last executing test programs: 12m26.385540963s ago: executing program 32 (id=431): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x4, 0x1534, &(0x7f0000001f80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 10m34.347811441s ago: executing program 33 (id=1680): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 7m28.864983297s ago: executing program 34 (id=3553): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000996000/0x3000)=nil, 0x3000}, 0x3}) 6m35.910018293s ago: executing program 35 (id=4252): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0xfffffffe, 0x4) 6m6.710845038s ago: executing program 0 (id=4656): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80400) 6m6.188220107s ago: executing program 0 (id=4665): request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 6m5.870241171s ago: executing program 0 (id=4671): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r0, &(0x7f0000000000)=""/77, 0x4d) getdents64(r0, 0xffffffffffffffff, 0x43) 6m5.769200848s ago: executing program 0 (id=4672): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 6m5.107256352s ago: executing program 0 (id=4680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m4.477538746s ago: executing program 0 (id=4691): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) r0 = fanotify_init(0x20, 0x400) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) 6m3.920816288s ago: executing program 36 (id=4691): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) r0 = fanotify_init(0x20, 0x400) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) 5m34.846443345s ago: executing program 6 (id=5072): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0x1c3, 0x0, 0x0, 0x42, 0x2e}) 5m33.99820554s ago: executing program 6 (id=5086): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) 5m33.824698504s ago: executing program 6 (id=5089): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffb, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 5m33.697989635s ago: executing program 6 (id=5093): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 5m33.137961123s ago: executing program 6 (id=5103): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f00000000c0)={[{@force}, {}, {@nls={'nls', 0x3d, 'cp857'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x6f5, &(0x7f00000079c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5m32.566152494s ago: executing program 6 (id=5113): r0 = socket$kcm(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) 5m32.211386427s ago: executing program 37 (id=5113): r0 = socket$kcm(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) 5m12.03238846s ago: executing program 7 (id=5382): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) 5m11.912752023s ago: executing program 7 (id=5385): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x0, 0x1b, 0xfffffffffffffffd}) 5m11.643321454s ago: executing program 7 (id=5390): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffc, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f00000005c0)="51e232d51f0a", 0x0, 0x10001, 0x2, 0x3, 0x0}) 5m11.486281539s ago: executing program 7 (id=5393): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) 5m11.146143315s ago: executing program 7 (id=5398): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f000000030000000800000056000000020000000600000009"], 0x0, 0x97, 0x0, 0x0, 0x0, 0x10000}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) 5m10.555728888s ago: executing program 7 (id=5405): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) 5m9.787455446s ago: executing program 38 (id=5405): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) 2m26.956187128s ago: executing program 2 (id=7557): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) preadv(r0, &(0x7f000001ac40)=[{&(0x7f0000019640)=""/235, 0xeb}], 0x1, 0xde, 0x2) 2m26.717685926s ago: executing program 2 (id=7560): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000a00)="1c73de19da4e24a4be5c3011d88efffbb251589a5bef61f451a747474f315938cc426a841b78d07b04cc6f2d276323ea48a6fd1c0ba66f5055239df5a21b234315694fd58fe32aeaa543e5fe08ccdf3e689caa8cedec8010f8bb8c59eaa1ecbf0f6f66afde88c010b3138095b6a0116af9c9011f03cc24e087286f2553198568c0aea639920383723c52ce2839b5dcb5ecf2eb92eeb24271354e1719e92347b792d0402fb04bbbf78fbebbf4b4832385561e1010dd612da55e8f738b13288b548d333c1d174ade527cafb3fc6576c16cd2e71f68286e28d5d8a17ef63d253bc56ce36b8d4aef6c0a34d8b9463ce4535f9c1700a5bf7b0f217ae63d3d377ddbcf7d4dd2f3f8f08de60c87b1e07487cae176e2f76ea307fa1693d84328c7f751d6d997555964813b103ea44b6e2e8bcc09609c25e5d1e0f174c44dfed19aa2fc6e6a60c589909709ff6b1a8e3c7462427d11469f81fa4d9a69ee39b8f3824889f3ee0c5838a22832193d9f42bfcff8f1990746da71c109c82f51aaffbc9b33b03fe4993f4bfb59461c5a2e13514072283677447793cfe1e7bf5b48416b80a7e18e22cb13e0370f7bb9bf952c4c5355dbb8fe0d912f88d743c536db4b306075c2dcd59d602e75bb159f71e4f11192631fc338203c136c9efc5f05bf94d2fee1a6ad20f2c7e834e5be49ebedde2d9735f46eb08c6537d24f3f06589a4597f2d9378f", 0x200, 0x200}]) 2m26.466225632s ago: executing program 2 (id=7563): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000095c0)='./file1\x00', 0x4, &(0x7f0000000000), 0x1, 0x976f, &(0x7f000001c440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x31) 2m25.33356186s ago: executing program 2 (id=7571): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000005f80)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x1, 0x6bd, &(0x7f0000000cc0)="$eJzs3U+IXVcdB/DvfZm8mRchnf5LowgZGijaYDKTR00EoVFEsggSdNPtkEyaIZO0TKaSFjEvahVcuZIuXFQkLroSEaGuxLoWBDeusg+4c5GFOnL/vJk3b14mM51k3rT9fODOPfeee8753R/3z3v3JdwAn1nnX8vBXoqcP3HhVrl872536d7d7vV+OclkklYyUc9SdJLio+Rc6imfL1c23RUPG+eV+x8WE+990K2XJpqp2r61VbtNRm7ZS6bWFg4kmamL/9lGh63R/VVT1c+l9f4a7W1HWyvW4i4TdryfOBi31U1665WjTo2Ntn/eAvvW7fq+ucl0cij13bX8HJDm6vDoK8P4bXlt6u1dHAAAAPCkjPwuP+ipB3mQWzm8N+EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAp0NRvzOwaKZWvzyTov/+//bAO/XbYw53l969Us2++9S4AwEAAAAAAACAXTn2IA9yK4f7y6tF9Zv/i9XCc9Xfz+Wt3MxClnMytzKflaxkOXNJpgc6at+aX1lZntvc8pcpW66urt5uWp4e2fL0xrh6w4GO+pcGmzYCAAAAAAAAgM+sH+X8+u//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHxTJgXpWTc/1y9NpTSSZStIuZtY2b4812Mfgz+MOAAAAAJ68TjM/XPyvLqwW1Xf+I9X3/qm8lRtZyWJWspSFXK6eBdTf+lt/73WX7t3tXi+nzR1/4187iqPqMfWzh9Ejz1ZbPL/W4ny+ne/lRGZyMctZzPczn5UsZCbfqkrzKTLdPL2Yvne3k36sm+M9t2Hp4nBsxwbKZXxHq0g6uZLFKraTudTuh95qtjs6MNof28nQiHfK7BSvNraZo8vNvNyjXzTz/WG62vODaxmZbXJfZuPpwbxvzv0Oj5PhkebSWnsG9dz6KOXi8EgfK+eHmnmZ658+2Zzv8FHaxkz0fl4u9Y++I1vnPPnyP/5y8WrrxrWrV26e2D+H0cc0fEx0BzLxwrYysVRmoreLTEztJv7Hp91ko76K7uxq+WLV9nAW8528kctZyJnMZi5nM5uv5XS6OT2Q1+e3zmt1rrV2dq4d/1JTKO9JPxu4N+2ZyYdVlHl9eiCvg1e66apucM16lp7ZRpaKdkZn6Z8jQ7nzhaZQjvHjgTvO+A1nYm4gE89unYlf/3c1yc2lG9eWr86/uc3xXmrm5Wn77sZr828eyw7tXLO75fHyTJKJ1LeNwaOjrHu2XzeUr3bzi8tE09mGunaq87mue9SZWvZ05M6onuq6F0aO0q3qjg7UbfiUkzeytPYppLHnJykA23Do5UPtzv3O3zrvd37Sudq5MPXNybOTX2zn4F8n/nTgd63ftr5evJz388McHnekAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaXDz7XeuzS8tLSwPFg5keM1YCmk95g7vjKzqp6Je0x6xzbHscvSpJGNO5qMLad6ltKt+Jrdq/vskWzRvj2PfO0nGnfmqkIk9GGsyI6ourK3pJK21eJJc2ycvuAOehFMr1988dfPtd76yeH3+9YXXF26cPnvm1TPdr87dPnVlcWlhtv477iiBJ2Hjxz8AAAAAAAAAAADgk2Cv/mPJkKI3hn0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpnOv5aDvRSZmz05Wy7fu9tdKqd+eX3LiSStJMUPkuKj5FzqKdMD3RUPG+eV+x/+6qX3Puiu9zXR37411O4P/15d3eFe9JopM0kONPNHm9xWf5cG+uvtMLBasbaHZcKO9xMH4/b/AAAA//9tywGy") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount$bpf(0x0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240), 0x0, 0x0) 2m24.646132873s ago: executing program 2 (id=7581): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d69736f383835392d31352c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=00000000000000000006745,decompose,barrier,force,gid=', @ANYRESHEX=0xee00, @ANYRES8=0x0], 0x3, 0x6a4, &(0x7f0000000100)="$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") setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, 0x0, 0x3) 2m23.946216437s ago: executing program 2 (id=7592): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000000200000009"], 0x20}}, 0x0) 2m23.482512173s ago: executing program 39 (id=7592): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000000200000009"], 0x20}}, 0x0) 1m16.542140462s ago: executing program 8 (id=8340): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m16.338783248s ago: executing program 8 (id=8342): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file2\x00', 0x100d0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$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") open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) close(0x4) 1m15.869364194s ago: executing program 8 (id=8349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x3a9, 0x70bd28, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4004050) 1m15.558262035s ago: executing program 8 (id=8353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000300)="9e80", 0x0, 0x0, 0x0, 0x2, r1}, 0x38) 1m14.966135132s ago: executing program 8 (id=8359): r0 = memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 786.872217][T25876] dump_stack_lvl+0x189/0x250 [ 786.872267][T25876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.872296][T25876] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 786.872325][T25876] ? __pfx_queue_work_on+0x10/0x10 [ 786.872356][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.872385][T25876] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 786.872412][T25876] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 786.872439][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.872468][T25876] ? f2fs_hw_is_readonly+0x39b/0x470 [ 786.872503][T25876] f2fs_handle_critical_error+0x37c/0x540 [ 786.872541][T25876] f2fs_write_end_io+0x495/0x810 [ 786.872571][T25876] ? blkg_put+0x22/0x240 [ 786.872633][T25876] __submit_merged_bio+0x27a/0x6a0 [ 786.872670][T25876] __submit_merged_write_cond+0x255/0x530 [ 786.872723][T25876] f2fs_write_data_pages+0x261d/0x3000 [ 786.872804][T25876] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 786.872899][T25876] ? __mod_zone_page_state+0xd7/0x140 [ 786.872948][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.872977][T25876] ? folios_put_refs+0x560/0x640 [ 786.873024][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.873052][T25876] ? __lock_acquire+0xab9/0xd20 [ 786.873092][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.873121][T25876] ? do_raw_spin_lock+0x121/0x290 [ 786.873168][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.873202][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.873236][T25876] ? do_raw_spin_unlock+0x122/0x240 [ 786.873274][T25876] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 786.873306][T25876] do_writepages+0x32e/0x550 [ 786.873349][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.873385][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.873414][T25876] ? do_raw_spin_unlock+0x122/0x240 [ 786.873457][T25876] filemap_fdatawrite+0x191/0x230 [ 786.873496][T25876] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 786.873593][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.873630][T25876] ? do_raw_spin_unlock+0x122/0x240 [ 786.873674][T25876] f2fs_sync_dirty_inodes+0x31f/0x830 [ 786.873731][T25876] f2fs_write_checkpoint+0x94a/0x1de0 [ 786.873800][T25876] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 786.873895][T25876] ? __pfx_down_write+0x10/0x10 [ 786.873930][T25876] ? __pfx___schedule+0x10/0x10 [ 786.873967][T25876] __checkpoint_and_complete_reqs+0xd9/0x3b0 [ 786.874009][T25876] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 786.874069][T25876] issue_checkpoint_thread+0xd9/0x260 [ 786.874108][T25876] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 786.874143][T25876] ? __pfx_autoremove_wake_function+0x10/0x10 [ 786.874184][T25876] ? __kthread_parkme+0x7b/0x200 [ 786.874216][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.874252][T25876] ? __kthread_parkme+0x1a1/0x200 [ 786.874295][T25876] kthread+0x711/0x8a0 [ 786.874337][T25876] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 786.874371][T25876] ? __pfx_kthread+0x10/0x10 [ 786.874403][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.874437][T25876] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.874460][T25876] ? srso_alias_return_thunk+0x5/0xfbef5 [ 786.874488][T25876] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.874514][T25876] ? __pfx_kthread+0x10/0x10 [ 786.874553][T25876] ret_from_fork+0x3fc/0x770 [ 786.874586][T25876] ? __pfx_ret_from_fork+0x10/0x10 [ 786.874623][T25876] ? __switch_to_asm+0x39/0x70 [ 786.874656][T25876] ? __switch_to_asm+0x33/0x70 [ 786.874687][T25876] ? __pfx_kthread+0x10/0x10 [ 786.874724][T25876] ret_from_fork_asm+0x1a/0x30 [ 786.874782][T25876] [ 786.874792][T25876] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 787.319691][ T5919] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 787.328255][T25899] loop9: detected capacity change from 0 to 1024 [ 787.371423][T25899] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.446765][T25904] loop8: detected capacity change from 0 to 256 [ 787.526388][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 787.545483][ T5919] usb 6-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.577851][T16441] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.583574][ T5919] usb 6-1: config 0 interface 0 has no altsetting 0 [ 787.602152][ T5919] usb 6-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 787.621312][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.647785][ T5919] usb 6-1: config 0 descriptor?? [ 787.819504][T11866] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 788.002332][T11866] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.019471][T11866] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 788.038983][T11866] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.059849][T11866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.069730][ T30] audit: type=1326 audit(2000000289.950:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25915 comm="syz.9.8196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda70f8e9a9 code=0x0 [ 788.131706][T11866] usb 9-1: config 0 descriptor?? [ 788.132041][ T5919] logitech 0003:046D:C219.0058: unknown main item tag 0x2 [ 788.150058][ T5919] logitech 0003:046D:C219.0058: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.5-1/input0 [ 788.161898][ T5919] logitech 0003:046D:C219.0058: no inputs found [ 788.238349][T25908] loop3: detected capacity change from 0 to 32768 [ 788.246628][T25908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8191 (25908) [ 788.263294][T25908] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 788.273924][T25908] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 788.284318][T25908] BTRFS info (device loop3): using free-space-tree [ 788.349327][ T5919] usb 6-1: USB disconnect, device number 24 [ 788.385935][ T30] audit: type=1800 audit(2000000290.280:325): pid=25908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8191" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 788.404060][T11866] usb 9-1: USB disconnect, device number 27 [ 788.473643][T17455] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 788.487405][T25938] loop4: detected capacity change from 0 to 2048 [ 788.514260][T25938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.602020][ T30] audit: type=1800 audit(2000000290.500:326): pid=25938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8200" name="file2" dev="loop4" ino=1347 res=0 errno=0 [ 789.545839][T25970] nbd: socks must be embedded in a SOCK_ITEM attr [ 790.031897][ T6018] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 790.158031][T25990] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 790.164608][T25990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 790.180154][T25990] vhci_hcd vhci_hcd.0: Device attached [ 790.196207][T25993] vhci_hcd: connection closed [ 790.199743][ T12] vhci_hcd: stop threads [ 790.215350][ T6018] usb 9-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 790.241359][ T12] vhci_hcd: release socket [ 790.246405][ T12] vhci_hcd: disconnect device [ 790.251261][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.290718][ T6018] usb 9-1: config 0 descriptor?? [ 790.297017][T25952] loop9: detected capacity change from 0 to 40427 [ 790.336904][T25952] F2FS-fs (loop9): invalid crc value [ 790.385610][T25963] loop3: detected capacity change from 0 to 32768 [ 790.411911][T26002] loop5: detected capacity change from 0 to 1024 [ 790.437012][T25963] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 790.466762][T26002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.512595][T25963] XFS (loop3): Ending clean mount [ 790.519051][T26002] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8229: bg 0: block 88: padding at end of block bitmap is not set [ 790.551023][T25963] XFS (loop3): Quotacheck needed: Please wait. [ 790.574799][T25952] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 790.624991][T25963] XFS (loop3): Quotacheck: Done. [ 790.691355][T25998] f2fs_ckpt-7:9: attempt to access beyond end of device [ 790.691355][T25998] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 790.717072][T24457] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.739681][ T6018] hid-alps 0003:044E:120C.0059: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.8-1/input0 [ 790.744915][T25998] CPU: 1 UID: 0 PID: 25998 Comm: f2fs_ckpt-7:9 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 790.744947][T25998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.744963][T25998] Call Trace: [ 790.744973][T25998] [ 790.744984][T25998] dump_stack_lvl+0x189/0x250 [ 790.745023][T25998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.745051][T25998] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 790.745078][T25998] ? __pfx_queue_work_on+0x10/0x10 [ 790.745110][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.745139][T25998] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 790.745165][T25998] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 790.745192][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.745236][T25998] ? f2fs_hw_is_readonly+0x39b/0x470 [ 790.745270][T25998] f2fs_handle_critical_error+0x37c/0x540 [ 790.745304][T25998] f2fs_write_end_io+0x495/0x810 [ 790.745333][T25998] ? blkg_put+0x22/0x240 [ 790.745390][T25998] __submit_merged_bio+0x27a/0x6a0 [ 790.745423][T25998] __submit_merged_write_cond+0x255/0x530 [ 790.745473][T25998] f2fs_write_data_pages+0x261d/0x3000 [ 790.745507][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.745577][T25998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 790.745658][T25998] ? __mod_zone_page_state+0xd7/0x140 [ 790.745704][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.745732][T25998] ? folios_put_refs+0x560/0x640 [ 790.745775][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.745803][T25998] ? __lock_acquire+0xab9/0xd20 [ 790.745839][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.745866][T25998] ? do_raw_spin_lock+0x121/0x290 [ 790.745909][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.745942][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.745970][T25998] ? do_raw_spin_unlock+0x122/0x240 [ 790.746007][T25998] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 790.746038][T25998] do_writepages+0x32e/0x550 [ 790.746078][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.746111][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.746138][T25998] ? do_raw_spin_unlock+0x122/0x240 [ 790.746180][T25998] filemap_fdatawrite+0x191/0x230 [ 790.746215][T25998] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 790.746301][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.746335][T25998] ? do_raw_spin_unlock+0x122/0x240 [ 790.746377][T25998] f2fs_sync_dirty_inodes+0x31f/0x830 [ 790.746427][T25998] f2fs_write_checkpoint+0x94a/0x1de0 [ 790.746495][T25998] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 790.746577][T25998] ? __pfx_down_write+0x10/0x10 [ 790.746610][T25998] ? __pfx___schedule+0x10/0x10 [ 790.746645][T25998] __checkpoint_and_complete_reqs+0xd9/0x3b0 [ 790.746711][T25998] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 790.746767][T25998] issue_checkpoint_thread+0xd9/0x260 [ 790.746805][T25998] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 790.746856][T25998] ? __pfx_autoremove_wake_function+0x10/0x10 [ 790.746898][T25998] ? __kthread_parkme+0x7b/0x200 [ 790.746934][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.746962][T25998] ? __kthread_parkme+0x1a1/0x200 [ 790.747001][T25998] kthread+0x711/0x8a0 [ 790.747041][T25998] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 790.747074][T25998] ? __pfx_kthread+0x10/0x10 [ 790.747105][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.747142][T25998] ? _raw_spin_unlock_irq+0x23/0x50 [ 790.747165][T25998] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.747193][T25998] ? lockdep_hardirqs_on+0x9c/0x150 [ 790.747219][T25998] ? __pfx_kthread+0x10/0x10 [ 790.747255][T25998] ret_from_fork+0x3fc/0x770 [ 790.747287][T25998] ? __pfx_ret_from_fork+0x10/0x10 [ 790.747322][T25998] ? __switch_to_asm+0x39/0x70 [ 790.747354][T25998] ? __switch_to_asm+0x33/0x70 [ 790.747385][T25998] ? __pfx_kthread+0x10/0x10 [ 790.747423][T25998] ret_from_fork_asm+0x1a/0x30 [ 790.747476][T25998] [ 790.757492][T25998] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 790.938093][ T6018] usb 9-1: USB disconnect, device number 28 [ 791.159907][T17455] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 791.380064][T26023] netlink: 'syz.5.8231': attribute type 4 has an invalid length. [ 791.387850][T26023] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.8231'. [ 791.606281][T26019] loop4: detected capacity change from 0 to 32768 [ 791.693988][T26019] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 791.696210][T26027] loop1: detected capacity change from 0 to 1024 [ 791.721002][T26027] EXT4-fs: Ignoring removed orlov option [ 791.726674][T26027] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.868183][T26027] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 791.917258][T19138] ocfs2: Unmounting device (7,4) on (node local) [ 791.958891][T26027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.193880][T18444] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.590700][T26056] loop5: detected capacity change from 0 to 512 [ 792.608543][T26058] CUSE: unknown device info "€" [ 792.618746][T26058] CUSE: unknown device info "" [ 792.632798][T26058] CUSE: unknown device info "" [ 792.638627][T26056] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 792.659641][T26058] CUSE: unknown device info "€" [ 792.664523][T26058] CUSE: zero length info key specified [ 792.688399][T26032] loop3: detected capacity change from 0 to 32768 [ 792.706161][T26056] EXT4-fs (loop5): 1 truncate cleaned up [ 792.734830][T26056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.968868][T24457] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.000020][T26072] loop8: detected capacity change from 0 to 1024 [ 793.040350][T26072] EXT4-fs: Ignoring removed orlov option [ 793.046032][T26072] EXT4-fs: Ignoring removed mblk_io_submit option [ 793.104678][T26072] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 793.166771][T26072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.197156][T26078] loop1: detected capacity change from 0 to 8 [ 793.324185][T26084] netlink: 'syz.5.8259': attribute type 2 has an invalid length. [ 793.468412][T14850] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.910539][T26107] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 794.090409][T26109] loop5: detected capacity change from 0 to 4096 [ 794.199703][ T30] audit: type=1326 audit(2000000296.090:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26116 comm="syz.1.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f2b8e9a9 code=0x7ffc0000 [ 794.260821][T26109] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 794.292776][ T30] audit: type=1326 audit(2000000296.090:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26116 comm="syz.1.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f2b8e9a9 code=0x7ffc0000 [ 794.293284][T26109] ntfs3(loop5): Failed to load $Extend (-22). [ 794.389481][ T30] audit: type=1326 audit(2000000296.090:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26116 comm="syz.1.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f13f2b8e9a9 code=0x7ffc0000 [ 794.421430][T26109] ntfs3(loop5): Failed to initialize $Extend. [ 794.470805][ T30] audit: type=1326 audit(2000000296.090:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26116 comm="syz.1.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f2b8e9a9 code=0x7ffc0000 [ 794.470884][ T30] audit: type=1326 audit(2000000296.090:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26116 comm="syz.1.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f2b8e9a9 code=0x7ffc0000 [ 794.470960][ T30] audit: type=1326 audit(2000000296.150:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26117 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a0b8e9a9 code=0x7ffc0000 [ 794.471032][ T30] audit: type=1326 audit(2000000296.150:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26117 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a0b8e9a9 code=0x7ffc0000 [ 794.471104][ T30] audit: type=1326 audit(2000000296.150:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26117 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa4a0b8e9a9 code=0x7ffc0000 [ 794.471176][ T30] audit: type=1326 audit(2000000296.150:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26117 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a0b8e9a9 code=0x7ffc0000 [ 794.471241][ T30] audit: type=1326 audit(2000000296.150:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26117 comm="syz.3.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a0b8e9a9 code=0x7ffc0000 [ 794.649221][T26129] loop4: detected capacity change from 0 to 256 [ 794.704462][T26129] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 794.740054][ T6018] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 794.749577][ T5914] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 794.868633][T26095] loop8: detected capacity change from 0 to 40427 [ 794.875619][T26133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8282'. [ 794.900285][T26095] F2FS-fs (loop8): build fault injection type: 0x7 [ 794.906152][T26133] tipc: Invalid UDP bearer configuration [ 794.906874][T26133] tipc: Enabling of bearer rejected, failed to enable media [ 794.909616][ T5914] usb 10-1: Using ep0 maxpacket: 8 [ 794.928494][ T6018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.949477][T26095] F2FS-fs (loop8): invalid crc value [ 794.963934][ T6018] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 794.976891][ T5914] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.998943][ T5914] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.016723][ T6018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.020737][T26138] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8283'. [ 795.035942][ T5914] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.050268][ T6018] usb 4-1: config 0 descriptor?? [ 795.076252][ T5914] usb 10-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 795.085740][T26135] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8283'. [ 795.096958][ T5914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.106546][T26141] loop5: detected capacity change from 0 to 1024 [ 795.127789][ T5914] usb 10-1: config 0 descriptor?? [ 795.237534][ T36] hfsplus: b-tree write err: -5, ino 4 [ 795.278165][T26095] F2FS-fs (loop8): Start checkpoint disabled! [ 795.296421][T26095] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 795.471062][ T12] kworker/u8:0: attempt to access beyond end of device [ 795.471062][ T12] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 795.475096][ T6018] zeroplus 0003:0C12:0005.005A: item fetching failed at offset 2/5 [ 795.493398][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 795.493431][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 795.493448][ T12] Workqueue: writeback wb_workfn (flush-7:8) [ 795.493485][ T12] Call Trace: [ 795.493496][ T12] [ 795.493508][ T12] dump_stack_lvl+0x189/0x250 [ 795.493548][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.493577][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 795.493605][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 795.493639][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.493669][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 795.493695][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 795.493723][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.493752][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 795.493791][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 795.493829][ T12] f2fs_write_end_io+0x495/0x810 [ 795.493858][ T12] ? blkg_put+0x22/0x240 [ 795.493921][ T12] __submit_merged_bio+0x27a/0x6a0 [ 795.493958][ T12] __submit_merged_write_cond+0x255/0x530 [ 795.494012][ T12] f2fs_write_data_pages+0x261d/0x3000 [ 795.494094][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 795.494122][ T12] ? __local_bh_enable_ip+0x12d/0x1c0 [ 795.494172][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.494201][ T12] ? rcu_is_watching+0x15/0xb0 [ 795.494292][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.494384][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.494413][ T12] ? unwind_next_frame+0x19ae/0x2390 [ 795.494448][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 795.494481][ T12] do_writepages+0x32e/0x550 [ 795.494523][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.494552][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 795.494584][ T12] ? writeback_sb_inodes+0x372/0x1000 [ 795.494633][ T12] __writeback_single_inode+0x145/0xff0 [ 795.494668][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.494697][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 795.494741][ T12] writeback_sb_inodes+0x6b5/0x1000 [ 795.494797][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.494845][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 795.494943][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.494972][ T12] ? rcu_is_watching+0x15/0xb0 [ 795.495002][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.495045][ T12] wb_writeback+0x43b/0xaf0 [ 795.495092][ T12] ? queue_io+0x311/0x590 [ 795.495132][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 795.495179][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 795.495214][ T12] wb_workfn+0x409/0xef0 [ 795.495270][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 795.495305][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.495334][ T12] ? __lock_acquire+0xab9/0xd20 [ 795.495379][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.495413][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.495448][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 795.495472][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 795.495501][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 795.495535][ T12] process_scheduled_works+0xae1/0x17b0 [ 795.495612][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 795.495655][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.495698][ T12] worker_thread+0x8a0/0xda0 [ 795.495770][ T12] kthread+0x711/0x8a0 [ 795.495814][ T12] ? __pfx_worker_thread+0x10/0x10 [ 795.495845][ T12] ? __pfx_kthread+0x10/0x10 [ 795.495878][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.495913][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 795.495937][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.495965][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.495992][ T12] ? __pfx_kthread+0x10/0x10 [ 795.496031][ T12] ret_from_fork+0x3fc/0x770 [ 795.496064][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 795.496103][ T12] ? __switch_to_asm+0x39/0x70 [ 795.496135][ T12] ? __switch_to_asm+0x33/0x70 [ 795.496168][ T12] ? __pfx_kthread+0x10/0x10 [ 795.496208][ T12] ret_from_fork_asm+0x1a/0x30 [ 795.496273][ T12] [ 795.537764][ T6018] zeroplus 0003:0C12:0005.005A: parse failed [ 795.540384][ T12] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 795.566269][ T5914] waltop 0003:172F:0501.005B: unknown main item tag 0x0 [ 795.945591][ T6018] zeroplus 0003:0C12:0005.005A: probe with driver zeroplus failed with error -22 [ 795.967677][ T6018] usb 4-1: USB disconnect, device number 23 [ 796.019644][ T5914] waltop 0003:172F:0501.005B: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.9-1/input0 [ 796.059833][ T5914] usb 10-1: USB disconnect, device number 24 [ 796.555049][T26161] loop4: detected capacity change from 0 to 4096 [ 796.625383][T26171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8298'. [ 796.890536][T26170] loop9: detected capacity change from 0 to 8192 [ 797.141744][T26189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8307'. [ 797.954341][T26179] loop8: detected capacity change from 0 to 32768 [ 797.992882][T26179] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8303 (26179) [ 798.055552][T26179] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 798.086308][T26179] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm [ 798.115984][T26179] BTRFS info (device loop8): using free-space-tree [ 798.352444][T14850] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 798.395427][T26183] loop5: detected capacity change from 0 to 40427 [ 798.458488][T26183] F2FS-fs (loop5): build fault injection type: 0x7 [ 798.530112][T26183] F2FS-fs (loop5): invalid crc value [ 798.698326][T26202] loop4: detected capacity change from 0 to 32768 [ 798.731881][T26202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8313 (26202) [ 798.793128][T26202] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 798.820183][T26202] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 798.854210][T26202] BTRFS info (device loop4): using free-space-tree [ 798.928671][T26183] F2FS-fs (loop5): Start checkpoint disabled! [ 799.004269][T26183] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 799.012332][T26234] loop3: detected capacity change from 0 to 8192 [ 799.122392][T26204] loop9: detected capacity change from 0 to 32768 [ 799.140654][T26202] BTRFS info (device loop4): rebuilding free space tree [ 799.198737][T26204] [ 799.198737][T26204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.198737][T26204] [ 799.254672][T26252] loop8: detected capacity change from 0 to 4096 [ 799.270842][ T36] kworker/u8:2: attempt to