last executing test programs: 2m23.758397187s ago: executing program 1 (id=31): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f00003f4000/0x2000)=nil, 0x2000, 0x0, 0x1ff, 0x800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2m22.668059959s ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=[{'ALTPCM', @val={' \'', 'CD Capture'}}], 0x29) 2m22.477887404s ago: executing program 1 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001000)="f4", 0x1}], 0x2, 0x2004, 0x8) 2m21.908246975s ago: executing program 1 (id=46): syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./bus\x00', 0x1400c, &(0x7f0000001340)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f00000013c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m21.162877432s ago: executing program 1 (id=54): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x40400) 2m20.343597405s ago: executing program 1 (id=61): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000380), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000700)='./mnt\x00', 0x0, &(0x7f0000000dc0), 0x0, 0x243, &(0x7f0000000a80)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000d00)={0x3f33, 0x40000000000001, 0x0, 0xb, 0x101, 0x905}) 2m19.948552851s ago: executing program 32 (id=61): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000380), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000700)='./mnt\x00', 0x0, &(0x7f0000000dc0), 0x0, 0x243, &(0x7f0000000a80)="$eJzs3D9oM2UcB/DvXRJr2yBVF0FQQUS0UOomuNRFoSCliAgqVERclFaoLW6tk4uDziqdXIq4WTtKl+KiCE5VO9RF0OJgcdAhklyr1Vb8k5p7ee/zgUvukrv7Pcfl+1yW5wnQWFNJ5pK0kkwn6SQpzu9wV7VMnW5uje8vJb3e4z8Ug/2q7crZcZNJNpM8mGSvLPJiO1nfefrop4NH731jrXPPeztPjY/0Ik8dHx0+dvLuwusfzj+w/tkX3y0UmUv3D9d19YpLPmsXyS3/R7FrRNGuuwX8E4uvfvBlP/e3Jrl7kP9OylQ3783VG/Y6uf+dvzr2re8/v32UbQWuXq/X6T8DN3tA45RJuinKmSTVelnOzFT/4b9qTZQvray+Mv3Cytry83X3VMBV6SaHj+yOfTT5p/x/26ryD1y/+vl/YnH76/76Savu1gCj1M//9LMb90X+oXHkH5pL/qG55B+aS/6huf5V/nfL0TQKGAnPf2gu+YfG+W1klvxDc8k/NNf5/AMAzdIbq3sEMlCXuvsfAAAAAAAAAAAAAAAAAADgoq3x/aWzZVQ1P3k7OX64mpXwYv1WqlnHbxy8TvxY/D55YZLi/GSG/9Ezdw55giG9X/Po65u+qbf+p3fUW39jOdl8Lclsu33x91dk2Fnvb/6b7zvPDVlgSA89WW/9X7brrT9/kHzc739mL+t/ytw2eL+8/+n279+Q9V/+ecgTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDK/BgAA///oWm3n") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000d00)={0x3f33, 0x40000000000001, 0x0, 0xb, 0x101, 0x905}) 1m55.339455061s ago: executing program 3 (id=316): timerfd_create(0x1, 0x80800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) 1m54.996054501s ago: executing program 3 (id=322): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000080)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='.\x02/file0\x00') 1m54.740151068s ago: executing program 3 (id=326): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5, 0x151, 0x10000101}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 1m54.512769405s ago: executing program 3 (id=330): syz_mount_image$ext4(&(0x7f00000012c0)='ext4\x00', &(0x7f0000001300)='./bus\x00', 0x1400c, &(0x7f0000001340)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f00000013c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m54.023743457s ago: executing program 3 (id=334): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000097c0)=[{{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f0000000bc0)="c3", 0x1}], 0x2}}], 0x1, 0x0) 1m53.533361885s ago: executing program 3 (id=339): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000100)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xde, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x2c, 0x4, 0x0, 0x5, 0x4100, 0x67, 0xffff, 0x0, 0x1, 0x87, @empty, @multicast1, {[@cipso={0x86, 0x7b, 0x3, [{0x0, 0x12, "0002fd16f24f63625c0000e400dd9452"}, {0x5, 0x9, "ce2f5a4e2042eb"}, {0x2, 0x12, '\x00\x00@\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x1, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x2, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8d96976e796a788f03da5"}]}, @timestamp={0x44, 0x20, 0xe, 0x0, 0x6, [0x4a000000, 0xfff, 0x0, 0x8855, 0x7, 0x7, 0x9]}]}}}}}}}, 0x0) 1m52.105380028s ago: executing program 33 (id=339): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000100)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xde, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x2c, 0x4, 0x0, 0x5, 0x4100, 0x67, 0xffff, 0x0, 0x1, 0x87, @empty, @multicast1, {[@cipso={0x86, 0x7b, 0x3, [{0x0, 0x12, "0002fd16f24f63625c0000e400dd9452"}, {0x5, 0x9, "ce2f5a4e2042eb"}, {0x2, 0x12, '\x00\x00@\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x1, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x2, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8d96976e796a788f03da5"}]}, @timestamp={0x44, 0x20, 0xe, 0x0, 0x6, [0x4a000000, 0xfff, 0x0, 0x8855, 0x7, 0x7, 0x9]}]}}}}}}}, 0x0) 54.995719349s ago: executing program 0 (id=1045): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) 54.652243141s ago: executing program 0 (id=1051): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46"], 0x98) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 54.471566687s ago: executing program 0 (id=1057): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000aac0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f000000ab00)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f000000ac40)) 54.203822359s ago: executing program 0 (id=1063): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000003c0)='./bus\x00', 0x826850, 0x0, 0x1, 0x0, &(0x7f0000000100)) unlinkat(r0, &(0x7f0000000380)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 53.772055485s ago: executing program 0 (id=1069): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/error_log\x00', 0x40001, 0x1) 53.163525959s ago: executing program 0 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x108) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/SourceSink.0/iso_qlen\x00', 0x20042, 0x9) write(r0, &(0x7f0000000140)='n', 0x1) 52.57668344s ago: executing program 34 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x108) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/SourceSink.0/iso_qlen\x00', 0x20042, 0x9) write(r0, &(0x7f0000000140)='n', 0x1) 3.028323416s ago: executing program 6 (id=1741): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000005ec0)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400001ff}, 0x94) syz_mount_image$ext4(&(0x7f00000043c0)='ext4\x00', &(0x7f0000004400)='./bus\x00', 0x21081e, &(0x7f0000004480)={[{@nomblk_io_submit}, {@data_err_ignore}, {@discard}]}, 0x1, 0x515, &(0x7f00000044c0)="$eJzs3U9sHFcZAPBv1vHfuHVaegAEbWgLAUVZ25s2qnqAckIIVUL0CFJq7I1leddredelNjk4Z65IROIER44cOOfEnQuCG5dwQOKPFRQjcRg0s7Nhbe8mq8T2ut7fTxrNm3mT+b4XZ97zvs3uC2BkXY2IvYiYiIiPI2KuOJ8UW3zQ3rLrHu/fXT7Yv7ucRJp+9M8kr8/ORdefyVwu7jkVET/4TsSPk+Nxmzu760u1WnWrOJ5v1Tfnmzu7N9bqS6vV1epGpXJr8dbCezffrZxYW9+oTxSlLz/8w943fpqlNVuc6W7HSWo3ffxJnMyliPjeaQQbgrGiPRPDToTnUoqIVyPizfz5n4ux/KcJAFxkaToX6Vz3MQBw0ZXyObCkVC7mAmajVCqX23N4r8VMqdZotq7faWxvrLTnyq7EeOnOWq26UMwVXoqI7Hgxr8vrk+y4cuT4ZkS8EhE/n5zOj8vLjdrKMH/xAYARdvnI+P/vyfb4DwBccFPDTgAAOHPGfwAYPcZ/ABg9xn8AGD3t8X962GkAAGfI638AGD3GfwAYKd//8MNsSw+K779e+WRne73xyY2VanO9XN9eLi83tjbLq43Gav6dPfVn3a/WaGwuvhPbn1755mazNd/c2b1db2xvtG7n3+t9uzqeX7V3Bi0DAPp55Y0Hf06yEfn96XyLrrUcxoeaGXDaSsNOABiasWEnAAyN1b5gdL3Aa3zTA3BB9Fii95CpXh8QStM0Pb2UgFN27QuDzP8nA/QQwGdN1/y//wUMI8b8P4wu8/8wutI0GXTN/xj0QgDgfPP7P9Dn3b1Xi/1vijcHfrRy9Ir7p5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG+d9X/LxVrgs1EqlcsRL0XElRhP7qzVqgsR8XJE/GlyfDI7XhxyzgDAiyr9LSnW/7o29/bsoarXLz8pTkTET3750S8+XWq1tv4YMZH8a7JzvnW/OF/pHeC0WwAAPF1nnM73XS/kH+/fXe5sZ5nP378dEVPt+Af7E3FQxN951FmbeCrGI2LmURLdaxUnXXMXL2LvXkR8vlf7k5jN50DaK58ejZ/FfulM45cOxS/lde199nfxuRPIBUbNg6z/+aDX81eKq/m+9/OfnT2JtdOL/i+71fJB3gf+P36n/xvr0/9dHTTGO7//brs0fbzuXsQXL0V0Yh909T+d+Emf+G8PGP8vX3r9zX516a8irkXv+N2x5lv1zfnmzu6NtfrSanW1ulGpjMWthfduvluZz+eo5/uPBv94//rL/eqy9s/0iT/1jPZ/dcD2//q/H//wK0+J//W3esUvxWtPiZ+NiV8bMP7SzO+m+tVl8Vf6tP9ZP//r/W6aHF5Q/OFfd48tGw4ADE9zZ3d9qVarbiko5IXfxrlIo3ch+yd7DtLoWfjWqdw5nTtWNRG9L/7ZW+1n+khVmj5X9H49xknMugHnwZOHPiL+M+xkAAAAAAAAAAAAAACAns7i01HDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1/8CAAD//3ZK0g4=") mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./proc\x00', 0x1ff) 2.214072643s ago: executing program 6 (id=1751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c00028005000100000000002400028014000180"], 0x84}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011000000040001"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 2.15680892s ago: executing program 7 (id=1752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1.873680307s ago: executing program 7 (id=1755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x70bd2f, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xfc}}]}, 0x30}}, 0x20000000) 1.766474397s ago: executing program 6 (id=1758): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5dda974614690276}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c040) 1.58771346s ago: executing program 7 (id=1760): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000041400706f6c6963796462000704060061616466610006", 0x66) 1.483534374s ago: executing program 5 (id=1762): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17, 0x1}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 1.423437646s ago: executing program 8 (id=1763): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 1.393293594s ago: executing program 5 (id=1764): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) read(r0, &(0x7f0000000f80)=""/234, 0xea) 1.37482919s ago: executing program 7 (id=1765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x58, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3a0c83ae1a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 1.311662358s ago: executing program 6 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1,0x4000', 0x8) 1.204873425s ago: executing program 5 (id=1769): ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0x72, 0x4}, {0x6, 0x8}}]}}, 0x11) accept$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @multicast2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.116221958s ago: executing program 2 (id=1770): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x35, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000e80), &(0x7f0000000ec0)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000500)='keyring\x00', &(0x7f0000001400)={'syz', 0x2}, 0x0, r1) 1.072002409s ago: executing program 8 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x34}}, 0x0) 1.054623059s ago: executing program 7 (id=1772): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000574000/0x1000)=nil, 0x1000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 951.635068ms ago: executing program 6 (id=1773): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 920.742138ms ago: executing program 2 (id=1774): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff000000, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 896.033879ms ago: executing program 4 (id=1775): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 791.70952ms ago: executing program 8 (id=1776): r0 = socket(0x21, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000140)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) 774.569607ms ago: executing program 4 (id=1777): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x3b, 0xfffffffa, 0xfffffe3f, 0xfffffff7, 0x0, "5b980f8b00000000000000b70000000200", 0x388, 0x1005}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) read$FUSE(r0, &(0x7f0000000e40)={0x2020}, 0x2020) 745.920592ms ago: executing program 7 (id=1778): openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a2401030003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020000000000000010"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 727.130689ms ago: executing program 2 (id=1779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56543, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffe78, 0x2, {{0x6, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_RATE={0x14, 0xe, {0x40000000}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 684.613367ms ago: executing program 8 (id=1780): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="0200000003000000", 0x8) 607.856181ms ago: executing program 4 (id=1781): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000002140)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000680)=""/249, 0xfcbf}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x200000}, 0x0) close(0x3) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 539.841914ms ago: executing program 5 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 503.930861ms ago: executing program 2 (id=1783): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) 502.185677ms ago: executing program 6 (id=1784): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 439.9637ms ago: executing program 8 (id=1785): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mytrace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='drop', 0x4) 390.079488ms ago: executing program 4 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x73bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x1}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 385.541084ms ago: executing program 5 (id=1787): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 293.723237ms ago: executing program 2 (id=1788): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0), 0x8) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 292.093664ms ago: executing program 8 (id=1789): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x149040, 0x40) fcntl$lock(r0, 0x410, 0x0) rename(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 187.722023ms ago: executing program 4 (id=1790): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x400}, {&(0x7f00000004c0)=""/4096, 0x1000}, &(0x7f0000001500)=[{&(0x7f0000000140)=""/30, 0x1e}], 0x1, 0x61, 0x5}}], 0x48}, 0x0) 187.491705ms ago: executing program 5 (id=1791): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x2) io_setup(0x800, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xfffe, r0, 0x0, 0x3d}]) 71.205536ms ago: executing program 2 (id=1792): r0 = inotify_init1(0x80800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x20000008}) 0s ago: executing program 4 (id=1793): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) kernel console output (not intermixed with test programs): 000 ro. [ 138.514673][ T7316] F2FS-fs (loop7): Wrong secs_per_zone / total_sections (512, 24) [ 138.514697][ T7316] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 138.514746][ T7316] F2FS-fs (loop7): Test dummy encryption mode enabled [ 138.518358][ T7316] F2FS-fs (loop7): invalid crc value [ 138.596954][ T7316] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 138.598096][ T7316] loop7: lost filesystem error report for type 5 error -117 [ 138.624091][ T7316] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.626412][ T7316] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0 [ 138.626436][ T7316] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 138.626588][ T7316] F2FS-fs (loop7): Start checkpoint disabled! [ 138.641165][ T7316] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0 [ 138.662280][ T7316] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 138.662385][ T7316] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 138.823836][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.331919][ T5887] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 139.483063][ T5887] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.487164][ T5887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.487190][ T5887] usb 3-1: config 0 has no interface number 0 [ 139.487234][ T5887] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 139.487279][ T5887] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 139.487324][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.500821][ T5887] usb 3-1: config 0 descriptor?? [ 139.502013][ T7353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.537428][ T5887] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 139.751436][ T5887] usb 3-1: USB disconnect, device number 2 [ 140.093674][ T30] audit: type=1807 audit(1792411161.990:13): action=measure uid>+ res=0 [ 140.093721][ T30] audit: type=1802 