last executing test programs: 2m52.237500074s ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000800008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m51.87550993s ago: executing program 2 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000259000000000000a48000000090a050600000000000000000000000008000a40000000000900010073797a30000000000800054000000038040009800800034000000085090002"], 0x70}}, 0x0) 2m51.617247106s ago: executing program 2 (id=23): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000440)=0x1, 0x4) 2m51.285960635s ago: executing program 2 (id=30): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000400)={[{@barrier}, {@nodecompose}, {@force}, {@barrier}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@nls={'nls', 0x3d, 'cp1255'}}, {@uid}, {@umask={'umask', 0x3d, 0x1}}, {@uid}, {}, {@creator={'creator', 0x3d, "65fd44c2"}}, {@nodecompose}, {@gid}, {@uid}, {@part={'part', 0x3d, 0x4}}, {}, {@barrier}, {@umask={'umask', 0x3d, 0x7}}, {}, {@barrier}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@barrier}, {@gid}, {@force}, {@umask={'umask', 0x3d, 0x1}}, {@uid}]}, 0x1, 0x6da, &(0x7f0000004980)="$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") mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x201100, 0x0) 2m50.542743075s ago: executing program 2 (id=40): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syslog(0x0, 0x0, 0x0) 2m49.961768084s ago: executing program 2 (id=46): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32, @ANYBLOB="100016800c0000e00f000000000000000600150008000000050014"], 0x48}}, 0x0) 2m49.896019993s ago: executing program 32 (id=46): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32, @ANYBLOB="100016800c0000e00f000000000000000600150008000000050014"], 0x48}}, 0x0) 1m50.81387409s ago: executing program 0 (id=648): r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1899e1a5c338c547) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x4000) 1m50.713620745s ago: executing program 0 (id=650): unshare(0x8040480) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x57) fchown(r0, 0x0, 0x0) 1m50.419399312s ago: executing program 0 (id=654): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f00000000c0)=@v2, 0x14, 0x0) ftruncate(r0, 0x0) 1m50.073950236s ago: executing program 0 (id=659): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d69736f383835392d312c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d85f194712c626172726965722c6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303231372c6465636f6d706f73652c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c637265683661746f723d010000002c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nobarrier,subj_role=nls,obj_role=!-+,appraise_type=imasig,\x00'], 0x1, 0x6e4, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d4e1, 0x0) 1m49.925870333s ago: executing program 0 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0xa, 0x10e8, 0x0, 0x1208, 0x3c8, 0x3c8, 0x1208, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'syzkaller0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv6=@private0, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 1m48.535430404s ago: executing program 0 (id=671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0xa00, 0x0, 0x0) 1m48.179746589s ago: executing program 33 (id=671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0xa00, 0x0, 0x0) 1m28.767504536s ago: executing program 5 (id=829): syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="006d99bfb563f2e593485eac32c31bad659fdd3f7c72ce83897543d617da7d8ad7169638d94b29a0c17cd33e65e282c739f95ef456a2c5f981953e51b16b5f505fd6e2c41621b689914ef85c136390fc9077a3279a13836364e2fe8595b3731709698d1fcba9fbb25451b0bfcde918a90f5b3b65aee41b9c7b161bf92a8151c056b629d47d8e758cdcac9938c2ee0d4ba25dcf63ea44d64eca4357e5718a36f7ce13f0190ce5d7"], 0x1, 0x646, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1m28.527673716s ago: executing program 5 (id=831): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1m28.223234485s ago: executing program 5 (id=834): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x2}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x106}}, {@fmask={'fmask', 0x3d, 0x9}}, {@fmask={'fmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x3}}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 1m27.667788426s ago: executing program 5 (id=838): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x2818c02, &(0x7f0000002580)=ANY=[], 0x1, 0xc3b, &(0x7f0000001940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=""/172) 1m26.906469588s ago: executing program 5 (id=849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 1m26.263317806s ago: executing program 5 (id=855): timer_create(0x3, 0x0, &(0x7f0000001280)=0x0) timer_settime(r0, 0x1, &(0x7f0000001300)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000001400)) 1m25.658271765s ago: executing program 34 (id=855): timer_create(0x3, 0x0, &(0x7f0000001280)=0x0) timer_settime(r0, 0x1, &(0x7f0000001300)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000001400)) 58.295405627s ago: executing program 8 (id=1004): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x7, 0xf08, &(0x7f0000001e40)="$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") creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 56.222534086s ago: executing program 8 (id=1015): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 55.233883044s ago: executing program 8 (id=1019): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x101]}, &(0x7f0000000240)=0x6) 54.616797547s ago: executing program 8 (id=1022): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xfbb, 0x5, 0x0, 0xffffffff, 0x0, "00000000000000001b00", 0xff7fffff, 0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) 53.980097692s ago: executing program 8 (id=1025): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) 53.387902961s ago: executing program 8 (id=1029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vcan0\x00'}) 52.326266206s ago: executing program 7 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 51.482285873s ago: executing program 7 (id=1038): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 50.899152028s ago: executing program 7 (id=1040): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0, 0x0) 50.759902025s ago: executing program 3 (id=1041): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e8005000100"], 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0006"], 0x34}}, 0xc000) 50.377425482s ago: executing program 7 (id=1043): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000880)=0x641f, 0x4) poll(&(0x7f0000000080)=[{r0, 0x2114}], 0x1, 0xffffffffffbffff8) 49.986064362s ago: executing program 3 (id=1045): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x16ba82, 0x124) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x20000c, &(0x7f0000000240)={[{@barrier}, {@barrier}, {@gid}, {@part={'part', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@force}, {@nls={'nls', 0x3d, 'maciceland'}}, {@nodecompose}, {@umask}]}, 0x1, 0x6da, &(0x7f0000000580)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054ZAyVXHQCGXnHRTmdmZ1Ur7lKzHJv39xMx8M99z/rMzsw/EBPB/a3k2ys8iieXZN7fS9d2dhebEzsJUnt2MiEpElCLKrUUka5Hl3smn+Ha6MS+f9Ovnw9Wltz//aveL1lo5n7LypUH1eqh0b9rOp6hHxES+7DbZp8VPjnZ/qL27fdsbVdLewzRgN4rAxV+eq1V4bvtdttt5H/8nmw+qfpzzFhhTSeu+2WUmYjoiqhGtu35+dSid7+hO3/ZFDwAAAACOq3b8Ki/sxV5sxaWzGA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8U+XP/0/yqVSk65EUz/+v5NsiT4+h4Q9C/GyqtXx29oMBAAAAAAAAgDP36l7sxVZcKtb3k+w3/9c6fuP/VrwXG7ES63EztqIRm7EZ6zEfETMdDVW2Gpub6/NZzYgrA2rejk971Lzdf4x3TnmfAQAAAAAAAGDMVYfkP5zs3vb7WD74/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZBEjHRWmTTlSI9E6VyRFQjopKW2474tEh/TSS9Nj47/3EAAADAc6keXk2qI9R54f3Yi624VKzvJ9ln/mvZ5+VqvBdrsRmrsRnNWIl7+Wfo9FN/aXdnobm7s/Aonbrb/emXxxp61mK0vnvo3fPLWYla3I/VbMvNuBtJ7GdKeSsv7+4spMtHvcf1QTqm5Ce5AaOZ6EjfS2fXP8nSfz78LUL5WLt4QqW+OTNZ7mQ7InP52NIal4sI9I7E0KNTHtjTfJTa3/xcGdxT75h/MLj36SOlen5zcyGORuJ2lNpH6NrgSER89x8f//pBc+3hg/sbs+OzSz29P7TE0UgsdETi+jcoEsPNZZG42l5fjl/Er2I2vpx6K9ZjNX4TjdiMlXqR38hfz+l8ZnCkPpvuXHtr2EjSc7Levn71GlM9Do0p6vHzLNWI17JjeilWI4nHEbESb2R/t2O+fTU4OMJXRzjrSyNcaTvc+F62aIcpav3L/m20Jk9LGtfLHXHtvObOZHmdWw6i9GLPKBX3utHvRx3K38kTaQt/GHh/OG9HIzHfEYmX+r1eWiH9634632iuPVx/0Hh3xP5ez5fpefSnsbpLpEf4xajmO3c5myfZOTWX5b3UvsMejlcl/8WlpdSVd7Vdr3Wm/jIex71DZ+oPYzEWYykrfS0rPdl1x0rzrrdbOnwNT/PSd1rl9g87ne+3Hkez9X4IgPE2/f3pSu2/tX/XPqr9sfag9mb1Z1M/mnqlEpP/mvxxeW7i9dIryd/jo/jdwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DaePH3YaDZX1nsnSr2zksG1Gs394kFiA8ocSiT5o3JGKJxsPHm6P7TBwYmpfHgnrH6aieJpjcML189wGMn20eNVHX4siqc8jdBF0hXwtPKJx1z0fLBlcgwO5dFE/fQaLF6wHVnHf/XWeh2viYjoVXjIhWPiNK4+wEW6tfno3VsbT57+YPVR452Vd1bWJhcXl+aWFt9YuHV/tbky15p3VDiXh98C56Hz7URbJSJeHV53wINaAQAAAAAAAAAAgDN0Hv8LcdH7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy9Lc9G+VkkMT93cy5d391ZaKZTkT4oWY6IUkQkv41I/hlxJ1pTzHQ0l/Tr58PVpbc//2r3i4O2ykX5UsR233qj2c6nqEfERL48rfbuDm+vcpCc6pGdtCOTBuxGETi4aP8LAAD//7co7JU=") sendfile(r0, r0, 0x0, 0x8) 49.817021149s ago: executing program 7 (id=1047): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="007a93b9d6cfc45636b907277d9dbc239676439a4b03adcc20dc27453a1a833c802e8650810eff9fdc8bb6e768076d890752db516f649dec5891435b1f58f186364bdaa1125ea94a5612d57018cabe3abbf321deff9ed2c8785be41507def3240220d808940ac2bb251873ea3f1bdb0d5ee04cf4ffd184dbadc5c6f95ad3a49841645535cd00151145a07f0000007792c93473b9878343b5f12ef5329eb2f14caa61dc0dd0aa6d91ebd9522a076cb40792e8541570a733ad433f6fc926cfa2890a6005fd74a822076e172f1f5ca254e5936e8c3eb5b4d966f1d6b8772fcc0f000f85bd3ed8c95c267f4cd1acd681b1", @ANYRES64], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./bus\x00', 0x105c, 0x0, 0x4, 0x0, 0x0) 49.259844487s ago: executing program 3 (id=1051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) unshare(0x20000400) shutdown(r0, 0x0) 49.020509721s ago: executing program 7 (id=1052): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 48.564678801s ago: executing program 3 (id=1055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900000000000800090000000080"], 0x184}}, 0x0) 48.389574018s ago: executing program 4 (id=1056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x74}}, 0x0) 48.009749844s ago: executing program 3 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={0x25c, r1, 0x1, 0xfffffffc, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x225, 0xa9, @random="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"}]}, 0x25c}}, 0x0) 47.996039122s ago: executing program 4 (id=1059): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x4899}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) 47.60992872s ago: executing program 3 (id=1061): sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x709, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 47.578308002s ago: executing program 4 (id=1062): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000a40)={0xa, @pix_mp}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000280)={0xa, {0x0, 0x0, 0x0, 0xf14}}) 47.250265374s ago: executing program 4 (id=1064): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x1) 46.448438965s ago: executing program 4 (id=1066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000640)="04", 0x1) 45.995121863s ago: executing program 4 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001580)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}}, 0x0) 43.712685988s ago: executing program 6 (id=1070): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) creat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 42.893622578s ago: executing program 6 (id=1071): r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_getscheduler(r0) 42.693457046s ago: executing program 6 (id=1072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0002000000000000000000040007800800010000001e"], 0x2c}}, 0x0) 42.403136539s ago: executing program 6 (id=1073): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f00000001c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYRESDEC=0x0], 0x1, 0x65b, &(0x7f0000002280)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6) 42.145015141s ago: executing program 6 (id=1074): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffff, 0x0, "090000000000001b"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) 41.928334177s ago: executing program 6 (id=1075): add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1046}, &(0x7f0000002500), &(0x7f0000002540)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 38.318586311s ago: executing program 35 (id=1029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vcan0\x00'}) 33.551453706s ago: executing program 36 (id=1052): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 32.532283491s ago: executing program 37 (id=1061): sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x709, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 30.551544991s ago: executing program 38 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001580)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}}, 0x0) 26.545844018s ago: executing program 39 (id=1075): add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1046}, &(0x7f0000002500), &(0x7f0000002540)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 16.083988859s ago: executing program 1 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b00000000000000000e000000080003003e"], 0x1c}}, 0x0) 15.962237757s ago: executing program 1 (id=1105): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB='nonumtail=0,shortname=win9=,errors=remount-ro,iocharset=default,uni_xlate=0,nonumtail=0,utf8=0,flush,rodir,shortname>mixed,shortname=winnt,shortname=win95,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x97, 0x2b0, &(0x7f0000000c00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 15.702248973s ago: executing program 1 (id=1106): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x4008af10, &(0x7f0000000080)) 15.583166706s ago: executing program 1 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 15.453997099s ago: executing program 1 (id=1108): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x4, &(0x7f0000000000)={@in, 0x0, 0x0, 0x0, 0x0, "563dbb9c87a52dc31f531f724ec80c30401072bc5c50cc553f68ddb6eb3e2cb700ee60a7d07e208342a99fd64bdc9a5b970afaafe54ab920d404c09a27728e5635a457b848fdb9f2790093e0ea5de269"}, 0xd8) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f00000001c0)) 15.30727643s ago: executing program 1 (id=1109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3d}}) 0s ago: executing program 40 (id=1109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3d}}) kernel console output (not intermixed with test programs): 2] usb 6-1: too many configurations: 201, using maximum allowed: 8 [ 135.033768][ T5902] usb 6-1: config index 0 descriptor too short (expected 64945, got 72) [ 135.059929][ T5902] usb 6-1: config index 1 descriptor too short (expected 64945, got 72) [ 135.133529][ T5902] usb 6-1: config index 2 descriptor too short (expected 64945, got 72) [ 135.168735][ T5902] usb 6-1: config index 3 descriptor too short (expected 64945, got 72) [ 135.199900][ T5902] usb 6-1: config index 4 descriptor too short (expected 64945, got 72) [ 135.242995][ T5902] usb 6-1: config index 5 descriptor too short (expected 64945, got 72) [ 135.263633][ T5902] usb 6-1: config index 6 descriptor too short (expected 64945, got 72) [ 135.275320][ T5902] usb 6-1: config index 7 descriptor too short (expected 64945, got 72) [ 135.294810][ T5902] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.325411][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.366160][ T5902] usb 6-1: Product: syz [ 135.370447][ T5902] usb 6-1: Manufacturer: syz [ 135.372613][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.409297][ T5902] usb 6-1: SerialNumber: syz [ 135.445476][ T5902] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 135.526108][ T5922] gp8psk: usb out operation failed. [ 135.534682][ T5922] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 135.558924][ T5922] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 135.563443][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 135.572615][ T964] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.605464][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.609974][ T5922] usb 5-1: USB disconnect, device number 2 [ 135.632878][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.653054][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.663724][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.688867][ T5899] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.705886][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.726940][ T5899] usb 4-1: config 0 descriptor?? [ 135.822674][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 135.842698][ T5923] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 135.870677][ T5923] usb 2-1: config 0 has no interface number 0 [ 135.887116][ T5923] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.908613][ T5923] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.927882][ T5923] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 135.947785][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.975614][ T5923] usb 2-1: config 0 descriptor?? [ 136.149107][ T5899] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 136.194621][ T5899] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 136.219889][ T5899] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 136.282894][ T5903] usb 6-1: USB disconnect, device number 5 [ 136.288912][ T5899] microsoft 0003:045E:07DA.0004: no inputs found [ 136.335087][ T5899] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 136.394096][ T5899] usb 4-1: USB disconnect, device number 5 [ 136.414387][ T5923] uclogic 0003:5543:0081.0005: interface is invalid, ignoring [ 136.664204][ T5899] usb 2-1: USB disconnect, device number 6 [ 136.885183][ T964] usb 6-1: Service connection timeout for: 256 [ 136.891463][ T964] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 136.937174][ T964] ath9k_htc: Failed to initialize the device [ 136.944864][ T5903] usb 6-1: ath9k_htc: USB layer deinitialized [ 137.353959][ T7489] loop5: detected capacity change from 0 to 1024 [ 137.382527][ T7489] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 137.393001][ T7489] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 137.417253][ T7489] EXT4-fs (loop5): invalid journal inode [ 138.187933][ T7525] loop6: detected capacity change from 0 to 8 [ 138.223079][ T7525] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 138.227528][ T7528] warning: `syz.5.528' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.524594][ T7536] netlink: 'syz.4.534': attribute type 6 has an invalid length. [ 138.550662][ T7538] loop5: detected capacity change from 0 to 256 [ 138.583402][ T7538] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 138.754430][ T7490] loop0: detected capacity change from 0 to 32768 [ 138.777028][ T29] audit: type=1800 audit(1729871020.864:8): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.532" name="bus" dev="loop5" ino=1048615 res=0 errno=0 [ 138.819861][ T7490] XFS: noikeep mount option is deprecated. [ 139.120921][ T7556] loop6: detected capacity change from 0 to 1024 [ 139.157944][ T7535] loop3: detected capacity change from 0 to 32768 [ 139.165479][ T7535] bcachefs: bch2_parse_one_mount_opt() Invalid mount option data_replicas: must be a number [ 139.308846][ T7490] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 139.431200][ T7566] loop4: detected capacity change from 0 to 512 [ 139.438986][ T7566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.563861][ T7566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.563997][ T7566] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.644135][ T7490] XFS (loop0): Ending clean mount [ 139.701899][ T7490] XFS (loop0): Quotacheck needed: Please wait. [ 139.792340][ T7490] XFS (loop0): Quotacheck: Done. [ 139.816425][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.831558][ T7490] XFS (loop0): syz.0.518 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 140.004298][ T5835] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 140.633982][ T7595] loop3: detected capacity change from 0 to 256 [ 140.641352][ T7595] exfat: Deprecated parameter 'namecase' [ 140.752826][ T7595] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 140.815969][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.561'. [ 141.219971][ T7578] loop1: detected capacity change from 0 to 32768 [ 141.288438][ T29] audit: type=1326 audit(1729871023.374:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f7e719 code=0x7ffc0000 [ 141.311647][ T29] audit: type=1326 audit(1729871023.374:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f7e719 code=0x7ffc0000 [ 141.344498][ T29] audit: type=1326 audit(1729871023.434:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9d92f7e719 code=0x7ffc0000 [ 141.400861][ T29] audit: type=1326 audit(1729871023.434:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f7e719 code=0x7ffc0000 [ 141.498733][ T7578] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 141.537952][ T29] audit: type=1326 audit(1729871023.434:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9d92f7e719 code=0x7ffc0000 [ 141.628494][ T29] audit: type=1326 audit(1729871023.434:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7624 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d92f7e719 code=0x7ffc0000 [ 141.749556][ T29] audit: type=1800 audit(1729871023.714:15): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.548" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 141.797993][ T7644] syz.6.575 uses obsolete (PF_INET,SOCK_PACKET) [ 141.846387][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 142.082660][ T5923] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.116070][ T7651] loop0: detected capacity change from 0 to 4096 [ 142.147677][ T7651] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 142.376421][ T5923] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.390910][ T7651] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 142.402679][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.441753][ T5923] usb 5-1: Product: syz [ 142.451679][ T5923] usb 5-1: Manufacturer: syz [ 142.469358][ T7664] loop6: detected capacity change from 0 to 2048 [ 142.470878][ T5923] usb 5-1: SerialNumber: syz [ 142.510490][ T7664] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 142.527885][ T5923] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 142.553367][ T964] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 142.592607][ T7664] UDF-fs: Scanning with blocksize 512 failed [ 142.721683][ T7664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.203525][ T5846] Bluetooth: hci0: command tx timeout [ 143.356401][ T7671] ebt_among: src integrity fail: 100 [ 143.386690][ T7675] loop5: detected capacity change from 0 to 2048 [ 143.806382][ T7681] loop0: detected capacity change from 0 to 1024 [ 143.834266][ T7652] loop3: detected capacity change from 0 to 32768 [ 144.094167][ T7652] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 144.181206][ T7675] hpfs: filesystem error: improperly stopped; already mounted read-only [ 144.181293][ T7675] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 144.277820][ T7681] hfsplus: request for non-existent node 16777216 in B*Tree [ 144.277882][ T7681] hfsplus: request for non-existent node 16777216 in B*Tree [ 144.278577][ T7681] hfsplus: request for non-existent node 16777216 in B*Tree [ 144.278597][ T7681] hfsplus: request for non-existent node 16777216 in B*Tree [ 144.368184][ T7652] XFS (loop3): Ending clean mount [ 144.414234][ T964] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 144.414390][ T964] ath9k_htc: Failed to initialize the device [ 144.426345][ T5923] usb 5-1: USB disconnect, device number 3 [ 144.434772][ T5923] usb 5-1: ath9k_htc: USB layer deinitialized [ 144.525425][ T65] hfsplus: request for non-existent node 16777216 in B*Tree [ 144.525493][ T65] hfsplus: request for non-existent node 16777216 in B*Tree [ 144.635447][ T5837] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 145.122837][ T5899] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 145.249798][ T7709] netlink: 52 bytes leftover after parsing attributes in process `syz.3.597'. [ 145.312546][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 145.342570][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.382804][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.438807][ T7713] loop4: detected capacity change from 0 to 64 [ 145.445514][ T5899] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 145.532521][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.576845][ T7716] loop3: detected capacity change from 0 to 512 [ 145.740140][ T7713] Bad inode number on dev loop4: 4217349 is out of range [ 145.810895][ T7716] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.830318][ T7716] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 145.841404][ T5899] usb 6-1: config 0 descriptor?? [ 145.912692][ T7716] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 145.937909][ T7716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 145.956383][ T7716] System zones: 0-2, 18-18, 34-34 [ 145.979669][ T7716] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 145.997483][ T7716] EXT4-fs (loop3): 1 truncate cleaned up [ 146.006170][ T7716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.056002][ T7716] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 146.181365][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.282935][ T5923] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 146.356028][ T7696] loop0: detected capacity change from 0 to 32768 [ 146.366390][ T5899] bigben 0003:146B:0902.0006: unexpected rdesc, please submit for review [ 146.375713][ T5899] bigben 0003:146B:0902.0006: collection stack underflow [ 146.382955][ T5899] bigben 0003:146B:0902.0006: item 0 0 0 12 parsing failed [ 146.390725][ T5899] bigben 0003:146B:0902.0006: parse failed [ 146.396767][ T5899] bigben 0003:146B:0902.0006: probe with driver bigben failed with error -22 [ 146.492738][ T7696] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 146.531646][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 146.542794][ T7696] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 146.568985][ T7696] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 146.614495][ T5922] usb 6-1: USB disconnect, device number 6 [ 146.621511][ T5901] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 146.630534][ T5901] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 146.662290][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.694979][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.705058][ T5923] usb 7-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 146.714366][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.735854][ T5923] usb 7-1: config 0 descriptor?? [ 146.761392][ T5901] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 130ms [ 146.774206][ T5901] gfs2: fsid=syz:syz.0: jid=0: Done [ 146.781617][ T7696] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 146.862896][ T964] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.912643][ T5899] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.022535][ T964] usb 2-1: Using ep0 maxpacket: 16 [ 147.066281][ T964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.074138][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.103106][ T964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.123195][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.157796][ T5899] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 147.172645][ T964] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.185743][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.203827][ T5923] razer 0003:1532:010D.0007: item fetching failed at offset 4/6 [ 147.215570][ T5923] razer 0003:1532:010D.0007: probe with driver razer failed with error -22 [ 147.216256][ T5899] usb 5-1: config 0 descriptor?? [ 147.252570][ T964] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.272174][ T964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.314974][ T964] usb 2-1: config 0 descriptor?? [ 147.419118][ T5901] usb 7-1: USB disconnect, device number 4 [ 147.632260][ T7756] loop3: detected capacity change from 0 to 512 [ 147.650277][ T7756] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.698460][ T7756] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 147.760361][ T5899] dragonrise 0003:0079:0006.0008: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 147.787615][ T5899] dragonrise 0003:0079:0006.0008: no inputs found [ 147.837753][ T5899] dragonrise 0003:0079:0006.0008: force feedback init failed [ 147.892783][ T7756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 147.902774][ T7756] System zones: 1-12 [ 147.921177][ T7755] loop5: detected capacity change from 0 to 32768 [ 147.939859][ T7755] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.622 (7755) [ 147.940644][ T7756] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.621: corrupted in-inode xattr: e_value size too large [ 147.967596][ T964] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 147.975926][ T964] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 147.997073][ T964] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input8 [ 148.000022][ T7756] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.621: couldn't read orphan inode 15 (err -117) [ 148.039140][ T7755] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.059704][ T7755] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 148.109452][ T7755] BTRFS info (device loop5): using free-space-tree [ 148.121880][ T7756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.135476][ T5946] usb 5-1: USB disconnect, device number 4 [ 148.442979][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.513458][ T964] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 148.544813][ T7755] BTRFS error (device loop5): balance: invalid convert metadata profile raid1 [ 148.739399][ T964] usb 2-1: USB disconnect, device number 7 [ 148.815892][ T5839] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.830808][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 148.876482][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 148.937344][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.012559][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.020057][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.078709][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.130954][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.150630][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.199403][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.216625][ T7805] capability: warning: `syz.6.638' uses 32-bit capabilities (legacy support in use) [ 149.242458][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.253803][ T7806] netlink: 36 bytes leftover after parsing attributes in process `syz.6.638'. [ 149.262431][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.284669][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.293050][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.300528][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.309655][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.331854][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.383113][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.428064][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.508413][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.539361][ T7817] loop5: detected capacity change from 0 to 8 [ 149.554858][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.613707][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.640630][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.678472][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.717648][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.744956][ T7817] SQUASHFS error: xz decompression failed, data probably corrupt [ 149.751191][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.753322][ T7817] SQUASHFS error: Failed to read block 0xa8: -5 [ 149.778604][ T7817] SQUASHFS error: xz decompression failed, data probably corrupt [ 149.786664][ T7817] SQUASHFS error: Failed to read block 0xa8: -5 [ 149.802209][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.831890][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.852479][ T29] audit: type=1800 audit(1729871031.884:16): pid=7817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.642" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 149.879994][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.922014][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 149.962523][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.001821][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.059488][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.075665][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.152522][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.180475][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.207648][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.254754][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.262279][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.325717][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.339136][ T7808] loop4: detected capacity change from 0 to 32768 [ 150.415371][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.449698][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.457369][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.465488][ T5922] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 150.478143][ T7808] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 150.489870][ T5922] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 150.630464][ T7808] XFS (loop4): Ending clean mount [ 150.771632][ T5840] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 150.808723][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'. [ 150.887862][ T7861] loop0: detected capacity change from 0 to 1024 [ 150.982692][ T5835] hfsplus: bad catalog entry type [ 150.987852][ T5835] hfsplus: bad catalog entry type [ 151.169222][ T65] hfsplus: b-tree write err: -5, ino 4 [ 151.181105][ T7867] fuse: Unexpected value for 'default_permissions' [ 151.532633][ T7877] loop4: detected capacity change from 0 to 64 [ 151.877040][ T7863] loop1: detected capacity change from 0 to 40427 [ 151.919977][ T7863] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 151.927847][ T7863] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 151.996694][ T7863] F2FS-fs (loop1): invalid crc value [ 152.079046][ T7863] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.325268][ T7879] team0: Port device virt_wifi0 added [ 152.329797][ T7863] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 152.352567][ T7863] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 152.635573][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.748689][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.850213][ T7899] loop3: detected capacity change from 0 to 64 [ 152.893665][ T7897] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 153.139779][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.161812][ T7905] loop5: detected capacity change from 0 to 1024 [ 153.238260][ T7905] EXT4-fs: Ignoring removed orlov option [ 153.270102][ T7905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.499214][ T7910] loop1: detected capacity change from 0 to 32768 [ 153.516043][ T7905] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 153.556792][ T7905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.682330][ T7905] System zones: 0-1, 3-12 [ 153.731817][ T7905] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 153.769855][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.780437][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.789914][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.800047][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.807831][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.818913][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.915228][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.989627][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.237259][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.694'. [ 154.693154][ T7950] loop6: detected capacity change from 0 to 128 [ 154.787640][ T7946] loop1: detected capacity change from 0 to 32768 [ 154.873633][ T7950] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.002576][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 155.037251][ T7955] netlink: 'syz.3.699': attribute type 2 has an invalid length. [ 155.053613][ T52] bridge_slave_1: left allmulticast mode [ 155.062451][ T52] bridge_slave_1: left promiscuous mode [ 155.068238][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.117847][ T7950] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.176691][ T7950] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.255555][ T52] bridge_slave_0: left allmulticast mode [ 155.261660][ T52] bridge_slave_0: left promiscuous mode [ 155.292619][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.383953][ T7968] loop5: detected capacity change from 0 to 128 [ 155.424181][ T7968] hpfs: bad mount options. [ 155.737349][ T6056] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.861458][ T7957] slcan: can't register candev [ 155.890626][ T7957] Falling back ldisc for ptm0. [ 155.922917][ T5846] Bluetooth: hci0: command tx timeout [ 156.636264][ T7997] loop1: detected capacity change from 0 to 1024 [ 156.720258][ T7997] UBIFS error (pid: 7997): cannot open "", error -22 [ 156.748873][ T5923] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.750113][ T7983] loop6: detected capacity change from 0 to 32768 [ 156.877110][ T7983] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.925438][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.965265][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.023625][ T5923] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 157.041635][ T7987] loop3: detected capacity change from 0 to 32768 [ 157.067644][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.084091][ T5923] usb 5-1: config 0 descriptor?? [ 157.120283][ T7983] XFS (loop6): Ending clean mount [ 157.142272][ T7987] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 157.162809][ T7983] XFS (loop6): Quotacheck needed: Please wait. [ 157.210019][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.239608][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.263075][ T52] bond0 (unregistering): Released all slaves [ 157.311668][ T7987] XFS (loop3): Ending clean mount [ 157.352098][ T5899] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 157.366173][ T5899] XFS (loop6): Unmount and run xfs_repair [ 157.371931][ T5899] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 157.379881][ T5899] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 157.388954][ T5899] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 157.398897][ T5899] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 157.408603][ T5899] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 157.417549][ T5899] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 157.426533][ T5899] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 157.435511][ T5899] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 