.528456][ T27] ? kthread_blkcg+0xd0/0xd0 [ 400.534832][ T27] ret_from_fork+0x1f/0x30 [ 400.539298][ T27] [ 400.543257][ T27] INFO: task syz.2.556:6276 blocked for more than 143 seconds. [ 400.552361][ T27] Not tainted 6.1.103-syzkaller #0 [ 400.558000][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.567028][ T27] task:syz.2.556 state:D stack:25000 pid:6276 ppid:5292 flags:0x00004004 [ 400.576571][ T27] Call Trace: [ 400.579949][ T27] [ 400.583286][ T27] __schedule+0x143f/0x4570 [ 400.587812][ T27] ? release_firmware_map_entry+0x186/0x186 [ 400.593790][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 400.599274][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 400.604507][ T27] schedule+0xbf/0x180 [ 400.608588][ T27] schedule_preempt_disabled+0xf/0x20 [ 400.614006][ T27] __mutex_lock+0x6b9/0xd80 [ 400.618534][ T27] ? kobject_put+0x422/0x460 [ 400.623298][ T27] ? __mutex_lock+0x53c/0xd80 [ 400.627985][ T27] ? rfkill_unregister+0xcc/0x220 [ 400.633141][ T27] ? mutex_lock_nested+0x10/0x10 [ 400.638181][ T27] ? kill_device+0x160/0x160 [ 400.642975][ T27] ? nfc_genl_device_removed+0x251/0x370 [ 400.648638][ T27] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 400.654734][ T27] rfkill_unregister+0xcc/0x220 [ 400.659608][ T27] nfc_unregister_device+0x92/0x290 [ 400.665201][ T27] virtual_ncidev_close+0x55/0x90 [ 400.671792][ T27] ? virtual_ncidev_open+0xc0/0xc0 [ 400.676976][ T27] __fput+0x3f6/0x8d0 [ 400.681360][ T27] task_work_run+0x246/0x300 [ 400.685968][ T27] ? task_work_cancel+0x2e0/0x2e0 [ 400.691324][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 400.696791][ T27] exit_to_user_mode_loop+0xde/0x100 [ 400.702597][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 400.708243][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 400.713918][ T27] do_syscall_64+0x47/0xb0 [ 400.718432][ T27] ? clear_bhb_loop+0x45/0xa0 [ 400.723147][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.729062][ T27] RIP: 0033:0x7f01b51779f9 [ 400.733508][ T27] RSP: 002b:00007fff1177ab58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 400.741970][ T27] RAX: 0000000000000000 RBX: 00007f01b5307a80 RCX: 00007f01b51779f9 [ 400.749985][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 400.758227][ T27] RBP: 00007f01b5307a80 R08: 0000000000000006 R09: 00007fff1177ae3f [ 400.766262][ T27] R10: 00000000003fe43c R11: 0000000000000246 R12: 000000000003c623 [ 400.774765][ T27] R13: 00007fff1177ac50 R14: 00007fff1177ac70 R15: ffffffffffffffff [ 400.783388][ T27] [ 400.786444][ T27] INFO: task syz.0.557:6294 blocked for more than 143 seconds. [ 400.794244][ T27] Not tainted 6.1.103-syzkaller #0 [ 400.799970][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.809006][ T27] task:syz.0.557 state:D stack:26936 pid:6294 ppid:3638 flags:0x00004006 [ 400.818367][ T27] Call Trace: [ 400.821693][ T27] [ 400.824632][ T27] __schedule+0x143f/0x4570 [ 400.829144][ T27] ? release_firmware_map_entry+0x186/0x186 [ 400.835062][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 400.840598][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 400.845803][ T27] schedule+0xbf/0x180 [ 400.849897][ T27] schedule_preempt_disabled+0xf/0x20 [ 400.855395][ T27] __mutex_lock+0x6b9/0xd80 [ 400.859940][ T27] ? __mutex_lock+0x53c/0xd80 [ 400.864771][ T27] ? rfkill_fop_release+0x49/0x220 [ 400.869901][ T27] ? mutex_lock_nested+0x10/0x10 [ 400.874869][ T27] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 400.883083][ T27] rfkill_fop_release+0x49/0x220 [ 400.888133][ T27] ? rfkill_fop_open+0x680/0x680 [ 400.893129][ T27] __fput+0x3f6/0x8d0 [ 400.897127][ T27] task_work_run+0x246/0x300 [ 400.901794][ T27] ? __might_fault+0xa1/0x110 [ 400.906568][ T27] ? task_work_cancel+0x2e0/0x2e0 [ 400.911825][ T27] ? schedule+0xd6/0x180 [ 400.916088][ T27] get_signal+0x15fc/0x17d0 [ 400.920994][ T27] ? set_fd_set+0x7a/0x90 [ 400.925328][ T27] ? core_sys_select+0x849/0x900 [ 400.930255][ T27] ? ptrace_notify+0x370/0x370 [ 400.935050][ T27] arch_do_signal_or_restart+0xb0/0x1a10 [ 400.941053][ T27] ? memset+0x1f/0x40 [ 400.945067][ T27] ? poll_select_finish+0x6bb/0x7b0 [ 400.950610][ T27] ? pollwake+0x280/0x280 [ 