audit(1792411161.990:14): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.525" res=0 errno=0 [ 140.094895][ T7382] ima: policy update failed [ 140.095265][ T30] audit: type=1802 audit(1792411161.990:15): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.525" res=0 errno=0 [ 140.443503][ T29] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0003/input/input8 [ 140.524704][ T29] hid-generic 0005:0576:0306.0003: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 140.612230][ T5769] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 140.631868][ T7401] netlink: 'syz.2.533': attribute type 2 has an invalid length. [ 140.670468][ T5750] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 140.725253][ T7406] loop0: detected capacity change from 0 to 256 [ 140.760337][ T5769] usb 8-1: Using ep0 maxpacket: 32 [ 140.761138][ T5769] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.762137][ T5769] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.762163][ T5769] usb 8-1: config 0 has no interface number 0 [ 140.765185][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.765210][ T5769] usb 8-1: Product: syz [ 140.765227][ T5769] usb 8-1: Manufacturer: syz [ 140.765244][ T5769] usb 8-1: SerialNumber: syz [ 140.813485][ T5769] usb 8-1: config 0 descriptor?? [ 140.832807][ T5769] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 140.840189][ T5750] usb 7-1: Using ep0 maxpacket: 8 [ 140.843454][ T30] audit: type=1800 audit(1792411162.740:16): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.535" name="file2" dev="loop0" ino=1048717 res=0 errno=0 [ 140.875464][ T5750] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 140.885170][ T5750] usb 7-1: config 0 has no interfaces? [ 140.901566][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.901593][ T5750] usb 7-1: Product: syz [ 140.901638][ T5750] usb 7-1: Manufacturer: syz [ 140.901662][ T5750] usb 7-1: SerialNumber: syz [ 140.933120][ T5750] usb 7-1: config 0 descriptor?? [ 141.074465][ T5769] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.099861][ T5769] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.144300][ T5887] usb 7-1: USB disconnect, device number 4 [ 141.504092][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.504753][ T9] usb 8-1: USB disconnect, device number 2 [ 141.544416][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.551537][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.552316][ T9] quatech2 8-1:0.51: device disconnected [ 142.829442][ T7473] sctp: [Deprecated]: syz.0.564 (pid 7473) Use of int in maxseg socket option. [ 142.829442][ T7473] Use struct sctp_assoc_value instead [ 142.845796][ T7476] netlink: 27 bytes leftover after parsing attributes in process `syz.2.566'. [ 143.232615][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.568'. [ 143.699487][ T7479] loop0: detected capacity change from 0 to 32768 [ 143.716735][ T7479] JBD2: Ignoring recovery information on journal [ 143.729429][ T7479] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 143.747751][ T7479] JBD2: bad block at offset 32 [ 143.763052][ T7479] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 143.847384][ T7479] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 143.847428][ T7479] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 143.847441][ T7479] OCFS2: File system is now read-only. [ 143.847451][ T7479] (syz.0.567,7479,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 143.847478][ T7479] (syz.0.567,7479,1):__ocfs2_claim_clusters:2579 ERROR: status = -30 [ 143.847503][ T7479] (syz.0.567,7479,1):__ocfs2_claim_clusters:2587 ERROR: status = -30 [ 143.847528][ T7479] (syz.0.567,7479,1):ocfs2_add_clusters_in_btree:4847 ERROR: status = -30 [ 143.847553][ T7479] (syz.0.567,7479,1):ocfs2_write_cluster:1134 ERROR: status = -30 [ 143.847578][ T7479] (syz.0.567,7479,1):ocfs2_write_cluster_by_desc:1228 ERROR: status = -30 [ 143.847603][ T7479] (syz.0.567,7479,1):ocfs2_write_begin_nolock:1800 ERROR: status = -30 [ 143.847872][ T7479] (syz.0.567,7479,1):ocfs2_write_begin:1888 ERROR: status = -30 [ 143.957737][ T7477] loop5: detected capacity change from 0 to 131072 [ 144.085627][ T7477] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 144.088401][ T7477] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955 [ 144.274439][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 144.965840][ T7517] netlink: 'syz.7.581': attribute type 1 has an invalid length. [ 145.203259][ T7517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.771001][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 145.877896][ T7551] loop4: detected capacity change from 0 to 1024 [ 145.889953][ T7551] EXT4-fs: Ignoring removed bh option [ 145.923376][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.925365][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.925390][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.925414][ T9] usb 8-1: config 1 has no interface number 0 [ 145.925457][ T9] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 145.925488][ T9] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 145.951485][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.951513][ T9] usb 8-1: Product: syz [ 145.951530][ T9] usb 8-1: Manufacturer: syz [ 145.951547][ T9] usb 8-1: SerialNumber: syz [ 145.981443][ T7551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.159278][ T7561] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 146.202967][ T7557] loop6: detected capacity change from 0 to 2048 [ 146.226562][ T30] audit: type=1400 audit(1792411168.120:17): apparmor="STATUS" info="empty profile name" error=-71 profile="unconfined" name=":/o" pid=7560 comm="syz.2.595" name=":/o" offset=35 [ 146.290023][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.354581][ T7565] loop0: detected capacity change from 0 to 128 [ 146.389207][ T7557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.455261][ T7557] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 146.456249][ T7557] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 146.456311][ T7557] EXT4-fs (loop6): This should not happen!! Data will be lost [ 146.456311][ T7557] [ 146.456329][ T7557] EXT4-fs (loop6): Total free blocks count 0 [ 146.456345][ T7557] EXT4-fs (loop6): Free/Dirty block details [ 146.456360][ T7557] EXT4-fs (loop6): free_blocks=2415919504 [ 146.456378][ T7557] EXT4-fs (loop6): dirty_blocks=32 [ 146.456394][ T7557] EXT4-fs (loop6): Block reservation details [ 146.456408][ T7557] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 146.505263][ T7557] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 146.553392][ T7565] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 146.553563][ T7565] hpfs: filesystem error: improperly stopped [ 146.553582][ T7565] hpfs: You really don't want any checks? You are crazy... [ 146.554034][ T7565] hpfs: hpfs_map_sector(): read error [ 146.554047][ T7565] hpfs: code page support is disabled [ 146.556565][ T7565] hpfs: hpfs_map_4sectors(): unaligned read [ 146.556691][ T7565] hpfs: hpfs_map_4sectors(): unaligned read [ 146.556703][ T7565] hpfs: filesystem error: unable to find root dir [ 146.884514][ T9] cdc_ncm 8-1:1.1: bind() failure [ 146.901867][ T9] usb 8-1: USB disconnect, device number 3 [ 146.983719][ T7580] loop0: detected capacity change from 0 to 2048 [ 147.115826][ T7586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.353174][ T7588] bond1 (unregistering): Released all slaves [ 147.742531][ T7605] loop5: detected capacity change from 0 to 2048 [ 147.743507][ T7605] EXT4-fs: Ignoring removed oldalloc option [ 147.823489][ T7605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.896051][ T7605] EXT4-fs (loop5): shut down requested (2) [ 148.029883][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.313488][ T7628] loop6: detected capacity change from 0 to 4096 [ 148.379743][ T7628] NILFS (loop6): invalid segment: Checksum error in segment payload [ 148.379769][ T7628] NILFS (loop6): trying rollback from an earlier position [ 148.509723][ T7628] NILFS (loop6): recovery complete [ 148.548009][ T7639] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.671327][ T7643] loop2: detected capacity change from 0 to 256 [ 148.717911][ T7644] NILFS (loop6): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 148.765490][ T7645] loop4: detected capacity change from 0 to 1024 [ 148.843282][ T30] audit: type=1400 audit(1792411170.740:18): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=7653 comm="syz.0.624" name="foo" offset=76 [ 148.874828][ T7645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.874946][ T7645] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.011262][ T7645] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.621: lblock 3 mapped to illegal pblock 3 (length 1) [ 149.038202][ T7645] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 149.038235][ T7645] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.038235][ T7645] [ 149.363770][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.467304][ T7673] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.954902][ T7694] loop4: detected capacity change from 0 to 128 [ 149.979374][ T7694] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 149.979429][ T7694] hpfs: filesystem error: improperly stopped [ 149.979446][ T7694] hpfs: You really don't want any checks? You are crazy... [ 150.019939][ T7694] hpfs: hpfs_map_sector(): read error [ 150.019954][ T7694] hpfs: code page support is disabled [ 150.020273][ T7694] hpfs: hpfs_map_4sectors(): unaligned read [ 150.020343][ T7694] hpfs: hpfs_map_4sectors(): unaligned read [ 150.020354][ T7694] hpfs: filesystem error: unable to find root dir [ 150.699722][ T7713] loop5: detected capacity change from 0 to 8 [ 153.142210][ T7740] loop2: detected capacity change from 0 to 512 [ 153.178490][ T7740] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 153.178585][ T7740] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.652: corrupted in-inode xattr: e_value size too large [ 153.178616][ T7740] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.190080][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 153.190101][ C1] EXT4-fs (loop2): initial error at time 1792411175: ext4_iget_extra_inode:5210: inode 15 [ 153.190136][ C1] EXT4-fs (loop2): last error at time 1792411175: ext4_iget_extra_inode:5210: inode 15 [ 153.251859][ T7740] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.652: couldn't read orphan inode 15 (err -117) [ 153.251892][ T7740] loop2: lost filesystem error report for type 5 error -117 [ 153.279316][ T7740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.385096][ T7747] loop0: detected capacity change from 0 to 128 [ 153.388535][ T7747] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.409958][ T7747] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.504338][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.662369][ T1291] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.104450][ T7774] loop0: detected capacity change from 0 to 128 [ 154.135986][ T7774] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 154.136018][ T7774] hpfs: filesystem error: improperly stopped [ 154.136035][ T7774] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 154.136052][ T7774] hpfs: You really don't want any checks? You are crazy... [ 154.136070][ T7774] hpfs: Code page index out of array [ 154.136079][ T7774] hpfs: code page support is disabled [ 154.136179][ T7774] hpfs: hpfs_map_4sectors(): unaligned read [ 154.136254][ T7774] hpfs: hpfs_map_4sectors(): unaligned read [ 154.136265][ T7774] hpfs: filesystem error: unable to find root dir [ 154.201985][ T7774] hpfs: hpfs_map_sector(): read error [ 154.202015][ T7774] hpfs: hpfs_map_sector(): read error [ 154.510152][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 154.656459][ T7784] batadv_slave_1: entered promiscuous mode [ 154.663118][ T7783] batadv_slave_1: left promiscuous mode [ 154.682878][ T29] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 154.684967][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.714006][ T29] usb 7-1: config 0 descriptor?? [ 154.736551][ T29] cp210x 7-1:0.0: cp210x converter detected [ 154.770926][ T7789] loop5: detected capacity change from 0 to 2048 [ 154.794329][ T7789] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.878669][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 154.897715][ T7791] loop2: detected capacity change from 0 to 512 [ 154.948081][ T7791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 154.948220][ T7791] System zones: 1-12 [ 154.948726][ T7791] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.674: missing EA_INODE flag [ 154.948755][ T7791] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 154.950102][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 154.950123][ C0] EXT4-fs (loop2): initial error at time 1792411176: ext4_xattr_inode_iget:437: inode 12 [ 154.950157][ C0] EXT4-fs (loop2): last error at time 1792411176: ext4_xattr_inode_iget:437: inode 12 [ 154.968866][ T7791] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.674: error while reading EA inode 12 err=-117 [ 154.968897][ T7791] loop2: lost filesystem error report for type 5 error -117 [ 154.969236][ T7791] EXT4-fs (loop2): 1 orphan inode deleted [ 154.980730][ T7791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.105798][ T7798] loop0: detected capacity change from 0 to 512 [ 155.157637][ T7798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.157772][ T7798] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.218038][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.225358][ T7803] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 155.225390][ T7803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.289532][ T7798] EXT4-fs error (device loop0): ext4_get_first_dir_block:3550: inode #12: comm syz.0.677: directory missing '.' [ 155.308057][ T7798] EXT4-fs (loop0): Remounting filesystem read-only [ 155.330180][ T29] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 155.330234][ T29] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 155.338225][ T29] usb 7-1: cp210x converter now attached to ttyUSB0 [ 155.364410][ T29] usb 7-1: USB disconnect, device number 5 [ 155.393950][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 155.394514][ T29] cp210x 7-1:0.0: device disconnected [ 155.493928][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.623343][ T7818] binder: 7817:7818 ioctl 4018620d 0 returned -22 [ 155.817980][ T7827] loop5: detected capacity change from 0 to 1024 [ 155.819912][ T7827] EXT4-fs: Ignoring removed bh option [ 155.833761][ T7827] EXT4-fs: Ignoring removed bh option [ 155.837363][ T7827] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 155.897152][ T7827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.917631][ T7830] loop7: detected capacity change from 0 to 2048 [ 155.970922][ T7830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.971026][ T7830] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.973094][ T7827] EXT4-fs error (device loop5): ext4_check_all_de:675: inode #12: block 7: comm syz.5.690: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 156.059237][ T5618] block nbd1: Receive control failed (result -32) [ 156.060990][ T5616] block nbd1: Receive control failed (result -32) [ 156.105254][ T7839] EXT4-fs error (device loop5): ext4_check_all_de:675: inode #12: block 7: comm syz.5.690: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 156.107141][ T7840] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.691: bg 0: block 345: padding at end of block bitmap is not set [ 156.134502][ T7840] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 79 with error 117 [ 156.134548][ T7840] EXT4-fs (loop7): This should not happen!! Data will be lost [ 156.134548][ T7840] [ 156.147070][ T5757] hid-generic 0005:16C0:0009.0004: item fetching failed at offset 0/1 [ 156.152802][ T5757] hid-generic 0005:16C0:0009.0004: probe with driver hid-generic failed with error -22 [ 156.307092][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.458681][ T7853] loop4: detected capacity change from 0 to 128 [ 156.471763][ T7853] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.486369][ T7853] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.990261][ T114] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.990311][ T114] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.990351][ T114] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.990389][ T114] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.073907][ T7875] loop5: detected capacity change from 0 to 64 [ 157.094885][ T7875] hfs: unable to open catalog tree [ 157.094898][ T7875] hfs: can't find a HFS filesystem on dev loop5 [ 157.172085][ T987] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 157.172118][ T987] EXT4-fs (loop7): This should not happen!! Data will be lost [ 157.172118][ T987] [ 157.172135][ T987] EXT4-fs (loop7): Total free blocks count 0 [ 157.172151][ T987] EXT4-fs (loop7): Free/Dirty block details [ 157.172176][ T987] EXT4-fs (loop7): free_blocks=0 [ 157.172195][ T987] EXT4-fs (loop7): dirty_blocks=48 [ 157.172211][ T987] EXT4-fs (loop7): Block reservation details [ 157.183177][ T6857] EXT4-fs warning (device loop7): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 157.417795][ T7881] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 157.559984][ T7881] exFAT-fs (loop2): error, broken FAT chain. [ 157.560007][ T7881] exFAT-fs (loop2): Filesystem has been set read-only [ 157.560606][ T7881] exFAT-fs (loop2): error, broken FAT chain. [ 157.560835][ T30] audit: type=1800 audit(1792411179.460:19): pid=7881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.709" name="file2" dev="loop2" ino=1048723 res=0 errno=0 [ 157.698977][ T7893] Set syz1 is full, maxelem 0 reached [ 157.792870][ T7897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.977629][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.096486][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 158.141771][ T7910] EXT4-fs: Ignoring removed nobh option [ 158.143156][ T7910] EXT4-fs: Ignoring removed bh option [ 158.147088][ T7910] EXT4-fs (loop5): Test dummy encryption mode enabled [ 158.173012][ T5769] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 158.201940][ T7910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.320802][ T5769] usb 8-1: Using ep0 maxpacket: 16 [ 158.321631][ T5769] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 158.338085][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.338110][ T5769] usb 8-1: Product: syz [ 158.338127][ T5769] usb 8-1: Manufacturer: syz [ 158.338144][ T5769] usb 8-1: SerialNumber: syz [ 158.446060][ T7910] EXT4-fs: Cannot change journaled quota options when quota turned on [ 158.608476][ T5769] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 158.625228][ T5769] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.625585][ T5769] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 158.625634][ T5769] usb 8-1: media controller created [ 158.627219][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.634779][ T7922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.731'. [ 158.647034][ T5769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.701728][ T7908] set_capacity_and_notify: 3 callbacks suppressed [ 158.701748][ T7908] loop4: detected capacity change from 0 to 40427 [ 158.746906][ T7908] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 158.746929][ T7908] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 158.796875][ T7908] F2FS-fs (loop4): invalid crc value [ 158.938354][ T5769] zl10353_read_register: readreg error (reg=127, ret==-110) [ 159.127830][ T5769] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 159.145288][ T5769] usb 8-1: USB disconnect, device number 4 [ 159.345095][ T7908] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 159.379342][ T7908] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 159.379366][ T7908] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.475739][ T7940] loop2: detected capacity change from 0 to 8 [ 159.796147][ T5610] syz-executor: attempt to access beyond end of device [ 159.796147][ T5610] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.817577][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 159.817615][ T5610] Tainted: [L]=SOFTLOCKUP [ 159.817625][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 159.817643][ T5610] Call Trace: [ 159.817653][ T5610] [ 159.817664][ T5610] dump_stack_lvl+0xe8/0x150 [ 159.817707][ T5610] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 159.817741][ T5610] f2fs_write_end_bio+0x1211/0x16e0 [ 159.817779][ T5610] ? blkg_put+0x22/0x240 [ 159.817824][ T5610] __submit_merged_bio+0x258/0x6a0 [ 159.817851][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.817881][ T5610] ? rcu_is_watching+0x16/0xb0 [ 159.817922][ T5610] __submit_merged_write_cond+0x3c9/0x4e0 [ 159.817962][ T5610] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 159.818008][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818049][ T5610] f2fs_write_data_pages+0x2a27/0x36f0 [ 159.818079][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818109][ T5610] ? is_bpf_text_address+0x292/0x2b0 [ 159.818192][ T5610] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 159.818279][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818309][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818338][ T5610] ? __bfs+0x153/0x290 [ 159.818365][ T5610] ? __pfx_hlock_conflict+0x10/0x10 [ 159.818405][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818449][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818479][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818507][ T5610] ? __lock_acquire+0x1511/0x2de0 [ 159.818569][ T5610] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 159.818603][ T5610] do_writepages+0x338/0x560 [ 159.818637][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818669][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818704][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818733][ T5610] ? do_raw_spin_unlock+0xf5/0x200 [ 159.818777][ T5610] filemap_fdatawrite+0x1e9/0x2f0 [ 159.818815][ T5610] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 159.818891][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818924][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.818958][ T5610] ? do_raw_spin_unlock+0xf5/0x200 [ 159.819001][ T5610] f2fs_sync_dirty_inodes+0x30e/0x830 [ 159.819056][ T5610] f2fs_write_checkpoint+0xa3d/0x2710 [ 159.819092][ T5610] ? __lock_acquire+0x747/0x2de0 [ 159.819159][ T5610] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 159.819199][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.819294][ T5610] kill_f2fs_super+0x2dd/0x700 [ 159.819340][ T5610] ? __pfx_kill_f2fs_super+0x10/0x10 [ 159.819389][ T5610] ? call_rcu+0x64d/0x8b0 [ 159.819421][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.819450][ T5610] ? lockdep_hardirqs_on+0x7b/0x110 [ 159.819481][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.819527][ T5610] deactivate_locked_super+0xbe/0x110 [ 159.819572][ T5610] cleanup_mnt+0x204/0x2a0 [ 159.819607][ T5610] task_work_run+0x1d9/0x270 [ 159.819641][ T5610] ? __pfx_task_work_run+0x10/0x10 [ 159.819683][ T5610] exit_to_user_mode_loop+0x204/0x770 [ 159.819712][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 159.819741][ T5610] ? rcu_is_watching+0x16/0xb0 [ 159.819780][ T5610] do_syscall_64+0x328/0x520 [ 159.819811][ T5610] ? trace_irq_disable+0x3b/0x140 [ 159.819839][ T5610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.819873][ T5610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.819900][ T5610] RIP: 0033:0x7fc64239f797 [ 159.819922][ T5610] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 159.819944][ T5610] RSP: 002b:00007ffe8a2cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 159.819970][ T5610] RAX: 0000000000000000 RBX: 00007fc642434efb RCX: 00007fc64239f797 [ 159.819988][ T5610] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8a2cdf60 [ 159.820004][ T5610] RBP: 00007ffe8a2cdf60 R08: 00007ffe8a2cef60 R09: 00000000ffffffff [ 159.820022][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8a2ceff0 [ 159.820038][ T5610] R13: 00007fc642434efb R14: 0000000000026fcd R15: 00007ffe8a2cf030 [ 159.820080][ T5610] [ 159.952136][ T5610] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 160.545587][ T7969] loop0: detected capacity change from 0 to 128 [ 160.591183][ T7969] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.591749][ T7969] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.819928][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.071437][ T5757] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 161.103205][ T30] audit: type=1400 audit(1792411183.000:20): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7991 comm="syz.7.760" name="unknown" offset=28 [ 161.280381][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.762'. [ 161.340826][ T5757] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 161.342030][ T5757] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.342083][ T5757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.377950][ T5757] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 161.378201][ T5757] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 161.378277][ T5757] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 161.405298][ T5757] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 161.405385][ T5757] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 161.409671][ T5757] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 161.437513][ T5757] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 161.437597][ T5757] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 161.458090][ T5757] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 161.806889][ T5757] usb 7-1: USB disconnect, device number 6 [ 161.820731][ T5757] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 161.858846][ T5757] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 161.872842][ T5757] keyspan 7-1:1.0: device disconnected [ 162.026852][ T8017] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 162.759504][ T8043] loop7: detected capacity change from 0 to 128 [ 162.794376][ T8043] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 162.835241][ T8043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.137912][ T8057] ima: policy update failed [ 163.138257][ T30] audit: type=1802 audit(1792411185.030:21): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.793" res=0 errno=0 [ 163.240141][ T8065] ip_tables: iptables: counters copy to user failed while replacing table [ 163.468039][ T8079] loop0: detected capacity change from 0 to 64 [ 163.486972][ T8080] netlink: 'syz.6.804': attribute type 3 has an invalid length. [ 163.486993][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.804'. [ 163.542943][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 163.549193][ T8085] block nbd4: NBD_DISCONNECT [ 163.691264][ T5887] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 163.692784][ T5887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.692812][ T5887] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 163.692853][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.746893][ T5887] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 163.786533][ T5887] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 163.902978][ T8096] loop6: detected capacity change from 0 to 64 [ 164.016525][ T5769] kernel write not supported for file /331/attr/prev (pid: 5769 comm: kworker/1:6) [ 164.064742][ T5887] usb 3-1: USB disconnect, device number 3 [ 164.095974][ T5887] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 164.096692][ T5887] spcp8x5 3-1:1.0: device disconnected [ 164.267608][ T8108] input: syz0 as /devices/virtual/input/input11 [ 164.307491][ T8112] jffs2: notice: (8112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 164.484751][ T8123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.000441][ T29] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 165.113778][ T8160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.840'. [ 165.140815][ T5769] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.163162][ T29] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 165.170005][ T29] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 165.170032][ T29] usb 7-1: config 0 has no interface number 0 [ 165.175390][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.175416][ T29] usb 7-1: Product: syz [ 165.175433][ T29] usb 7-1: Manufacturer: syz [ 165.175450][ T29] usb 7-1: SerialNumber: syz [ 165.187874][ T29] usb 7-1: config 0 descriptor?? [ 165.313856][ T5769] usb 1-1: Using ep0 maxpacket: 16 [ 165.315547][ T5769] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.316915][ T5769] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.316962][ T5769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.317020][ T5769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.317045][ T5769] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 165.317071][ T5769] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.318436][ T5769] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.318461][ T5769] usb 1-1: Manufacturer: syz [ 165.338732][ T5769] usb 1-1: config 0 descriptor?? [ 165.711050][ T5769] rc_core: IR keymap rc-hauppauge not found [ 165.711070][ T5769] Registered IR keymap rc-empty [ 165.711479][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.742132][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.783835][ T5769] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 165.801477][ T5769] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 165.849202][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.859420][ T29] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 165.859874][ T29] asix 7-1:0.251: probe with driver asix failed with error -524 [ 165.864009][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.894074][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.910802][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.917958][ T8164] loop4: detected capacity change from 0 to 40427 [ 165.919011][ T8164] F2FS-fs: heap/no_heap options were deprecated [ 165.942938][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.945925][ T8164] F2FS-fs (loop4): build fault injection rate: 19 [ 165.945946][ T8164] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 165.953539][ T8164] F2FS-fs (loop4): invalid crc value [ 165.973021][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 165.995655][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.012428][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.030594][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.031563][ T8164] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940 [ 166.060420][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.080695][ T5769] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 166.089412][ T29] usb 7-1: USB disconnect, device number 7 [ 166.152979][ T5769] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 166.153005][ T5769] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 166.186282][ T5769] usb 1-1: USB disconnect, device number 5 [ 166.250910][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.400265][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 166.402242][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 166.404025][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 166.404096][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.404127][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 166.404181][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.419788][ T8164] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 166.427416][ T9] usb 3-1: config 0 descriptor?? [ 166.471264][ T8164] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 166.493331][ T8164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.569045][ T8164] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 166.603152][ T8191] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 166.628994][ T8164] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 166.795453][ T5610] syz-executor: attempt to access beyond end of device [ 166.795453][ T5610] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.809374][ T5610] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 166.809409][ T5610] Tainted: [L]=SOFTLOCKUP [ 166.809419][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 