157.444869][ T5899] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 157.463817][ T7987] XFS (loop3): Quotacheck needed: Please wait. [ 157.479374][ T12] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 157.504383][ T7983] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 157.602947][ T7923] chnl_net:caif_netlink_parms(): no params data found [ 157.735808][ T5923] logitech-djreceiver 0003:046D:C513.000B: unknown main item tag 0x0 [ 157.744725][ T5923] logitech-djreceiver 0003:046D:C513.000B: unknown main item tag 0x0 [ 157.832906][ T7987] XFS (loop3): Quotacheck: Done. [ 157.968581][ T5901] usb 5-1: USB disconnect, device number 5 [ 158.037812][ T5846] Bluetooth: hci0: command tx timeout [ 158.081791][ T6056] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.192916][ T6056] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 158.229753][ T5837] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 158.617106][ T8056] loop6: detected capacity change from 0 to 128 [ 158.699115][ T8056] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.711908][ T8056] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.980027][ T6056] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.195465][ T8075] syz.6.732 uses old SIOCAX25GETINFO [ 159.241534][ T8049] loop5: detected capacity change from 0 to 32768 [ 159.281121][ T5901] kernel write not supported for file /input/event0 (pid: 5901 comm: kworker/1:4) [ 159.293239][ T8049] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.727 (8049) [ 159.404719][ T8049] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.488036][ T8049] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 159.522931][ T8049] BTRFS info (device loop5): using free-space-tree [ 159.733939][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.741137][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.813962][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.850636][ T7923] bridge_slave_0: entered allmulticast mode [ 159.893612][ T7923] bridge_slave_0: entered promiscuous mode [ 159.911582][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.933159][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.940463][ T7923] bridge_slave_1: entered allmulticast mode [ 159.953913][ T7923] bridge_slave_1: entered promiscuous mode [ 160.004638][ T5923] usb 4-1: too many configurations: 201, using maximum allowed: 8 [ 160.038320][ T5923] usb 4-1: config index 0 descriptor too short (expected 64945, got 72) [ 160.082670][ T5844] Bluetooth: hci0: command tx timeout [ 160.117197][ T5923] usb 4-1: config index 1 descriptor too short (expected 64945, got 72) [ 160.194307][ T5923] usb 4-1: config index 2 descriptor too short (expected 64945, got 72) [ 160.232704][ T5923] usb 4-1: config index 3 descriptor too short (expected 64945, got 72) [ 160.246066][ T5923] usb 4-1: config index 4 descriptor too short (expected 64945, got 72) [ 160.274834][ T5923] usb 4-1: config index 5 descriptor too short (expected 64945, got 72) [ 160.284868][ T5839] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.327789][ T5923] usb 4-1: config index 6 descriptor too short (expected 64945, got 72) [ 160.344572][ T5923] usb 4-1: config index 7 descriptor too short (expected 64945, got 72) [ 160.362763][ T52] hsr_slave_0: left promiscuous mode [ 160.393375][ T5923] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 160.432497][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.461060][ T5923] usb 4-1: Product: syz [ 160.465963][ T52] hsr_slave_1: left promiscuous mode [ 160.504143][ T5923] usb 4-1: Manufacturer: syz [ 160.508837][ T5923] usb 4-1: SerialNumber: syz [ 160.543156][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.570302][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.582766][ T5923] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 160.612934][ T8121] loop6: detected capacity change from 0 to 8 [ 160.640025][ T5922] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 160.650613][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.690125][ T8121] SQUASHFS error: lzo decompression failed, data probably corrupt [ 160.700663][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.748106][ T8121] SQUASHFS error: Failed to read block 0x71: -5 [ 160.767604][ T8121] SQUASHFS error: lzo decompression failed, data probably corrupt [ 160.825051][ T8121] SQUASHFS error: Failed to read block 0x71: -5 [ 160.826664][ T52] veth1_macvtap: left promiscuous mode [ 160.842015][ T8123] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.870700][ T29] audit: type=1800 audit(1729871042.954:17): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.744" name="file0" dev="loop6" ino=3 res=0 errno=0 [ 160.898296][ T52] veth0_macvtap: left promiscuous mode [ 160.928973][ T52] veth1_vlan: left promiscuous mode [ 160.957318][ T52] veth0_vlan: left promiscuous mode [ 161.183999][ T8094] loop4: detected capacity change from 0 to 40427 [ 161.242246][ T8094] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 161.267521][ T8094] F2FS-fs (loop4): Image doesn't support compression [ 161.276229][ T8105] loop1: detected capacity change from 0 to 32768 [ 161.302633][ T8094] F2FS-fs (loop4): Image doesn't support compression [ 161.334098][ T8105] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.752 (8105) [ 161.363483][ T8094] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 161.382148][ T5899] usb 4-1: USB disconnect, device number 6 [ 161.416201][ T8094] F2FS-fs (loop4): invalid crc value [ 161.433559][ T8105] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 161.445643][ T8105] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 161.455980][ T8105] BTRFS info (device loop1): using free-space-tree [ 161.474867][ T8094] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.743170][ T8094] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.930371][ T5840] syz-executor: attempt to access beyond end of device [ 161.930371][ T5840] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.994860][ T5840] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 162.007167][ T5836] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 162.012460][ T5922] usb 4-1: Service connection timeout for: 256 [ 162.025598][ T5922] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 162.034221][ T5922] ath9k_htc: Failed to initialize the device [ 162.049938][ T5899] usb 4-1: ath9k_htc: USB layer deinitialized [ 162.162521][ T5844] Bluetooth: hci0: command tx timeout [ 162.329765][ T8156] loop3: detected capacity change from 0 to 512 [ 162.379597][ T8156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.441837][ T8156] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.753: corrupted in-inode xattr: invalid ea_ino [ 162.477474][ T8156] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.753: couldn't read orphan inode 15 (err -117) [ 162.512084][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.046765][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.937861][ T52] team0 (unregistering): Port device team_slave_1 removed [ 164.076485][ T8192] loop4: detected capacity change from 0 to 40427 [ 164.115676][ T8192] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.131183][ T52] team0 (unregistering): Port device team_slave_0 removed [ 164.250310][ T8192] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 164.420495][ T8188] loop1: detected capacity change from 0 to 40427 [ 164.446954][ T8188] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 164.464081][ T8188] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.537560][ T8207] loop5: detected capacity change from 0 to 16 [ 164.575177][ T8207] erofs: (device loop5): mounted with root inode @ nid 36. [ 164.584331][ T8188] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.705273][ T8207] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 164.776253][ T8188] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 164.792494][ T8188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.850587][ T8208] f2fs_ckpt-7:1: attempt to access beyond end of device [ 164.850587][ T8208] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.927074][ T8208] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 165.455588][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.587927][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.771939][ T8229] loop1: detected capacity change from 0 to 1024 [ 165.866095][ T8229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.910332][ T8229] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.987487][ T7923] team0: Port device team_slave_0 added [ 166.015992][ T7923] team0: Port device team_slave_1 added [ 166.114216][ T29] audit: type=1326 audit(1729871048.184:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1897e719 code=0x7ffc0000 [ 166.126731][ T8247] loop6: detected capacity change from 0 to 256 [ 166.158063][ T8247] exfat: Deprecated parameter 'namecase' [ 166.164065][ T8247] exfat: Deprecated parameter 'utf8' [ 166.248726][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.253403][ T29] audit: type=1326 audit(1729871048.184:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1897e719 code=0x7ffc0000 [ 166.262063][ T8247] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 166.282448][ T29] audit: type=1326 audit(1729871048.284:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9d1897e719 code=0x7ffc0000 [ 166.342816][ T29] audit: type=1326 audit(1729871048.284:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1897e719 code=0x7ffc0000 [ 166.381352][ T29] audit: type=1326 audit(1729871048.284:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1897e719 code=0x7ffc0000 [ 166.413953][ T8257] loop5: detected capacity change from 0 to 8 [ 166.463320][ T29] audit: type=1326 audit(1729871048.284:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f9d1897e719 code=0x7ffc0000 [ 166.492728][ T29] audit: type=1326 audit(1729871048.294:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1897e719 code=0x7ffc0000 [ 166.522713][ T964] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.531179][ T29] audit: type=1326 audit(1729871048.294:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8244 comm="syz.5.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1897e719 code=0x7ffc0000 [ 166.604530][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.614560][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.655706][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.674187][ T8257] SQUASHFS error: xz decompression failed, data probably corrupt [ 166.702606][ T8257] SQUASHFS error: Failed to read block 0xa8: -5 [ 166.709021][ T964] usb 4-1: Using ep0 maxpacket: 16 [ 166.727886][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.750963][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.764890][ T8257] SQUASHFS error: xz decompression failed, data probably corrupt [ 166.802457][ T964] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 166.832048][ T8257] SQUASHFS error: Failed to read block 0xa8: -5 [ 166.864481][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.876921][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.883854][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.925051][ T964] usb 4-1: config 0 descriptor?? [ 166.945323][ T29] audit: type=1800 audit(1729871048.974:26): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.791" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 166.982539][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.112529][ T5901] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 167.266569][ T5901] usb 7-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 167.302704][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.310782][ T5901] usb 7-1: Product: syz [ 167.330916][ T7923] hsr_slave_0: entered promiscuous mode [ 167.344598][ T5901] usb 7-1: Manufacturer: syz [ 167.349477][ T5901] usb 7-1: SerialNumber: syz [ 167.379311][ T5901] usb 7-1: config 0 descriptor?? [ 167.388265][ T7923] hsr_slave_1: entered promiscuous mode [ 167.404826][ T964] gembird 0003:11FF:3331.000C: unknown main item tag 0xd [ 167.412031][ T964] gembird 0003:11FF:3331.000C: unexpected long global item [ 167.421814][ T5901] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 167.458526][ T7923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.473167][ T7923] Cannot create hsr debugfs directory [ 167.480112][ T964] gembird 0003:11FF:3331.000C: probe with driver gembird failed with error -22 [ 167.640297][ T964] usb 4-1: USB disconnect, device number 7 [ 167.721748][ T8288] Bluetooth: MGMT ver 1.23 [ 167.755507][ T8260] loop1: detected capacity change from 0 to 32768 [ 167.866782][ T5901] input: sonixb as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9 [ 168.052953][ T5922] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 168.073750][ T5899] usb 7-1: USB disconnect, device number 5 [ 168.209754][ T7923] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 168.219537][ T8260] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 168.239076][ T8260] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 168.259214][ T7923] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 168.266843][ T8260] bcachefs (loop1): Version upgrade required: [ 168.266843][ T8260] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 168.266843][ T8260] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 168.266843][ T8260] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 168.350704][ T7923] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 168.389287][ T8260] bcachefs (loop1): dropping and reconstructing all alloc info [ 168.443129][ T8260] bcachefs (loop1): check_topology... done [ 168.490117][ T8260] bcachefs (loop1): accounting_read... [ 168.559661][ T7923] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 168.593108][ T8260] done [ 168.606977][ T8260] bcachefs (loop1): alloc_read... done [ 168.623146][ T8260] bcachefs (loop1): stripes_read... done [ 168.643381][ T8260] bcachefs (loop1): snapshots_read... done [ 168.672571][ T8260] bcachefs (loop1): check_allocations... [ 168.688793][ T8304] loop4: detected capacity change from 0 to 32768 [ 168.704062][ T8304] XFS: noikeep mount option is deprecated. [ 168.765723][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.783061][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.808236][ T5922] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 168.817603][ T8260] done [ 168.819224][ T8260] bcachefs (loop1): going read-write [ 168.831057][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.835420][ T8304] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 168.874473][ T5922] usb 6-1: config 0 descriptor?? [ 168.888895][ T8260] bcachefs (loop1): done starting filesystem [ 168.914399][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.951713][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.128890][ T7923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.139580][ T7923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.155720][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.162900][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.177737][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.185115][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.211788][ T8329] loop3: detected capacity change from 0 to 256 [ 169.307732][ T5836] bcachefs (loop1): shutting down [ 169.318704][ T5922] cougar 0003:060B:700A.000D: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.5-1/input0 [ 169.371241][ T8304] XFS (loop4): Ending clean mount [ 169.394356][ T8304] XFS (loop4): Quotacheck needed: Please wait. [ 169.481953][ T5836] bcachefs (loop1): going read-only [ 169.488191][ T5836] bcachefs (loop1): finished waiting for writes to stop [ 169.506991][ T8] usb 6-1: USB disconnect, device number 7 [ 169.557050][ T5836] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 169.560300][ T8329] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 169.631700][ T8329] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 169.631700][ T8329] [ 169.658694][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.672552][ T5922] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 169.789146][ T8304] XFS (loop4): Quotacheck: Done. [ 169.840487][ T5922] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.852580][ T5922] usb 7-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.899276][ T5840] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 169.901318][ T5922] usb 7-1: config 1 interface 0 has no altsetting 0 [ 169.940496][ T8024] bcachefs (loop1): bch2_write_super(): fatal error loop1: Superblock write was silently dropped! (seq 0 expected 53) [ 169.942086][ T5922] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.955008][ T8024] bcachefs (loop1): fatal error - emergency read only [ 169.962848][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.978099][ T5922] usb 7-1: SerialNumber: syz [ 169.988191][ T5922] cdc_ether 7-1:1.0: skipping garbage [ 169.994413][ T5922] usb 7-1: bad CDC descriptors [ 169.999747][ T5836] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 170.046834][ T5836] bcachefs (loop1): unshutdown complete, journal seq 14 [ 170.060421][ T5836] bcachefs (loop1): done going read-only, filesystem not clean [ 170.142750][ T5836] bcachefs (loop1): shutdown complete [ 170.324228][ T5922] usb 7-1: USB disconnect, device number 6 [ 170.406742][ T7923] veth0_vlan: entered promiscuous mode [ 170.418846][ T7923] veth1_vlan: entered promiscuous mode [ 170.444262][ T7923] veth0_macvtap: entered promiscuous mode [ 170.454531][ T7923] veth1_macvtap: entered promiscuous mode [ 170.471676][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.482322][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.492258][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.503706][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.514378][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.524951][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.534951][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.545545][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.555540][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.566347][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.578079][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.588332][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.599062][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.609788][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.621213][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.631162][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.641672][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.647267][ T8371] loop3: detected capacity change from 0 to 256 [ 170.651684][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.668277][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.678488][ T7923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.689362][ T7923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.701146][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.723951][ T8371] exfat: Deprecated parameter 'utf8' [ 170.784137][ T7923] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.788496][ T8371] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 170.826243][ T7923] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.863835][ T7923] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.873350][ T7923] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.025797][ T8377] loop6: detected capacity change from 0 to 128 [ 171.093378][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.146338][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.336547][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.360553][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.670519][ T8389] sp0: Synchronizing with TNC [ 171.675420][ T8395] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 171.677528][ T8394] IPVS: stopping backup sync thread 8395 ... [ 171.816381][ T8397] loop7: detected capacity change from 0 to 2048 [ 171.893740][ T8397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.980979][ T8405] loop4: detected capacity change from 0 to 1024 [ 172.036017][ T7923] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.052598][ T8405] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.156856][ T8405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.217168][ T8415] loop5: detected capacity change from 0 to 764 [ 172.293000][ T8405] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.4.812: corrupted in-inode xattr: bad e_name length [ 172.296674][ T8405] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 172.296809][ T8419] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #2: comm syz.4.812: corrupted in-inode xattr: bad e_name length [ 172.432143][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.929035][ T8436] loop5: detected capacity change from 0 to 256 [ 172.929132][ T8432] loop6: detected capacity change from 0 to 4096 [ 172.955458][ T8436] exfat: Deprecated parameter 'namecase' [ 173.004775][ T8432] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 173.017014][ T8436] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 173.169512][ T8447] IPVS: length: 60 != 8 [ 173.403906][ T8451] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 173.413783][ T8450] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 173.666393][ T8453] loop5: detected capacity change from 0 to 2048 [ 173.870605][ T8468] ntfs3: Bad value for 'gid' [ 173.889608][ T8468] ntfs3: Bad value for 'gid' [ 173.962491][ T5946] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 173.972681][ T5899] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 174.101133][ T5839] UDF-fs: error (device loop5): udf_read_inode: (ino 839) failed !bh [ 174.151719][ T5839] UDF-fs: error (device loop5): udf_read_inode: (ino 839) failed !bh [ 174.195472][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 174.210774][ T5946] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 174.219482][ T5899] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.237064][ T5946] usb 2-1: config 0 has no interface number 0 [ 174.247953][ T5899] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.262618][ T5946] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 174.307520][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 174.312766][ T5899] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 174.344888][ T5946] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 174.369140][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.407458][ T5946] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 174.437841][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.447607][ T5899] usb 8-1: config 0 descriptor?? [ 174.463428][ T5899] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 174.472489][ T5946] usb 2-1: Product: syz [ 174.476694][ T5946] usb 2-1: Manufacturer: syz [ 174.483186][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 174.491231][ T8489] veth0_virt_wifi: entered promiscuous mode [ 174.497051][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.505619][ T5899] dvb-usb: bulk message failed: -22 (3/0) [ 174.518650][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.522494][ T5946] usb 2-1: SerialNumber: syz [ 174.546895][ T5899] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 174.557396][ T8] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 174.558939][ T8489] veth0_virt_wifi: left promiscuous mode [ 174.583557][ T5946] usb 2-1: config 0 descriptor?? [ 174.589309][ T8455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.598927][ T8455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.613554][ T5899] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 174.627408][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.637191][ T5899] usb 8-1: media controller created [ 174.674006][ T8] usb 7-1: config 0 descriptor?? [ 174.698826][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.775914][ T5899] dvb-usb: bulk message failed: -22 (6/0) [ 174.812653][ T5899] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 174.829822][ T8455] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.841'. [ 174.863225][ T8455] openvswitch: netlink: Key type 517 is out of range max 32 [ 174.872074][ T5899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input10 [ 174.918631][ T5946] asix 2-1:0.251: probe with driver asix failed with error -71 [ 174.933021][ T3487] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.948129][ T5899] dvb-usb: schedule remote query interval to 150 msecs. [ 174.972089][ T5946] usb 2-1: USB disconnect, device number 8 [ 174.992469][ T5899] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 175.035283][ T5899] usb 8-1: USB disconnect, device number 2 [ 175.115382][ T8] corsair 0003:1B1C:1B02.000E: unbalanced collection at end of report description [ 175.153709][ T8] corsair 0003:1B1C:1B02.000E: parse failed [ 175.160003][ T5899] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 175.170024][ T8] corsair 0003:1B1C:1B02.000E: probe with driver corsair failed with error -22 [ 175.316697][ T3487] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.345622][ T5922] usb 7-1: USB disconnect, device number 7 [ 175.499958][ T8504] loop7: detected capacity change from 0 to 8 [ 175.779599][ T3487] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.798070][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.820656][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.830920][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.844666][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.855740][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.863813][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.018941][ T8513] SQUASHFS error: xz decompression failed, data probably corrupt [ 176.078489][ T8494] loop3: detected capacity change from 0 to 32768 [ 176.094591][ T8513] SQUASHFS error: Failed to read block 0xa8: -5 [ 176.213725][ T8513] SQUASHFS error: xz decompression failed, data probably corrupt [ 176.252777][ T8494] JBD2: Ignoring recovery information on journal [ 176.297322][ T3487] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.311387][ T8513] SQUASHFS error: Failed to read block 0xa8: -5 [ 176.370535][ T29] audit: type=1800 audit(1729871058.424:27): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.858" name="file0" dev="loop7" ino=3 res=0 errno=0 [ 176.389954][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.487063][ T8506] loop4: detected capacity change from 0 to 32768 [ 176.494779][ T8506] XFS: ikeep mount option is deprecated. [ 176.539798][ T8494] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 176.653024][ T8536] loop7: detected capacity change from 0 to 1024 [ 176.670211][ T8536] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 176.680467][ T8536] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 176.698109][ T8506] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 176.733147][ T8536] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 176.744116][ T8494] (syz.3.854,8494,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry too close to end - offset=32, inode=16945, rec_len=280, name_len=10 [ 176.829130][ T5837] ocfs2: Unmounting device (7,3) on (node local) [ 176.844214][ T8536] EXT4-fs error (device loop7): ext4_get_journal_inode:5762: inode #5: comm syz.7.866: unexpected bad inode w/o EXT4_IGET_BAD [ 176.962698][ T8536] EXT4-fs (loop7): no journal found [ 177.108512][ T8550] loop6: detected capacity change from 0 to 4096 [ 177.128773][ T8536] EXT4-fs (loop7): can't get journal size [ 177.262603][ T8506] XFS (loop4): Ending clean mount [ 177.280519][ T8558] random: crng reseeded on system resumption [ 177.304573][ T8536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.330035][ T8509] chnl_net:caif_netlink_parms(): no params data found [ 177.440701][ T3487] bridge_slave_1: left allmulticast mode [ 177.452418][ T3487] bridge_slave_1: left promiscuous mode [ 177.458399][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.517843][ T8554] loop1: detected capacity change from 0 to 32768 [ 177.519686][ T8506] XFS (loop4): Quotacheck needed: Please wait. [ 177.537834][ T8554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.869 (8554) [ 177.554533][ T8561] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.584901][ T3487] bridge_slave_0: left allmulticast mode [ 177.590614][ T3487] bridge_slave_0: left promiscuous mode [ 177.623076][ T8554] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.633649][ T8554] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 177.642506][ T8554] BTRFS info (device loop1): using free-space-tree [ 177.652199][ T7923] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.664977][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.877311][ T8506] XFS (loop4): Quotacheck: Done. [ 177.922733][ T5846] Bluetooth: hci3: command tx timeout [ 178.032332][ T5840] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 178.083811][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 178.092515][ T5846] Bluetooth: hci2: Injecting HCI hardware error event [ 178.101990][ T5846] Bluetooth: hci2: hardware error 0x00 [ 178.794484][ T8594] loop7: detected capacity change from 0 to 64 [ 178.820726][ T5836] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.343758][ T8582] loop6: detected capacity change from 0 to 40427 [ 179.369127][ T8582] F2FS-fs (loop6): invalid crc value [ 179.446709][ T8582] F2FS-fs (loop6): Found nat_bits in checkpoint [ 179.651135][ T8582] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 179.812908][ T8620] loop3: detected capacity change from 0 to 256 [ 179.849840][ T29] audit: type=1326 audit(1729871061.934:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8fd7e719 code=0x7ffc0000 [ 179.872019][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.939932][ T29] audit: type=1326 audit(1729871061.934:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8fd7e719 code=0x7ffc0000 [ 179.968377][ T8620] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 179.981836][ T29] audit: type=1326 audit(1729871061.934:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fef8fd7e719 code=0x7ffc0000 [ 180.013726][ T5844] Bluetooth: hci3: command tx timeout [ 180.146445][ T29] audit: type=1326 audit(1729871061.934:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8fd7e719 code=0x7ffc0000 [ 180.203172][ T29] audit: type=1326 audit(1729871061.934:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8fd7e719 code=0x7ffc0000 [ 180.225324][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.415081][ T5846] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 180.839392][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.908707][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.971894][ T3487] bond0 (unregistering): Released all slaves [ 180.980061][ T5842] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.162523][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 181.177480][ T5842] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.199691][ T5842] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.211333][ T5842] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.225304][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.232032][ T5842] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 181.241698][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.273587][ T5842] usb 4-1: config 0 descriptor?? [ 181.317031][ T8666] loop7: detected capacity change from 0 to 256 [ 181.706311][ T5842] hid-generic 0003:045E:05DA.000F: unknown main item tag 0x2 [ 181.736404][ T5842] hid-generic 0003:045E:05DA.000F: unknown main item tag 0x1 [ 181.753860][ T5842] hid-generic 0003:045E:05DA.000F: unknown main item tag 0x1 [ 181.761339][ T5842] hid-generic 0003:045E:05DA.000F: unbalanced collection at end of report description [ 181.772183][ T5842] hid-generic 0003:045E:05DA.000F: probe with driver hid-generic failed with error -22 [ 181.897275][ T5899] usb 4-1: USB disconnect, device number 8 [ 181.918017][ T8664] loop1: detected capacity change from 0 to 32768 [ 181.931520][ T8664] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.908 (8664) [ 181.953783][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.961732][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.986769][ T8509] bridge_slave_0: entered allmulticast mode [ 182.003658][ T8509] bridge_slave_0: entered promiscuous mode [ 182.082998][ T5846] Bluetooth: hci3: command tx timeout [ 182.151341][ T8656] loop6: detected capacity change from 0 to 32768 [ 182.263524][ T8671] loop7: detected capacity change from 0 to 32768 [ 182.292609][ T8656] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.906 (8656) [ 182.326899][ T8664] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.334194][ T8671] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.383040][ T8664] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 182.412754][ T8656] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 182.423888][ T8656] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 182.433515][ T8656] BTRFS info (device loop6): disk space caching is enabled [ 182.442747][ T8656] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 182.442870][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.464890][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.472589][ T8664] BTRFS info (device loop1): using free-space-tree [ 182.474935][ T8509] bridge_slave_1: entered allmulticast mode [ 182.529940][ T8509] bridge_slave_1: entered promiscuous mode [ 182.656929][ T8671] XFS (loop7): Ending clean mount [ 182.708365][ T8671] XFS (loop7): Quotacheck needed: Please wait. [ 182.765520][ T8656] BTRFS info (device loop6): rebuilding free space tree [ 182.889319][ T8656] BTRFS info (device loop6): disabling free space tree [ 182.889868][ T8671] XFS (loop7): Quotacheck: Done. [ 182.903990][ T8656] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.992556][ T8656] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.998623][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.044659][ T7923] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.069370][ T3487] hsr_slave_0: left promiscuous mode [ 183.077165][ T5836] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.094238][ T3487] hsr_slave_1: left promiscuous mode [ 183.143318][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.150851][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.192057][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.215880][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.288733][ T6056] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 183.310567][ T3487] veth1_macvtap: left promiscuous mode [ 183.344443][ T3487] veth0_macvtap: left promiscuous mode [ 183.352857][ T3487] veth1_vlan: left promiscuous mode [ 183.358811][ T3487] veth0_vlan: left promiscuous mode [ 183.604301][ T8726] netlink: 'syz.6.919': attribute type 30 has an invalid length. [ 184.064673][ T5901] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 184.169278][ T5846] Bluetooth: hci3: command tx timeout [ 184.254546][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 184.297172][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.316562][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.338903][ T5901] usb 7-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 184.350153][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.389150][ T5901] usb 7-1: config 0 descriptor?? [ 184.580873][ T3487] team0 (unregistering): Port device virt_wifi0 removed [ 184.618301][ T8728] loop1: detected capacity change from 0 to 32768 [ 184.732167][ T8728] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 184.842757][ T5901] wacom 0003:056A:00B7.0010: unknown main item tag 0x0 [ 184.849865][ T5901] wacom 0003:056A:00B7.0010: unknown main item tag 0x0 [ 184.855424][ T8728] XFS (loop1): Ending clean mount [ 184.856966][ T5901] wacom 0003:056A:00B7.0010: unknown main item tag 0x0 [ 184.879786][ T5901] wacom 0003:056A:00B7.0010: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 184.920047][ T5901] wacom 0003:056A:00B7.0010: hidraw0: USB HID v0.00 Device [HID 056a:00b7] on usb-dummy_hcd.6-1/input0 [ 184.956624][ T5901] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B7.0010/input/input11 [ 184.999193][ T8732] loop7: detected capacity change from 0 to 32768 [ 185.033147][ T5836] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 185.103516][ T5901] usb 7-1: USB disconnect, device number 8 [ 185.305648][ T8732] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 185.333007][ T8732] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 185.341175][ T8732] bcachefs (loop7): Version upgrade required: [ 185.341175][ T8732] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 185.341175][ T8732] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 185.341175][ T8732] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 185.462988][ T8732] bcachefs (loop7): dropping and reconstructing all alloc info [ 185.520458][ T8732] bcachefs (loop7): check_topology... done [ 185.541215][ T8732] bcachefs (loop7): accounting_read... done [ 185.569529][ T8732] bcachefs (loop7): alloc_read... done [ 185.602475][ T8732] bcachefs (loop7): stripes_read... done [ 185.608295][ T8732] bcachefs (loop7): snapshots_read... done [ 185.649721][ T8732] bcachefs (loop7): check_allocations... [ 185.671425][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 185.720499][ T8732] done [ 185.748515][ T8732] bcachefs (loop7): going read-write [ 185.755177][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 185.770106][ T8732] bcachefs (loop7): done starting filesystem [ 185.917354][ T8732] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 185.917396][ T8732] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, shutting down [ 185.980619][ T5842] bcachefs (loop7): going read-only [ 185.997312][ T8732] bcachefs (loop7): inconsistency detected - emergency read only at journal seq 10 [ 186.011357][ T8732] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 186.011394][ T8732] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, shutting down [ 186.040212][ T5842] bcachefs (loop7): flushing journal and stopping allocators, journal seq 10 [ 186.040365][ T5842] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 10 [ 186.040566][ T5842] bcachefs (loop7): unshutdown complete, journal seq 10 [ 186.157709][ T8732] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 186.157740][ T8732] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, shutting down [ 186.192474][ T8732] bcachefs (loop7): bch2_btree_update_start(): error EIO [ 186.214199][ T8732] bcachefs (loop7 inum 4099 offset 4096): user write error while doing btree update: EIO [ 186.234956][ T5842] bcachefs (loop7): finished waiting for writes to stop [ 186.241939][ T5842] bcachefs (loop7): done going read-only, filesystem not clean [ 186.291816][ T7923] bcachefs (loop7): shutting down [ 186.356645][ T7923] bcachefs (loop7): shutdown complete [ 186.797692][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.852906][ T5842] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 186.991461][ T8509] team0: Port device team_slave_0 added [ 187.023952][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 187.039212][ T8509] team0: Port device team_slave_1 added [ 187.053072][ T5842] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 