access beyond end of device [ 799.270842][ T36] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 799.280775][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 799.280794][ T30] audit: type=1800 audit(2000000301.170:339): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8314" name="file1" dev="loop9" ino=4 res=0 errno=0 [ 799.303980][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 799.304014][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.304031][ T36] Workqueue: writeback wb_workfn (flush-7:5) [ 799.304068][ T36] Call Trace: [ 799.304079][ T36] [ 799.304090][ T36] dump_stack_lvl+0x189/0x250 [ 799.304130][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.304157][ T36] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 799.304184][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 799.304226][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.304255][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 799.304281][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 799.304309][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.304337][ T36] ? f2fs_hw_is_readonly+0x39b/0x470 [ 799.304372][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 799.304409][ T36] f2fs_write_end_io+0x495/0x810 [ 799.304438][ T36] ? blkg_put+0x22/0x240 [ 799.304500][ T36] __submit_merged_bio+0x27a/0x6a0 [ 799.304537][ T36] __submit_merged_write_cond+0x255/0x530 [ 799.304590][ T36] f2fs_write_data_pages+0x261d/0x3000 [ 799.304672][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 799.304723][ T36] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 799.304809][ T36] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 799.304838][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.304866][ T36] ? look_up_lock_class+0x74/0x170 [ 799.304908][ T36] ? trace_f2fs_writepages+0x7f/0x200 [ 799.304938][ T36] ? f2fs_write_node_pages+0x478/0x6e0 [ 799.304980][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.305031][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.305069][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 799.305101][ T36] do_writepages+0x32e/0x550 [ 799.305143][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.305171][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 799.305202][ T36] ? writeback_sb_inodes+0x372/0x1000 [ 799.305274][ T36] __writeback_single_inode+0x145/0xff0 [ 799.305307][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.305336][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 799.305380][ T36] writeback_sb_inodes+0x6b5/0x1000 [ 799.305434][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.305481][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 799.305578][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.305606][ T36] ? rcu_is_watching+0x15/0xb0 [ 799.305637][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.305679][ T36] wb_writeback+0x43b/0xaf0 [ 799.305726][ T36] ? queue_io+0x311/0x590 [ 799.305765][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 799.305812][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.305846][ T36] wb_workfn+0x409/0xef0 [ 799.305898][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 799.305934][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.305961][ T36] ? __lock_acquire+0xab9/0xd20 [ 799.306005][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.306039][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.306073][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.306096][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 799.306125][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 799.306158][ T36] process_scheduled_works+0xae1/0x17b0 [ 799.306240][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 799.306283][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.306329][ T36] worker_thread+0x8a0/0xda0 [ 799.306402][ T36] kthread+0x711/0x8a0 [ 799.306444][ T36] ? __pfx_worker_thread+0x10/0x10 [ 799.306474][ T36] ? __pfx_kthread+0x10/0x10 [ 799.306506][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.306540][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.306564][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.306591][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.306617][ T36] ? __pfx_kthread+0x10/0x10 [ 799.306656][ T36] ret_from_fork+0x3fc/0x770 [ 799.306688][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 799.306726][ T36] ? __switch_to_asm+0x39/0x70 [ 799.306758][ T36] ? __switch_to_asm+0x33/0x70 [ 799.306789][ T36] ? __pfx_kthread+0x10/0x10 [ 799.306827][ T36] ret_from_fork_asm+0x1a/0x30 [ 799.306887][ T36] [ 799.307985][ T36] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 799.315192][T26204] [ 799.315192][T26204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.315192][T26204] [ 799.324303][T11866] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 799.379413][T26252] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 799.406054][T26204] [ 799.406054][T26204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.406054][T26204] [ 799.771231][T26204] [ 799.771231][T26204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.771231][T26204] [ 799.783336][T19138] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 799.791251][T26255] [ 799.791251][T26255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.791251][T26255] [ 799.818599][T26204] [ 799.818599][T26204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.818599][T26204] [ 799.829883][T26204] [ 799.829883][T26204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.829883][T26204] [ 799.888498][ T111] [ 799.888498][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.888498][ T111] [ 799.911786][T26255] [ 799.911786][T26255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 799.911786][T26255] [ 799.939992][T11866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 799.969449][T11866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.989725][T11866] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 799.998787][T11866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.067338][T11866] usb 2-1: config 0 descriptor?? [ 800.155283][ T48] [ 800.155283][ T48] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 800.155283][ T48] [ 800.190105][ T48] [ 800.190105][ T48] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 800.190105][ T48] [ 800.230105][T16441] [ 800.230105][T16441] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 800.230105][T16441] [ 800.286028][T16441] [ 800.286028][T16441] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 800.286028][T16441] [ 800.306829][ T110] [ 800.306829][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 800.306829][ T110] [ 800.512758][T26259] loop8: detected capacity change from 0 to 4096 [ 800.516895][T11866] glorious 0003:258A:0036.005C: unknown main item tag 0x0 [ 800.552669][T11866] glorious 0003:258A:0036.005C: unknown main item tag 0x0 [ 800.568401][T26263] devpts: Bad value for 'max' [ 800.586572][T11866] glorious 0003:258A:0036.005C: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.1-1/input0 [ 800.633236][T26259] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 800.714935][T11866] usb 2-1: USB disconnect, device number 24 [ 800.800139][ T6018] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 800.989766][ T6018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 801.004102][T26275] loop4: detected capacity change from 0 to 512 [ 801.009425][ T6018] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 801.025965][T26278] loop8: detected capacity change from 0 to 512 [ 801.040467][ T6018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.051221][T26278] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 801.061338][T26275] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 801.073868][ T6018] usb 4-1: config 0 descriptor?? [ 801.082392][T26262] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 801.097967][T26275] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.8333: invalid indirect mapped block 2683928664 (level 1) [ 801.127474][T26278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.131620][T26275] EXT4-fs (loop4): Remounting filesystem read-only [ 801.148227][T26275] EXT4-fs (loop4): 1 truncate cleaned up [ 801.156206][T26275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.169759][T26278] ext4 filesystem being mounted at /812/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.196745][T26275] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 801.219103][T26285] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8336'. [ 801.228989][T26287] loop5: detected capacity change from 0 to 8 [ 801.335121][T14850] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.376121][T19138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.546611][ T6018] hid-retrode 0003:0403:97C1.005D: unknown main item tag 0x0 [ 801.579971][ T6018] hid-retrode 0003:0403:97C1.005D: unknown main item tag 0x0 [ 801.602119][ T6018] hid-retrode 0003:0403:97C1.005D: unknown main item tag 0x0 [ 801.629865][ T6018] hid-retrode 0003:0403:97C1.005D: unknown main item tag 0x0 [ 801.637309][ T6018] hid-retrode 0003:0403:97C1.005D: unknown main item tag 0x0 [ 801.670275][T26293] loop1: detected capacity change from 0 to 4096 [ 801.695721][T26300] loop8: detected capacity change from 0 to 128 [ 801.706167][ T6018] hid-retrode 0003:0403:97C1.005D: hidraw0: USB HID v1.01 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 801.739186][T26293] NILFS (loop1): invalid segment: Checksum error in segment payload [ 801.754070][ T6018] usb 4-1: USB disconnect, device number 24 [ 801.765573][T26300] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 801.773188][T26293] NILFS (loop1): trying rollback from an earlier position [ 801.849675][T26293] NILFS (loop1): recovery complete [ 801.854991][T26300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.869412][T26305] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 801.899910][ T30] audit: type=1800 audit(2000000303.800:340): pid=26293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8339" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 802.057613][T26309] devtmpfs: Cannot retroactively limit inodes [ 802.125356][T26311] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8347'. [ 802.694581][T26295] loop4: detected capacity change from 0 to 32768 [ 803.152214][T26343] loop9: detected capacity change from 0 to 2048 [ 803.173891][T26340] loop1: detected capacity change from 0 to 1024 [ 803.215129][T26295] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 803.260113][T26340] hfsplus: bad catalog entry type [ 803.429484][T26295] XFS (loop4): Ending clean mount [ 803.450740][T26343] Alternate GPT is invalid, using primary GPT. [ 803.483352][T26295] XFS (loop4): Quotacheck needed: Please wait. [ 803.503727][T26343] loop9: p1 p2 p3 [ 803.526601][ T48] hfsplus: b-tree write err: -5, ino 4 [ 803.715308][T26295] XFS (loop4): Quotacheck: Done. [ 804.122236][T19138] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 804.899633][ T6018] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 805.083396][ T6018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 805.155021][ T6018] usb 10-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 805.234643][ T6018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.318441][ T6018] usb 10-1: config 0 descriptor?? [ 805.372515][T26364] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 805.768681][T26352] loop8: detected capacity change from 0 to 32768 [ 805.845192][ T6018] hid-retrode 0003:0403:97C1.005E: unknown main item tag 0x0 [ 805.908819][ T6018] hid-retrode 0003:0403:97C1.005E: unknown main item tag 0x0 [ 805.972986][ T6018] hid-retrode 0003:0403:97C1.005E: unknown main item tag 0x0 [ 806.024211][ T6018] hid-retrode 0003:0403:97C1.005E: unknown main item tag 0x0 [ 806.078015][ T6018] hid-retrode 0003:0403:97C1.005E: unknown main item tag 0x0 [ 806.227215][ T6018] hid-retrode 0003:0403:97C1.005E: hidraw0: USB HID v1.01 Device [HID 0403:97c1] on usb-dummy_hcd.9-1/input0 [ 806.282357][T26352] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 806.282386][T26352] allowing incompatible features above 0.0: (unknown version) [ 806.282401][T26352] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 806.317847][T26389] loop1: detected capacity change from 0 to 1024 [ 806.369548][ T6018] usb 10-1: USB disconnect, device number 25 [ 806.388819][T26389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.388954][T26389] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.466367][ T30] audit: type=1800 audit(2000000308.350:341): pid=26389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8375" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 806.678735][T18444] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.880125][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.078411][T26352] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 807.129683][T26352] bcachefs (loop8): initializing new filesystem [ 807.201875][T26352] syz.8.8362: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 807.299840][T26352] CPU: 0 UID: 0 PID: 26352 Comm: syz.8.8362 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 807.299878][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.299894][T26352] Call Trace: [ 807.299905][T26352] [ 807.299916][T26352] dump_stack_lvl+0x189/0x250 [ 807.299956][T26352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.299988][T26352] ? __pfx__printk+0x10/0x10 [ 807.300024][T26352] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 807.300059][T26352] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 807.300094][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.300124][T26352] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 807.300162][T26352] warn_alloc+0x214/0x310 [ 807.300194][T26352] ? __pfx_warn_alloc+0x10/0x10 [ 807.300227][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.300264][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.300293][T26352] ? __get_vm_area_node+0x28f/0x300 [ 807.300331][T26352] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 807.300367][T26352] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 807.300436][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.300464][T26352] ? six_unlock_ip+0x302/0x430 [ 807.300504][T26352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 807.300548][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.300576][T26352] ? rcu_is_watching+0x15/0xb0 [ 807.300608][T26352] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 807.300636][T26352] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 807.300662][T26352] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 807.300701][T26352] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 807.300740][T26352] bch2_fs_journal_start+0x2b4/0x12b0 [ 807.300795][T26352] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 807.300825][T26352] ? bch2_fs_journal_alloc+0x69/0x4e0 [ 807.300861][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.300891][T26352] ? bch2_fs_journal_alloc+0x4ac/0x4e0 [ 807.300921][T26352] ? bch2_fs_journal_alloc+0x69/0x4e0 [ 807.300955][T26352] bch2_fs_initialize+0xac7/0x1550 [ 807.301005][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.301034][T26352] ? _prb_read_valid+0xa07/0xa90 [ 807.301064][T26352] ? __pfx_bch2_fs_initialize+0x10/0x10 [ 807.301128][T26352] ? __pfx___console_unlock+0x10/0x10 [ 807.301255][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.301289][T26352] ? bch2_fs_start+0xa0f/0xda0 [ 807.301333][T26352] ? up_write+0x1c4/0x420 [ 807.301365][T26352] ? bch2_fs_start+0x5e7/0xda0 [ 807.301408][T26352] bch2_fs_start+0xaa0/0xda0 [ 807.301450][T26352] ? bch2_fs_start+0x5e7/0xda0 [ 807.301493][T26352] ? __pfx_bch2_fs_start+0x10/0x10 [ 807.301558][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.301587][T26352] ? sget+0x267/0x620 [ 807.301626][T26352] bch2_fs_get_tree+0xb39/0x1520 [ 807.301697][T26352] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 807.301758][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.301787][T26352] ? aa_get_newest_label+0xf7/0x5d0 [ 807.301816][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.301845][T26352] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 807.301903][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.301932][T26352] ? apparmor_capable+0x137/0x1b0 [ 807.301970][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.302005][T26352] vfs_get_tree+0x92/0x2b0 [ 807.302044][T26352] do_new_mount+0x24a/0xa40 [ 807.302095][T26352] __se_sys_mount+0x317/0x410 [ 807.302126][T26352] ? __pfx___se_sys_mount+0x10/0x10 [ 807.302148][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.302186][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.302215][T26352] ? __x64_sys_mount+0x20/0xc0 [ 807.302264][T26352] do_syscall_64+0xfa/0x3b0 [ 807.302293][T26352] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.302320][T26352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.302345][T26352] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.302373][T26352] ? exc_page_fault+0x9f/0xf0 [ 807.302403][T26352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.302428][T26352] RIP: 0033:0x7f8c75b9014a [ 807.302449][T26352] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.302471][T26352] RSP: 