400.954949][ T27] ? sigprocmask+0x280/0x280 [ 400.959523][ T27] ? get_sigframe_size+0x10/0x10 [ 400.964515][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 400.970565][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 400.976035][ T27] exit_to_user_mode_loop+0x6a/0x100 [ 400.981382][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 400.986930][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 400.994073][ T27] do_syscall_64+0x47/0xb0 [ 400.998530][ T27] ? clear_bhb_loop+0x45/0xa0 [ 401.003257][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.009173][ T27] RIP: 0033:0x7f32c5b779f9 [ 401.013639][ T27] RSP: 002b:00007f32c6893048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 401.022122][ T27] RAX: 0000000000000006 RBX: 00007f32c5d05f80 RCX: 00007f32c5b779f9 [ 401.030117][ T27] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000040 [ 401.038129][ T27] RBP: 00007f32c5be58ee R08: 0000000000000000 R09: 0000000000000000 [ 401.046142][ T27] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000000 [ 401.054157][ T27] R13: 000000000000000b R14: 00007f32c5d05f80 R15: 00007ffd92a1bed8 [ 401.062207][ T27] [ 401.065240][ T27] INFO: task syz.0.557:6295 blocked for more than 144 seconds. [ 401.072959][ T27] Not tainted 6.1.103-syzkaller #0 [ 401.078609][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.087321][ T27] task:syz.0.557 state:D stack:27400 pid:6295 ppid:3638 flags:0x00004004 [ 401.096584][ T27] Call Trace: [ 401.099873][ T27] [ 401.104249][ T27] __schedule+0x143f/0x4570 [ 401.108792][ T27] ? release_firmware_map_entry+0x186/0x186 [ 401.114726][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 401.120219][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 401.125492][ T27] schedule+0xbf/0x180 [ 401.129598][ T27] schedule_preempt_disabled+0xf/0x20 [ 401.135026][ T27] __mutex_lock+0x6b9/0xd80 [ 401.139541][ T27] ? __mutex_lock+0x53c/0xd80 [ 401.144283][ T27] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 401.149579][ T27] ? mutex_lock_nested+0x10/0x10 [ 401.154548][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 401.159754][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 401.165003][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 401.170941][ T27] ? _raw_spin_unlock+0x40/0x40 [ 401.175800][ T27] nfc_rfkill_set_block+0x4c/0x2f0 [ 401.180954][ T27] ? nfc_unregister_device+0x290/0x290 [ 401.186426][ T27] rfkill_set_block+0x1e7/0x430 [ 401.191347][ T27] rfkill_fop_write+0x5b7/0x790 [ 401.196213][ T27] ? rfkill_fop_read+0x470/0x470 [ 401.201206][ T27] ? fsnotify_perm+0x64/0x590 [ 401.205886][ T27] ? security_file_permission+0x75/0xa0 [ 401.212879][ T27] ? rfkill_fop_read+0x470/0x470 [ 401.217926][ T27] vfs_write+0x2d9/0xbc0 [ 401.222241][ T27] ? file_end_write+0x250/0x250 [ 401.227096][ T27] ? __fget_files+0x28/0x4a0 [ 401.231797][ T27] ? __fget_files+0x435/0x4a0 [ 401.236485][ T27] ? __fget_files+0x28/0x4a0 [ 401.241226][ T27] ? __fdget_pos+0x1db/0x360 [ 401.245818][ T27] ? ksys_write+0x77/0x2c0 [ 401.250236][ T27] ksys_write+0x19c/0x2c0 [ 401.254708][ T27] ? print_irqtrace_events+0x210/0x210 [ 401.260181][ T27] ? __ia32_sys_read+0x80/0x80 [ 401.265246][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 401.271298][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 401.276502][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 401.282527][ T27] do_syscall_64+0x3b/0xb0 [ 401.286947][ T27] ? clear_bhb_loop+0x45/0xa0 [ 401.291782][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.297695][ T27] RIP: 0033:0x7f32c5b779f9 [ 401.302175][ T27] RSP: 002b:00007f32c6872048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.310658][ T27] RAX: ffffffffffffffda RBX: 00007f32c5d06058 RCX: 00007f32c5b779f9 [ 401.318644][ T27] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 401.328060][ T27] RBP: 00007f32c5be58ee R08: 0000000000000000 R09: 0000000000000000 [ 401.336113][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.344131][ T27] R13: 000000000000006e R14: 00007f32c5d06058 R15: 00007ffd92a1bed8 [ 401.352176][ T27] [ 401.355213][ T27] INFO: task syz-executor:6385 blocked for more than 144 seconds. [ 401.363137][ T27] Not tainted 6.1.103-syzkaller #0 [ 401.368773][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.377465][ T27] task:syz-executor state:D stack:26336 pid:6385 ppid:1 flags:0x00004004 [ 401.386747][ T27] Call Trace: [ 401.390105][ T27] [ 401.393097][ T27] __schedule+0x143f/0x4570 [ 401.397624][ T27] ? release_firmware_map_entry+0x186/0x186 [ 401.403580][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 401.409048][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 401.414308][ T27] schedule+0xbf/0x180 [ 401.418403][ T27] schedule_preempt_disabled+0xf/0x20 [ 401.424071][ T27] __mutex_lock+0x6b9/0xd80 [ 401.428720][ T27] ? __mutex_lock+0x53c/0xd80 [ 401.434766][ T27] ? rfkill_register+0x30/0x880 [ 401.439633][ T27] ? mutex_lock_nested+0x10/0x10 [ 401.444613][ T27] ? __init_waitqueue_head+0xaa/0x140 [ 401.450001][ T27] ? device_initialize+0x24a/0x450 [ 401.455176][ T27] rfkill_register+0x30/0x880 [ 401.459858][ T27] hci_register_dev+0x4df/0xa40 [ 401.464769][ T27] vhci_create_device+0x3ba/0x700 [ 401.469811][ T27] vhci_write+0x38b/0x440 [ 401.474180][ T27] vfs_write+0x857/0xbc0 [ 401.478437][ T27] ? file_end_write+0x250/0x250 [ 401.483331][ T27] ? __fdget_pos+0x1db/0x360 [ 401.487927][ T27] ksys_write+0x19c/0x2c0 [ 401.492310][ T27] ? print_irqtrace_events+0x210/0x210 [ 401.497777][ T27] ? __ia32_sys_read+0x80/0x80 [ 401.502642][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 401.508630][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 401.513858][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 401.519843][ T27] do_syscall_64+0x3b/0xb0 [ 401.524294][ T27] ? clear_bhb_loop+0x45/0xa0 [ 401.528990][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.534927][ T27] RIP: 0033:0x7fbe4a1764a0 [ 401.539358][ T27] RSP: 002b:00007fff17e72958 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 401.549219][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbe4a1764a0 [ 401.557288][ T27] RDX: 0000000000000002 RSI: 00007fff17e7296a RDI: 00000000000000ca [ 401.565299][ T27] RBP: 00007fbe4a306a38 R08: 0000000000000000 R09: 00007fbe4ae3d6c0 [ 401.573322][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 401.581933][ T27] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 401.589930][ T27] [ 401.593024][ T27] [ 401.593024][ T27] Showing all locks held in the system: [ 401.600773][ T27] 1 lock held by rcu_tasks_kthre/12: [ 401.606051][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 401.616613][ T27] 1 lock held by rcu_tasks_trace/13: [ 401.621970][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 401.633043][ T27] 1 lock held by khungtaskd/27: [ 401.637906][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 401.647864][ T27] 2 locks held by getty/3394: [ 401.653442][ T27] #0: ffff888028dfe098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 401.663576][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 401.673937][ T27] 3 locks held by kworker/1:8/3684: [ 401.679145][ T27] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 401.689600][ T27] #1: ffffc90003f8fd20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 401.702559][ T27] #2: ffffffff8e7a7288 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 401.714041][ T27] 2 locks held by syz.2.556/6276: [ 401.719070][ T27] #0: ffff8880589e7100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 401.729001][ T27] #1: ffffffff8e7a7288 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 401.739171][ T27] 1 lock held by syz.0.557/6294: [ 401.744154][ T27] #0: ffffffff8e7a7288 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_release+0x49/0x220 [ 401.754455][ T27] 2 locks held by syz.0.557/6295: [ 401.759498][ T27] #0: ffffffff8e7a7288 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 401.771439][ T27] #1: ffff8880589e7100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 401.781193][ T27] 2 locks held by syz-executor/6385: [ 401.786562][ T27] #0: ffff88801428a918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 401.796641][ T27] #1: ffffffff8e7a7288 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 401.806650][ T27] 2 locks held by syz-executor/6388: [ 401.811957][ T27] #0: ffff888078988918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 401.822249][ T27] #1: ffffffff8e7a7288 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 401.832270][ T27] 2 locks held by syz.4.590/6419: [ 401.837323][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.845852][ T27] #1: ffffffff8e7a7288 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x130/0x680 [ 401.855921][ T27] 1 lock held by syz.3.591/6422: [ 401.860916][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.869383][ T27] 1 lock held by syz.1.592/6426: [ 401.874366][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.883593][ T27] 1 lock held by syz-executor/6430: [ 401.888794][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.897317][ T27] 1 lock held by syz-executor/6431: [ 401.902598][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.911124][ T27] 1 lock held by syz-executor/6433: [ 401.916317][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.925100][ T27] 1 lock held by syz-executor/6435: [ 401.930302][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.938992][ T27] 1 lock held by syz-executor/6437: [ 401.944240][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.953214][ T27] 1 lock held by syz-executor/6440: [ 401.958435][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.966982][ T27] 1 lock held by syz-executor/6441: [ 401.972250][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.980812][ T27] 1 lock held by syz-executor/6443: [ 401.986010][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 401.994761][ T27] 1 lock held by syz-executor/6449: [ 401.999968][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 402.008681][ T27] 1 lock held by syz-executor/6451: [ 402.013951][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 402.022523][ T27] 1 lock held by syz-executor/6454: [ 402.027816][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 402.036330][ T27] 1 lock held by syz-executor/6455: [ 402.041652][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 402.050083][ T27] 1 lock held by syz-executor/6457: [ 402.055339][ T27] #0: ffffffff8da7e488 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 402.063900][ T27] [ 402.066226][ T27] ============================================= [ 402.066226][ T27] [ 402.074717][ T27] NMI backtrace for cpu 0 [ 402.079054][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 402.086958][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 402.097092][ T27] Call Trace: [ 402.100361][ T27] [ 402.103282][ T27] dump_stack_lvl+0x1e3/0x2cb [ 402.108127][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 402.113761][ T27] ? panic+0x764/0x764 [ 402.117811][ T27] ? vprintk_emit+0x622/0x740 [ 402.122480][ T27] ? printk_sprint+0x490/0x490 [ 402.127233][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 402.132335][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 402.137271][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 402.143417][ T27] ? _printk+0xd1/0x111 [ 402.147559][ T27] ? panic+0x764/0x764 [ 402.151611][ T27] ? __wake_up_klogd+0xcc/0x100 [ 402.156452][ T27] ? panic+0x764/0x764 [ 402.160503][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 402.166565][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 402.172632][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 402.178611][ T27] watchdog+0xf88/0xfd0 [ 402.182764][ T27] ? watchdog+0x1f8/0xfd0 [ 402.187094][ T27] kthread+0x28d/0x320 [ 402.191181][ T27] ? hungtask_pm_notify+0x50/0x50 [ 402.196193][ T27] ? kthread_blkcg+0xd0/0xd0 [ 402.200767][ T27] ret_from_fork+0x1f/0x30 [ 402.205186][ T27] [ 402.208452][ T27] Sending NMI from CPU 0 to CPUs 1: [ 402.213765][ C1] NMI backtrace for cpu 1 [ 402.213777][ C1] CPU: 1 PID: 4634 Comm: kworker/u4:10 Not tainted 6.1.103-syzkaller #0 [ 402.213793][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 402.213802][ C1] Workqueue: 0x0 (events_unbound) [ 402.213823][ C1] RIP: 0010:sched_core_enqueue+0x6c/0x4b0 [ 402.213844][ C1] Code: 5d 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 3a 04 00 00 ff 03 4c 89 34 24 49 81 c6 b0 02 00 00 4c 89 f0 48 c1 e8 03 <48> 89 44 24 48 42 80 3c 28 00 74 