187.064276][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.102966][ T5842] usb 7-1: Product: syz [ 187.107800][ T5842] usb 7-1: Manufacturer: syz [ 187.132533][ T5842] usb 7-1: SerialNumber: syz [ 187.152623][ T5842] usb 7-1: config 0 descriptor?? [ 187.349089][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.384757][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.442534][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.488784][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.514188][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.563918][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 187.609357][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.615068][ T5842] airspy 7-1:0.0: Board ID: 00 [ 187.641881][ T5842] airspy 7-1:0.0: Firmware version: [ 187.816351][ T5842] airspy 7-1:0.0: usb_control_msg() failed -71 request 11 [ 187.826959][ T8791] loop4: detected capacity change from 0 to 512 [ 187.852244][ T5842] airspy 7-1:0.0: Registered as swradio24 [ 187.861467][ T5842] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 187.885705][ T8791] EXT4-fs (loop4): blocks per group (64) and clusters per group (20800) inconsistent [ 187.903502][ T8509] hsr_slave_0: entered promiscuous mode [ 187.948862][ T5842] usb 7-1: USB disconnect, device number 9 [ 187.956485][ T8509] hsr_slave_1: entered promiscuous mode [ 187.996510][ T8509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.005886][ T8509] Cannot create hsr debugfs directory [ 188.444800][ T8808] loop3: detected capacity change from 0 to 512 [ 188.491766][ T8808] EXT4-fs: Ignoring removed oldalloc option [ 188.574163][ T8808] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 188.586661][ T8808] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.939: invalid indirect mapped block 2683928664 (level 1) [ 188.649939][ T8509] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 188.675332][ T8808] EXT4-fs (loop3): 1 truncate cleaned up [ 188.681910][ T8808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.705482][ T8509] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 188.800756][ T8808] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.939: Invalid block bitmap block 3 in block_group 0 [ 188.839714][ T8509] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 189.055897][ T8509] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 189.156469][ T8821] loop1: detected capacity change from 0 to 256 [ 189.224950][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.367449][ T8821] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xe95cf635, utbl_chksum : 0xe619d30d) [ 189.864187][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.003821][ T8509] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.077020][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.084374][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.205218][ T184] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.212469][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.244404][ T8822] loop6: detected capacity change from 0 to 4096 [ 190.285641][ T8822] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 190.418970][ T8509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.672152][ T8844] loop7: detected capacity change from 0 to 1024 [ 191.074484][ T8822] ntfs3(loop6): ino=5, "/" directory corrupted [ 191.565874][ T8865] loop1: detected capacity change from 0 to 64 [ 191.727090][ T8870] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 191.739125][ T8873] loop7: detected capacity change from 0 to 256 [ 191.832499][ T5901] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.985572][ T8873] FAT-fs (loop7): Directory bread(block 64) failed [ 191.992184][ T8873] FAT-fs (loop7): Directory bread(block 65) failed [ 192.079888][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 192.122053][ T8873] FAT-fs (loop7): Directory bread(block 66) failed [ 192.129648][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.213648][ T8873] FAT-fs (loop7): Directory bread(block 67) failed [ 192.220350][ T8873] FAT-fs (loop7): Directory bread(block 68) failed [ 192.232544][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.342444][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.362270][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.388903][ T8873] FAT-fs (loop7): Directory bread(block 69) failed [ 192.434894][ T8873] FAT-fs (loop7): Directory bread(block 70) failed [ 192.485344][ T5901] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.502689][ T8873] FAT-fs (loop7): Directory bread(block 71) failed [ 192.531075][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.962'. [ 192.592838][ T8873] FAT-fs (loop7): Directory bread(block 72) failed [ 192.599444][ T8873] FAT-fs (loop7): Directory bread(block 73) failed [ 192.607969][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.682280][ T5901] usb 4-1: config 0 descriptor?? [ 192.692495][ T5899] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 193.020954][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.125411][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.255289][ T5901] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 193.295372][ T5899] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 193.368230][ T5901] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 193.412464][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.527432][ T5899] usb 7-1: config 0 descriptor?? [ 193.569261][ T5901] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input15 [ 193.886259][ T5901] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 193.899136][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.905686][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.065935][ T5899] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 194.142774][ T5901] usb 4-1: USB disconnect, device number 9 [ 194.167014][ T8900] loop4: detected capacity change from 0 to 2048 [ 194.221554][ T5899] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 194.335754][ T5899] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 194.409341][ T8900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.432219][ T5899] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 194.524128][ T5899] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 194.580436][ T8900] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.649488][ T5899] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 194.746103][ T5899] aquacomputer_d5next 0003:0C70:F00B.0012: unknown main item tag 0x0 [ 194.875020][ T5899] aquacomputer_d5next 0003:0C70:F00B.0012: hidraw0: USB HID v0.00 Device [HID 0c70:f00b] on usb-dummy_hcd.6-1/input0 [ 194.919573][ T8918] loop7: detected capacity change from 0 to 47 [ 195.054269][ T5901] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 195.176980][ T5899] usb 7-1: USB disconnect, device number 10 [ 195.191145][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.355291][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.420510][ T8509] veth0_vlan: entered promiscuous mode [ 195.521888][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.611467][ T8509] veth1_vlan: entered promiscuous mode [ 195.623385][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 195.729979][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.873979][ T5901] usb 2-1: config 0 descriptor?? [ 196.066705][ T8509] veth0_macvtap: entered promiscuous mode [ 196.215521][ T8509] veth1_macvtap: entered promiscuous mode [ 196.373762][ T5899] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 196.391161][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.487978][ T5901] logitech 0003:046D:C294.0013: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 196.547331][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.588096][ T5901] logitech 0003:046D:C294.0013: no inputs found [ 196.628408][ T5899] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.645833][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.715155][ T5901] usb 2-1: USB disconnect, device number 9 [ 196.733191][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.777119][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.884831][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 196.906474][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.973358][ T5899] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.007284][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.072478][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.092306][ T5899] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.138146][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.146631][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.178223][ T5899] usb 7-1: config 0 descriptor?? [ 197.187387][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.251587][ T5903] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 197.271215][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.334587][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.470391][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.506702][ T5903] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.540204][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.561469][ T5903] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.612940][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.634206][ T5903] usb 8-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 197.676693][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.697174][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.726358][ T5899] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 197.764669][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.778155][ T5903] usb 8-1: config 0 descriptor?? [ 197.807542][ T5899] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 197.852572][ T5899] plantronics 0003:047F:FFFF.0014: unbalanced collection at end of report description [ 197.868983][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.918021][ T5899] plantronics 0003:047F:FFFF.0014: parse failed [ 197.965309][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.996359][ T5899] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 198.036491][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.114435][ T5899] usb 7-1: USB disconnect, device number 11 [ 198.146266][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.246666][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.369299][ T5903] wacom 0003:056A:0325.0015: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.7-1/input0 [ 198.383046][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.497007][ T8509] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.536287][ T5903] usb 8-1: USB disconnect, device number 3 [ 198.592421][ T8509] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.683932][ T8509] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.744653][ T8509] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.861431][ T8946] loop1: detected capacity change from 0 to 4096 [ 198.931853][ T8946] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 199.372778][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.482007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.823444][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.831349][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.879197][ T8967] loop3: detected capacity change from 0 to 2048 [ 200.997835][ T8974] loop6: detected capacity change from 0 to 2048 [ 201.052634][ T8967] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 201.135416][ T8974] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.248511][ T8979] loop8: detected capacity change from 0 to 256 [ 201.334228][ T8967] cifs: Unknown parameter 'anchor' [ 201.351628][ T8982] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.393419][ T8979] exfat: Deprecated parameter 'utf8' [ 201.482219][ T8979] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 202.502506][ T5903] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 202.516362][ T9004] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1002'. [ 202.621158][ T9004] netlink: 'syz.1.1002': attribute type 6 has an invalid length. [ 202.772614][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 202.833103][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.942975][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.044920][ T5903] usb 7-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 203.164361][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.276758][ T5903] usb 7-1: config 0 descriptor?? [ 203.384008][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 203.438607][ T9010] loop8: detected capacity change from 0 to 4096 [ 203.645868][ T9025] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.691196][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.869445][ T5903] waltop 0003:172F:0501.0016: item fetching failed at offset 2/5 [ 203.877456][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.974574][ T5903] waltop 0003:172F:0501.0016: probe with driver waltop failed with error -22 [ 203.998078][ T9028] NILFS error (device loop8): nilfs_dotdot: directory #12 missing '.' [ 204.009862][ T5899] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 204.156606][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.188599][ T5903] usb 7-1: USB disconnect, device number 12 [ 204.315451][ T5899] usb 5-1: config 0 descriptor?? [ 204.345063][ T9028] Remounting filesystem read-only [ 204.769236][ T8509] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 204.942657][ T5899] wacom 0003:056A:032F.0017: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.4-1/input0 [ 205.144202][ T5899] usb 5-1: USB disconnect, device number 6 [ 206.081680][ T9052] loop6: detected capacity change from 0 to 2048 [ 206.166666][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 206.173260][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 206.333995][ T9052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.633423][ T9067] loop7: detected capacity change from 0 to 256 [ 207.029707][ T6056] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.519586][ T9074] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1027'. [ 207.780759][ T9074] Êü: entered promiscuous mode [ 208.911995][ T9097] Illegal XDP return value 3101374438 on prog (id 52) dev N/A, expect packet loss! [ 209.372201][ T9105] loop1: detected capacity change from 0 to 256 [ 209.673658][ T9109] loop3: detected capacity change from 0 to 1024 [ 209.711385][ T9105] FAT-fs (loop1): Directory bread(block 64) failed [ 209.759667][ T9105] FAT-fs (loop1): Directory bread(block 65) failed [ 209.820299][ T9105] FAT-fs (loop1): Directory bread(block 66) failed [ 209.892798][ T9105] FAT-fs (loop1): Directory bread(block 67) failed [ 209.967664][ T9105] FAT-fs (loop1): Directory bread(block 68) failed [ 210.029385][ T9105] FAT-fs (loop1): Directory bread(block 69) failed [ 210.077638][ T9105] FAT-fs (loop1): Directory bread(block 70) failed [ 210.164431][ T9105] FAT-fs (loop1): Directory bread(block 71) failed [ 210.230774][ T9105] FAT-fs (loop1): Directory bread(block 72) failed [ 210.290699][ T9105] FAT-fs (loop1): Directory bread(block 73) failed [ 210.298300][ T9078] loop6: detected capacity change from 0 to 32768 [ 210.470169][ T9078] JBD2: Ignoring recovery information on journal [ 210.626387][ T9124] openvswitch: netlink: Actions may not be safe on all matching packets [ 210.789893][ T9078] JBD2: journal reset failed [ 210.804851][ T9078] (syz.6.1026,9078,1):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 210.881874][ T9078] (syz.6.1026,9078,1):ocfs2_check_volume:2423 ERROR: ocfs2 journal load failed! -4 [ 211.032370][ C0] sched: DL replenish lagged too much [ 211.288895][ T9131] loop3: detected capacity change from 0 to 1024 [ 211.337107][ T9134] loop7: detected capacity change from 0 to 22 [ 211.424563][ T9134] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 211.518187][ T9134] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 211.576962][ T9137] 9pnet_fd: p9_fd_create_unix (9137): problem connecting socket: éq‰Y’3aK: -111 [ 211.734097][ T6303] hfsplus: b-tree write err: -5, ino 4 [ 212.373988][ T9149] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.616929][ T9151] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1055'. [ 212.695175][ T9151] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1055'. [ 213.618120][ T9167] sg_write: data in/out 209152/8 bytes for SCSI command 0x5c-- guessing data in; [ 213.618120][ T9167] program syz.1.1063 not setting count and/or reply_len properly [ 213.859082][ T9169] loop4: detected capacity change from 0 to 512 [ 213.941917][ T9169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.027152][ T9169] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.168858][ T9169] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #2: comm syz.4.1064: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 214.195198][ T9148] loop6: detected capacity change from 0 to 32768 [ 214.246023][ T9148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1048 (9148) [ 214.283216][ T9169] EXT4-fs (loop4): Remounting filesystem read-only [ 214.373188][ T9148] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.442584][ T9148] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 214.465824][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.475094][ T9148] BTRFS info (device loop6): using free-space-tree [ 215.070060][ T6056] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.855757][ T9174] loop1: detected capacity change from 0 to 32768 [ 215.989621][ T9174] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 216.114818][ T9174] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 216.162178][ T9174] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 216.213483][ T9174] OCFS2: File system is now read-only. [ 216.241432][ T9174] (syz.1.1065,9174,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 216.280726][ T9202] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 216.335724][ T9202] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 216.372508][ T9202] (syz.1.1065,9202,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 216.406809][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 216.561459][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 216.886674][ T9199] loop6: detected capacity change from 0 to 32768 [ 217.049092][ T9199] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 217.049092][ T9199] [ 217.108400][ T9199] ERROR: (device loop6): remounting filesystem as read-only [ 217.142920][ T9199] ialloc: diAlloc returned -5! [ 217.362783][ T5904] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.533632][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 217.555006][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.591560][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.629652][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.672567][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 217.701831][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.752868][ T5904] usb 2-1: config 0 descriptor?? [ 218.237054][ T5904] logitech 0003:046D:C287.0018: unknown main item tag 0x0 [ 218.293165][ T5904] logitech 0003:046D:C287.0018: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.1-1/input0 [ 218.345943][ T5904] logitech 0003:046D:C287.0018: no inputs found [ 218.402729][ T9210] nbd: illegal input index 1966080 [ 218.476291][ T5904] usb 2-1: USB disconnect, device number 10 [ 218.591982][ T9212] loop6: detected capacity change from 0 to 164 [ 218.624084][ T9212] rock: directory entry would overflow storage [ 218.644893][ T9212] rock: sig=0x66, size=4, remaining=3 [ 218.691444][ T9212] rock: directory entry would overflow storage [ 218.710887][ T9212] rock: sig=0x66, size=4, remaining=3 [ 218.917281][ T9213] [U] [ 219.532636][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 219.709625][ T5903] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 219.729704][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.747496][ T5903] usb 2-1: Product: syz [ 219.752016][ T5903] usb 2-1: Manufacturer: syz [ 219.762175][ T5903] usb 2-1: SerialNumber: syz [ 219.779331][ T5903] usb 2-1: config 0 descriptor?? [ 220.033296][ T5903] usb-storage 2-1:0.0: USB Mass Storage device detected [ 220.318130][ T5903] usb 2-1: USB disconnect, device number 11 [ 220.942224][ T5844] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 221.332546][ T5903] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.501200][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.519327][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.530594][ T5903] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.551736][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.567549][ T5903] usb 2-1: SerialNumber: syz [ 221.838834][ T5903] usb 2-1: 0:2 : does not exist [ 221.899652][ T5903] usb 2-1: USB disconnect, device number 12 [ 223.107976][ T9234] loop1: detected capacity change from 0 to 4096 [ 223.146308][ T9234] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 223.439157][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.456036][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.465513][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.475222][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.483633][ T5846] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.500564][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.486008][ T9242] loop1: detected capacity change from 0 to 32768 [ 224.506183][ T9242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1086 (9242) [ 224.573295][ T9242] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.611023][ T9242] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 224.632245][ T9242] BTRFS info (device loop1): using free-space-tree [ 224.961563][ T5836] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 225.602667][ T5846] Bluetooth: hci6: command tx timeout [ 227.682693][ T5846] Bluetooth: hci6: command tx timeout [ 227.854564][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 227.866344][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 227.885216][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 227.893694][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 227.904351][ T5844] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 227.911647][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.792023][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 228.803803][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 228.813580][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 228.824759][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 228.839910][ T5846] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 228.850678][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 229.764659][ T5846] Bluetooth: hci6: command tx timeout [ 230.002569][ T5846] Bluetooth: hci7: command tx timeout [ 230.768772][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 230.778541][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 230.787223][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 230.795458][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 230.805809][ T5844] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 230.813500][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 230.883873][ T5846] Bluetooth: hci8: command tx timeout [ 231.842552][ T5846] Bluetooth: hci6: command tx timeout [ 232.103402][ T5846] Bluetooth: hci7: command tx timeout [ 232.883341][ T5846] Bluetooth: hci9: command tx timeout [ 232.962623][ T5846] Bluetooth: hci8: command tx timeout [ 233.536404][ T9295] loop1: detected capacity change from 0 to 4096 [ 233.632639][ T9296] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.162897][ T5846] Bluetooth: hci7: command tx timeout [ 234.777983][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.796641][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.832071][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.841886][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.850094][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.865666][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.962563][ T5846] Bluetooth: hci9: command tx timeout [ 235.042753][ T5846] Bluetooth: hci8: command tx timeout [ 236.244250][ T5846] Bluetooth: hci7: command tx timeout [ 237.042764][ T5846] Bluetooth: hci9: command tx timeout [ 237.122750][ T5846] Bluetooth: hci8: command tx timeout [ 239.122687][ T5846] Bluetooth: hci9: command tx timeout [ 241.905776][ T54] Bluetooth: hci2: command tx timeout [ 242.372439][ T5901] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 242.532776][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 242.540082][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.580020][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.603262][ T5901] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 242.620517][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.661260][ T5901] usb 2-1: config 0 descriptor?? [ 243.127983][ T5901] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 243.348108][ T5901] ft260 0003:0403:6030.0019: failed to retrieve chip version [ 243.374171][ T5901] ft260 0003:0403:6030.0019: probe with driver ft260 failed with error -71 [ 243.399313][ T5901] usb 2-1: USB disconnect, device number 13 [ 243.923639][ T54] Bluetooth: hci2: command tx timeout [ 244.099417][ T9308] loop1: detected capacity change from 0 to 4096 [ 244.160657][ T9309] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.031517][ T9321] loop1: detected capacity change from 0 to 256 [ 245.058686][ T9321] vfat: Bad value for 'shortname' [ 246.002698][ T54] Bluetooth: hci2: command tx timeout [ 248.082565][ T54] Bluetooth: hci2: command tx timeout [ 249.527897][ T5840] syz-executor (5840) used greatest stack depth: 12464 bytes left [ 255.285578][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.297563][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.260601][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.270000][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.280565][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.288959][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.297664][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.311781][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.403972][ T5846] Bluetooth: hci0: command tx timeout [ 266.484856][ T5846] Bluetooth: hci0: command tx timeout [ 268.567172][ T5846] Bluetooth: hci0: command tx timeout [ 270.644876][ T5846] Bluetooth: hci0: command tx timeout [ 283.825429][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.835767][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.849828][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.865502][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.874244][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.881910][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.924626][ T54] Bluetooth: hci1: command tx timeout [ 287.970967][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.984768][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.994852][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.010512][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.017981][ T5844] Bluetooth: hci1: command tx timeout [ 288.024489][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 288.034772][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.928695][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.945126][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.954543][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.963759][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.982486][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.990060][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.082536][ T54] Bluetooth: hci1: command tx timeout [ 290.089046][ T5844] Bluetooth: hci3: command tx timeout [ 290.955065][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.966371][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.975361][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.986755][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.997458][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.013997][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.042724][ T54] Bluetooth: hci4: command tx timeout [ 292.164788][ T5844] Bluetooth: hci1: command tx timeout [ 292.170296][ T54] Bluetooth: hci3: command tx timeout [ 293.046082][ T54] Bluetooth: hci5: command tx timeout [ 293.122577][ T54] Bluetooth: hci4: command tx timeout [ 294.242564][ T54] Bluetooth: hci3: command tx timeout [ 294.943641][ T5844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 294.959382][ T5844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 294.969592][ T5844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 294.982520][ T5844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 294.991138][ T5844] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 295.005501][ T5844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 295.140463][ T5844] Bluetooth: hci5: command tx timeout [ 295.202570][ T5844] Bluetooth: hci4: command tx timeout [ 296.322561][ T5844] Bluetooth: hci3: command tx timeout [ 297.042638][ T5844] Bluetooth: hci10: command tx timeout [ 297.207468][ T5844] Bluetooth: hci5: command tx timeout [ 297.283179][ T5844] Bluetooth: hci4: command tx timeout [ 299.132630][ T5844] Bluetooth: hci10: command tx timeout [ 299.282451][ T5844] Bluetooth: hci5: command tx timeout [ 301.205979][ T5844] Bluetooth: hci10: command tx timeout [ 303.283150][ T5844] Bluetooth: hci10: command tx timeout [ 316.731371][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.738030][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.380465][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 323.405454][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 323.415014][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 323.430713][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 323.438745][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 323.453269][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 325.522642][ T5844] Bluetooth: hci11: command tx timeout [ 327.606426][ T54] Bluetooth: hci11: command tx timeout [ 329.682670][ T5844] Bluetooth: hci11: command tx timeout [ 331.762566][ T5844] Bluetooth: hci11: command tx timeout [ 345.133052][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 345.142898][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 345.151496][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 345.159735][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 345.171774][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 345.179413][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 347.202552][ T54] Bluetooth: hci12: command tx timeout [ 348.349216][ T6303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.171216][ T5846] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 349.207477][ T5846] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 349.217474][ T5846] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 349.225936][ T5846] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 349.235510][ T5846] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 349.243116][ T5846] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 349.282526][ T5846] Bluetooth: hci12: command tx timeout [ 349.525828][ T5846] Bluetooth: hci6: command 0x0406 tx timeout [ 349.759379][ T5844] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 349.836398][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 349.953068][ T5844] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 349.963338][ T5844] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 349.971499][ T5844] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 349.983321][ T5844] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 349.990867][ T5844] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 350.191125][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.198566][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.216537][ T9382] bridge_slave_0: entered allmulticast mode [ 350.239162][ T9382] bridge_slave_0: entered promiscuous mode [ 350.252256][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.260532][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.268397][ T9382] bridge_slave_1: entered allmulticast mode [ 350.276039][ T9382] bridge_slave_1: entered promiscuous mode [ 350.331838][ T9382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.368769][ T9382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.440371][ T9382] team0: Port device team_slave_0 added [ 350.452698][ T9382] team0: Port device team_slave_1 added [ 350.527478][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.538241][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.630655][ T9382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.691636][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.717008][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.792769][ T9382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.953704][ T9382] hsr_slave_0: entered promiscuous mode [ 350.983683][ T9382] hsr_slave_1: entered promiscuous mode [ 351.004024][ T9382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.011683][ T9382] Cannot create hsr debugfs directory [ 351.315945][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.326150][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.335484][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.347122][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.357882][ T5846] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 351.370183][ T5846] Bluetooth: hci13: command tx timeout [ 351.378785][ T5846] Bluetooth: hci12: command tx timeout [ 351.384800][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.082540][ T5846] Bluetooth: hci14: command tx timeout [ 353.442829][ T5144] Bluetooth: hci12: command tx timeout [ 353.448408][ T5144] Bluetooth: hci13: command tx timeout [ 353.473609][ T5844] Bluetooth: hci6: command tx timeout [ 354.162558][ T5844] Bluetooth: hci14: command tx timeout [ 354.644451][ T5844] Bluetooth: hci7: command 0x0406 tx timeout [ 354.650729][ T5844] Bluetooth: hci8: command 0x0406 tx timeout [ 355.138164][ T5846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 355.155546][ T5846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 355.163603][ T5846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 355.171565][ T5846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 355.181095][ T5846] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 355.191055][ T5846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 355.522466][ T54] Bluetooth: hci6: command tx timeout [ 355.527933][ T54] Bluetooth: hci13: command tx timeout [ 356.242775][ T54] Bluetooth: hci14: command tx timeout [ 357.283003][ T54] Bluetooth: hci9: command tx timeout [ 357.602616][ T5846] Bluetooth: hci6: command tx timeout [ 357.610119][ T54] Bluetooth: hci13: command tx timeout [ 358.322845][ T54] Bluetooth: hci14: command tx timeout [ 359.362866][ T54] Bluetooth: hci9: command tx timeout [ 359.682680][ T54] Bluetooth: hci6: command tx timeout [ 361.443199][ T54] Bluetooth: hci9: command tx timeout [ 363.522773][ T5846] Bluetooth: hci9: command tx timeout [ 364.902415][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 378.170265][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.178116][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.502788][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 383.513123][ T5844] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 383.523837][ T5844] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 383.546919][ T5844] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 383.555050][ T5844] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 383.562940][ T5844] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 385.370127][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 385.606139][ T5846] Bluetooth: hci15: command tx timeout [ 387.682564][ T5846] Bluetooth: hci15: command tx timeout [ 389.764951][ T5846] Bluetooth: hci15: command tx timeout [ 391.842563][ T5846] Bluetooth: hci15: command tx timeout [ 405.749609][ T5844] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 405.786119][ T5844] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 405.797040][ T5844] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 405.807220][ T5844] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 405.815549][ T5844] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 405.825904][ T5844] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 407.922610][ T5844] Bluetooth: hci16: command tx timeout [ 409.392939][ T5144] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 409.405652][ T5144] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 409.414204][ T5144] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 409.422825][ T5144] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 409.434904][ T5144] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 409.442551][ T5144] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 409.856891][ T54] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 409.866940][ T54] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 409.876339][ T54] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 409.884547][ T54] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 409.895760][ T54] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 409.921781][ T54] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 410.002598][ T5144] Bluetooth: hci16: command tx timeout [ 410.962610][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 410.968776][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 411.522471][ T5144] Bluetooth: hci17: command tx timeout [ 411.592942][ T54] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 411.606727][ T54] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 411.616236][ T54] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 411.624860][ T54] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 411.636264][ T54] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 411.643991][ T54] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 412.002599][ T5144] Bluetooth: hci18: command tx timeout [ 412.082800][ T5144] Bluetooth: hci16: command tx timeout [ 413.602468][ T5144] Bluetooth: hci17: command tx timeout [ 414.113143][ T9426] Bluetooth: hci18: command tx timeout [ 414.162714][ T9427] Bluetooth: hci16: command tx timeout [ 415.682419][ T9427] Bluetooth: hci17: command tx timeout [ 416.156811][ T9431] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 416.168051][ T9431] Bluetooth: hci18: command tx timeout [ 416.174903][ T9431] Bluetooth: hci4: command 0x0406 tx timeout [ 416.180950][ T9431] Bluetooth: hci5: command 0x0406 tx timeout [ 416.193180][ T9431] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 416.202187][ T9433] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 416.210976][ T9433] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 416.219798][ T9433] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 416.233828][ T9433] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 417.762538][ T9427] Bluetooth: hci17: command tx timeout [ 418.242580][ T9427] Bluetooth: hci18: command tx timeout [ 421.202537][ T9427] Bluetooth: hci10: command 0x0406 tx timeout [ 