002b:00007f8c7697ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 807.302498][T26352] RAX: ffffffffffffffda RBX: 00007f8c7697cef0 RCX: 00007f8c75b9014a [ 807.302517][T26352] RDX: 00002000000000c0 RSI: 00002000000003c0 RDI: 00007f8c7697ceb0 [ 807.302536][T26352] RBP: 00002000000000c0 R08: 00007f8c7697cef0 R09: 0000000000000810 [ 807.302554][T26352] R10: 0000000000000810 R11: 0000000000000246 R12: 00002000000003c0 [ 807.302571][T26352] R13: 00007f8c7697ceb0 R14: 0000000000005a85 R15: 0000200000000040 [ 807.302610][T26352] [ 807.756700][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.792406][T26407] loop5: detected capacity change from 0 to 512 [ 807.845074][T26352] Mem-Info: [ 807.848332][T26352] active_anon:8577 inactive_anon:29 isolated_anon:0 [ 807.848332][T26352] active_file:11173 inactive_file:40716 isolated_file:0 [ 807.848332][T26352] unevictable:768 dirty:215 writeback:0 [ 807.848332][T26352] slab_reclaimable:11153 slab_unreclaimable:108850 [ 807.848332][T26352] mapped:34437 shmem:5954 pagetables:1138 [ 807.848332][T26352] sec_pagetables:0 bounce:0 [ 807.848332][T26352] kernel_misc_reclaimable:0 [ 807.848332][T26352] free:1277262 free_pcp:18067 free_cma:0 [ 807.893834][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.902866][T26352] Node 0 active_anon:34308kB inactive_anon:116kB active_file:44692kB inactive_file:162660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137748kB dirty:860kB writeback:0kB shmem:22280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11856kB pagetables:4420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 807.936992][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.954540][T26352] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 807.985992][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.994326][T26352] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 808.023118][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.029320][T26352] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 808.035267][T26352] Node 0 DMA32 free:1209820kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34260kB inactive_anon:116kB active_file:44692kB inactive_file:161084kB unevictable:1536kB writepending:860kB present:3129332kB managed:2558496kB mlocked:0kB bounce:0kB free_pcp:40760kB local_pcp:15772kB free_cma:0kB [ 808.067755][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.075967][T26352] lowmem_reserve[]: 0 0 1 1 1 [ 808.081080][T26352] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 808.110373][T26352] lowmem_reserve[]: 0 0 0 0 0 [ 808.115228][T26352] Node 1 Normal free:3882948kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:31400kB local_pcp:9096kB free_cma:0kB [ 808.146415][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.152581][T26352] lowmem_reserve[]: 0 0 0 0 0 [ 808.157425][T26352] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 808.173573][T26352] Node 0 DMA32: 913*4kB (M) 642*8kB (UM) 420*16kB (UME) 219*32kB (UME) 140*64kB (ME) 19*128kB (ME) 184*256kB (UME) 143*512kB (UME) 54*1024kB (UM) 4*2048kB (UME) 242*4096kB (UME) = 1208948kB [ 808.193590][T26352] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 808.206112][T26352] Node 1 Normal: 9*4kB (U) 60*8kB (UME) 46*16kB (UME) 213*32kB (UME) 77*64kB (UME) 20*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 4*2048kB (UME) 941*4096kB (M) = 3882948kB [ 808.224412][T26352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 808.234425][T26352] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 808.243924][T26352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 808.271277][T26352] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 808.289492][T26352] 57659 total pagecache pages [ 808.299145][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8387'. [ 808.308143][T26352] 29 pages in swap cache [ 808.312932][T26352] Free swap = 124880kB [ 808.317160][T26352] Total swap = 124996kB [ 808.329432][T26352] 2097051 pages RAM [ 808.333331][T26352] 0 pages HighMem/MovableOnly [ 808.348226][T26352] 425385 pages reserved [ 808.360652][T26352] 0 pages cma reserved [ 808.414939][T26352] bcachefs (loop8): error reallocating journal fifo (32768 open entries) [ 808.423817][T26352] bcachefs (loop8): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo [ 808.432276][T26352] bcachefs (loop8): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 808.442029][T26352] bcachefs (loop8): shutting down [ 808.639739][T26352] bcachefs (loop8): shutdown complete [ 809.123689][T26407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.218250][T26407] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 809.250227][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.324712][T26434] loop9: detected capacity change from 0 to 256 [ 809.370553][T26434] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 809.426578][T26434] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 809.499435][T26434] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 809.532196][T24457] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.918919][T26443] loop9: detected capacity change from 0 to 1024 [ 810.188463][ T36] hfsplus: b-tree write err: -5, ino 4 [ 810.371478][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.414868][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.459369][ C1] sched: DL replenish lagged too much [ 811.204847][T26462] loop5: detected capacity change from 0 to 128 [ 811.262613][T26462] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 811.325751][T26462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.417603][T26455] loop3: detected capacity change from 0 to 32768 [ 812.510856][T26455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8406 (26455) [ 812.616525][T26455] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 812.665094][T26455] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 812.712332][T26458] loop4: detected capacity change from 0 to 32768 [ 812.731829][T26455] BTRFS info (device loop3): using free-space-tree [ 812.780682][T26458] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 33/0 [] [ 812.780682][T26458] replicas (size 24): [ 812.780682][T26458] btree: 0/1 [2] sb: 33/0 [] (unknown data_type 144): 56/184 [0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0] [ 812.780682][T26458] [ 813.088679][T26455] BTRFS info (device loop3): rebuilding free space tree [ 813.117039][T26458] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 813.195314][ T30] audit: type=1326 audit(2000000315.090:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26495 comm="syz.5.8418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f964bd8e9a9 code=0x0 [ 813.449087][T17455] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 813.907161][T19140] Bluetooth: hci5: unknown advertising packet type: 0x65 [ 813.907256][T19140] Bluetooth: hci5: Malformed LE Event: 0x02 [ 814.270050][T26507] loop5: detected capacity change from 0 to 128 [ 814.343425][T26507] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 814.419905][T26507] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 814.595166][T26511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8421'. [ 814.623444][T26507] EXT4-fs: Ignoring removed orlov option [ 814.671263][T26507] EXT4-fs: can't change dax mount option while remounting [ 814.936628][T24457] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 815.321016][T26522] netlink: 192 bytes leftover after parsing attributes in process `syz.5.8429'. [ 815.389547][T26522] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8429'. [ 815.969808][ T6018] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 816.129670][ T6018] usb 2-1: Using ep0 maxpacket: 16 [ 816.155472][ T6018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.212934][ T6018] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.256631][ T6018] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 816.281592][T26542] loop3: detected capacity change from 0 to 4096 [ 816.288383][ T6018] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 816.299768][ T973] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 816.314106][T26542] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 816.326144][ T6018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.379306][ T6018] usb 2-1: config 0 descriptor?? [ 816.409605][T26542] ntfs3(loop3): ino=19, mi_enum_attr [ 816.414975][T26542] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 816.482398][ T973] usb 6-1: config 0 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.505161][T26542] ntfs3(loop3): failed to convert "c46c" to iso8859-13 [ 816.522337][ T973] usb 6-1: config 0 interface 0 has no altsetting 0 [ 816.539484][T26542] ntfs3(loop3): ino=20, mi_enum_attr [ 816.558100][ T973] usb 6-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 816.628137][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.683643][ T973] usb 6-1: config 0 descriptor?? [ 816.824135][ T6018] microsoft 0003:045E:07DA.005F: unbalanced collection at end of report description [ 816.875931][ T6018] microsoft 0003:045E:07DA.005F: parse failed [ 816.909700][ T6018] microsoft 0003:045E:07DA.005F: probe with driver microsoft failed with error -22 [ 816.994716][T26549] loop3: detected capacity change from 0 to 64 [ 817.043782][ T6018] usb 2-1: USB disconnect, device number 25 [ 817.086725][T26549] hfs: bad catalog entry type 0 [ 817.152918][ T973] semitek 0003:1EA7:0907.0060: unknown main item tag 0x0 [ 817.191120][ T973] semitek 0003:1EA7:0907.0060: unknown main item tag 0x0 [ 817.214833][ T973] semitek 0003:1EA7:0907.0060: unknown main item tag 0x0 [ 817.230706][ T973] semitek 0003:1EA7:0907.0060: unknown main item tag 0x0 [ 817.238384][ T973] semitek 0003:1EA7:0907.0060: unknown main item tag 0x0 [ 817.252487][ T973] semitek 0003:1EA7:0907.0060: unknown main item tag 0x0 [ 817.276774][ T973] semitek 0003:1EA7:0907.0060: unknown main item tag 0x0 [ 817.321104][ T973] semitek 0003:1EA7:0907.0060: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.5-1/input0 [ 817.397859][ T973] usb 6-1: USB disconnect, device number 25 [ 817.470642][T26555] sp0: Synchronizing with TNC [ 817.789079][T26560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8446'. [ 818.388460][T26570] loop1: detected capacity change from 0 to 1024 [ 818.436554][T26574] nbd: must specify at least one socket [ 818.475068][T26570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.842211][T18444] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.264268][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 820.276292][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 820.285613][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 820.295832][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 820.309690][ T6018] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 820.324726][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 820.418012][T26597] loop5: detected capacity change from 0 to 4096 [ 820.526233][ T6018] usb 2-1: Using ep0 maxpacket: 32 [ 820.558281][ T6018] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.587250][ T6018] usb 2-1: config 0 has no interface number 0 [ 820.599620][ T30] audit: type=1800 audit(2000000322.490:343): pid=26597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8463" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 820.621001][T26597] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 820.670682][ T6018] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.699626][ T6018] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.734409][ T6018] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 820.783763][ T6018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.830961][ T6018] usb 2-1: config 0 descriptor?? [ 821.288801][T26598] chnl_net:caif_netlink_parms(): no params data found [ 821.313906][ T6018] ft260 0003:0403:6030.0061: item fetching failed at offset 0/2 [ 821.346889][ T6018] ft260 0003:0403:6030.0061: failed to parse HID [ 821.354131][ T973] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 821.396972][ T6018] ft260 0003:0403:6030.0061: probe with driver ft260 failed with error -22 [ 821.481953][ T6018] usb 2-1: USB disconnect, device number 26 [ 821.539645][ T973] usb 6-1: Using ep0 maxpacket: 32 [ 821.550774][ T973] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 821.569262][ T973] usb 6-1: config 0 has no interface number 0 [ 821.619593][ T973] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.666795][ T973] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 821.708954][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.740884][ T973] usb 6-1: Product: syz [ 821.745079][ T973] usb 6-1: Manufacturer: syz [ 821.777316][ T973] usb 6-1: SerialNumber: syz [ 821.810591][ T973] usb 6-1: config 0 descriptor?? [ 821.831887][ T973] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 821.879921][ T973] em28xx 6-1:0.132: Video interface 132 found: [ 822.002067][T26598] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.043259][T26598] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.078401][T26598] bridge_slave_0: entered allmulticast mode [ 822.119722][T26598] bridge_slave_0: entered promiscuous mode [ 822.154906][T26598] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.189627][T26598] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.228315][T26598] bridge_slave_1: entered allmulticast mode [ 822.244092][ T973] em28xx 6-1:0.132: chip ID is em2840 [ 822.257345][T26598] bridge_slave_1: entered promiscuous mode [ 822.344572][T26615] loop1: detected capacity change from 0 to 256 [ 822.368763][T26615] exfat: Deprecated parameter 'utf8' [ 822.401215][ T5851] Bluetooth: hci6: command tx timeout [ 822.497066][T26615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 822.533407][ T973] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 822.555825][T26598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.586835][ T973] em28xx 6-1:0.132: board has no eeprom [ 822.630534][T26598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.681077][ T973] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 822.716474][ T973] em28xx 6-1:0.132: analog set to bulk mode. [ 822.758060][ T5942] em28xx 6-1:0.132: Registering V4L2 extension [ 822.819558][ T973] usb 6-1: USB disconnect, device number 26 [ 822.847677][ T973] em28xx 6-1:0.132: Disconnecting em28xx [ 823.063136][T26598] team0: Port device team_slave_0 added [ 823.155744][T26598] team0: Port device team_slave_1 added [ 823.229513][ T6018] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 823.421564][ T6018] usb 2-1: Using ep0 maxpacket: 32 [ 823.461611][ T6018] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 823.496415][ T6018] usb 2-1: config 0 has no interface number 0 [ 823.557464][ T6018] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.669414][ T6018] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 823.719567][ T5942] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 823.742025][T26598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.749107][ T6018] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 823.784322][ T5942] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 823.799437][T26598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.852867][ T5942] em28xx 6-1:0.132: No AC97 audio processor [ 823.865583][ T6018] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 823.939779][ T5942] usb 6-1: Decoder not found [ 823.944420][ T5942] em28xx 6-1:0.132: failed to create media graph [ 823.959420][ T6018] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 824.023545][T26598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.034775][ T6018] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 824.055039][ T5942] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 824.116571][ T6018] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 824.148975][T26598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.172507][ T5942] em28xx 6-1:0.132: Remote control support is not available for this card. [ 824.230509][T26598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.285612][ T973] em28xx 6-1:0.132: Closing input extension [ 824.301037][ T6018] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 824.318843][T26614] loop4: detected capacity change from 0 to 32768 [ 824.349491][ T6018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.394987][ T6018] usb 2-1: Product: syz [ 824.412824][ T973] em28xx 6-1:0.132: Freeing device [ 824.441495][ T6018] usb 2-1: Manufacturer: syz [ 824.448051][ T6018] usb 2-1: SerialNumber: syz [ 824.459562][T26598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.491486][ T5851] Bluetooth: hci6: command tx timeout [ 824.553582][ T6018] usb 2-1: config 0 descriptor?? [ 824.562211][T26618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 824.854656][ T6018] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 825.018106][T26598] hsr_slave_0: entered promiscuous mode [ 825.060069][ T6018] etas_es58x 2-1:0.219: could not parse product info: '424242424242' [ 825.074959][T26598] hsr_slave_1: entered promiscuous mode [ 825.126093][T26598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.171541][T26598] Cannot create hsr debugfs directory [ 825.376239][ T5942] usb 2-1: USB disconnect, device number 27 [ 