08 4c 89 f7 e8 70 c6 83 00 49 83 [ 402.213862][ C1] RSP: 0018:ffffc9000402f2f8 EFLAGS: 00000802 [ 402.213874][ C1] RAX: 1ffff1100287540e RBX: ffff8880b983b728 RCX: dffffc0000000000 [ 402.213885][ C1] RDX: dffffc0000000000 RSI: ffff8880143a9dc0 RDI: ffff8880b993a9c0 [ 402.213896][ C1] RBP: ffff8880b993b708 R08: dffffc0000000000 R09: ffff8880143a9e50 [ 402.213907][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 402.213917][ C1] R13: dffffc0000000000 R14: ffff8880143aa070 R15: ffff8880b993a9c0 [ 402.213928][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 402.213940][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.213951][ C1] CR2: 00005630db6df058 CR3: 000000000d08e000 CR4: 00000000003526e0 [ 402.213963][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 402.213971][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 402.213980][ C1] Call Trace: [ 402.213986][ C1] [ 402.213991][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 402.214012][ C1] ? read_lock_is_recursive+0x10/0x10 [ 402.214035][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 402.214055][ C1] ? nmi_handle+0x25/0x440 [ 402.214084][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 402.214105][ C1] ? nmi_handle+0x12e/0x440 [ 402.214126][ C1] ? nmi_handle+0x25/0x440 [ 402.214147][ C1] ? sched_core_enqueue+0x6c/0x4b0 [ 402.214163][ C1] ? default_do_nmi+0x62/0x150 [ 402.214184][ C1] ? exc_nmi+0xa8/0x100 [ 402.214202][ C1] ? end_repeat_nmi+0x16/0x31 [ 402.214226][ C1] ? sched_core_enqueue+0x6c/0x4b0 [ 402.214243][ C1] ? sched_core_enqueue+0x6c/0x4b0 [ 402.214261][ C1] ? sched_core_enqueue+0x6c/0x4b0 [ 402.214277][ C1] [ 402.214282][ C1] [ 402.214288][ C1] ? enqueue_task+0x181/0x3a0 [ 402.214308][ C1] activate_task+0x4d/0xa0 [ 402.214326][ C1] attach_task+0xee/0x180 [ 402.214347][ C1] load_balance+0x6003/0x8260 [ 402.214410][ C1] ? update_blocked_averages+0x16a0/0x16a0 [ 402.214439][ C1] ? update_blocked_averages+0x1446/0x16a0 [ 402.214463][ C1] ? __lock_acquire+0x125b/0x1f80 [ 402.214496][ C1] ? read_lock_is_recursive+0x10/0x10 [ 402.214521][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 402.214544][ C1] newidle_balance+0x6dd/0x10b0 [ 402.214567][ C1] ? newidle_balance+0x2c9/0x10b0 [ 402.214588][ C1] ? update_misfit_status+0x7d0/0x7d0 [ 402.214611][ C1] balance_fair+0x3d/0x70 [ 402.214630][ C1] __schedule+0x262e/0x4570 [ 402.214661][ C1] ? release_firmware_map_entry+0x186/0x186 [ 402.214681][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 402.214703][ C1] ? print_irqtrace_events+0x210/0x210 [ 402.214721][ C1] ? kthread_data+0x4e/0xc0 [ 402.214742][ C1] ? wq_worker_sleeping+0x5f/0x270 [ 402.214757][ C1] schedule+0xbf/0x180 [ 402.214775][ C1] worker_thread+0xe9d/0x1200 [ 402.214796][ C1] ? _raw_spin_unlock+0x40/0x40 [ 402.214817][ C1] kthread+0x28d/0x320 [ 402.214829][ C1] ? worker_clr_flags+0x190/0x190 [ 402.214844][ C1] ? kthread_blkcg+0xd0/0xd0 [ 402.214858][ C1] ret_from_fork+0x1f/0x30 [ 402.214884][ C1] [ 402.217002][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 402.574558][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 402.582523][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 402.592561][ T27] Call Trace: [ 402.595827][ T27] [ 402.598753][ T27] dump_stack_lvl+0x1e3/0x2cb [ 402.603685][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 402.609134][ T27] ? panic+0x764/0x764 [ 402.613189][ T27] ? vscnprintf+0x59/0x80 [ 402.617528][ T27] panic+0x318/0x764 [ 402.621429][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 402.627569][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 402.632925][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 402.639188][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 402.645454][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 402.651614][ T27] watchdog+0xfc7/0xfd0 [ 402.655767][ T27] ? watchdog+0x1f8/0xfd0 [ 402.660086][ T27] kthread+0x28d/0x320 [ 402.664137][ T27] ? hungtask_pm_notify+0x50/0x50 [ 402.669163][ T27] ? kthread_blkcg+0xd0/0xd0 [ 402.673746][ T27] ret_from_fork+0x1f/0x30 [ 402.678155][ T27] [ 402.681439][ T27] Kernel Offset: disabled [ 402.685758][ T27] Rebooting in 86400 seconds..