439.611959][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.622411][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.162918][ T30] INFO: task syz-executor:9267 blocked for more than 143 seconds. [ 442.182421][ T30] Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 442.191687][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 442.206802][ T30] task:syz-executor state:D stack:24128 pid:9267 tgid:9267 ppid:1 flags:0x00004006 [ 442.273710][ T30] Call Trace: [ 442.277076][ T30] [ 442.280035][ T30] __schedule+0x18af/0x4bd0 [ 442.323158][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.328900][ T30] ? __pfx___schedule+0x10/0x10 [ 442.432755][ T30] ? __pfx_lock_release+0x10/0x10 [ 442.437940][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 442.543198][ T30] ? schedule+0x90/0x320 [ 442.547536][ T30] schedule+0x14b/0x320 [ 442.551733][ T30] schedule_preempt_disabled+0x13/0x30 [ 442.622706][ T30] __mutex_lock+0x6a7/0xd70 [ 442.627337][ T30] ? __mutex_lock+0x52a/0xd70 [ 442.632073][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 442.692543][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 442.717800][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.762974][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 442.768032][ T30] setup_net+0x572/0x9e0 [ 442.803033][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 442.808712][ T30] ? __pfx_setup_net+0x10/0x10 [ 442.842480][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.848282][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.892301][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.898035][ T30] copy_net_ns+0x33f/0x570 [ 442.970268][ T30] create_new_namespaces+0x425/0x7b0 [ 442.992362][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 442.998187][ T30] ksys_unshare+0x57d/0xa70 [ 443.049880][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 443.062488][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.068915][ T30] ? do_syscall_64+0x100/0x230 [ 443.116370][ T30] __x64_sys_unshare+0x38/0x40 [ 443.121242][ T30] do_syscall_64+0xf3/0x230 [ 443.182479][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.188474][ T30] RIP: 0033:0x7f7b6257ff17 [ 443.224303][ T30] RSP: 002b:00007fffc1e69c18 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 443.259808][ T30] RAX: ffffffffffffffda RBX: 00007f7b62735f40 RCX: 00007f7b6257ff17 [ 443.275215][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 443.288546][ T30] RBP: 00007f7b62736a38 R08: 0000000000000000 R09: 0000000000000000 [ 443.307836][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 443.320053][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 443.332540][ T30] [ 443.337512][ T30] INFO: task syz-executor:9270 blocked for more than 144 seconds. [ 443.354195][ T30] Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 443.361857][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.385236][ T30] task:syz-executor state:D stack:23768 pid:9270 tgid:9270 ppid:1 flags:0x00004006 [ 443.406692][ T30] Call Trace: [ 443.410007][ T30] [ 443.416727][ T30] __schedule+0x18af/0x4bd0 [ 443.421290][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.432394][ T30] ? __pfx___schedule+0x10/0x10 [ 443.437295][ T30] ? __pfx_lock_release+0x10/0x10 [ 443.453542][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 443.459068][ T30] ? schedule+0x90/0x320 [ 443.472312][ T30] schedule+0x14b/0x320 [ 443.476551][ T30] schedule_preempt_disabled+0x13/0x30 [ 443.482036][ T30] __mutex_lock+0x6a7/0xd70 [ 443.518749][ T30] ? __mutex_lock+0x52a/0xd70 [ 443.526089][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 443.531159][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 443.548046][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.558249][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 443.569138][ T30] setup_net+0x572/0x9e0 [ 443.580438][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 443.593008][ T30] ? __pfx_setup_net+0x10/0x10 [ 443.597829][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.618327][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.629340][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.638671][ T30] copy_net_ns+0x33f/0x570 [ 443.647984][ T30] create_new_namespaces+0x425/0x7b0 [ 443.657190][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 443.669966][ T30] ksys_unshare+0x57d/0xa70 [ 443.678320][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 443.692408][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.698797][ T30] ? do_syscall_64+0x100/0x230 [ 443.716220][ T30] __x64_sys_unshare+0x38/0x40 [ 443.721027][ T30] do_syscall_64+0xf3/0x230 [ 443.732218][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.741808][ T30] RIP: 0033:0x7f99f837ff17 [ 443.751090][ T30] RSP: 002b:00007ffc4a58cc58 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 443.767826][ T30] RAX: ffffffffffffffda RBX: 00007f99f8535f40 RCX: 00007f99f837ff17 [ 443.780917][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 443.792542][ T30] RBP: 00007f99f8536a38 R08: 0000000000000000 R09: 0000000000000000 [ 443.800580][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 443.825528][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 443.846769][ T30] [ 443.849898][ T30] INFO: task syz-executor:9351 blocked for more than 145 seconds. [ 443.866230][ T30] Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 443.877802][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.891561][ T30] task:syz-executor state:D stack:24128 pid:9351 tgid:9351 ppid:1 flags:0x00000004 [ 443.906703][ T30] Call Trace: [ 443.918598][ T30] [ 443.921601][ T30] __schedule+0x18af/0x4bd0 [ 443.934143][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 443.940253][ T30] ? __pfx___schedule+0x10/0x10 [ 443.952924][ T30] ? __pfx_lock_release+0x10/0x10 [ 443.958029][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 443.973327][ T30] ? schedule+0x90/0x320 [ 443.977688][ T30] schedule+0x14b/0x320 [ 443.981938][ T30] schedule_preempt_disabled+0x13/0x30 [ 443.997687][ T30] __mutex_lock+0x6a7/0xd70 [ 444.005080][ T30] ? __mutex_lock+0x52a/0xd70 [ 444.009810][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 444.024238][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 444.029365][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 444.049093][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 444.057070][ T30] ? __lock_acquire+0x1384/0x2050 [ 444.068840][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.076504][ T30] netlink_rcv_skb+0x1e5/0x430 [ 444.081331][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.095642][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.101034][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.111328][ T30] netlink_unicast+0x7f8/0x990 [ 444.127320][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 444.137983][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.154128][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.159869][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.174626][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.180337][ T30] ? __check_object_size+0x48e/0x900 [ 444.191854][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 444.201195][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.212379][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.223752][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 444.228840][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.238601][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.249951][ T30] __sock_sendmsg+0x223/0x270 [ 444.264054][ T30] __sys_sendto+0x39b/0x4f0 [ 444.268634][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 444.281643][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.288920][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 444.302139][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.310066][ T30] ? exc_page_fault+0x590/0x8c0 [ 444.322505][ T30] __x64_sys_sendto+0xde/0x100 [ 444.327344][ T30] do_syscall_64+0xf3/0x230 [ 444.331892][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.345928][ T30] RIP: 0033:0x7f411bd805ac [ 444.350393][ T30] RSP: 002b:00007ffea5d9c2a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 444.364654][ T30] RAX: ffffffffffffffda RBX: 00007f411ca64620 RCX: 00007f411bd805ac [ 444.383066][ T30] RDX: 0000000000000028 RSI: 00007f411ca64670 RDI: 0000000000000003 [ 444.391228][ T30] RBP: 0000000000000000 R08: 00007ffea5d9c2f4 R09: 000000000000000c [ 444.407834][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 444.420793][ T30] R13: 0000000000000000 R14: 00007f411ca64670 R15: 0000000000000000 [ 444.440126][ T30] [ 444.445660][ T30] INFO: task syz-executor:9354 blocked for more than 145 seconds. [ 444.462209][ T30] Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 444.470938][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.487992][ T30] task:syz-executor state:D stack:24112 pid:9354 tgid:9354 ppid:1 flags:0x00000004 [ 444.508313][ T30] Call Trace: [ 444.511645][ T30] [ 444.520744][ T30] __schedule+0x18af/0x4bd0 [ 444.530767][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.542534][ T30] ? __pfx___schedule+0x10/0x10 [ 444.547471][ T30] ? __pfx_lock_release+0x10/0x10 [ 444.561941][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 444.572732][ T30] ? schedule+0x90/0x320 [ 444.577044][ T30] schedule+0x14b/0x320 [ 444.581241][ T30] schedule_preempt_disabled+0x13/0x30 [ 444.592826][ T30] __mutex_lock+0x6a7/0xd70 [ 444.597407][ T30] ? __mutex_lock+0x52a/0xd70 [ 444.602138][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 444.628707][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 444.639756][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 444.651669][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 444.662630][ T30] ? __lock_acquire+0x1384/0x2050 [ 444.667735][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.682001][ T30] netlink_rcv_skb+0x1e5/0x430 [ 444.687164][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 444.701623][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.707531][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.735070][ T30] netlink_unicast+0x7f8/0x990 [ 444.740488][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 444.760611][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.766801][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.780985][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.787103][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.802137][ T30] ? __check_object_size+0x48e/0x900 [ 444.808542][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 444.821630][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.835690][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.841406][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 444.856361][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.862085][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.873019][ T30] __sock_sendmsg+0x223/0x270 [ 444.877774][ T30] __sys_sendto+0x39b/0x4f0 [ 444.892349][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 444.897514][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 444.913044][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 444.919112][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.941905][ T30] ? exc_page_fault+0x590/0x8c0 [ 444.952616][ T30] __x64_sys_sendto+0xde/0x100 [ 444.957462][ T30] do_syscall_64+0xf3/0x230 [ 444.962019][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.979801][ T30] RIP: 0033:0x7f2f00b805ac [ 444.986965][ T30] RSP: 002b:00007ffc90c39150 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 445.001675][ T30] RAX: ffffffffffffffda RBX: 00007f2f01864620 RCX: 00007f2f00b805ac [ 445.012280][ T30] RDX: 0000000000000028 RSI: 00007f2f01864670 RDI: 0000000000000003 [ 445.020304][ T30] RBP: 0000000000000000 R08: 00007ffc90c391a4 R09: 000000000000000c [ 445.040172][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 445.056401][ T30] R13: 0000000000000000 R14: 00007f2f01864670 R15: 0000000000000000 [ 445.070929][ T30] [ 445.080254][ T30] INFO: task syz-executor:9359 blocked for more than 146 seconds. [ 445.094197][ T30] Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 445.101880][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.116921][ T30] task:syz-executor state:D stack:24128 pid:9359 tgid:9359 ppid:1 flags:0x00000004 [ 445.131777][ T30] Call Trace: [ 445.144551][ T30] [ 445.147567][ T30] __schedule+0x18af/0x4bd0 [ 445.152129][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.169044][ T30] ? __pfx___schedule+0x10/0x10 [ 445.176246][ T30] ? __pfx_lock_release+0x10/0x10 [ 445.181341][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 445.197590][ T30] ? schedule+0x90/0x320 [ 445.201953][ T30] schedule+0x14b/0x320 [ 445.211089][ T30] schedule_preempt_disabled+0x13/0x30 [ 445.222117][ T30] __mutex_lock+0x6a7/0xd70 [ 445.230578][ T30] ? __mutex_lock+0x52a/0xd70 [ 445.242092][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.252590][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 445.257713][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.275965][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 445.281194][ T30] ? __lock_acquire+0x1384/0x2050 [ 445.294583][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 445.300161][ T30] netlink_rcv_skb+0x1e5/0x430 [ 445.312835][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 445.318381][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.333043][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.338405][ T30] netlink_unicast+0x7f8/0x990 [ 445.357060][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 445.369597][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.380856][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.393022][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.398743][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.412900][ T30] ? __check_object_size+0x48e/0x900 [ 445.418267][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 445.433484][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.438858][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.459577][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 445.465166][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.470865][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.488075][ T30] __sock_sendmsg+0x223/0x270 [ 445.499775][ T30] __sys_sendto+0x39b/0x4f0 [ 445.508183][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 445.521065][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.530613][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.546636][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.560635][ T30] ? exc_page_fault+0x590/0x8c0 [ 445.569740][ T30] __x64_sys_sendto+0xde/0x100 [ 445.579500][ T30] do_syscall_64+0xf3/0x230 [ 445.590496][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.602307][ T30] RIP: 0033:0x7f58161805ac [ 445.606769][ T30] RSP: 002b:00007ffef8b14f40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 445.625282][ T30] RAX: ffffffffffffffda RBX: 00007f5816e64620 RCX: 00007f58161805ac [ 445.642702][ T30] RDX: 0000000000000028 RSI: 00007f5816e64670 RDI: 0000000000000003 [ 445.665537][ T30] RBP: 0000000000000000 R08: 00007ffef8b14f94 R09: 000000000000000c [ 445.678949][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 445.699988][ T30] R13: 0000000000000000 R14: 00007f5816e64670 R15: 0000000000000000 [ 445.711292][ T30] [ 445.721543][ T30] INFO: task syz-executor:9362 blocked for more than 146 seconds. [ 445.733017][ T30] Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 445.740693][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.765012][ T30] task:syz-executor state:D stack:24128 pid:9362 tgid:9362 ppid:1 flags:0x00000004 [ 445.783639][ T30] Call Trace: [ 445.786978][ T30] [ 445.789933][ T30] __schedule+0x18af/0x4bd0 [ 445.800632][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 445.809791][ T30] ? __pfx___schedule+0x10/0x10 [ 445.825068][ T30] ? __pfx_lock_release+0x10/0x10 [ 445.830177][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 445.843213][ T30] ? schedule+0x90/0x320 [ 445.847517][ T30] schedule+0x14b/0x320 [ 445.851783][ T30] schedule_preempt_disabled+0x13/0x30 [ 445.878427][ T30] __mutex_lock+0x6a7/0xd70 [ 445.886127][ T30] ? __mutex_lock+0x52a/0xd70 [ 445.890867][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.904354][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 445.909657][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 445.921775][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 445.929825][ T30] ? __lock_acquire+0x1384/0x2050 [ 445.940978][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 445.951865][ T30] netlink_rcv_skb+0x1e5/0x430 [ 445.962287][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 445.967823][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.986148][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.991443][ T30] netlink_unicast+0x7f8/0x990 [ 446.002301][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 446.007654][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.023988][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.029717][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.042327][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.048029][ T30] ? __check_object_size+0x48e/0x900 [ 446.067095][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 446.071979][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.082314][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.088049][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 446.105526][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.111258][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.124129][ T30] __sock_sendmsg+0x223/0x270 [ 446.128916][ T30] __sys_sendto+0x39b/0x4f0 [ 446.142025][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 446.147566][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.161636][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.174581][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.181188][ T30] ? exc_page_fault+0x590/0x8c0 [ 446.192763][ T30] __x64_sys_sendto+0xde/0x100 [ 446.197622][ T30] do_syscall_64+0xf3/0x230 [ 446.202189][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.221152][ T30] RIP: 0033:0x7fbcdb9805ac [ 446.232382][ T30] RSP: 002b:00007ffdc7b10d30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 446.240942][ T30] RAX: ffffffffffffffda RBX: 00007fbcdc664620 RCX: 00007fbcdb9805ac [ 446.258564][ T30] RDX: 0000000000000028 RSI: 00007fbcdc664670 RDI: 0000000000000003 [ 446.272031][ T30] RBP: 0000000000000000 R08: 00007ffdc7b10d84 R09: 000000000000000c [ 446.289200][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 446.300995][ T30] R13: 0000000000000000 R14: 00007fbcdc664670 R15: 0000000000000000 [ 446.313850][ T30] [ 446.316984][ T30] INFO: task syz-executor:9365 blocked for more than 147 seconds. [ 446.334149][ T30] Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 446.341834][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.359634][ T30] task:syz-executor state:D stack:24128 pid:9365 tgid:9365 ppid:1 flags:0x00000004 [ 446.373781][ T30] Call Trace: [ 446.377095][ T30] [ 446.380051][ T30] __schedule+0x18af/0x4bd0 [ 446.392915][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.399241][ T30] ? __pfx___schedule+0x10/0x10 [ 446.414641][ T30] ? __pfx_lock_release+0x10/0x10 [ 446.419747][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 446.438271][ T30] ? schedule+0x90/0x320 [ 446.449629][ T30] schedule+0x14b/0x320 [ 446.456201][ T30] schedule_preempt_disabled+0x13/0x30 [ 446.461704][ T30] __mutex_lock+0x6a7/0xd70 [ 446.476110][ T30] ? __mutex_lock+0x52a/0xd70 [ 