825.422001][ T5942] etas_es58x 2-1:0.219: Disconnecting syz syz [ 825.839870][ T5919] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 826.022570][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.044877][ T5919] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 826.071006][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.109050][ T5919] usb 6-1: config 0 descriptor?? [ 826.547928][ T5919] zeroplus 0003:0C12:0005.0062: item fetching failed at offset 2/5 [ 826.559802][ T5851] Bluetooth: hci6: command tx timeout [ 826.567445][ T5919] zeroplus 0003:0C12:0005.0062: parse failed [ 826.584801][ T5919] zeroplus 0003:0C12:0005.0062: probe with driver zeroplus failed with error -22 [ 826.757846][ T5919] usb 6-1: USB disconnect, device number 27 [ 826.907382][T26644] loop4: detected capacity change from 0 to 2048 [ 826.936469][T26644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.964762][ T30] audit: type=1800 audit(2000000328.860:344): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8480" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 827.579744][T26649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8483'. [ 828.441637][T26661] loop4: detected capacity change from 0 to 8 [ 828.516300][T26661] SQUASHFS error: zlib decompression failed, data probably corrupt [ 828.566282][T26661] SQUASHFS error: Failed to read block 0x13e: -5 [ 828.587526][T19140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 828.597987][T19140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 828.606615][T19140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 828.626213][T26661] SQUASHFS error: Unable to read metadata cache entry [13c] [ 828.636927][T19140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 828.650289][T19140] Bluetooth: hci6: command tx timeout [ 828.657647][T19140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 828.690901][T26661] SQUASHFS error: Unable to read directory block [13c:26] [ 828.790086][ T973] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 828.960145][ T973] usb 6-1: Using ep0 maxpacket: 32 [ 828.975327][ T973] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 828.989253][ T973] usb 6-1: config 0 has no interface number 0 [ 829.006101][ T973] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 829.035494][ T973] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 829.066581][ T973] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 829.084268][ T973] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 829.095843][ T973] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 829.112937][ T973] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 829.136413][ T973] usb 6-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 829.180486][ T973] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 829.195158][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.215908][ T973] usb 6-1: Product: syz [ 829.227911][ T973] usb 6-1: Manufacturer: syz [ 829.244056][ T973] usb 6-1: SerialNumber: syz [ 829.268645][ T973] usb 6-1: config 0 descriptor?? [ 829.298758][T26663] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 829.560046][ T973] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 829.759625][ T973] etas_es58x 6-1:0.219: could not parse product info: '424242424242' [ 830.011210][ T973] usb 6-1: USB disconnect, device number 28 [ 830.042993][ T973] etas_es58x 6-1:0.219: Disconnecting syz syz [ 830.183445][T26679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8495'. [ 830.719710][T19140] Bluetooth: hci7: command tx timeout [ 830.982424][T26664] chnl_net:caif_netlink_parms(): no params data found [ 831.386531][T26698] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8502'. [ 831.689205][T26664] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.721235][T26664] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.743438][T26664] bridge_slave_0: entered allmulticast mode [ 831.771942][T26664] bridge_slave_0: entered promiscuous mode [ 831.812130][T26664] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.848432][T26664] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.888249][T26664] bridge_slave_1: entered allmulticast mode [ 831.928270][T26664] bridge_slave_1: entered promiscuous mode [ 832.062362][T26709] loop1: detected capacity change from 0 to 64 [ 832.114104][T26709] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 832.335292][T26664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.411993][T26664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.799726][T19140] Bluetooth: hci7: command tx timeout [ 832.964715][T26664] team0: Port device team_slave_0 added [ 833.055415][T26719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8513'. [ 833.203360][T26664] team0: Port device team_slave_1 added [ 833.593812][T26664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.635257][T26664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.801977][T26664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.907683][T26664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.970896][T26664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.130066][T26664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.460255][ T5849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 834.471976][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 834.480583][ T5849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 834.491766][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 834.534367][ T5849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 834.756918][T26664] hsr_slave_0: entered promiscuous mode [ 834.806440][T26664] hsr_slave_1: entered promiscuous mode [ 834.846830][T26664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 834.879587][ T5849] Bluetooth: hci7: command tx timeout [ 834.920864][T26664] Cannot create hsr debugfs directory [ 836.073778][T26731] loop4: detected capacity change from 0 to 32768 [ 836.659708][ T5849] Bluetooth: hci8: command tx timeout [ 836.981558][ T5849] Bluetooth: hci7: command tx timeout [ 838.328838][T26737] chnl_net:caif_netlink_parms(): no params data found [ 838.719758][ T5849] Bluetooth: hci8: command tx timeout [ 838.730349][T26779] loop5: detected capacity change from 0 to 4096 [ 838.784943][T26779] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 839.054248][T26790] binder: 26788:26790 ioctl 4018620d 0 returned -22 [ 839.080998][T26790] binder: 26788:26790 ioctl 541b 0 returned -22 [ 839.134459][T26737] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.179795][T26737] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.205370][T26737] bridge_slave_0: entered allmulticast mode [ 839.241714][T26737] bridge_slave_0: entered promiscuous mode [ 839.269938][T26792] CUSE: unknown device info "ÿ" [ 839.283221][T26737] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.300546][T26792] CUSE: zero length info key specified [ 839.326504][T26737] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.360163][T26737] bridge_slave_1: entered allmulticast mode [ 839.395266][T26737] bridge_slave_1: entered promiscuous mode [ 839.707866][T26779] ntfs3(loop5): ino=19, mi_enum_attr [ 839.729675][T26779] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 839.767589][T26737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.841411][T26779] ntfs3(loop5): failed to convert "c46c" to cp852 [ 839.867601][T26737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.884926][T26779] ntfs3(loop5): ino=20, mi_enum_attr [ 840.352167][T26737] team0: Port device team_slave_0 added [ 840.404832][T26737] team0: Port device team_slave_1 added [ 840.765802][T26737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.797737][T26737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.823837][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.850185][ T5849] Bluetooth: hci8: command tx timeout [ 841.000048][T26737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.084008][T26737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.113914][T26737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.244861][T26737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.630949][T26737] hsr_slave_0: entered promiscuous mode [ 841.698538][T26737] hsr_slave_1: entered promiscuous mode [ 841.719040][T26805] loop1: detected capacity change from 0 to 32768 [ 841.728592][T26737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.775659][T26737] Cannot create hsr debugfs directory [ 842.471957][T26827] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8560'. [ 842.881142][ T5849] Bluetooth: hci8: command tx timeout [ 843.413132][T26836] loop1: detected capacity change from 0 to 1024 [ 843.603068][ T48] hfsplus: b-tree write err: -5, ino 4 [ 844.038533][T26846] netlink: 'syz.1.8569': attribute type 2 has an invalid length. [ 844.063077][T26846] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.8569'. [ 844.143779][T26848] loop4: detected capacity change from 0 to 512 [ 844.168691][T26848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 844.238926][T26848] EXT4-fs (loop4): 1 truncate cleaned up [ 844.256913][T26848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.556984][T19138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.693787][T26856] loop1: detected capacity change from 0 to 256 [ 844.854439][T26859] loop4: detected capacity change from 0 to 256 [ 845.520818][ T5849] Bluetooth: hci8: command tx timeout [ 848.110354][ T30] audit: type=1326 audit(2000000349.990:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.4.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118f8e9a9 code=0x7ffc0000 [ 848.196766][ T30] audit: type=1326 audit(2000000350.040:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.4.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd118f8e9a9 code=0x7ffc0000 [ 848.314244][ T30] audit: type=1326 audit(2000000350.040:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.4.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118f8e9a9 code=0x7ffc0000 [ 848.418763][ T30] audit: type=1326 audit(2000000350.040:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.4.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118f8e9a9 code=0x7ffc0000 [ 848.529565][ T30] audit: type=1326 audit(2000000350.050:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.4.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd118f8e9a9 code=0x7ffc0000 [ 848.551845][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.641263][ T30] audit: type=1326 audit(2000000350.050:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.4.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118f8e9a9 code=0x7ffc0000 [ 848.700447][T26907] netlink: 292 bytes leftover after parsing attributes in process `syz.4.8596'. [ 848.755856][ T30] audit: type=1326 audit(2000000350.050:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26900 comm="syz.4.8593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118f8e9a9 code=0x7ffc0000 [ 849.214206][T26916] loop1: detected capacity change from 0 to 512 [ 849.244954][T26917] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8601'. [ 849.498478][T26921] netlink: 'syz.1.8602': attribute type 1 has an invalid length. [ 851.888210][T26936] loop1: detected capacity change from 0 to 32768 [ 851.906284][T26936] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8610 (26936) [ 851.937050][T26936] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 851.954037][T26936] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 851.967177][T26936] BTRFS info (device loop1): using free-space-tree [ 852.235530][T18444] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 852.706723][T26961] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8615'. [ 852.970205][T26963] loop1: detected capacity change from 0 to 128 [ 853.867696][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8622'. [ 854.234650][T26983] syz_tun: refused to change device tx_queue_len [ 854.268510][T26983] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 854.418637][T26985] loop4: detected capacity change from 0 to 1024 [ 854.482497][T26985] hfsplus: bad catalog entry type [ 854.596506][ T3547] hfsplus: b-tree write err: -5, ino 4 [ 855.028225][T26994] netlink: 'syz.1.8630': attribute type 3 has an invalid length. [ 856.080530][ T5849] Bluetooth: hci5: command 0x0405 tx timeout [ 856.306699][ T30] audit: type=1326 audit(2000000358.200:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27001 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd118f8e9a9 code=0x7fc00000 [ 856.329074][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.729245][T27009] loop4: detected capacity change from 0 to 512 [ 856.744582][T27009] EXT4-fs: Ignoring removed nobh option [ 856.758385][T27009] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.8637: iget: bad i_size value: 38620345925642 [ 856.783676][T27009] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.8637: couldn't read orphan inode 15 (err -117) [ 856.810743][T27009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.903909][T19138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.943504][ C0] vkms_vblank_simulate: vblank timer overrun [ 857.037705][T27013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8638'. [ 861.205098][T26667] Bluetooth: hci1: command 0x0406 tx timeout [ 861.884730][T26667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 861.895805][T26667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 861.904354][T26667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 861.913547][T26667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 861.923670][T26667] Bluetooth: hci8: command 0x0405 tx timeout [ 861.936647][T19140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 862.704156][T27037] chnl_net:caif_netlink_parms(): no params data found [ 863.128928][T27037] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.145608][T27037] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.168090][T27037] bridge_slave_0: entered allmulticast mode [ 863.178491][T27037] bridge_slave_0: entered promiscuous mode [ 863.207044][T27037] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.222236][T27037] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.235565][T27037] bridge_slave_1: entered allmulticast mode [ 863.247042][T27037] bridge_slave_1: entered promiscuous mode [ 863.479321][T27037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.513988][T27037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.858812][T27037] team0: Port device team_slave_0 added [ 863.890420][T27037] team0: Port device team_slave_1 added [ 863.999716][ T5849] Bluetooth: hci0: command tx timeout [ 864.119035][T27037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.131502][T27037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.171920][T27037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.198558][T27037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.209204][T27037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.249998][T27037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.518186][T27037] hsr_slave_0: entered promiscuous mode [ 864.527863][T27037] hsr_slave_1: entered promiscuous mode [ 864.543843][T27037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 864.556766][T27037] Cannot create hsr debugfs directory [ 866.081255][ T5849] Bluetooth: hci0: command tx timeout [ 868.161240][ T5849] Bluetooth: hci0: command tx timeout [ 869.371980][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.378402][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.246284][ T5849] Bluetooth: hci0: command tx timeout [ 873.120811][T19140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 873.139710][T19140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 873.147772][T19140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 873.161060][T19140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 873.171158][T19140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 873.676340][T27054] chnl_net:caif_netlink_parms(): no params data found [ 874.106365][T27054] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.125993][T27054] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.147440][T27054] bridge_slave_0: entered allmulticast mode [ 874.170818][T27054] bridge_slave_0: entered promiscuous mode [ 874.185254][T27054] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.198923][T27054] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.219920][T27054] bridge_slave_1: entered allmulticast mode [ 874.236847][T27054] bridge_slave_1: entered promiscuous mode [ 874.420726][T27054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.448598][T27054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.763085][T27054] team0: Port device team_slave_0 added [ 874.784080][T27054] team0: Port device team_slave_1 added [ 875.025546][T27054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.046464][T27054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.084071][T27054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.108966][T27054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.129880][T27054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.169810][T27054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.282942][T19140] Bluetooth: hci1: command tx timeout [ 