166.809434][ T5610] Call Trace: [ 166.809444][ T5610] [ 166.809455][ T5610] dump_stack_lvl+0xe8/0x150 [ 166.809496][ T5610] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 166.809530][ T5610] f2fs_write_end_bio+0x1211/0x16e0 [ 166.809568][ T5610] ? blkg_put+0x22/0x240 [ 166.809612][ T5610] __submit_merged_bio+0x258/0x6a0 [ 166.809637][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.809673][ T5610] ? rcu_is_watching+0x16/0xb0 [ 166.809714][ T5610] __submit_merged_write_cond+0x3c9/0x4e0 [ 166.809753][ T5610] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 166.809797][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.809837][ T5610] f2fs_write_data_pages+0x2a27/0x36f0 [ 166.809867][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.809896][ T5610] ? __lock_acquire+0x747/0x2de0 [ 166.809967][ T5610] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 166.809996][ T5610] ? is_bpf_text_address+0x26/0x2b0 [ 166.810048][ T5610] ? arch_stack_walk+0xfb/0x150 [ 166.810112][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810141][ T5610] ? add_lock_to_list+0xc7/0x100 [ 166.810178][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810207][ T5610] ? __lock_acquire+0x1511/0x2de0 [ 166.810268][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810296][ T5610] ? do_raw_spin_lock+0x12b/0x2f0 [ 166.810341][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810375][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810404][ T5610] ? do_raw_spin_unlock+0xf5/0x200 [ 166.810443][ T5610] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 166.810476][ T5610] do_writepages+0x338/0x560 [ 166.810509][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810540][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810574][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810603][ T5610] ? do_raw_spin_unlock+0xf5/0x200 [ 166.810647][ T5610] filemap_fdatawrite+0x1e9/0x2f0 [ 166.810688][ T5610] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 166.810764][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810796][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.810831][ T5610] ? do_raw_spin_unlock+0xf5/0x200 [ 166.810874][ T5610] f2fs_sync_dirty_inodes+0x30e/0x830 [ 166.810926][ T5610] f2fs_write_checkpoint+0xa3d/0x2710 [ 166.810959][ T5610] ? __lock_acquire+0x747/0x2de0 [ 166.811025][ T5610] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 166.811057][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.811152][ T5610] kill_f2fs_super+0x2dd/0x700 [ 166.811197][ T5610] ? __pfx_kill_f2fs_super+0x10/0x10 [ 166.811245][ T5610] ? call_rcu+0x64d/0x8b0 [ 166.811277][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.811307][ T5610] ? lockdep_hardirqs_on+0x7b/0x110 [ 166.811336][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.811383][ T5610] deactivate_locked_super+0xbe/0x110 [ 166.811425][ T5610] cleanup_mnt+0x204/0x2a0 [ 166.811460][ T5610] task_work_run+0x1d9/0x270 [ 166.811493][ T5610] ? __pfx_task_work_run+0x10/0x10 [ 166.811534][ T5610] exit_to_user_mode_loop+0x204/0x770 [ 166.811563][ T5610] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.811592][ T5610] ? rcu_is_watching+0x16/0xb0 [ 166.811630][ T5610] do_syscall_64+0x328/0x520 [ 166.811659][ T5610] ? trace_irq_disable+0x3b/0x140 [ 166.811692][ T5610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.811725][ T5610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.811751][ T5610] RIP: 0033:0x7fc64239f797 [ 166.811774][ T5610] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 166.811794][ T5610] RSP: 002b:00007ffe8a2cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 166.811820][ T5610] RAX: 0000000000000000 RBX: 00007fc642434efb RCX: 00007fc64239f797 [ 166.811837][ T5610] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8a2cdf60 [ 166.811853][ T5610] RBP: 00007ffe8a2cdf60 R08: 00007ffe8a2cef60 R09: 00000000ffffffff [ 166.811871][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8a2ceff0 [ 166.811888][ T5610] R13: 00007fc642434efb R14: 0000000000028ae5 R15: 00007ffe8a2cf030 [ 166.811929][ T5610] [ 166.836199][ T5610] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 167.065484][ T8199] loop0: detected capacity change from 0 to 2048 [ 167.126724][ T8199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.272458][ T9] hid_parser_main: 14 callbacks suppressed [ 167.272483][ T9] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x1 [ 167.272509][ T9] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 167.272532][ T9] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x4 [ 167.275089][ T9] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -71 [ 167.278760][ T9] usb 3-1: USB disconnect, device number 4 [ 168.021266][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 168.092320][ T8235] loop2: detected capacity change from 0 to 1024 [ 168.094093][ T8235] EXT4-fs: Ignoring removed bh option [ 168.133678][ T8235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 168.171239][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 168.173011][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.173045][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.173088][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.223109][ T9] usb 5-1: config 0 descriptor?? [ 168.354356][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 168.668733][ T9] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 168.668766][ T9] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 168.668789][ T9] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 168.668811][ T9] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 168.668834][ T9] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 168.707965][ T9] elan 0003:04F3:0755.0006: failed to start in urb: -90 [ 168.724494][ T9] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 168.851416][ T9] usb 5-1: USB disconnect, device number 5 [ 168.927608][ T8260] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.035917][ T8264] loop0: detected capacity change from 0 to 1024 [ 169.092952][ T8257] fido_id[8257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 169.119457][ T8264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.389100][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.459448][ T8245] loop6: detected capacity change from 0 to 32768 [ 169.480379][ T8245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.876 (8245) [ 169.519608][ T8245] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.519640][ T8245] BTRFS info (device loop6): using crc32c checksum algorithm [ 169.717651][ T8245] BTRFS info (device loop6): enabling ssd optimizations [ 169.717685][ T8245] BTRFS info (device loop6): turning on flush-on-commit [ 169.717704][ T8245] BTRFS info (device loop6): enabling free space tree [ 169.717723][ T8245] BTRFS info (device loop6): enabling auto defrag [ 169.717744][ T8245] BTRFS info (device loop6): use lzo compression, level 1 [ 169.717767][ T8245] BTRFS info (device loop6): max_inline set to 4096 [ 169.961028][ T6038] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.208335][ T8309] loop4: detected capacity change from 0 to 4096 [ 170.314616][ T5618] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 170.318977][ T8322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.685645][ T8331] Invalid ELF header magic: != ELF [ 171.049035][ T8343] device-mapper: ioctl: name not supplied when creating device [ 171.178944][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.917'. [ 171.238751][ T8351] loop0: detected capacity change from 0 to 1024 [ 171.252723][ T8351] EXT4-fs: Ignoring removed bh option [ 171.257367][ T8351] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.325142][ T8351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.387105][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.921'. [ 171.512365][ T8361] loop2: detected capacity change from 0 to 1024 [ 171.537725][ T8361] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.566285][ T8361] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 171.566619][ T8361] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.637745][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.652934][ T8314] loop7: detected capacity change from 0 to 32768 [ 171.658298][ T8361] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 171.658452][ T8361] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 171.658514][ T8361] EXT4-fs error (device loop2): ext4_acquire_dquot:7079: comm syz.2.918: Failed to acquire dquot type 0 [ 171.658539][ T8361] loop2: lost filesystem error report for type 5 error -117 [ 171.659621][ T8361] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 171.659770][ T8361] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 171.659818][ T8361] EXT4-fs error (device loop2): ext4_acquire_dquot:7079: comm syz.2.918: Failed to acquire dquot type 0 [ 171.659842][ T8361] loop2: lost filesystem error report for type 5 error -117 [ 171.660091][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 171.660113][ C1] EXT4-fs (loop2): initial error at time 1792411193: ext4_acquire_dquot:7079 [ 171.660139][ C1] EXT4-fs (loop2): last error at time 1792411193: ext4_acquire_dquot:7079 [ 171.721187][ T8361] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.918: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.721222][ T8361] loop2: lost filesystem error report for type 5 error -117 [ 171.725109][ T8361] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 171.725265][ T8361] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 171.725318][ T8361] EXT4-fs error (device loop2): ext4_acquire_dquot:7079: comm syz.2.918: Failed to acquire dquot type 0 [ 171.725342][ T8361] loop2: lost filesystem error report for type 5 error -117 [ 171.746514][ T8361] EXT4-fs (loop2): 1 orphan inode deleted [ 171.769460][ T8361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.853290][ T8314] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.917061][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.917747][ T8314] XFS (loop7): Ending clean mount [ 171.917830][ T8375] loop6: detected capacity change from 0 to 512 [ 171.949464][ T8375] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.949486][ T8375] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.044553][ T8375] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 172.067284][ T8375] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.925: bg 0: block 248: padding at end of block bitmap is not set [ 172.067318][ T8375] loop6: lost filesystem error report for type 5 error -117 [ 172.070085][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 172.070105][ C0] EXT4-fs (loop6): last error at time 1792411193: ext4_validate_block_bitmap:445 [ 172.085526][ T8375] Quota error (device loop6): write_blk: dquota write failed [ 172.085621][ T8375] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 172.085697][ T8375] EXT4-fs error (device loop6): ext4_acquire_dquot:7079: comm syz.6.925: Failed to acquire dquot type 1 [ 172.085722][ T8375] loop6: lost filesystem error report for type 5 error -28 [ 172.123264][ T8375] EXT4-fs (loop6): 1 truncate cleaned up [ 172.146035][ T8375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 172.210387][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.303487][ T6857] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.330250][ T5618] Bluetooth: hci3: command 0x0405 tx timeout [ 172.468867][ T8391] fuse: Bad value for 'fd' [ 172.488577][ T6038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 172.676610][ T8399] loop0: detected capacity change from 0 to 1024 [ 172.690543][ T8399] EXT4-fs: Ignoring removed bh option [ 172.763321][ T8399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.855382][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.006495][ T8406] loop7: detected capacity change from 0 to 8 [ 173.052214][ T8406] SQUASHFS error: lzo decompression failed, data probably corrupt [ 173.052246][ T8406] SQUASHFS error: Failed to read block 0x82: -5 [ 173.052261][ T8406] SQUASHFS error: Unable to read metadata cache entry [80] [ 173.052276][ T8406] SQUASHFS error: Unable to read inode 0x11f [ 173.169738][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.7.935'. [ 173.205930][ T8408] batman_adv: batadv0: Adding interface: netdevsim0 [ 173.205946][ T8408] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.205989][ T8408] batman_adv: batadv0: Interface activated: netdevsim0 [ 173.562674][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 173.970449][ T5769] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 174.121205][ T5769] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 174.122358][ T5769] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.122392][ T5769] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.122427][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.126574][ T8442] loop7: detected capacity change from 0 to 128 [ 174.175213][ T5769] usb 1-1: config 0 descriptor?? [ 174.601517][ T5769] sunplus 0003:04FC:05D8.0007: fixing up Sunplus Wireless Desktop report descriptor [ 174.621394][ T5769] sunplus 0003:04FC:05D8.0007: hidraw0: USB HID vd.8f Device [HID 04fc:05d8] on usb-dummy_hcd.0-1/input0 [ 175.118572][ T8476] loop6: detected capacity change from 0 to 164 [ 175.174736][ T8479] ip_tables: iptables: counters copy to user failed while replacing table [ 175.189707][ T8476] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 175.230260][ T8476] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 175.281816][ T8482] block2mtd: illegal erase size [ 175.307843][ T5769] usb 1-1: USB disconnect, device number 6 [ 175.596287][ T8463] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 175.698296][ T8494] cougar: G6 mapped to space [ 176.032672][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 176.323158][ T30] audit: type=1326 audit(1792411198.220:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325b19e559 code=0x7ffc0000 [ 176.323414][ T30] audit: type=1326 audit(1792411198.220:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8526 comm="syz.7.992" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325b19e559 code=0x7ffc0000 [ 176.547019][ T8537] loop4: detected capacity change from 0 to 512 [ 176.566964][ T8537] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 176.566982][ T8537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.629276][ T8537] EXT4-fs (loop4): 1 truncate cleaned up [ 176.643655][ T8537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.689563][ T8547] loop2: detected capacity change from 0 to 128 [ 176.697282][ T8545] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 176.697308][ T8545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 176.705439][ T8545] vhci_hcd vhci_hcd.0: Device attached [ 176.753874][ T8547] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.756523][ T8548] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 176.770596][ T114] vhci_hcd vhci_hcd.5: stop threads [ 176.771025][ T114] vhci_hcd vhci_hcd.5: release socket [ 176.771054][ T114] vhci_hcd vhci_hcd.5: disconnect device [ 176.787607][ T8547] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.873754][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.018340][ T5613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.143715][ T8563] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 177.165069][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 177.827222][ T8591] loop6: detected capacity change from 0 to 1764 [ 178.118655][ T8604] netlink: 'syz.2.1026': attribute type 8 has an invalid length. [ 178.385234][ T8574] loop4: detected capacity change from 0 to 32768 [ 178.420496][ T8574] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 178.471063][ T8574] XFS (loop4): Ending clean mount [ 179.095485][ T8639] loop6: detected capacity change from 0 to 64 [ 179.132992][ T8639] MINIX-fs: mounting file system with errors, running fsck is recommended [ 179.157782][ T8639] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 179.196061][ T8639] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 179.278421][ T5610] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.404876][ T8643] loop0: detected capacity change from 0 to 1024 [ 179.529766][ T8643] UBIFS error (pid: 