446.480857][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 446.496778][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 446.501909][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 446.512390][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 446.517574][ T30] ? __lock_acquire+0x1384/0x2050 [ 446.533358][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.538944][ T30] netlink_rcv_skb+0x1e5/0x430 [ 446.552572][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.558142][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.577369][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.590917][ T30] netlink_unicast+0x7f8/0x990 [ 446.597267][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 446.611593][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.617729][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.633089][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.638821][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.658859][ T30] ? __check_object_size+0x48e/0x900 [ 446.666480][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 446.671305][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.693947][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.699656][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 446.714500][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.720256][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.738297][ T30] __sock_sendmsg+0x223/0x270 [ 446.746526][ T30] __sys_sendto+0x39b/0x4f0 [ 446.751082][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 446.765490][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.771181][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.791136][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.799982][ T30] ? exc_page_fault+0x590/0x8c0 [ 446.810571][ T9427] Bluetooth: hci11: command 0x0406 tx timeout [ 446.823012][ T30] __x64_sys_sendto+0xde/0x100 [ 446.828376][ T30] do_syscall_64+0xf3/0x230 [ 446.840555][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.846830][ T30] RIP: 0033:0x7f2ec0f805ac [ 446.851276][ T30] RSP: 002b:00007fffdc46f310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 446.869723][ T30] RAX: ffffffffffffffda RBX: 00007f2ec1c64620 RCX: 00007f2ec0f805ac [ 446.895190][ T30] RDX: 0000000000000028 RSI: 00007f2ec1c64670 RDI: 0000000000000003 [ 446.912210][ T30] RBP: 0000000000000000 R08: 00007fffdc46f364 R09: 000000000000000c [ 446.921782][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 446.938861][ T30] R13: 0000000000000000 R14: 00007f2ec1c64670 R15: 0000000000000000 [ 446.950622][ T30] [ 446.960930][ T30] [ 446.960930][ T30] Showing all locks held in the system: [ 446.972125][ T30] 1 lock held by khungtaskd/30: [ 446.986919][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 447.002065][ T30] 4 locks held by kworker/u9:0/54: [ 447.019498][ T30] #0: ffff88803658a948 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 447.034124][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 447.053061][ T30] #2: ffff888038ca4078 (&hdev->lock){+.+.}-{3:3}, at: le_conn_complete_evt+0xb3/0x12e0 [ 447.073766][ T30] #3: ffffffff8fe3fae8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_connect_cfm+0x24/0x150 [ 447.096343][ T30] 3 locks held by kworker/u8:6/3442: [ 447.101699][ T30] #0: ffff88803086e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 447.126042][ T30] #1: ffffc9000b89fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 447.144269][ T30] #2: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 447.161625][ T30] 4 locks held by kworker/u9:1/5144: [ 447.170309][ T30] #0: ffff88807d90e948 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 447.193231][ T30] #1: ffffc9000f867d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 447.216042][ T30] #2: ffff888079544d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 447.232950][ T30] #3: ffff888079544078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 447.250550][ T30] 2 locks held by dhcpcd/5501: [ 447.256853][ T30] #0: ffff88805f7446c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 447.272278][ T30] #1: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 447.281195][ T30] 2 locks held by getty/5598: [ 447.300723][ T30] #0: ffff8880315520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 447.313354][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 447.332633][ T30] 4 locks held by kworker/0:3/5842: [ 447.337894][ T30] 5 locks held by kworker/u9:3/5846: [ 447.354816][ T30] #0: ffff88804e63f948 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 447.378173][ T30] #1: ffffc90003cefd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 447.398677][ T30] #2: ffff88805cb60d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 447.412287][ T30] #3: ffff88805cb60078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 447.430536][ T30] #4: ffffffff8fe3fae8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 447.442957][ T30] 6 locks held by kworker/u9:8/5855: [ 447.448292][ T30] #0: ffff888050585148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 447.470982][ T30] #1: ffffc90003c5fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 447.498287][ T30] #2: ffff888068348d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 447.516751][ T30] #3: ffff888068348078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 447.532394][ T30] #4: ffffffff8fe3fae8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 447.552811][ T30] #5: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 447.574420][ T30] 3 locks held by kworker/1:3/5899: [ 447.579692][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 447.604943][ T30] #1: ffffc9000ae4fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 447.624433][ T30] #2: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 447.643343][ T30] 6 locks held by kworker/u8:9/6303: [ 447.648732][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 447.670963][ T30] #1: ffffc90004707d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 447.684171][ T30] #2: ffffffff8fcc6690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 447.702461][ T30] #3: ffff88805ce440e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 447.727792][ T30] #4: ffff88805ce45250 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 447.741679][ T30] #5: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 447.756749][ T30] 3 locks held by kworker/u8:10/8024: [ 447.762171][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 447.792888][ T30] #1: ffffc90003bbfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 447.818422][ T30] #2: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 447.833174][ T30] 2 locks held by iou-sqp-9216/9217: [ 447.838504][ T30] 1 lock held by syz-executor/9235: [ 447.852679][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 447.861799][ T30] 2 locks held by syz-executor/9267: [ 447.877048][ T30] #0: ffffffff8fcc6690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 447.896349][ T30] #1: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 447.914242][ T30] 2 locks held by syz-executor/9270: [ 447.919601][ T30] #0: ffffffff8fcc6690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 447.946788][ T30] #1: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 447.964780][ T30] 1 lock held by syz-executor/9273: [ 447.970044][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 447.985312][ T30] 2 locks held by syz-executor/9298: [ 447.990647][ T30] #0: ffffffff8fcc6690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 448.010719][ T30] #1: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 448.024698][ T30] 2 locks held by syz-executor/9332: [ 448.030027][ T30] #0: ffffffff8fcc6690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 448.048835][ T30] #1: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 448.065759][ T30] 1 lock held by syz-executor/9351: [ 448.071017][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.087236][ T30] 1 lock held by syz-executor/9354: [ 448.098025][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.115142][ T30] 1 lock held by syz-executor/9359: [ 448.120397][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.136868][ T30] 1 lock held by syz-executor/9362: [ 448.142127][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.161259][ T30] 1 lock held by syz-executor/9365: [ 448.174862][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.193184][ T30] 1 lock held by syz-executor/9371: [ 448.198446][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.218252][ T30] 1 lock held by syz-executor/9376: [ 448.227252][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.245226][ T30] 7 locks held by syz-executor/9382: [ 448.250574][ T30] #0: ffff8880245ac420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 448.269936][ T30] #1: ffff88805bd87488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 448.287109][ T30] #2: ffff8881443330f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 448.302325][ T30] #3: ffffffff8f571128 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 448.324773][ T30] #4: ffff88805c8020e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 448.345776][ T30] #5: ffff88805c803250 (&devlink->lock_key#3){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 448.362211][ T30] #6: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 448.371290][ T30] 1 lock held by syz-executor/9388: [ 448.387158][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.404296][ T30] 1 lock held by syz-executor/9395: [ 448.409561][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.429847][ T30] 1 lock held by syz-executor/9399: [ 448.437809][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.455758][ T30] 1 lock held by syz-executor/9404: [ 448.461111][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.477111][ T30] 1 lock held by syz-executor/9410: [ 448.488593][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.510978][ T30] 1 lock held by syz-executor/9416: [ 448.525391][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.540854][ T30] 1 lock held by syz-executor/9421: [ 448.549877][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.565363][ T30] 1 lock held by syz-executor/9424: [ 448.570659][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.591428][ T30] 1 lock held by syz-executor/9429: [ 448.605033][ T30] #0: ffffffff8fcd3188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.629874][ T30] 5 locks held by kworker/u9:6/9431: [ 448.640509][ T30] #0: ffff888046c73948 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 448.656924][ T30] #1: ffffc9000315fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 448.676047][ T30] #2: ffff888079174d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 448.691026][ T30] #3: ffff888079174078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 448.704662][ T30] #4: ffffffff8fe3fae8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 448.726753][ T30] 4 locks held by kworker/u9:7/9433: [ 448.732147][ T30] #0: ffff88805caa8148 ((wq_completion)hci20#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 448.763338][ T30] #1: ffffc9000301fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 448.782661][ T30] #2: ffff88806512c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 448.801295][ T30] #3: ffffffff8fe3fae8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 448.827238][ T30] [ 448.829638][ T30] ============================================= [ 448.829638][ T30] [ 448.848845][ T30] NMI backtrace for cpu 1 [ 448.853232][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 448.863758][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.873847][ T30] Call Trace: [ 448.877153][ T30] [ 448.880105][ T30] dump_stack_lvl+0x241/0x360 [ 448.884836][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.890107][ T30] ? __pfx__printk+0x10/0x10 [ 448.894764][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 448.899760][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 448.905271][ T30] ? _printk+0xd5/0x120 [ 448.909473][ T30] ? __pfx__printk+0x10/0x10 [ 448.914117][ T30] ? __wake_up_klogd+0xcc/0x110 [ 448.919021][ T30] ? __pfx__printk+0x10/0x10 [ 448.923660][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.929355][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 448.934447][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.940489][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 448.946548][ T30] watchdog+0xff4/0x1040 [ 448.950845][ T30] ? watchdog+0x1ea/0x1040 [ 448.955333][ T30] ? __pfx_watchdog+0x10/0x10 [ 448.960063][ T30] kthread+0x2f2/0x390 [ 448.964175][ T30] ? __pfx_watchdog+0x10/0x10 [ 448.968903][ T30] ? __pfx_kthread+0x10/0x10 [ 448.973530][ T30] ret_from_fork+0x4d/0x80 [ 448.977993][ T30] ? __pfx_kthread+0x10/0x10 [ 448.982617][ T30] ret_from_fork_asm+0x1a/0x30 [ 448.987444][ T30] [ 448.991902][ T30] Sending NMI from CPU 1 to CPUs 0: [ 448.998047][ C0] NMI backtrace for cpu 0 [ 448.998064][ C0] CPU: 0 UID: 0 PID: 5842 Comm: kworker/0:3 Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 448.998091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.998106][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 448.998145][ C0] RIP: 0010:__lock_acquire+0x5e9/0x2050 [ 448.998185][ C0] Code: 1f 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 a8 2c 94 be 08 00 00 00 e8 a1 45 8e 00 48 0f a3 1d c9 55 bc 12 73 26 <48> 69 c3 c8 00 00 00 48 8d 98 c0 26 c4 93 48 ba 00 00 00 00 00 fc [ 448.998204][ C0] RSP: 0018:ffffc90000007890 EFLAGS: 00000057 [ 448.998223][ C0] RAX: 0000000000000001 RBX: 0000000000000661 RCX: ffffffff8170522f [ 448.998239][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942ca8c8 [ 448.998254][ C0] RBP: 0000000000000002 R08: ffffffff942ca8cf R09: 1ffffffff2859519 [ 448.998270][ C0] R10: dffffc0000000000 R11: fffffbfff285951a R12: ffff8880663c1e00 [ 448.998287][ C0] R13: 0000000000000661 R14: 1ffff1100cc7852a R15: ffff8880663c2950 [ 448.998307][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 448.998327][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.998342][ C0] CR2: 00007ff71470a5b8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 448.998360][ C0] Call Trace: [ 448.998368][ C0] [ 448.998378][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 448.998412][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 448.998454][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 448.998493][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 448.998526][ C0] ? nmi_handle+0x151/0x5a0 [ 448.998551][ C0] ? nmi_handle+0x2a/0x5a0 [ 448.998574][ C0] ? __lock_acquire+0x5e9/0x2050 [ 448.998609][ C0] ? default_do_nmi+0x63/0x160 [ 448.998641][ C0] ? exc_nmi+0x123/0x1f0 [ 448.998671][ C0] ? end_repeat_nmi+0xf/0x53 [ 448.998700][ C0] ? __lock_acquire+0x5df/0x2050 [ 448.998735][ C0] ? __lock_acquire+0x5e9/0x2050 [ 448.998770][ C0] ? __lock_acquire+0x5e9/0x2050 [ 448.998805][ C0] ? __lock_acquire+0x5e9/0x2050 [ 448.998840][ C0] [ 448.998848][ C0] [ 448.998864][ C0] lock_acquire+0x1ed/0x550 [ 448.998898][ C0] ? process_backlog+0x33b/0x15b0 [ 448.998935][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 448.998969][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.998997][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.999033][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.999067][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 448.999106][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.999126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.999156][ C0] process_backlog+0x358/0x15b0 [ 448.999187][ C0] ? process_backlog+0x33b/0x15b0 [ 448.999227][ C0] ? process_backlog+0x33b/0x15b0 [ 448.999264][ C0] ? __pfx_process_backlog+0x10/0x10 [ 448.999296][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.999332][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.999369][ C0] __napi_poll+0xcd/0x490 [ 448.999400][ C0] net_rx_action+0x89b/0x1240 [ 448.999449][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 448.999482][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 448.999533][ C0] handle_softirqs+0x2c7/0x980 [ 448.999567][ C0] ? do_softirq+0x11b/0x1e0 [ 448.999599][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 448.999631][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.999661][ C0] do_softirq+0x11b/0x1e0 [ 448.999689][ C0] [ 448.999697][ C0] [ 448.999705][ C0] ? __pfx_do_softirq+0x10/0x10 [ 448.999735][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 448.999771][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.999798][ C0] ? rcu_is_watching+0x15/0xb0 [ 448.999825][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 448.999856][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 448.999886][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 448.999917][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 448.999944][ C0] ? neigh_destroy+0x423/0x580 [ 448.999972][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.000003][ C0] neigh_periodic_work+0xb35/0xd50 [ 449.000038][ C0] ? process_scheduled_works+0x976/0x1850 [ 449.000070][ C0] process_scheduled_works+0xa65/0x1850 [ 449.000115][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 449.000152][ C0] ? assign_work+0x364/0x3d0 [ 449.000184][ C0] worker_thread+0x870/0xd30 [ 449.000244][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.000273][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.000300][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 449.000338][ C0] ? __kthread_parkme+0x169/0x1d0 [ 449.000374][ C0] ? __pfx_worker_thread+0x10/0x10 [ 449.000406][ C0] kthread+0x2f2/0x390 [ 449.000428][ C0] ? __pfx_worker_thread+0x10/0x10 [ 449.000464][ C0] ? __pfx_kthread+0x10/0x10 [ 449.000486][ C0] ret_from_fork+0x4d/0x80 [ 449.000520][ C0] ? __pfx_kthread+0x10/0x10 [ 449.000542][ C0] ret_from_fork_asm+0x1a/0x30 [ 449.000582][ C0] [ 449.548045][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 449.554983][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 [ 449.565519][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 449.575609][ T30] Call Trace: [ 449.578919][ T30] [ 449.581869][ T30] dump_stack_lvl+0x241/0x360 [ 449.586589][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.591825][ T30] ? __pfx__printk+0x10/0x10 [ 449.596449][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 449.602490][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.608166][ T30] ? vscnprintf+0x5d/0x90 [ 449.612539][ T30] panic+0x349/0x880 [ 449.616471][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.622144][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 449.628353][ T30] ? __pfx_panic+0x10/0x10 [ 449.632801][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 449.638211][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.643881][ T30] ? __irq_work_queue_local+0x137/0x410 [ 449.649476][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.655152][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 449.660568][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 449.666771][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 449.672981][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 449.678665][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 449.684882][ T30] watchdog+0x1033/0x1040 [ 449.689301][ T30] ? watchdog+0x1ea/0x1040 [ 449.693765][ T30] ? __pfx_watchdog+0x10/0x10 [ 449.698483][ T30] kthread+0x2f2/0x390 [ 449.702582][ T30] ? __pfx_watchdog+0x10/0x10 [ 449.707298][ T30] ? __pfx_kthread+0x10/0x10 [ 449.711970][ T30] ret_from_fork+0x4d/0x80 [ 449.716431][ T30] ? __pfx_kthread+0x10/0x10 [ 449.721061][ T30] ret_from_fork_asm+0x1a/0x30 [ 449.725884][ T30] [ 449.729166][ T30] Kernel Offset: disabled [ 449.733490][ T30] Rebooting in 86400 seconds..