875.467233][T27054] hsr_slave_0: entered promiscuous mode [ 875.485293][T27054] hsr_slave_1: entered promiscuous mode [ 875.498109][T27054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.516471][T27054] Cannot create hsr debugfs directory [ 877.367834][T19140] Bluetooth: hci1: command tx timeout [ 878.560532][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 878.572357][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 878.580735][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 878.598682][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.607891][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 879.357631][T27063] chnl_net:caif_netlink_parms(): no params data found [ 879.447075][ T5849] Bluetooth: hci1: command tx timeout [ 879.942994][T19140] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 879.960452][T19140] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 879.973011][T19140] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 879.985938][T19140] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 879.994430][T19140] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 880.017805][T27063] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.060024][T27063] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.067403][T27063] bridge_slave_0: entered allmulticast mode [ 880.090935][T27063] bridge_slave_0: entered promiscuous mode [ 880.141048][T27063] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.148277][T27063] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.176878][T27063] bridge_slave_1: entered allmulticast mode [ 880.196182][T27063] bridge_slave_1: entered promiscuous mode [ 880.455952][T27063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.496357][T27063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.639773][ T5849] Bluetooth: hci3: command tx timeout [ 880.820527][T27063] team0: Port device team_slave_0 added [ 880.864701][T27063] team0: Port device team_slave_1 added [ 881.096124][T27063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.108668][T27063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.153884][T27063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.192160][T27063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.199157][T27063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.247658][T27063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.520621][ T5849] Bluetooth: hci1: command tx timeout [ 881.798798][T27063] hsr_slave_0: entered promiscuous mode [ 881.841143][T27063] hsr_slave_1: entered promiscuous mode [ 881.847657][T27063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 881.888499][T27063] Cannot create hsr debugfs directory [ 882.038686][T27073] chnl_net:caif_netlink_parms(): no params data found [ 882.080079][T19140] Bluetooth: hci9: command tx timeout [ 882.720002][T19140] Bluetooth: hci3: command tx timeout [ 882.928815][T27073] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.950013][T27073] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.957351][T27073] bridge_slave_0: entered allmulticast mode [ 882.985412][T27073] bridge_slave_0: entered promiscuous mode [ 883.055585][T27073] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.079207][T27073] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.098144][T27073] bridge_slave_1: entered allmulticast mode [ 883.106856][T27073] bridge_slave_1: entered promiscuous mode [ 883.368802][T27073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.398704][T27073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.701253][T27073] team0: Port device team_slave_0 added [ 883.727521][T27073] team0: Port device team_slave_1 added [ 883.962171][T27073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.969167][T27073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.013041][T27073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.047063][T27073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.067240][T27073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.115306][T27073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.162272][T19140] Bluetooth: hci9: command tx timeout [ 884.421669][T27073] hsr_slave_0: entered promiscuous mode [ 884.439628][T27073] hsr_slave_1: entered promiscuous mode [ 884.447212][T27073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 884.473575][T27073] Cannot create hsr debugfs directory [ 884.801472][T19140] Bluetooth: hci3: command tx timeout [ 886.239873][T19140] Bluetooth: hci9: command tx timeout [ 886.879769][T19140] Bluetooth: hci3: command tx timeout [ 888.138575][ T5849] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 888.155224][ T5849] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 888.171904][ T5849] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 888.189614][ T5849] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 888.200773][ T5849] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 888.320684][ T5849] Bluetooth: hci9: command tx timeout [ 888.816941][T27084] chnl_net:caif_netlink_parms(): no params data found [ 889.223909][T27084] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.231643][T27084] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.239085][T27084] bridge_slave_0: entered allmulticast mode [ 889.264984][T27084] bridge_slave_0: entered promiscuous mode [ 889.292753][T27084] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.309563][T27084] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.317152][T27084] bridge_slave_1: entered allmulticast mode [ 889.338453][T27084] bridge_slave_1: entered promiscuous mode [ 889.546303][T27084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.575009][T27084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.884059][T27084] team0: Port device team_slave_0 added [ 889.903229][T27084] team0: Port device team_slave_1 added [ 890.142631][T27084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.159828][T27084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.202582][T27084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.228590][T27084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.241646][ T5849] Bluetooth: hci10: command tx timeout [ 890.253769][T27084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.297705][T27084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.581759][T27084] hsr_slave_0: entered promiscuous mode [ 890.589030][T27084] hsr_slave_1: entered promiscuous mode [ 890.615900][T27084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.636292][T27084] Cannot create hsr debugfs directory [ 892.319864][ T5849] Bluetooth: hci10: command tx timeout [ 893.661566][T19140] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 893.674923][T19140] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 893.685969][T19140] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 893.697734][T19140] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 893.706057][T19140] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 894.349727][T27094] chnl_net:caif_netlink_parms(): no params data found [ 894.400024][T19140] Bluetooth: hci10: command tx timeout [ 894.832014][T27094] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.839207][T27094] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.862086][T27094] bridge_slave_0: entered allmulticast mode [ 894.882074][T27094] bridge_slave_0: entered promiscuous mode [ 894.902901][T27094] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.919661][T27094] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.927020][T27094] bridge_slave_1: entered allmulticast mode [ 894.954350][T27094] bridge_slave_1: entered promiscuous mode [ 895.164657][T27094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.197763][T27094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.508231][T27094] team0: Port device team_slave_0 added [ 895.534661][T27094] team0: Port device team_slave_1 added [ 895.720904][T27094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.727927][T27094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.759867][T19140] Bluetooth: hci11: command tx timeout [ 895.782392][T27094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.817088][T27094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.839111][T27094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.898988][T27094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.147187][T27094] hsr_slave_0: entered promiscuous mode [ 896.174536][T27094] hsr_slave_1: entered promiscuous mode [ 896.190694][T27094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.198294][T27094] Cannot create hsr debugfs directory [ 896.490404][T19140] Bluetooth: hci10: command tx timeout [ 897.840246][T19140] Bluetooth: hci11: command tx timeout [ 899.919776][T19140] Bluetooth: hci11: command tx timeout [ 902.005434][T27039] Bluetooth: hci11: command tx timeout [ 922.104028][T19140] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 922.115767][T19140] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 922.124844][T19140] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 922.134013][T19140] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 922.144110][T19140] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 922.738612][T27103] chnl_net:caif_netlink_parms(): no params data found [ 924.240153][T19140] Bluetooth: hci12: command tx timeout [ 925.020495][T27103] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.027859][T27103] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.047064][T27103] bridge_slave_0: entered allmulticast mode [ 925.082165][T27103] bridge_slave_0: entered promiscuous mode [ 925.101110][T27103] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.120979][T27103] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.128400][T27103] bridge_slave_1: entered allmulticast mode [ 925.151832][T27103] bridge_slave_1: entered promiscuous mode [ 925.381389][T27103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.420511][T27103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.666172][T27103] team0: Port device team_slave_0 added [ 925.697637][T27103] team0: Port device team_slave_1 added [ 925.929845][T27103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.936838][T27103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.986762][T27103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.149280][T27103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.170608][T27103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.234324][T27103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.325383][T19140] Bluetooth: hci12: command tx timeout [ 926.462741][T27103] hsr_slave_0: entered promiscuous mode [ 926.481167][T27103] hsr_slave_1: entered promiscuous mode [ 926.499741][T27103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.507336][T27103] Cannot create hsr debugfs directory [ 928.155149][T24617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.400056][T19140] Bluetooth: hci12: command tx timeout [ 930.487022][T19140] Bluetooth: hci12: command tx timeout [ 930.806568][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.813191][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.740976][T27039] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 933.752276][T27039] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 933.760536][T27039] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 933.771915][T27039] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 933.779924][T27039] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 934.356597][T27112] chnl_net:caif_netlink_parms(): no params data found [ 934.761475][T27112] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.779572][T27112] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.786895][T27112] bridge_slave_0: entered allmulticast mode [ 934.811746][T27112] bridge_slave_0: entered promiscuous mode [ 934.831156][T27112] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.849926][T27112] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.857800][T27112] bridge_slave_1: entered allmulticast mode [ 934.880324][T27112] bridge_slave_1: entered promiscuous mode [ 935.115596][T27112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.171718][T27112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.490464][T27112] team0: Port device team_slave_0 added [ 935.501139][T27112] team0: Port device team_slave_1 added [ 935.739974][T27112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.747050][T27112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.795327][T27112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.830544][T27112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.837540][T27112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.884569][T19140] Bluetooth: hci13: command tx timeout [ 935.907237][T27112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.184363][T27112] hsr_slave_0: entered promiscuous mode [ 936.200808][T27112] hsr_slave_1: entered promiscuous mode [ 936.207212][T27112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.229612][T27112] Cannot create hsr debugfs directory [ 937.919823][T19140] Bluetooth: hci13: command tx timeout [ 938.720520][T27039] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 938.736063][T27039] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 938.744641][T27039] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 938.753198][T27039] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 938.770954][T27039] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 939.624363][T27121] chnl_net:caif_netlink_parms(): no params data found [ 939.999802][T19140] Bluetooth: hci13: command tx timeout [ 940.031986][T27039] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 940.049847][T27039] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 940.061930][T27039] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 940.082062][T27039] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 940.091337][T27039] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 940.219765][T27121] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.227083][T27121] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.249885][T27121] bridge_slave_0: entered allmulticast mode [ 940.269724][T27121] bridge_slave_0: entered promiscuous mode [ 940.291018][T27121] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.317935][T27121] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.334000][T27121] bridge_slave_1: entered allmulticast mode [ 940.359706][T27121] bridge_slave_1: entered promiscuous mode [ 940.581628][T27121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.638506][T27121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.880123][T27039] Bluetooth: hci14: command tx timeout [ 940.956863][T27121] team0: Port device team_slave_0 added [ 941.001804][T27121] team0: Port device team_slave_1 added [ 941.237660][T27121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.259587][T27121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.308178][T27121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.374027][T27121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.389262][T27121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.435620][T27121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.924282][T27121] hsr_slave_0: entered promiscuous mode [ 941.940780][T27121] hsr_slave_1: entered promiscuous mode [ 941.951091][T27121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.958660][T27121] Cannot create hsr debugfs directory [ 942.079786][T19140] Bluetooth: hci13: command tx timeout [ 942.160591][T19140] Bluetooth: hci15: command tx timeout [ 942.275197][T27130] chnl_net:caif_netlink_parms(): no params data found [ 942.931680][T27130] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.949620][T27130] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.957080][T27130] bridge_slave_0: entered allmulticast mode [ 942.964106][T19140] Bluetooth: hci14: command tx timeout [ 942.991765][T27130] bridge_slave_0: entered promiscuous mode [ 943.040777][T27130] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.048035][T27130] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.070288][T27130] bridge_slave_1: entered allmulticast mode [ 943.090010][T27130] bridge_slave_1: entered promiscuous mode [ 943.124328][T19140] Bluetooth: hci6: command 0x0406 tx timeout [ 943.368295][T27130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.402288][T27130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.628514][T27130] team0: Port device team_slave_0 added [ 943.661912][T27130] team0: Port device team_slave_1 added [ 943.887284][T27130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.911312][T27130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.966475][T27130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.992422][T27130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.009625][T27130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.074562][T27130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.241094][T19140] Bluetooth: hci15: command tx timeout [ 944.541918][T27130] hsr_slave_0: entered promiscuous mode [ 944.560222][T27130] hsr_slave_1: entered promiscuous mode [ 944.569301][T27130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.599410][T27130] Cannot