8643): cannot open "c:::", error -22 [ 180.209656][ T8677] loop2: detected capacity change from 0 to 128 [ 180.221682][ T8677] udf: Unknown parameter 'ÿÿÿÿ' [ 180.492167][ T1291] IPVS: starting estimator thread 0... [ 180.546113][ T8695] loop0: detected capacity change from 0 to 512 [ 180.590377][ T8691] IPVS: using max 26 ests per chain, 62400 per kthread [ 180.591337][ T8695] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 180.591354][ T8695] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.639211][ T8695] EXT4-fs (loop0): 1 truncate cleaned up [ 180.649674][ T8695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.710498][ T8695] EXT4-fs error (device loop0): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.0.1063: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 180.718875][ T8695] EXT4-fs (loop0): Remounting filesystem read-only [ 180.726399][ T8695] overlayfs: failed to create directory ./bus/work (errno: 30); mounting read-only [ 180.729640][ T8695] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null. [ 180.941620][ T8688] loop4: detected capacity change from 0 to 32768 [ 180.983065][ T8688] ea_get: invalid extended attribute [ 180.983083][ T8688] ffff888054dea678: 04 00 00 00 .... [ 181.332738][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.387729][ T8717] loop6: detected capacity change from 0 to 64 [ 181.435224][ T8717] hfs: unable to open catalog tree [ 181.435238][ T8717] hfs: can't find a HFS filesystem on dev loop6 [ 181.617649][ T8723] loop4: detected capacity change from 0 to 2048 [ 181.650531][ T8726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.674742][ T8723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.242297][ T8742] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1088'. [ 182.243309][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1088'. [ 182.476553][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.480605][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.489028][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.513118][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.514166][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.288313][ T8752] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.494764][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1107'. [ 184.181303][ T8813] loop4: detected capacity change from 0 to 256 [ 184.183505][ T8784] loop2: detected capacity change from 0 to 40427 [ 184.193186][ T8784] F2FS-fs (loop2): invalid crc value [ 184.538533][ T8784] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 184.563737][ T8784] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.570532][ T5618] Bluetooth: hci1: command tx timeout [ 184.819971][ T5613] syz-executor: attempt to access beyond end of device [ 184.819971][ T5613] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.859617][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 184.859657][ T5613] Tainted: [L]=SOFTLOCKUP [ 184.859667][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 184.859687][ T5613] Call Trace: [ 184.859697][ T5613] [ 184.859708][ T5613] dump_stack_lvl+0xe8/0x150 [ 184.859750][ T5613] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 184.859784][ T5613] f2fs_write_end_bio+0x1211/0x16e0 [ 184.859821][ T5613] ? blkg_put+0x22/0x240 [ 184.859866][ T5613] __submit_merged_bio+0x258/0x6a0 [ 184.859891][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859921][ T5613] ? rcu_is_watching+0x16/0xb0 [ 184.859961][ T5613] __submit_merged_write_cond+0x3c9/0x4e0 [ 184.860000][ T5613] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 184.860045][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860086][ T5613] f2fs_write_data_pages+0x2a27/0x36f0 [ 184.860116][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860145][ T5613] ? is_bpf_text_address+0x292/0x2b0 [ 184.860222][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.860252][ T5613] ? is_bpf_text_address+0x26/0x2b0 [ 184.860300][ T5613] ? arch_stack_walk+0xfb/0x150 [ 184.860365][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860394][ T5613] ? add_lock_to_list+0xc7/0x100 [ 184.860431][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860460][ T5613] ? __lock_acquire+0x1511/0x2de0 [ 184.860521][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860550][ T5613] ? do_raw_spin_lock+0x12b/0x2f0 [ 184.860594][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860628][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860657][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 184.860700][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.860733][ T5613] do_writepages+0x338/0x560 [ 184.860766][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860798][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860831][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.860860][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 184.860903][ T5613] filemap_fdatawrite+0x1e9/0x2f0 [ 184.860941][ T5613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 184.861017][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.861049][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.861084][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 184.861128][ T5613] f2fs_sync_dirty_inodes+0x30e/0x830 [ 184.861180][ T5613] f2fs_write_checkpoint+0xa3d/0x2710 [ 184.861212][ T5613] ? __lock_acquire+0x747/0x2de0 [ 184.861279][ T5613] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 184.861311][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.861406][ T5613] kill_f2fs_super+0x2dd/0x700 [ 184.861449][ T5613] ? __pfx_kill_f2fs_super+0x10/0x10 [ 184.861497][ T5613] ? call_rcu+0x64d/0x8b0 [ 184.861529][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.861558][ T5613] ? lockdep_hardirqs_on+0x7b/0x110 [ 184.861588][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.861634][ T5613] deactivate_locked_super+0xbe/0x110 [ 184.861682][ T5613] cleanup_mnt+0x204/0x2a0 [ 184.861717][ T5613] task_work_run+0x1d9/0x270 [ 184.861751][ T5613] ? __pfx_task_work_run+0x10/0x10 [ 184.861791][ T5613] exit_to_user_mode_loop+0x204/0x770 [ 184.861820][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.861850][ T5613] ? rcu_is_watching+0x16/0xb0 [ 184.861888][ T5613] do_syscall_64+0x328/0x520 [ 184.861917][ T5613] ? trace_irq_disable+0x3b/0x140 [ 184.861946][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.861979][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.862004][ T5613] RIP: 0033:0x7f966cd9f797 [ 184.862027][ T5613] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 184.862047][ T5613] RSP: 002b:00007ffc2eddfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 184.862074][ T5613] RAX: 0000000000000000 RBX: 00007f966ce34efb RCX: 00007f966cd9f797 [ 184.862091][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2eddff10 [ 184.862107][ T5613] RBP: 00007ffc2eddff10 R08: 00007ffc2ede0f10 R09: 00000000ffffffff [ 184.862125][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2ede0fa0 [ 184.862141][ T5613] R13: 00007f966ce34efb R14: 000000000002d1a0 R15: 00007ffc2ede0fe0 [ 184.862181][ T5613] [ 185.091088][ T5613] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 185.654732][ T8828] loop4: detected capacity change from 0 to 131072 [ 185.658420][ T8828] F2FS-fs (loop4): invalid crc value [ 185.771416][ T8828] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 185.779924][ T8828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 185.837020][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.837200][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.837337][ T8752] bridge_slave_0: entered allmulticast mode [ 185.839495][ T8752] bridge_slave_0: entered promiscuous mode [ 185.870732][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.870904][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.871056][ T8752] bridge_slave_1: entered allmulticast mode [ 185.873218][ T8752] bridge_slave_1: entered promiscuous mode [ 185.936701][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.950097][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.994053][ T8752] team0: Port device team_slave_0 added [ 185.997103][ T8752] team0: Port device team_slave_1 added [ 186.053576][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.053597][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.053657][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.055765][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.055780][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.055811][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.433937][ T8752] hsr_slave_0: entered promiscuous mode [ 186.441314][ T8752] hsr_slave_1: entered promiscuous mode [ 186.442087][ T8752] debugfs: 'hsr0' already exists in 'hsr' [ 186.442106][ T8752] Cannot create hsr debugfs directory [ 186.474279][ T8853] loop7: detected capacity change from 0 to 4096 [ 186.524689][ T8853] NILFS (loop7): invalid segment: Checksum error in segment payload [ 186.524720][ T8853] NILFS (loop7): trying rollback from an earlier position [ 186.605568][ T8853] NILFS (loop7): recovery complete [ 186.637737][ T8862] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.653533][ T5618] Bluetooth: hci1: command tx timeout [ 186.670125][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.715262][ T8853] NILFS (loop7): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 186.822399][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 186.825003][ T5887] usb 3-1: config index 0 descriptor too short (expected 46, got 32) [ 186.825029][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.825078][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.170460][ T8871] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.236272][ T5887] usb 3-1: cannot create comm data receiver. [ 187.238142][ T5887] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -2 [ 187.444801][ T5887] usb 3-1: USB disconnect, device number 5 [ 187.958111][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.969758][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.153851][ T8752] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 188.192764][ T8752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.200327][ T8752] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 188.228554][ T8752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.229381][ T8752] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 188.262291][ T8752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.264815][ T8752] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 188.282610][ T8752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.420785][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.448112][ T8919] loop7: detected capacity change from 0 to 8 [ 188.464445][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.483421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.483525][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.533291][ T242] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.533395][ T242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.634915][ T8922] sctp: [Deprecated]: syz.5.1156 (pid 8922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.634915][ T8922] Use struct sctp_sack_info instead [ 188.731341][ T5618] Bluetooth: hci1: command tx timeout [ 188.804488][ T8930] loop4: detected capacity change from 0 to 1024 [ 188.830556][ T5757] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.871170][ T8930] EXT4-fs (loop4): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.871279][ T8930] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.917310][ T8930] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.1160: lblock 3 mapped to illegal pblock 3 (length 2) [ 188.939274][ T8930] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.1160: lblock 0 mapped to illegal pblock 0 (length 3) [ 188.960342][ T8930] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 188.960373][ T8930] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.960373][ T8930] [ 188.986463][ T5757] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 188.987529][ T5757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.987561][ T5757] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.996666][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 188.996692][ T5757] usb 3-1: Product: syz [ 188.996708][ T5757] usb 3-1: Manufacturer: syz [ 189.044026][ T5757] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 189.125708][ T987] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 4: comm kworker/u8:7: lblock 4 mapped to illegal pblock 4 (length 1) [ 189.128726][ T987] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 189.128758][ T987] EXT4-fs (loop4): This should not happen!! Data will be lost [ 189.128758][ T987] [ 189.174186][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 189.843719][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.901850][ T5757] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 189.930013][ T5757] usb 3-1: USB disconnect, device number 6 [ 189.963684][ T5757] mos7840 3-1:1.0: device disconnected [ 190.254811][ T8990] sd 0:0:1:0: PR command failed: 1026 [ 190.254862][ T8990] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 190.254907][ T8990] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 190.646378][ T9007] openvswitch: netlink: Unknown key attributes 1 [ 190.810652][ T5618] Bluetooth: hci1: command tx timeout [ 190.869611][ T8752] veth0_vlan: entered promiscuous mode [ 190.909330][ T8752] veth1_vlan: entered promiscuous mode [ 190.991277][ T9016] scsi_dev_info_list_add_str: bad dev info string 'Öõ' '' '' [ 191.051427][ T8752] veth0_macvtap: entered promiscuous mode [ 191.057101][ T8752] veth1_macvtap: entered promiscuous mode [ 191.089031][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.118907][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.153348][ T5809] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.153689][ T5809] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.153731][ T5809] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.170984][ T1264] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.270621][ T5750] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 191.316397][ T5809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.316417][ T5809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.376517][ T242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.376537][ T242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.430841][ T5750] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 191.432018][ T5750] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.432052][ T5750] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.432088][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.439341][ T5750] usb 3-1: config 0 descriptor?? [ 191.477430][ T9029] loop9: detected capacity change from 0 to 524156864 [ 191.943910][ T5750] input: HID 04fc:05d8 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04FC:05D8.0008/input/input13 [ 192.084724][ T5750] sunplus 0003:04FC:05D8.0008: input,hidraw0: USB HID vd.8f Joystick [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 192.614151][ T5757] usb 3-1: USB disconnect, device number 7 [ 192.784967][ T9072] loop6: detected capacity change from 0 to 128 [ 192.829695][ T9072] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.855747][ T9072] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.897899][ T9076] loop4: detected capacity change from 0 to 512 [ 192.908667][ T9076] EXT4-fs: Ignoring removed nobh option [ 192.923005][ T9072] fscrypt (loop6, inode 12): Unsupported encryption flags (0x08) [ 192.986665][ T6038] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.987424][ T9076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.987528][ T9076] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.048045][ T9082] bond0: no command found in slaves file - use +ifname or -ifname [ 193.153526][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.399885][ T9098] loop8: detected capacity change from 0 to 128 [ 193.404378][ T9097] loop4: detected capacity change from 0 to 512 [ 193.408541][ T9097] EXT4-fs: Ignoring removed i_version option [ 193.427508][ T9097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.481921][ T9097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.482026][ T9097] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.487042][ T9098] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.493239][ T9098] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.542719][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.542779][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.667737][ T8752] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.702699][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.747307][ T9107] block2mtd: illegal erase size [ 193.758653][ T5750] sony 0005:054C:03D5.0009: UNIQ does not contain a MAC address; duplicate check skipped [ 193.832999][ T5750] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0009/input/input14 [ 193.858485][ T5750] sony 0005:054C:03D5.0009: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 193.955290][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1234'. [ 194.001866][ T9114] loop8: detected capacity change from 0 to 2048 [ 194.047599][ T9114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.133755][ T9115] fido_id[9115]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.256319][ T9124] loop7: detected capacity change from 0 to 512 [ 194.290986][ T9124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.291105][ T9124] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.508219][ T9131] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1239: corrupted xattr block 33: invalid header [ 194.510239][ T9124] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1239: corrupted xattr block 6: invalid header [ 194.522371][ T9124] EXT4-fs (loop7): Remounting filesystem read-only [ 194.529924][ T9131] fscrypt (loop7, inode 15): Error -117 getting encryption context [ 194.629989][ T9138] kAFS: Invalid Command on /proc/fs/afs/cells file [ 194.672710][ T6857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.680355][ T987] __quota_error: 9 callbacks suppressed [ 194.680371][ T987] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 194.680403][ T987] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 194.680578][ T987] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.680601][ T987] Quota error (device loop7): write_blk: dquota write failed [ 194.680617][ T987] Quota error (device loop7): free_dqentry: Can't write quota data block 5 [ 195.020132][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 195.085002][ T9157] gretap0: entered promiscuous mode [ 195.172489][ T29] usb 9-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 195.173527][ T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.173552][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.175711][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.175738][ T29] usb 9-1: Product: syz [ 195.175756][ T29] usb 9-1: Manufacturer: syz [ 195.175773][ T29] usb 9-1: SerialNumber: syz [ 195.286612][ T242] IPVS: starting estimator thread 0... [ 195.347235][ T9167] ªªªªª»: renamed from vlan0 (while UP) [ 195.372155][ T9165] IPVS: using max 25 ests per chain, 60000 per kthread [ 195.464763][ T9150] loop7: detected capacity change from 0 to 32768 [ 195.488854][ T9150] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.544897][ T9150] XFS (loop7): Ending clean mount [ 195.681892][ T5769] usb 9-1: USB disconnect, device number 2 [ 195.682249][ T5618] Bluetooth: hci6: CSR: Local version failed (-71) [ 195.859382][ T6857] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.964704][ T9193] loop4: detected capacity change from 0 to 512 [ 196.049469][ T9193] syz.4.1266: attempt to access beyond end of device [ 196.049469][ T9193] loop4: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 196.061347][ T9193] syz.4.1266: attempt to access beyond end of device [ 196.061347][ T9193] loop4: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 196.065191][ T30] audit: type=1800 audit(1792411217.950:33): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1266" name="file2" dev="loop4" ino=1048746 res=0 errno=0 [ 196.107301][ T9193] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 196.107326][ T9193] FAT-fs (loop4): Filesystem has been set read-only [ 197.635852][ T9224] loop7: detected capacity change from 0 to 32768 [ 197.638132][ T9224] xfs: Deprecated parameter 'noattr2' [ 197.638151][ T9224] XFS: noattr2 mount option is deprecated. [ 197.713661][ T9224] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.774885][ T9224] XFS (loop7): Ending clean mount [ 197.992468][ T6857] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.070208][ T9283] loop8: detected capacity change from 0 to 164 [ 198.176413][ T9283] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 198.721599][ T9303] loop7: detected capacity change from 0 to 1024 [ 198.734008][ T9303] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.734064][ T9303] EXT4-fs: Ignoring removed orlov option [ 198.782730][ T9303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.882011][ T5769] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 199.032875][ T5769] usb 9-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 199.038456][ T5769] usb 9-1: config 0 interface 0 has no altsetting 0 [ 199.038494][ T5769] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.050519][ T5769] usb 9-1: config 0 descriptor?? [ 199.386564][ T6857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.473661][ T5769] hid (null): unknown global tag 0xfd [ 199.478130][ T9312] loop4: detected capacity change from 0 to 128 [ 199.517879][ T9312] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 199.520863][ T5769] waltop 0003:172F:0034.000A: unexpected long global item [ 199.521624][ T5769] waltop 0003:172F:0034.000A: probe with driver waltop failed with error -22 [ 199.557030][ T9312] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 199.632935][ T9315] xt_hashlimit: size too large, truncated to 1048576 [ 199.681811][ T5769] usb 9-1: USB disconnect, device number 3 [ 199.699780][ T5610] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.729995][ T9319] xt_hashlimit: size too large, truncated to 1048576 [ 199.987678][ T30] audit: type=1326 audit(1792411221.880:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 199.987740][ T30] audit: type=1326 audit(1792411221.880:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.043519][ T30] audit: type=1326 audit(1792411221.890:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.043577][ T30] audit: type=1326 audit(1792411221.890:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.043656][ T30] audit: type=1326 audit(1792411221.890:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.043709][ T30] audit: type=1326 audit(1792411221.890:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.043759][ T30] audit: type=1326 audit(1792411221.890:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.043809][ T30] audit: type=1326 audit(1792411221.890:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.043859][ T30] audit: type=1326 audit(1792411221.890:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.043910][ T30] audit: type=1326 audit(1792411221.890:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.6.1324" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f98f9e559 code=0x7ffc0000 [ 200.266263][ T5622] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 200.267552][ T5622] Bluetooth: hci3: connection err: -111 [ 200.267816][ T5622] Bluetooth: hci3: ACL packet for unknown connection handle 713 [ 200.453380][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.647355][ T9354] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 200.690623][ T9355] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 200.730259][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 200.730288][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 200.730318][ T52] Bluetooth: hci0: command 0x0c3a tx timeout [ 200.998686][ T9368] loop6: detected capacity change from 0 to 1024 [ 201.009813][ T9367] team0: Device gtp0 is of different type [ 201.029460][ T9368] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0003] [ 201.029576][ T9368] System zones: 0-1, 3-8 [ 201.054998][ T9368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 201.055144][ T9368] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.108495][ T9368] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: block 3: comm syz.6.1341: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.114001][ T9368] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 201.114032][ T9368] EXT4-fs (loop6): This should not happen!! Data will be lost [ 201.114032][ T9368] [ 201.120798][ T9368] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.1341: lblock 0 mapped to illegal pblock 0 (length 3) [ 201.122106][ T9368] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 201.122136][ T9368] EXT4-fs (loop6): This should not happen!! Data will be lost [ 201.122136][ T9368] [ 201.208506][ T1264] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: block 4: comm kworker/u8:8: lblock 4 mapped to illegal pblock 4 (length 1) [ 201.209541][ T1264] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 201.209570][ T1264] EXT4-fs (loop6): This should not happen!! Data will be lost [ 201.209570][ T1264] [ 201.247445][ T6038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.307773][ T9378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.307898][ T9378] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.351597][ T9378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.351738][ T9378] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.407023][ T9383] loop7: detected capacity change from 0 to 64 [ 201.486013][ T9378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.486112][ T9378] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.598355][ T9378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.598447][ T9378] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.605453][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1351'. [ 201.651525][ T9378] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.677544][ T9378] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 201.677612][ T9378] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 201.719555][ T9378] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 201.757367][ T9378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.757490][ T9378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.764459][ T9395] loop6: detected capacity change from 0 to 256 [ 201.798919][ T9378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.101985][ T9382] loop2: detected capacity change from 0 to 32768 [ 202.189336][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1360'. [ 202.356383][ T9418] loop7: detected capacity change from 0 to 512 [ 202.391415][ T9418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 202.391542][ T9418] System zones: 1-12 [ 202.392591][ T9418] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1362: Directory hole found for htree index block 0 [ 202.392657][ T9418] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 202.401282][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 202.401306][ C0] EXT4-fs (loop7): initial error at time 1792411224: dx_probe:791: inode 2 [ 202.401340][ C0] EXT4-fs (loop7): last error at time 1792411224: dx_probe:791: inode 2 [ 202.420304][ T5769] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 202.509946][ T9418] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 202.511101][ T9418] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1362: Directory hole found for htree index block 0 [ 202.511133][ T9418] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 202.525551][ T9418] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 202.538204][ T9418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.548802][ T9418] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1362: Directory hole found for htree index block 0 [ 202.555456][ T9418] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1362: Directory hole found for htree index block 0 [ 202.581244][ T5769] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.582783][ T5769] usb 7-1: config 0 has no interfaces? [ 202.582848][ T5769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.602344][ T5769] usb 7-1: config 0 descriptor?? [ 202.831738][ T5757] usb 7-1: USB disconnect, device number 8 [ 202.932617][ T9426] syz_tun: entered promiscuous mode [ 202.934543][ T9426] macsec2: entered allmulticast mode [ 202.934575][ T9426] syz_tun: entered allmulticast mode [ 203.203894][ T9426] syz_tun: left allmulticast mode [ 203.203926][ T9426] syz_tun: left promiscuous mode [ 203.218619][ T6857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.266809][ T9428] loop2: detected capacity change from 0 to 1024 [ 203.267785][ T9428] hfsplus: Unknown parameter 'ÿÿÿ00000000000000000000' [ 203.370159][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 203.372550][ T5616] Bluetooth: hci0: command 0x0c3a tx timeout [ 203.377307][ T9377] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 203.610612][ T5618] Bluetooth: hci3: command 0x0405 tx timeout [ 203.635784][ T9435] loop8: detected capacity change from 0 to 512 [ 203.649745][ T9435] EXT4-fs (loop8): Test dummy encryption mode enabled [ 203.649764][ T9435] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 203.649778][ T9435] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 203.705506][ T9435] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.1370: bad orphan inode 131083 [ 203.705536][ T9435] loop8: lost filesystem error report for type 5 error -117 [ 203.710932][ T9435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.772973][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.773022][ T5618] Bluetooth: hci5: command 0x0c1a tx timeout [ 203.868237][ T9444] phram: illegal device length [ 203.954871][ T9435] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.116837][ T9453] loop8: detected capacity change from 0 to 256 [ 204.129948][ T9453] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.160249][ T9453] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.220406][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1382'. [ 204.231687][ T9459] Format for deleting device is "id" (uint). [ 204.998257][ T9498] sctp: [Deprecated]: syz.4.1398 (pid 9498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.998257][ T9498] Use struct sctp_sack_info instead [ 205.291117][ T5616] Bluetooth: hci4: command 0x0405 tx timeout [ 205.451959][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 205.452018][ T5616] Bluetooth: hci0: command 0x0c3a tx timeout [ 205.696889][ T5616] Bluetooth: hci3: command 0x0405 tx timeout [ 205.850269][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.850363][ T5618] Bluetooth: hci5: command 0x0c1a tx timeout [ 206.192529][ T9526] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1411'. [ 206.253358][ T9529] loop6: detected capacity change from 0 to 512 [ 206.307498][ T9529] EXT4-fs (loop6): 1 truncate cleaned up [ 206.334940][ T9529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.406179][ T9529] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.1413: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 206.468166][ T9514] loop8: detected capacity change from 0 to 131072 [ 206.472876][ T9514] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 206.472902][ T9514] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 206.474680][ T9529] EXT4-fs (loop6): Remounting filesystem read-only [ 206.479850][ T9514] F2FS-fs (loop8): invalid crc value [ 206.593929][ T9514] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 206.599100][ T9514] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 206.599124][ T9514] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 206.705302][ T6038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.991304][ T9545] loop6: detected capacity change from 0 to 1024 [ 207.047773][ T9545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.056163][ T9548] loop2: detected capacity change from 0 to 1024 [ 207.060613][ T9548] EXT4-fs: Ignoring removed bh option [ 207.066445][ T9548] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 207.097533][ T9548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.367486][ T6038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.530159][ T5618] Bluetooth: hci0: command 0x0c3a tx timeout [ 207.604124][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.765129][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1427'. [ 207.776461][ T5618] Bluetooth: hci3: command 0x0405 tx timeout [ 207.930149][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.930210][ T5618] Bluetooth: hci5: command 0x0c1a tx timeout [ 208.053545][ T9575] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1430'. [ 208.290102][ T5750] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 208.451512][ T5750] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 208.452680][ T5750] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 208.452716][ T5750] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 208.452745][ T5750] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 208.454915][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.454941][ T5750] usb 7-1: Product: syz [ 208.454959][ T5750] usb 7-1: Manufacturer: syz [ 208.454976][ T5750] usb 7-1: SerialNumber: syz [ 208.527142][ T5750] usb 7-1: config 0 descriptor?? [ 208.528212][ T9577] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 208.528352][ T9577] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 208.554294][ T5750] usb 7-1: ucan: probing device on interface #0 [ 208.693996][ T9598] loop7: detected capacity change from 0 to 512 [ 208.697390][ T9598] EXT4-fs (loop7): Test dummy encryption mode enabled [ 208.777224][ T9598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.826766][ T9604] loop2: detected capacity change from 0 to 256 [ 208.858715][ T9598] EXT4-fs (loop7): shut down requested (1) [ 209.009620][ T6857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.242644][ T5750] ucan 7-1:0.0 can0: registered device [ 209.359784][ T5750] ucan 7-1:0.0 can0: firmware string: unknown [ 209.393626][ T5750] usb 7-1: USB disconnect, device number 9 [ 209.757081][ T9628] loop2: detected capacity change from 0 to 512 [ 209.769100][ T9628] EXT4-fs: Ignoring removed bh option [ 209.792137][ T9628] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 209.813654][ T9628] EXT4-fs (loop2): 1 truncate cleaned up [ 209.841554][ T9628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.022190][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.268728][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 210.268789][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 210.269528][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 210.307271][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 210.411932][ T9641] loop6: detected capacity change from 0 to 1024 [ 210.415338][ T9641] EXT4-fs: Ignoring removed bh option [ 210.445254][ T9641] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 210.446242][ T9616] loop4: detected capacity change from 0 to 32768 [ 210.482943][ T5618] Bluetooth: hci2: connection err: -111 [ 210.484272][ T9641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.496517][ T9616] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 210.548822][ T9624] loop7: detected capacity change from 0 to 32768 [ 210.573640][ T9624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1452 (9624) [ 210.605994][ T9624] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.606028][ T9624] BTRFS info (device loop7): using crc32c checksum algorithm [ 210.621110][ T9616] XFS (loop4): Ending clean mount [ 210.787151][ T9616] XFS (loop4): syz.4.1448 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 210.861524][ T9624] BTRFS info (device loop7): enabling ssd optimizations [ 210.861556][ T9624] BTRFS info (device loop7): turning on flush-on-commit [ 210.861576][ T9624] BTRFS info (device loop7): enabling free space tree [ 210.861595][ T9624] BTRFS info (device loop7): enabling auto defrag [ 210.865694][ T9624] BTRFS info (device loop7): use lzo compression, level 1 [ 210.865720][ T9624] BTRFS info (device loop7): max_inline set to 4096 [ 210.949869][ T5610] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 211.033648][ T9624] BTRFS info (device loop7 state M): max_inline set to 4096 [ 211.056801][ T9624] BTRFS info (device loop7 state M): max_inline set to 4096 [ 211.098673][ T6857] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.298293][ T6038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.395722][ T9721] capability: warning: `syz.5.1481' uses 32-bit capabilities (legacy support in use) [ 212.528632][ T9695] loop8: detected capacity change from 0 to 32768 [ 212.582977][ T9695] XFS (loop8): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 212.613664][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 212.613682][ T30] audit: type=1807 audit(1792411234.510:45): action=measure uid>+L'f&vd¹Kuì\|¤RÑ>(/:}ùÆ”Šîö~A\poÜ%kèÎéEâCgIƒídä1°»wï@‘GGyÁP0E‹eìÆG9C]4ðÖ²M\AýlôpGõø¢ŸbŽžÖ res=0 [ 212.613978][ T9722] ima: policy update failed [ 212.616203][ T30] audit: type=1802 audit(1792411234.510:46): pid=9723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.1496" res=0 errno=0 [ 212.616255][ T30] audit: type=1802 audit(1792411234.510:47): pid=9722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1496" res=0 errno=0 [ 212.689394][ T30] audit: type=1800 audit(1792411234.570:48): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1487" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 212.725803][ T9736] loop7: detected capacity change from 0 to 1024 [ 212.727108][ T9736] EXT4-fs: Ignoring removed bh option [ 212.747097][ T9736] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 212.796814][ T9736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.843131][ T9695] XFS (loop8): Ending clean mount [ 213.014194][ T6857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.053398][ T9744] loop6: detected capacity change from 0 to 2048 [ 213.087007][ T8752] XFS (loop8): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 213.143164][ T9750] netlink: 'syz.4.1490': attribute type 1 has an invalid length. [ 213.144277][ T9744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.131665][ T9789] loop4: detected capacity change from 0 to 1024 [ 214.132757][ T9789] EXT4-fs: Ignoring removed bh option [ 214.155326][ T9789] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 214.212110][ T9789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.388543][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.073475][ T9826] loop8: detected capacity change from 0 to 64 [ 215.218328][ T9832] netlink: 'syz.5.1530': attribute type 1 has an invalid length. [ 215.294078][ T9836] syz.5.1531 uses obsolete (PF_INET,SOCK_PACKET) [ 215.563769][ T9842] loop8: detected capacity change from 0 to 1024 [ 215.568220][ T9842] EXT4-fs: Ignoring removed bh option [ 215.589077][ T9842] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 215.623474][ T9846] loop2: detected capacity change from 0 to 256 [ 215.656126][ T9842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.724812][ T9846] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d) [ 215.842229][ T9846] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 216.049363][ T8752] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.171465][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 216.560707][ T30] audit: type=1326 audit(1792411238.440:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.2.1548" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f966cd9e559 code=0x0 [ 216.807880][ T9887] loop8: detected capacity change from 0 to 8 [ 217.496000][ T9887] SQUASHFS error: Failed to read block 0x636: -5 [ 217.496022][ T9887] SQUASHFS error: Unable to read metadata cache entry [634] [ 217.537849][ T9879] loop7: detected capacity change from 0 to 131072 [ 217.539507][ T9879] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 217.539533][ T9879] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 217.564029][ T9879] F2FS-fs (loop7): invalid crc value [ 217.660100][ T9879] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 217.666144][ T9879] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 217.666170][ T9879] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 217.714812][ T9905] loop4: detected capacity change from 0 to 1024 [ 217.715872][ T9905] EXT4-fs: Ignoring removed bh option [ 217.836012][ T9905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 217.836129][ T9905] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.033990][ T30] audit: type=1400 audit(1792411239.930:50): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9916 comm="syz.8.1562" [ 218.140157][ T5757] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 218.149218][ T9921] loop8: detected capacity change from 0 to 64 [ 218.207594][ T9921] hfs: unable to open catalog tree [ 218.207612][ T9921] hfs: can't find a HFS filesystem on dev loop8 [ 218.302359][ T5757] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 218.303557][ T5757] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 218.303584][ T5757] usb 5-1: config 0 has no interface number 0 [ 218.303661][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.308033][ T5757] usb 5-1: config 0 descriptor?? [ 218.364928][ T5757] ums-realtek 5-1:0.5: USB Mass Storage device detected [ 218.574241][ T5750] usb 5-1: USB disconnect, device number 6 [ 219.179238][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 219.615206][ T9956] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1580'. [ 219.729277][ T9961] loop8: detected capacity change from 0 to 256 [ 220.237740][ T9986] loop8: detected capacity change from 0 to 16 [ 220.252549][ T9986] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 220.401088][ T9990] loop7: detected capacity change from 0 to 8 [ 221.174818][T10014] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.460469][ T5750] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 221.510390][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 221.614437][ T5750] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 221.617696][ T5750] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.617754][ T5750] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 221.617800][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.670412][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 221.675295][ T29] usb 9-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 221.677630][ T29] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 96, changing to 7 [ 221.677676][ T29] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 221.681672][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.681698][ T29] usb 9-1: Product: syz [ 221.681722][ T29] usb 9-1: Manufacturer: syz [ 221.681739][ T29] usb 9-1: SerialNumber: syz [ 221.750437][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1617'. [ 221.848945][ T5750] dvbdev: DVB: registering new adapter (DEC2000-t) [ 221.893130][ T5750] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 221.931373][ T29] usb 9-1: Fast Track Pro switching to config #2 [ 222.026983][ T29] usb 9-1: USB disconnect, device number 4 [ 222.093215][ T5750] ttusb_dec_send_command: command bulk message failed: error -71 [ 222.112547][ T5750] usb 3-1: USB disconnect, device number 8 [ 222.415271][T10059] loop6: detected capacity change from 0 to 4096 [ 222.458604][T10059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.576965][T10070] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1633'. [ 222.735489][ T6038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.997352][T10087] fuse-io-uring is disabled by module parameter [ 223.448001][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1646'. [ 223.499909][T10101] netlink: 'syz.5.1647': attribute type 2 has an invalid length. [ 223.547540][T10099] hsr_slave_1 (unregistering): left promiscuous mode [ 223.942636][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1657'. [ 224.047105][T10128] loop2: detected capacity change from 0 to 1024 [ 224.062322][ T5757] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 224.106214][T10128] hfsplus: invalid length 1280 has been corrected to 255 [ 224.211638][ T5757] usb 5-1: not running at top speed; connect to a high speed hub [ 224.211676][ T5757] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 224.237210][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.237237][ T5757] usb 5-1: Product: syz [ 224.237255][ T5757] usb 5-1: Manufacturer: syz [ 224.237271][ T5757] usb 5-1: SerialNumber: syz [ 224.275594][ T5757] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 224.288892][T10133] loop7: detected capacity change from 0 to 4096 [ 224.299152][T10133] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.299262][T10133] EXT4-fs: Ignoring removed orlov option [ 224.307055][T10133] EXT4-fs (loop7): Test dummy encryption mode enabled [ 224.344541][T10133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.366537][ T5757] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 224.391537][ T5757] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 224.399702][ T5757] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 224.415780][T10140] IPv6: NLM_F_REPLACE set, but no existing node found! [ 224.433931][ T5757] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 224.485165][T10133] EXT4-fs (loop7): resizing filesystem from 512 to 0 blocks [ 224.485203][T10133] EXT4-fs warning (device loop7): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 224.750339][ T6857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.257029][T10135] loop6: detected capacity change from 0 to 32768 [ 225.294296][T10135] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 225.319720][T10135] JBD2: Ignoring recovery information on journal [ 225.528147][T10135] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 225.817209][ T6038] ocfs2: Unmounting device (7,6) on (node local) [ 226.118312][T10177] loop2: detected capacity change from 0 to 1024 [ 226.226360][T10182] loop7: detected capacity change from 0 to 64 [ 226.264214][T10180] loop8: detected capacity change from 0 to 2048 [ 226.288064][T10182] hfs: unable to open catalog tree [ 226.288077][T10182] hfs: can't find a HFS filesystem on dev loop7 [ 226.336662][T10180] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.336777][T10180] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.564572][ T8752] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.930779][ T29] usb 5-1: USB disconnect, device number 7 [ 226.978983][ T29] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 227.004789][ T29] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 227.025368][ T29] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 227.104539][ T29] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 227.113462][ T29] keyspan 5-1:1.0: device disconnected [ 227.121111][T10183] loop6: detected capacity change from 0 to 32768 [ 227.158039][T10183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1680 (10183) [ 227.207365][T10183] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.207398][T10183] BTRFS info (device loop6): using crc32c checksum algorithm [ 227.356715][T10183] BTRFS info (device loop6): setting nodatasum [ 227.356744][T10183] BTRFS info (device loop6): allowing degraded mounts [ 227.356764][T10183] BTRFS info (device loop6): enabling ssd optimizations [ 227.356785][T10183] BTRFS info (device loop6): turning on async discard [ 227.356804][T10183] BTRFS info (device loop6): enabling free space tree [ 227.432540][T10183] BTRFS critical (device loop6 state E): emergency shutdown [ 227.605537][ T6038] BTRFS info (device loop6 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.993646][T10240] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.064473][T10202] loop4: detected capacity change from 0 to 32768 [ 228.078909][T10202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1690 (10202) [ 228.097907][T10202] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.097939][T10202] BTRFS info (device loop4): using crc32c checksum algorithm [ 228.252964][T10202] BTRFS info (device loop4): enabling ssd optimizations [ 228.252993][T10202] BTRFS info (device loop4): turning on flush-on-commit [ 228.253013][T10202] BTRFS info (device loop4): enabling free space tree [ 228.253032][T10202] BTRFS info (device loop4): enabling auto defrag [ 