create hsr debugfs directory [ 945.039909][T27039] Bluetooth: hci14: command tx timeout [ 946.319757][T27039] Bluetooth: hci15: command tx timeout [ 947.119945][T27039] Bluetooth: hci14: command tx timeout [ 948.225597][T19140] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 948.241471][T19140] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 948.254022][T19140] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 948.262584][T19140] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 948.270766][T19140] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 948.400249][T19140] Bluetooth: hci15: command tx timeout [ 948.873415][T27139] chnl_net:caif_netlink_parms(): no params data found [ 949.322636][T27139] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.347000][T27139] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.360862][T27139] bridge_slave_0: entered allmulticast mode [ 949.376727][T27139] bridge_slave_0: entered promiscuous mode [ 949.401453][T27139] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.410471][T27139] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.417778][T27139] bridge_slave_1: entered allmulticast mode [ 949.448967][T27139] bridge_slave_1: entered promiscuous mode [ 949.701673][T27139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.732299][T27139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.056359][T27139] team0: Port device team_slave_0 added [ 950.077996][T27139] team0: Port device team_slave_1 added [ 950.310806][T27139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.317793][T27139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.360261][T19140] Bluetooth: hci16: command tx timeout [ 950.378541][T27139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.435139][T27139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.459133][T27139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.499805][T27139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.761864][T27139] hsr_slave_0: entered promiscuous mode [ 950.780579][T27139] hsr_slave_1: entered promiscuous mode [ 950.800079][T27139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 950.813242][T27139] Cannot create hsr debugfs directory [ 952.400061][T27039] Bluetooth: hci16: command tx timeout [ 953.364566][T27039] Bluetooth: hci7: command 0x0406 tx timeout [ 953.758407][T27039] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 953.768711][T27039] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 953.789602][T27039] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 953.801100][T27039] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 953.811268][T27039] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 954.404612][T27148] chnl_net:caif_netlink_parms(): no params data found [ 954.480071][T27039] Bluetooth: hci16: command tx timeout [ 954.943900][T27148] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.969993][T27148] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.977713][T27148] bridge_slave_0: entered allmulticast mode [ 955.001818][T27148] bridge_slave_0: entered promiscuous mode [ 955.032719][T27148] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.050571][T27148] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.057841][T27148] bridge_slave_1: entered allmulticast mode [ 955.081739][T27148] bridge_slave_1: entered promiscuous mode [ 955.317676][T27148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.353438][T27148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.591426][T27148] team0: Port device team_slave_0 added [ 955.626675][T27148] team0: Port device team_slave_1 added [ 955.832460][T27148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.842176][T27039] Bluetooth: hci17: command tx timeout [ 955.859691][T27148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.931896][T27148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.969850][T27148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.976885][T27148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.035697][T27148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.301451][T27148] hsr_slave_0: entered promiscuous mode [ 956.327642][T27148] hsr_slave_1: entered promiscuous mode [ 956.341093][T27148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 956.348702][T27148] Cannot create hsr debugfs directory [ 956.560909][T27039] Bluetooth: hci16: command tx timeout [ 957.920070][T27039] Bluetooth: hci17: command tx timeout [ 959.999969][T27039] Bluetooth: hci17: command tx timeout [ 962.080290][T27039] Bluetooth: hci17: command tx timeout [ 968.723662][T19140] Bluetooth: hci8: command 0x0405 tx timeout [ 982.427895][ T5849] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 982.440489][ T5849] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 982.454246][ T5849] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 982.469726][ T5849] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 982.488239][ T5849] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 983.110803][T27157] chnl_net:caif_netlink_parms(): no params data found [ 983.568427][T27157] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.590893][T27157] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.598336][T27157] bridge_slave_0: entered allmulticast mode [ 983.632118][T27157] bridge_slave_0: entered promiscuous mode [ 983.652776][T27157] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.670447][T27157] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.677888][T27157] bridge_slave_1: entered allmulticast mode [ 983.713264][T27157] bridge_slave_1: entered promiscuous mode [ 983.964122][T27157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.003777][T27157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.083487][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 984.406986][T27157] team0: Port device team_slave_0 added [ 984.431900][T27157] team0: Port device team_slave_1 added [ 984.564940][T19140] Bluetooth: hci18: command tx timeout [ 984.680961][T27157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.688132][T27157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.743835][T27157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.782224][T27157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.789329][T27157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.878814][T27157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.182051][T27157] hsr_slave_0: entered promiscuous mode [ 985.196180][T27157] hsr_slave_1: entered promiscuous mode [ 985.217798][T27157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 985.239680][T27157] Cannot create hsr debugfs directory [ 985.840417][ T31] INFO: task syz-executor:26664 blocked for more than 143 seconds. [ 985.848849][ T31] Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 [ 985.869577][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.878275][ T31] task:syz-executor state:D stack:21928 pid:26664 tgid:26664 ppid:1 task_flags:0x400140 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 985.910047][ T31] Call Trace: [ 985.922437][ T31] [ 985.925394][ T31] __schedule+0x16f5/0x4d00 [ 985.959778][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 985.967005][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 985.989578][ T31] ? __lock_acquire+0xab9/0xd20 [ 985.994466][ T31] ? schedule+0x165/0x360 [ 985.998826][ T31] ? __pfx___schedule+0x10/0x10 [ 986.116851][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.195538][ T31] ? schedule+0x91/0x360 [ 986.214117][ T31] schedule+0x165/0x360 [ 986.218388][ T31] schedule_preempt_disabled+0x13/0x30 [ 986.269736][ T31] __mutex_lock+0x724/0xe80 [ 986.274324][ T31] ? __mutex_lock+0x51b/0xe80 [ 986.279037][ T31] ? del_device_store+0xd1/0x360 [ 986.309412][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 986.315392][ T31] ? __lock_acquire+0xab9/0xd20 [ 986.322186][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 986.327116][ T31] del_device_store+0xd1/0x360 [ 986.350619][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 986.355540][ T31] ? __pfx_del_device_store+0x10/0x10 [ 986.370548][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 986.375552][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.399892][ T31] ? sysfs_kf_write+0x166/0x260 [ 986.404827][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.420053][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 986.425305][ T31] kernfs_fop_write_iter+0x378/0x4f0 [ 986.440578][ T31] vfs_write+0x54b/0xa90 [ 986.461043][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 986.466930][ T31] ? __pfx_vfs_write+0x10/0x10 [ 986.488097][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.502044][ T31] ? kmem_cache_free+0x18f/0x400 [ 986.507064][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.529706][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.535438][ T31] ksys_write+0x145/0x250 [ 986.560996][ T31] ? __pfx_ksys_write+0x10/0x10 [ 986.565897][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.579653][ T31] ? do_syscall_64+0xbe/0x3b0 [ 986.584372][ T31] do_syscall_64+0xfa/0x3b0 [ 986.588894][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 986.611640][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.617743][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.639903][T19140] Bluetooth: hci18: command tx timeout [ 986.645476][ T31] ? exc_page_fault+0x9f/0xf0 [ 986.659656][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.665583][ T31] RIP: 0033:0x7fdad698d45f [ 986.680957][ T31] RSP: 002b:00007ffcf70575c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 986.700326][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fdad698d45f [ 986.721722][ T31] RDX: 0000000000000001 RSI: 00007ffcf7057610 RDI: 0000000000000005 [ 986.739793][ T31] RBP: 00007fdad6a11fbd R08: 0000000000000000 R09: 00007ffcf7057417 [ 986.747787][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 986.769482][ T31] R13: 00007ffcf7057610 R14: 00007fdad76e4620 R15: 0000000000000003 [ 986.777520][ T31] [ 986.800316][ T31] [ 986.800316][ T31] Showing all locks held in the system: [ 986.808067][ T31] 1 lock held by khungtaskd/31: [ 986.831633][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 986.849903][ T31] 2 locks held by kworker/u8:5/62: [ 986.869751][ T31] 2 locks held by getty/5600: [ 986.874451][ T31] #0: ffff888034fd20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 986.900902][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 986.929705][ T31] 3 locks held by kworker/0:3/5914: [ 986.934937][ T31] #0: ffff888031d0d548 ((wq_completion)wg-kex-wg1#24){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 986.970238][ T31] #1: ffffc90004d0fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 987.051194][ T31] #2: ffff88801c736648 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbd0 [ 987.088791][ T31] 6 locks held by kworker/u8:8/24617: [ 987.094982][ T31] #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 987.126364][ T31] #1: ffffc9000bd47bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 987.150144][ T31] #2: ffffffff8f50f510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 987.170667][ T31] #3: ffff888021a900e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 987.189968][ T31] #4: ffff888032c7a250 (&devlink->lock_key#11){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 987.222719][ T31] #5: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 987.239465][ T31] 2 locks held by syz.8.8362/26352: [ 987.244684][ T31] #0: ffffffff8e88f248 (bio_slab_lock){+.+.}-{4:4}, at: bioset_exit+0x44a/0x690 [ 987.281058][ T31] #1: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 987.299862][ T31] 3 locks held by kworker/1:1/26531: [ 987.305177][ T31] 7 locks held by syz-executor/26598: [ 987.319402][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 987.328379][ T31] #1: ffff888052466088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 987.367394][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 987.390751][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 987.419095][ T31] #4: ffff8880536720e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 987.439798][ T31] #5: ffff888053673250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 987.459531][ T31] #6: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 987.490848][ T31] 4 locks held by syz-executor/26664: [ 987.496270][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 987.526122][ T31] #1: ffff888053724088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 987.549628][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 987.579397][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 987.600860][ T31] 4 locks held by syz-executor/26737: [ 987.606268][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 987.639670][ T31] #1: ffff8880530df488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 987.654754][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 987.680120][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 987.710841][ T31] 1 lock held by syz.5.8580/26872: [ 987.715989][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 987.757399][ T31] 3 locks held by syz.4.8638/27013: [ 987.763629][ T31] #0: ffffffff8f5823f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 987.789665][ T31] #1: ffffffff8f582208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 987.798766][ T31] #2: ffffffff8e88f248 (bio_slab_lock){+.+.}-{4:4}, at: bioset_init+0x241/0x790 [ 987.829039][ T31] 4 locks held by syz-executor/27037: [ 987.839419][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 987.859489][ T31] #1: ffff888142fe6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 987.869329][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 987.910251][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 987.931427][ T31] 2 locks held by syz.1.8652/27047: [ 987.936645][ T31] #0: ffffffff8f5823f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 987.961131][ T31] #1: ffffffff8f582208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 987.989798][ T31] 4 locks held by syz-executor/27054: [ 987.995217][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.019903][ T31] #1: ffff88807815a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.043534][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.070996][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.099817][ T31] 4 locks held by syz-executor/27063: [ 988.105284][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.129631][ T31] #1: ffff888038e32888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.151141][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.180829][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.209709][ T31] 4 locks held by syz-executor/27073: [ 988.215147][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.245912][ T31] #1: ffff88803c1ac888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.269559][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.291151][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.320164][ T31] 6 locks held by kworker/1:7/27081: [ 988.325520][ T31] 4 locks held by syz-executor/27084: [ 988.339686][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.348695][ T31] #1: ffff88803ca35c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.379907][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.411148][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.441552][ T31] 4 locks held by syz-executor/27094: [ 988.446991][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.469566][ T31] #1: ffff8880404c1088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.493921][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.520911][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.539737][ T31] 4 locks held by syz-executor/27103: [ 988.545171][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.579785][ T31] #1: ffff88808e06f488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.610388][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.630804][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.662144][ T31] 4 locks held by syz-executor/27112: [ 988.667580][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.689583][ T31] #1: ffff88807dc19488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.719813][T19140] Bluetooth: hci18: command tx timeout [ 988.725477][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.749528][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.771399][ T31] 4 locks held by syz-executor/27121: [ 988.776812][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.805328][ T31] #1: ffff88804997d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.829482][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.850780][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.881935][ T31] 4 locks held by syz-executor/27130: [ 988.887357][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 988.909412][ T31] #1: ffff88808d166088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 988.919285][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 988.960173][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 988.979514][ T31] 4 locks held by syz-executor/27139: [ 988.991513][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 989.019684][ T31] #1: ffff88804d759088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 989.040642][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 989.059601][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 989.080612][ T31] 4 locks held by syz-executor/27148: [ 989.086003][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 989.120898][ T31] #1: ffff8880904b6c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 989.141143][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 989.169856][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 989.190803][ T31] 4 locks held by syz-executor/27157: [ 989.196220][ T31] #0: ffff88803500a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 989.229800][ T31] #1: ffff88803dbd1888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 989.251227][ T31] #2: ffff8881443bad28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 989.269951][ T31] #3: ffffffff8eda98e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 989.289761][ T31] [ 989.292146][ T31] ============================================= [ 989.292146][ T31] [ 989.349622][ T31] NMI backtrace for cpu 0 [ 989.349648][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 989.349680][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 989.349696][ T31] Call Trace: [ 989.349706][ T31] [ 989.349718][ T31] dump_stack_lvl+0x189/0x250 [ 989.349753][ T31] ? __wake_up_klogd+0xd9/0x110 [ 989.349789][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.349821][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.349853][ T31] ? __pfx__printk+0x10/0x10 [ 989.349903][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 989.349946][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 989.349983][ T31] ? _printk+0xcf/0x120 [ 989.350023][ T31] ? __pfx__printk+0x10/0x10 [ 989.350060][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 989.350090][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 989.350133][ T31] watchdog+0xfee/0x1030 [ 989.350159][ T31] ? watchdog+0x1de/0x1030 [ 989.350192][ T31] kthread+0x711/0x8a0 [ 989.350232][ T31] ? __pfx_watchdog+0x10/0x10 [ 989.350262][ T31] ? __pfx_kthread+0x10/0x10 [ 989.350294][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.350327][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 989.350352][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.350380][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 989.350405][ T31] ? __pfx_kthread+0x10/0x10 [ 989.350443][ T31] ret_from_fork+0x3fc/0x770 [ 989.350474][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 989.350510][ T31] ? __switch_to_asm+0x39/0x70 [ 989.350543][ T31] ? __switch_to_asm+0x33/0x70 [ 989.350576][ T31] ? __pfx_kthread+0x10/0x10 [ 989.350613][ T31] ret_from_fork_asm+0x1a/0x30 [ 989.350665][ T31] [ 989.350676][ T31] Sending NMI from CPU 0 to CPUs 1: [ 989.530571][ C1] NMI backtrace for cpu 1 [ 989.530592][ C1] CPU: 1 UID: 0 PID: 27081 Comm: kworker/1:7 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 989.530620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 989.530636][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 989.530674][ C1] RIP: 0010:__lock_acquire+0xb2/0xd20 [ 989.530700][ C1] Code: 85 c0 75 20 45 31 ff 48 89 df 31 d2 e8 17 f0 ff ff 48 8b 3c 24 48 85 c0 0f 84 02 0c 00 00 8b 0d 24 d3 0c 18 8b 97 e8 0a 00 00 <85> c9 0f 94 c1 83 fa 30 40 0f 93 c6 40 20 ce 40 80 fe 01 0f 84 30 [ 989.530720][ C1] RSP: 0018:ffffc90000a076c8 EFLAGS: 00000082 [ 989.530740][ C1] RAX: ffffffff93488868 RBX: ffffffff8e13f0e0 RCX: 0000000000000000 [ 989.530757][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: ffff888030c49e00 [ 989.530773][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 989.530787][ C1] R10: dffffc0000000000 R11: ffffffff81acff10 R12: 0000000000000002 [ 989.530803][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000000 [ 989.530821][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 989.530840][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 989.530856][ C1] CR2: 00007fd11904e344 CR3: 000000000df38000 CR4: 0000000000350ef0 [ 989.530875][ C1] Call Trace: [ 989.530883][ C1] [ 989.530899][ C1] ? unwind_next_frame+0xa5/0x2390 [ 989.530926][ C1] lock_acquire+0x120/0x360 [ 989.530949][ C1] ? unwind_next_frame+0xa5/0x2390 [ 989.530978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.531007][ C1] ? unwind_next_frame+0xa5/0x2390 [ 989.531033][ C1] ? NF_HOOK+0x206/0x3a0 [ 989.531064][ C1] ? unwind_next_frame+0xa5/0x2390 [ 989.531090][ C1] unwind_next_frame+0xc2/0x2390 [ 989.531116][ C1] ? unwind_next_frame+0xa5/0x2390 [ 989.531146][ C1] ? unwind_next_frame+0xa5/0x2390 [ 989.531173][ C1] ? nf_hook_slow+0xc5/0x220 [ 989.531207][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 989.531242][ C1] arch_stack_walk+0x11c/0x150 [ 989.531272][ C1] ? NF_HOOK+0x206/0x3a0 [ 989.531302][ C1] stack_trace_save+0x9c/0xe0 [ 989.531334][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 989.531366][ C1] ? stack_trace_save+0x9c/0xe0 [ 989.531398][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.531425][ C1] ? stack_depot_save_flags+0x40/0x900 [ 989.531452][ C1] kasan_save_track+0x3e/0x80 [ 989.531482][ C1] ? kasan_save_track+0x3e/0x80 [ 989.531515][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 989.531545][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 989.531577][ C1] ? kmem_cache_free+0x166/0x400 [ 989.531616][ C1] ? nf_conntrack_free+0x2f7/0x380 [ 989.531652][ C1] ? nf_conntrack_in+0xa24/0x1600 [ 989.531672][ C1] ? nf_hook_slow+0xc5/0x220 [ 989.531702][ C1] ? nf_hook+0x217/0x380 [ 989.531722][ C1] ? __ip_local_out+0x4db/0x600 [ 989.531741][ C1] ? ip_local_out+0x26/0x70 [ 989.531761][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 989.531795][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 989.531817][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 989.531840][ C1] ? nft_do_chain+0x40c/0x1920 [ 989.531859][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 989.531880][ C1] ? nf_hook_slow+0xc5/0x220 [ 989.531910][ C1] ? NF_HOOK+0x206/0x3a0 [ 989.531964][ C1] __kasan_kmalloc+0x93/0xb0 [ 989.531996][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 989.532028][ C1] ? kmem_cache_free+0x166/0x400 [ 989.532062][ C1] ? nf_conntrack_free+0x2f7/0x380 [ 989.532096][ C1] kmem_cache_free+0x166/0x400 [ 989.532127][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 989.532157][ C1] nf_conntrack_free+0x2f7/0x380 [ 989.532194][ C1] nf_conntrack_in+0xa24/0x1600 [ 989.532228][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 989.532256][ C1] ? ipt_do_table+0x2a3/0x1640 [ 989.532290][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.532319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.532345][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.532371][ C1] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 989.532397][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.532423][ C1] ? ipv4_conntrack_local+0x126/0x210 [ 989.532456][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 989.532491][ C1] nf_hook_slow+0xc5/0x220 [ 989.532530][ C1] nf_hook+0x217/0x380 [ 989.532553][ C1] ? nf_hook+0x9d/0x380 [ 989.532573][ C1] ? __pfx_nf_hook+0x10/0x10 [ 989.532596][ C1] ? __pfx_dst_output+0x10/0x10 [ 989.532619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.532647][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.532673][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 989.532707][ C1] __ip_local_out+0x4db/0x600 [ 989.532727][ C1] ? __pfx_dst_output+0x10/0x10 [ 989.532751][ C1] ip_local_out+0x26/0x70 [ 989.532773][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 989.532816][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 989.532849][ C1] ? nft_xfrm_get_init+0x418/0x430 [ 989.532871][ C1] ? synproxy_pernet+0x45/0x270 [ 989.532894][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.532924][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 989.532951][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 989.532977][ C1] ? nf_ip_checksum+0x13c/0x510 [ 989.533001][ C1] nft_synproxy_do_eval+0x345/0x570 [ 989.533028][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 989.533052][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 989.533082][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.533112][ C1] nft_do_chain+0x40c/0x1920 [ 989.533137][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.533169][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 989.533194][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 989.533233][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 989.533263][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 989.533296][ C1] nft_do_chain_inet+0x25d/0x340 [ 989.533318][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 989.533344][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.533371][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 989.533402][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 989.533426][ C1] nf_hook_slow+0xc5/0x220 [ 989.533459][ C1] NF_HOOK+0x206/0x3a0 [ 989.533490][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.533523][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 989.533555][ C1] ? NF_HOOK+0x9a/0x3a0 [ 989.533585][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 989.533614][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 989.533649][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 989.533682][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.533709][ C1] ? skb_dst+0x4f/0xd0 [ 989.533740][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.533767][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 989.533800][ C1] NF_HOOK+0x30c/0x3a0 [ 989.533832][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 989.533863][ C1] ? NF_HOOK+0x9a/0x3a0 [ 989.533893][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 989.533923][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 989.533955][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 989.533992][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 989.534022][ C1] __netif_receive_skb+0x143/0x380 [ 989.534054][ C1] ? process_backlog+0x2d5/0x14f0 [ 989.534086][ C1] process_backlog+0x60e/0x14f0 [ 989.534116][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.534142][ C1] ? __lock_acquire+0xab9/0xd20 [ 989.534173][ C1] ? __pfx_process_backlog+0x10/0x10 [ 989.534210][ C1] __napi_poll+0xc7/0x480 [ 989.534237][ C1] ? net_rx_action+0x46d/0xe30 [ 989.534269][ C1] net_rx_action+0x707/0xe30 [ 989.534299][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 989.534325][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.534359][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 989.534410][ C1] handle_softirqs+0x286/0x870 [ 989.534439][ C1] ? do_softirq+0xec/0x180 [ 989.534467][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 989.534497][ C1] ? kernel_fpu_end+0xc8/0x120 [ 989.534533][ C1] do_softirq+0xec/0x180 [ 989.534558][ C1] [ 989.534566][ C1] [ 989.534575][ C1] ? __pfx_do_softirq+0x10/0x10 [ 989.534601][ C1] ? __pfx_do_softirq+0x10/0x10 [ 989.534626][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.534655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.534681][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 989.534705][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 989.534732][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 989.534758][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 989.534786][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.534812][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 989.534847][ C1] kernel_fpu_end+0xd2/0x120 [ 989.534878][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 989.534908][ C1] ? kernel_fpu_end+0xd2/0x120 [ 989.534939][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 989.534971][ C1] ? preempt_schedule_common+0x83/0xd0 [ 989.534997][ C1] blake2s_compress+0x5f/0xd0 [ 989.535031][ C1] blake2s_update+0x14b/0x450 [ 989.535066][ C1] hmac+0x1b6/0x330 [ 989.535091][ C1] ? __pfx_hmac+0x10/0x10 [ 989.535110][ C1] ? __local_bh_enable_ip+0x13e/0x1c0 [ 989.535144][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535171][ C1] ? kernel_fpu_end+0xd2/0x120 [ 989.535204][ C1] ? __lock_acquire+0xab9/0xd20 [ 989.535230][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535256][ C1] ? __asan_memset+0x22/0x50 [ 989.535287][ C1] message_ephemeral+0x1e2/0x280 [ 989.535312][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 989.535334][ C1] ? __asan_memset+0x22/0x50 [ 989.535374][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 989.535403][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535430][ C1] ? down_read+0x1ad/0x2e0 [ 989.535459][ C1] wg_noise_handshake_consume_initiation+0x1cb/0x900 [ 989.535490][ C1] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 989.535520][ C1] ? kernel_fpu_end+0xd2/0x120 [ 989.535550][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 989.535583][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 989.535619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535646][ C1] ? __asan_memset+0x22/0x50 [ 989.535672][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535698][ C1] ? blake2s_final+0x14c/0x260 [ 989.535731][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535757][ C1] ? compute_mac1+0x152/0x1a0 [ 989.535795][ C1] ? __pfx_compute_mac1+0x10/0x10 [ 989.535840][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535870][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535896][ C1] ? wg_cookie_validate_packet+0x208/0x320 [ 989.535938][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 989.535972][ C1] wg_packet_handshake_receive_worker+0x5f2/0xfb0 [ 989.536014][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 989.536047][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.536074][ C1] ? register_lock_class+0x51/0x320 [ 989.536099][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.536126][ C1] ? __lock_acquire+0xab9/0xd20 [ 989.536155][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.536183][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.536212][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 989.536234][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 989.536260][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 989.536288][ C1] process_scheduled_works+0xae1/0x17b0 [ 989.536331][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 989.536362][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.536394][ C1] worker_thread+0x8a0/0xda0 [ 989.536437][ C1] kthread+0x711/0x8a0 [ 989.536471][ C1] ? __pfx_worker_thread+0x10/0x10 [ 989.536498][ C1] ? __pfx_kthread+0x10/0x10 [ 989.536533][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.536562][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 989.536583][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.536609][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 989.536633][ C1] ? __pfx_kthread+0x10/0x10 [ 989.536665][ C1] ret_from_fork+0x3fc/0x770 [ 989.536691][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 989.536718][ C1] ? __switch_to_asm+0x39/0x70 [ 989.536749][ C1] ? __switch_to_asm+0x33/0x70 [ 989.536779][ C1] ? __pfx_kthread+0x10/0x10 [ 989.536812][ C1] ret_from_fork_asm+0x1a/0x30 [ 989.536852][ C1] [ 990.877952][T19140] Bluetooth: hci18: command tx timeout [ 990.906846][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 990.913748][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 990.925574][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.935644][ T31] Call Trace: [ 990.938931][ T31] [ 990.941872][ T31] dump_stack_lvl+0x99/0x250 [ 990.946518][ T31] ? __asan_memcpy+0x40/0x70 [ 990.951315][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 990.956542][ T31] ? __pfx__printk+0x10/0x10 [ 990.961172][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.966842][ T31] panic+0x2db/0x790 [ 990.970761][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.976427][ T31] ? __pfx_panic+0x10/0x10 [ 990.980878][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.986535][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 990.992375][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.998031][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 991.003438][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 991.009661][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.015329][ T31] watchdog+0x102d/0x1030 [ 991.019679][ T31] ? watchdog+0x1de/0x1030 [ 991.024124][ T31] kthread+0x711/0x8a0 [ 991.028235][ T31] ? __pfx_watchdog+0x10/0x10 [ 991.032938][ T31] ? __pfx_kthread+0x10/0x10 [ 991.037553][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.043216][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 991.048439][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.054089][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 991.059318][ T31] ? __pfx_kthread+0x10/0x10 [ 991.063939][ T31] ret_from_fork+0x3fc/0x770 [ 991.068557][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 991.073697][ T31] ? __switch_to_asm+0x39/0x70 [ 991.078486][ T31] ? __switch_to_asm+0x33/0x70 [ 991.083280][ T31] ? __pfx_kthread+0x10/0x10 [ 991.087899][ T31] ret_from_fork_asm+0x1a/0x30 [ 991.092712][ T31] [ 991.096003][ T31] Kernel Offset: disabled [ 991.100349][ T31] Rebooting in 86400 seconds..