228.253053][T10202] BTRFS info (device loop4): use lzo compression, level 1 [ 228.253076][T10202] BTRFS info (device loop4): max_inline set to 4096 [ 228.341821][T10202] BTRFS critical (device loop4 state E): emergency shutdown [ 228.483328][ T5610] BTRFS info (device loop4 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.784563][T10245] loop6: detected capacity change from 0 to 32768 [ 228.799801][T10245] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1705 (10245) [ 228.833800][T10245] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.833834][T10245] BTRFS info (device loop6): using sha256 checksum algorithm [ 229.042316][T10245] BTRFS info (device loop6): enabling ssd optimizations [ 229.042345][T10245] BTRFS info (device loop6): turning on async discard [ 229.042364][T10245] BTRFS info (device loop6): enabling free space tree [ 229.497638][T10307] loop4: detected capacity change from 0 to 22 [ 229.505284][T10307] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 229.521456][ T6038] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.524821][T10307] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 230.869662][T10317] loop6: detected capacity change from 0 to 32768 [ 230.892414][T10317] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1722 (10317) [ 230.994597][T10317] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.994636][T10317] BTRFS info (device loop6): using crc32c checksum algorithm [ 231.134389][T10317] BTRFS info (device loop6): enabling ssd optimizations [ 231.134419][T10317] BTRFS info (device loop6): turning on flush-on-commit [ 231.134438][T10317] BTRFS info (device loop6): enabling free space tree [ 231.134458][T10317] BTRFS info (device loop6): enabling auto defrag [ 231.134478][T10317] BTRFS info (device loop6): use lzo compression, level 1 [ 231.134502][T10317] BTRFS info (device loop6): max_inline set to 4096 [ 231.188574][T10355] loop7: detected capacity change from 0 to 512 [ 231.206731][T10355] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 231.206749][T10355] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 231.254692][T10355] EXT4-fs (loop7): 1 truncate cleaned up [ 231.282536][T10355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.303018][T10365] loop8: detected capacity change from 0 to 1024 [ 231.308860][T10365] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.308916][T10365] EXT4-fs: Ignoring removed orlov option [ 231.356860][T10365] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.406509][ T30] audit: type=1800 audit(1792411254.308:51): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1722" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 231.460249][T10355] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6542: inode #12: comm syz.7.1730: bad extra_isize 62 (inode size 256) [ 231.507039][T10355] EXT4-fs (loop7): Remounting filesystem read-only [ 231.666228][ T6857] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.713066][ T8752] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.713835][ T6038] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.939876][T10356] netlink: 'syz.4.1732': attribute type 14 has an invalid length. [ 232.148364][T10380] loop6: detected capacity change from 0 to 512 [ 232.155307][T10380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.216942][T10380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.217060][T10380] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.327896][ T10] kernel write not supported for file /input/mice (pid: 10 comm: kworker/0:1) [ 232.435698][ T6038] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.626655][T10395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.689002][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1752'. [ 232.927798][T10391] loop4: detected capacity change from 0 to 32768 [ 232.973990][T10391] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 233.047211][ T5618] block nbd2: Receive control failed (result -32) [ 233.102801][T10391] XFS (loop4): Ending clean mount [ 233.195290][ T30] audit: type=1400 audit(1792411256.098:52): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=10425 comm="syz.7.1760" name="p" offset=79 [ 233.323135][ T5610] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 233.327447][T10431] raw_sendmsg: syz.5.1764 forgot to set AF_INET. Fix it! [ 233.533944][ T5618] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 233.996381][T10463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1779'. [ 234.039897][ T5618] Bluetooth: hci0: Zero size dump init pkt [ 234.130784][T10470] team0: Device gtp0 is of different type [ 234.262173][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 234.421704][ T29] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 234.424618][ T29] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.424647][ T29] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 234.424669][ T29] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 234.424692][ T29] usb 8-1: config 220 has no interface number 2 [ 234.424762][ T29] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.424794][ T29] usb 8-1: config 220 interface 0 has no altsetting 0 [ 234.424816][ T29] usb 8-1: config 220 interface 76 has no altsetting 0 [ 234.424837][ T29] usb 8-1: config 220 interface 1 has no altsetting 0 [ 234.434837][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.434864][ T29] usb 8-1: Product: syz [ 234.434881][ T29] usb 8-1: Manufacturer: syz [ 234.434898][ T29] usb 8-1: SerialNumber: syz [ 234.490222][ T5750] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 234.642867][ T5750] usb 7-1: Using ep0 maxpacket: 32 [ 234.644357][ T5750] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 234.649853][ T5750] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 234.649882][ T5750] usb 7-1: config 0 has no interface number 0 [ 234.649963][ T5750] usb 7-1: config 0 interfa ** replaying previous printk message ** [ 234.649963][ T5750] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 234.649992][ T5750] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.652571][ T5750] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 234.652628][ T5750] usb 7-1: config 0 interface 196 has no altsetting 0 [ 234.664091][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.664118][ T5750] usb 7-1: Product: syz [ 234.664162][ T5750] usb 7-1: Manufacturer: syz [ 234.664201][ T5750] usb 7-1: SerialNumber: syz [ 234.691751][ T5617] [ 234.755371][ T5617] ====================================================== [ 234.762371][ T5617] WARNING: possible circular locking dependency detected [ 234.765791][ T5750] usb 7-1: config 0 descriptor?? [ 234.767866][T10477] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 234.781363][ T5617] syzkaller #0 Tainted: G L [ 234.786481][ T29] uvcvideo 8-1:220.1: Unknown video format 656e6968-6863-6365-6b30-2f636865636b [ 234.786533][ T29] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 234.786562][ T29] uvcvideo 8-1:220.0: No valid video chain found. [ 234.786623][ T29] usb 8-1: selecting invalid altsetting 0 [ 234.815614][ T5617] ------------------------------------------------------ [ 234.822612][ T5617] kworker/0:4/5617 is trying to acquire lock: [ 234.828658][ T5617] ffffffff914a23a8 (rds_trans_sem){++++}-{4:4}, at: rds_trans_get_preferred+0x133/0x3c0 [ 234.838407][ T5617] [ 234.838407][ T5617] but task is already holding lock: [ 234.845748][ T5617] ffff8880563ea420 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2dd8/0x50d0 [ 234.856283][ T5617] [ 234.856283][ T5617] which lock already depends on the new lock. [ 234.856283][ T5617] [ 234.866662][ T5617] [ 234.866662][ T5617] the existing dependency chain (in reverse order) is: [ 234.875657][ T5617] [ 234.875657][ T5617] -> #2 (&id_priv->handler_mutex/1){+.+.}-{4:4}: [ 234.884178][ T5617] __mutex_lock+0x19d/0x1550 [ 234.889284][ T5617] cma_ib_req_handler+0x2dd8/0x50d0 [ 234.894997][ T5617] cm_process_work+0x51/0x420 [ 234.900191][ T5617] cm_work_handler+0x96c3/0xdff0 [ 234.905641][ T5617] process_scheduled_works+0xc3d/0x1630 [ 234.911708][ T5617] worker_thread+0xa47/0xfb0 [ 234.916811][ T5617] kthread+0x38b/0x480 [ 234.921386][ T5617] ret_from_fork+0x514/0xb70 [ 234.926484][ T5617] ret_from_fork_asm+0x1a/0x30 [ 234.931758][ T5617] [ 234.931758][ T5617] -> #1 (&id_priv->handler_mutex){+.+.}-{4:4}: [ 234.940090][ T5617] __mutex_lock+0x19d/0x1550 [ 234.945215][ T5617] rdma_destroy_id+0x1b/0x30 [ 234.950315][ T5617] rds_ib_laddr_check+0x373/0x630 [ 234.955853][ T5617] rds_trans_get_preferred+0x179/0x3c0 [ 234.961817][ T5617] rds_bind+0x687/0x870 [ 234.966482][ T5617] __sys_bind+0x2e3/0x410 [ 234.971325][ T5617] __x64_sys_bind+0x7a/0x90 [ 234.976344][ T5617] do_syscall_64+0x166/0x520 [ 234.981449][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.987855][ T5617] [ 234.987855][ T5617] -> #0 (rds_trans_sem){++++}-{4:4}: [ 234.995333][ T5617] __lock_acquire+0x164c/0x2de0 [ 235.000703][ T5617] lock_acquire+0x115/0x350 [ 235.005723][ T5617] down_read+0x4a/0x330 [ 235.010394][ T5617] rds_trans_get_preferred+0x133/0x3c0 [ 235.016361][ T5617] __rds_conn_create+0xa2c/0x2290 [ 235.021896][ T5617] rds_conn_create+0x43/0x60 [ 235.026994][ T5617] rds_ib_cm_handle_connect+0x446/0x1120 [ 235.033139][ T5617] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 235.039636][ T5617] cma_cm_event_handler+0xac/0x2c0 [ 235.045257][ T5617] cma_ib_req_handler+0x3440/0x50d0 [ 235.050973][ T5617] cm_process_work+0x51/0x420 [ 235.056164][ T5617] cm_work_handler+0x96c3/0xdff0 [ 235.061616][ T5617] process_scheduled_works+0xc3d/0x1630 [ 235.067677][ T5617] worker_thread+0xa47/0xfb0 [ 235.072781][ T5617] kthread+0x38b/0x480 [ 235.077353][ T5617] ret_from_fork+0x514/0xb70 [ 235.082450][ T5617] ret_from_fork_asm+0x1a/0x30 [ 235.087717][ T5617] [ 235.087717][ T5617] other info that might help us debug this: [ 235.087717][ T5617] [ 235.097938][ T5617] Chain exists of: [ 235.097938][ T5617] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 235.097938][ T5617] [ 235.112369][ T5617] Possible unsafe locking scenario: [ 235.112369][ T5617] [ 235.119800][ T5617] CPU0 CPU1 [ 235.125144][ T5617] ---- ---- [ 235.130488][ T5617] lock(&id_priv->handler_mutex/1); [ 235.135792][ T5617] lock(&id_priv->handler_mutex); [ 235.143409][ T5617] lock(&id_priv->handler_mutex/1); [ 235.151211][ T5617] rlock(rds_trans_sem); [ 235.155534][ T5617] [ 235.155534][ T5617] *** DEADLOCK *** [ 235.155534][ T5617] [ 235.163655][ T5617] locks held by kworker/0:4/5617: 4, last CPU#0: [ 235.169961][ T5617] #0: ffff88803140f140 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 235.180870][ T5617] #1: ffffc900039afc40 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 235.193414][ T5617] #2: ffff88807e97f420 (&id_priv->handler_mutex){+.+.}-{4:4}, at: cma_ib_req_handler+0x2188/0x50d0 [ 235.204216][ T5617] #3: ffff8880563ea420 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2dd8/0x50d0 [ 235.215190][ T5617] [ 235.215190][ T5617] stack backtrace: [ 235.221065][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.231984][ T5617] Tainted: [L]=SOFTLOCKUP [ 235.236291][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 235.246350][ T5617] Workqueue: ib_cm cm_work_handler [ 235.251459][ T5617] Call Trace: [ 235.254723][ T5617] [ 235.257638][ T5617] dump_stack_lvl+0xe8/0x150 [ 235.262223][ T5617] print_circular_bug+0x2e2/0x300 [ 235.267247][ T5617] check_noncircular+0x12f/0x150 [ 235.272185][ T5617] __lock_acquire+0x164c/0x2de0 [ 235.277048][ T5617] lock_acquire+0x115/0x350 [ 235.281540][ T5617] ? rds_trans_get_preferred+0x133/0x3c0 [ 235.287165][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.292794][ T5617] down_read+0x4a/0x330 [ 235.296943][ T5617] ? rds_trans_get_preferred+0x133/0x3c0 [ 235.302564][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.308190][ T5617] rds_trans_get_preferred+0x133/0x3c0 [ 235.313643][ T5617] __rds_conn_create+0xa2c/0x2290 [ 235.318663][ T5617] ? __rds_conn_create+0x2d5/0x2290 [ 235.323860][ T5617] ? __pfx___rds_conn_create+0x10/0x10 [ 235.329312][ T5617] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 235.335458][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.341087][ T5617] ? arch_stack_walk+0x11b/0x150 [ 235.346032][ T5617] ? ret_from_fork_asm+0x1a/0x30 [ 235.350980][ T5617] rds_conn_create+0x43/0x60 [ 235.355570][ T5617] rds_ib_cm_handle_connect+0x446/0x1120 [ 235.361202][ T5617] ? xas_create+0x1941/0x1bd0 [ 235.365880][ T5617] ? __pfx_rds_ib_cm_handle_connect+0x10/0x10 [ 235.371946][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.377572][ T5617] ? __lock_acquire+0x1511/0x2de0 [ 235.382599][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.388227][ T5617] ? __xas_nomem+0xa4/0x420 [ 235.392730][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.398381][ T5617] ? __xa_alloc+0x199/0x220 [ 235.402885][ T5617] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 235.408888][ T5617] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 235.415383][ T5617] ? __entry_text_end+0x102035/0x102039 [ 235.420918][ T5617] ? trace_cm_event_handler+0x81/0x1f0 [ 235.426370][ T5617] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 235.432518][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.438148][ T5617] ? cma_listen_handler+0x100/0x160 [ 235.443357][ T5617] cma_cm_event_handler+0xac/0x2c0 [ 235.448463][ T5617] cma_ib_req_handler+0x3440/0x50d0 [ 235.453665][ T5617] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 235.459209][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.464828][ T5617] ? arch_stack_walk+0x11b/0x150 [ 235.469759][ T5617] ? ret_from_fork_asm+0x1a/0x30 [ 235.474772][ T5617] ? __pfx_stack_trace_save+0x10/0x10 [ 235.480147][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.485788][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.491410][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.497033][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.502664][ T5617] cm_process_work+0x51/0x420 [ 235.507341][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.512963][ T5617] ? _raw_spin_unlock_irq+0x2e/0x50 [ 235.518150][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.523778][ T5617] cm_work_handler+0x96c3/0xdff0 [ 235.528735][ T5617] ? __pfx_cm_work_handler+0x10/0x10 [ 235.534019][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.539642][ T5617] ? lock_acquire+0x115/0x350 [ 235.544313][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.549941][ T5617] ? rcu_is_watching+0x16/0xb0 [ 235.554703][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.560326][ T5617] ? process_scheduled_works+0x97a/0x1630 [ 235.566056][ T5617] process_scheduled_works+0xc3d/0x1630 [ 235.571597][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.577234][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.583215][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.588840][ T5617] ? assign_work+0x3cf/0x5d0 [ 235.593426][ T5617] worker_thread+0xa47/0xfb0 [ 235.598013][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.603642][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.609266][ T5617] ? __kthread_parkme+0x71/0x1f0 [ 235.614205][ T5617] kthread+0x38b/0x480 [ 235.618263][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 235.623369][ T5617] ? __pfx_kthread+0x10/0x10 [ 235.627965][ T5617] ret_from_fork+0x514/0xb70 [ 235.632546][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 235.637641][ T5617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 235.643282][ T5617] ? __switch_to+0xc89/0x1420 [ 235.647962][ T5617] ? __pfx_kthread+0x10/0x10 [ 235.652539][ T5617] ret_from_fork_asm+0x1a/0x30 [ 235.657305][ T5617] [ 235.680753][ T29] usb 8-1: selecting invalid altsetting 0 [ 235.680779][ T29] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 235.682951][ T29] usb 8-1: USB disconnect, device number 5 [ 235.768511][ T5617] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 235.768805][ T5731] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 236.116794][ T5750] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 236.128459][ T5750] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 236.319161][ T5750] usb 7-1: USB disconnect, device number 10 [ 236.371144][ T5750] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected