last executing test programs: 2m55.066136118s ago: executing program 0 (id=1703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}}, 0x0) 2m54.97863795s ago: executing program 0 (id=1704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a00060000000200000004000480"], 0x78}}, 0x0) 2m54.916705553s ago: executing program 0 (id=1706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4008800}, 0x40800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) 2m54.760160449s ago: executing program 0 (id=1708): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x40002, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 2m54.400081503s ago: executing program 0 (id=1714): syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) 2m53.483680266s ago: executing program 0 (id=1727): syz_mount_image$jfs(&(0x7f0000005a80), &(0x7f0000000000)='./bus\x00', 0x1200016, &(0x7f0000000100)={[{@nointegrity}, {@grpquota}, {@noquota}, {@errors_continue}, {@gid}, {@nointegrity}, {}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@errors_continue}, {@nointegrity}]}, 0x24, 0x628f, &(0x7f00000065c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1094c3, 0x0, 0x0, 0x0, &(0x7f0000000000)) 2m43.738933904s ago: executing program 1 (id=1799): write(0xffffffffffffffff, &(0x7f0000000040)="2610d745a46aa6cbfd", 0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c0006000100000001"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) 2m43.293398542s ago: executing program 1 (id=1801): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x9) 2m41.285306486s ago: executing program 1 (id=1817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 2m41.091431079s ago: executing program 1 (id=1818): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001100010000ff0f000000000007000000", @ANYRES32=r1, @ANYBLOB="80010000091004000c001a800800058004000480"], 0x2c}}, 0x0) 2m40.615142681s ago: executing program 1 (id=1822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) 2m40.363233385s ago: executing program 1 (id=1825): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='br', 0x2) 2m25.178696431s ago: executing program 32 (id=1825): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='br', 0x2) 1m36.227110737s ago: executing program 5 (id=2451): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1m35.33350628s ago: executing program 5 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x0) 1m35.146442933s ago: executing program 5 (id=2463): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x48, 0x9, 0x7, 0x2}, {0x6, 0x8, 0xef}]}) write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2) 1m34.859345897s ago: executing program 5 (id=2466): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x4, 0x8) 1m34.573316624s ago: executing program 5 (id=2470): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m34.479017592s ago: executing program 5 (id=2472): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x2, 0xfffffffc, 0x0, 0x7, 0x4}) r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x6000) epoll_create(0x1) 1m19.394813374s ago: executing program 33 (id=2472): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x2, 0xfffffffc, 0x0, 0x7, 0x4}) r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x6000) epoll_create(0x1) 43.470589189s ago: executing program 3 (id=2881): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002240)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000002200)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x2000000a}}, 0x10) close_range(r0, r0, 0x0) 43.328037066s ago: executing program 3 (id=2883): r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) ftruncate(r0, 0xfbff) fcntl$addseals(r0, 0x409, 0x7) fallocate(r0, 0x0, 0xb48, 0x6) 43.24020471s ago: executing program 3 (id=2884): unshare(0x6020400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4004af07, &(0x7f0000000740)) 43.125814696s ago: executing program 3 (id=2887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 42.962302475s ago: executing program 3 (id=2888): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000003700)={0x60, 0x0, r1, {{0x7, 0x1ba, 0x6, 0x3, 0x5, 0x0, 0x10000, 0x171e1e84}}}, 0x60) io_setup(0x3fd, 0x0) 42.914839286s ago: executing program 3 (id=2889): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10 ', 0x3) 27.687486801s ago: executing program 34 (id=2889): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10 ', 0x3) 1.031396905s ago: executing program 4 (id=3135): syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 703.292138ms ago: executing program 2 (id=3138): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x1, 0x267, &(0x7f0000000e80)="$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") ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x0, 0x0, 0x1, 0x20000001}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 669.480934ms ago: executing program 4 (id=3139): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) 545.66327ms ago: executing program 2 (id=3140): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x2977e644, "f1f813ba800ffb526103eefd9658a5092152da166900a9057729d9374fa8b698"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"}) 489.558754ms ago: executing program 4 (id=3141): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xc8040, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000000200)="92", 0x1}) 380.77028ms ago: executing program 4 (id=3142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000") 353.211074ms ago: executing program 2 (id=3143): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10002, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x30886b, 0x0) 255.745056ms ago: executing program 2 (id=3144): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5e, 0x400) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 248.93375ms ago: executing program 4 (id=3145): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 130.347551ms ago: executing program 2 (id=3146): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 82.260437ms ago: executing program 4 (id=3147): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x545c, &(0x7f00000000c0)) 0s ago: executing program 2 (id=3148): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) kernel console output (not intermixed with test programs): s (loop5): Directory bread(block 1049) failed [ 306.978741][T11683] FAT-fs (loop5): Directory bread(block 1050) failed [ 306.978766][T11683] FAT-fs (loop5): Directory bread(block 1051) failed [ 306.978792][T11683] FAT-fs (loop5): Directory bread(block 1052) failed [ 306.978818][T11683] FAT-fs (loop5): Directory bread(block 1053) failed [ 306.978845][T11683] FAT-fs (loop5): Directory bread(block 1054) failed [ 306.978871][T11683] FAT-fs (loop5): Directory bread(block 1055) failed [ 307.042320][ T5751] usb 3-1: USB disconnect, device number 17 [ 307.424715][T11691] vlan4: entered promiscuous mode [ 307.424742][T11691] bond0: entered promiscuous mode [ 307.424758][T11691] bond_slave_0: entered promiscuous mode [ 307.427073][T11691] bond_slave_1: entered promiscuous mode [ 307.650579][T11697] kAFS: Invalid Command on /proc/fs/afs/cells file [ 308.269225][T11728] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 308.679178][T11719] loop3: detected capacity change from 0 to 32768 [ 308.690984][T11719] BTRFS warning: excessive commit interval 3581, use with care [ 308.701020][T11719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2245 (11719) [ 308.737865][T11719] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.737901][T11719] BTRFS info (device loop3): using crc32c checksum algorithm [ 308.837562][T11747] gretap0: entered promiscuous mode [ 308.878283][T11719] BTRFS info (device loop3): enabling ssd optimizations [ 308.878313][T11719] BTRFS info (device loop3): turning on flush-on-commit [ 308.878333][T11719] BTRFS info (device loop3): enabling free space tree [ 308.878354][T11719] BTRFS info (device loop3): force zlib compression, level 3 [ 308.878378][T11719] BTRFS info (device loop3): max_inline set to 4096 [ 309.145340][ T5628] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 309.167746][T11767] loop5: detected capacity change from 0 to 1024 [ 309.190816][T11767] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 309.751925][ T30] audit: type=1326 audit(1790289523.734:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.752078][ T30] audit: type=1326 audit(1790289523.734:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.778254][ T30] audit: type=1326 audit(1790289523.744:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.778309][ T30] audit: type=1326 audit(1790289523.744:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.778359][ T30] audit: type=1326 audit(1790289523.744:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.778409][ T30] audit: type=1326 audit(1790289523.744:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.778458][ T30] audit: type=1326 audit(1790289523.744:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.778507][ T30] audit: type=1326 audit(1790289523.744:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.778556][ T30] audit: type=1326 audit(1790289523.744:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 309.778607][ T30] audit: type=1326 audit(1790289523.744:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.5.2260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 310.090831][T11786] loop5: detected capacity change from 0 to 512 [ 310.112738][T11786] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 310.136993][T11786] EXT4-fs (loop5): 1 truncate cleaned up [ 310.148906][T11786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.241573][T11768] loop2: detected capacity change from 0 to 32768 [ 310.260388][T11768] (syz.2.2258,11768,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 310.269630][T11768] (syz.2.2258,11768,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 310.321010][T11768] JBD2: Ignoring recovery information on journal [ 310.354070][T11786] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6542: inode #12: comm syz.5.2262: bad extra_isize 62 (inode size 256) [ 310.379163][T11786] EXT4-fs (loop5): Remounting filesystem read-only [ 310.452831][T11768] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 310.611425][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.841645][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 310.926942][T11803] (syz.2.2258,11803,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 311.015492][T11805] hugetlbfs: syz.5.2265 (11805): Using mlock ulimits for SHM_HUGETLB is obsolete [ 311.242720][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.253466][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.269746][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.281992][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.289952][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.340828][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.355411][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.355740][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.356699][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.357725][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.609801][ T5624] ocfs2: Unmounting device (7,2) on (node local) [ 312.420519][T11848] loop5: detected capacity change from 0 to 2048 [ 312.479209][T11848] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 312.498375][T11848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.205861][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2283'. [ 313.205897][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2283'. [ 313.207693][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2283'. [ 313.207717][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2283'. [ 313.407968][ T5633] Bluetooth: hci7: command tx timeout [ 313.885983][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.886177][T11807] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.886360][T11807] bridge_slave_0: entered allmulticast mode [ 313.896827][T11807] bridge_slave_0: entered promiscuous mode [ 313.914958][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.916733][T11807] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.918506][T11807] bridge_slave_1: entered allmulticast mode [ 313.926711][T11807] bridge_slave_1: entered promiscuous mode [ 314.191493][T11807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.227350][T11807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.319146][T11912] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.407723][T11807] team0: Port device team_slave_0 added [ 314.421829][T11807] team0: Port device team_slave_1 added [ 314.519226][T11904] loop5: detected capacity change from 0 to 32768 [ 314.542583][ T5751] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 314.566004][T11807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.566022][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.566057][T11807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.568148][T11807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.568164][T11807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.568193][T11807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.587916][T11904] non-latin1 character 0x466c found in JFS file name [ 314.587934][T11904] mount with iocharset=utf8 to access [ 314.686274][T11918] loop4: detected capacity change from 0 to 512 [ 314.717251][T11918] EXT4-fs (loop4): orphan cleanup on readonly fs [ 314.717848][T11918] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 1: comm syz.4.2301: invalid block [ 314.717879][T11918] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 314.718323][T11918] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2301: couldn't read orphan inode 11 (err -117) [ 314.718355][T11918] loop4: lost filesystem error report for type 5 error -117 [ 314.731774][T11918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 314.784664][ T5751] usb 3-1: unable to get BOS descriptor or descriptor too short [ 314.784718][ T5751] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 314.785749][ T5751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.787552][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 314.787578][ T5751] usb 3-1: Product: syz [ 314.787599][ T5751] usb 3-1: Manufacturer: syz [ 314.864865][ T5751] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 314.911897][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.920132][T11807] hsr_slave_0: entered promiscuous mode [ 314.950640][T11807] hsr_slave_1: entered promiscuous mode [ 314.951609][T11807] debugfs: 'hsr0' already exists in 'hsr' [ 314.951632][T11807] Cannot create hsr debugfs directory [ 315.277408][ T5751] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 315.337159][ T5751] videodev: could not get a free minor [ 315.337197][ T5751] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23). [ 315.482743][ T5633] Bluetooth: hci7: command tx timeout [ 315.499357][ T5751] usb 3-1: USB disconnect, device number 18 [ 316.279130][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 316.279153][ T30] audit: type=1326 audit(1790289530.264:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.279312][ T30] audit: type=1326 audit(1790289530.264:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.344407][ T30] audit: type=1326 audit(1790289530.334:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.350920][ T30] audit: type=1326 audit(1790289530.334:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.363064][ T30] audit: type=1326 audit(1790289530.344:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.363141][ T30] audit: type=1326 audit(1790289530.344:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.363190][ T30] audit: type=1326 audit(1790289530.344:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.432425][ T30] audit: type=1326 audit(1790289530.414:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.432797][ T30] audit: type=1326 audit(1790289530.424:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.438767][ T30] audit: type=1326 audit(1790289530.424:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11956 comm="syz.5.2318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb55119e159 code=0x7ffc0000 [ 316.452930][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.452988][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.906145][T11977] loop3: detected capacity change from 0 to 128 [ 317.148033][T11984] usbcore.quirks: string doesn't fit in 127 chars. [ 317.205366][T11987] bonding: bond0 is being created... [ 317.289183][T11987] bonding: bond0 already exists [ 317.563372][ T5633] Bluetooth: hci7: command tx timeout [ 317.755813][T12004] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.927461][T12010] loop4: detected capacity change from 0 to 128 [ 318.002041][T12010] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.004852][T12010] ext4 filesystem being mounted at /424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 318.120046][T11996] loop3: detected capacity change from 0 to 32768 [ 318.134914][T11996] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2337 (11996) [ 318.143992][T11996] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 318.144025][T11996] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 318.271115][ T5625] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.340288][T11996] BTRFS info (device loop3): enabling ssd optimizations [ 318.340320][T11996] BTRFS info (device loop3): turning on async discard [ 318.340339][T11996] BTRFS info (device loop3): enabling free space tree [ 318.411675][T12032] profile_transition: unconfined exec no attachment [ 318.659897][ T5628] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 318.727884][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 318.727943][T12037] netlink: 'syz.4.2348': attribute type 25 has an invalid length. [ 318.727960][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 318.799720][T12039] loop5: detected capacity change from 0 to 512 [ 318.893855][T12039] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.2350: bg 0: block 393: padding at end of block bitmap is not set [ 318.893895][T12039] loop5: lost filesystem error report for type 5 error -117 [ 318.901417][T12039] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 318.901443][T12039] loop5: lost filesystem error report for type 5 error -117 [ 318.902530][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 318.902552][ C0] EXT4-fs (loop5): initial error at time 1790289532: ext4_validate_block_bitmap:445 [ 318.902580][ C0] EXT4-fs (loop5): last error at time 1790289532: ext4_mb_clear_bb:6680 [ 318.908684][T12039] EXT4-fs (loop5): 2 truncates cleaned up [ 318.919132][T12039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.086066][T12042] loop2: detected capacity change from 0 to 4096 [ 319.088871][T12042] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 319.207214][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.236373][T12042] ntfs3(loop2): ino=19, mi_enum_attr [ 319.236404][T12042] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 319.240241][T12042] ntfs3(loop2): ino=1a, mi_enum_attr [ 319.240381][T12042] ntfs3(loop2): ino=1a, mi_enum_attr [ 319.240400][T12042] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 319.437866][T12047] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 319.642980][ T5633] Bluetooth: hci7: command tx timeout [ 320.867086][T12099] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 320.909543][T12103] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2374'. [ 320.938459][T12101] profile_transition: unconfined exec no attachment [ 321.434795][T12120] loop5: detected capacity change from 0 to 128 [ 321.471490][T12120] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 321.471540][T12120] hpfs: filesystem error: improperly stopped [ 321.471557][T12120] hpfs: You really don't want any checks? You are crazy... [ 321.471905][T12120] hpfs: hpfs_map_sector(): read error [ 321.471917][T12120] hpfs: code page support is disabled [ 321.472013][T12120] hpfs: hpfs_map_4sectors(): unaligned read [ 321.472080][T12120] hpfs: hpfs_map_4sectors(): unaligned read [ 321.472091][T12120] hpfs: filesystem error: unable to find root dir [ 321.497880][T12120] hpfs: hpfs_map_4sectors(): unaligned read [ 321.508816][T12120] hpfs: hpfs_map_sector(): read error [ 321.558436][T12122] loop4: detected capacity change from 0 to 64 [ 321.992901][ T938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 322.142560][ T938] usb 5-1: Using ep0 maxpacket: 16 [ 322.143278][ T938] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 322.144317][ T938] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 322.144346][ T938] usb 5-1: config 0 has no interface number 0 [ 322.146801][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.146827][ T938] usb 5-1: Product: syz [ 322.146844][ T938] usb 5-1: Manufacturer: syz [ 322.146860][ T938] usb 5-1: SerialNumber: syz [ 322.207628][ T938] usb 5-1: config 0 descriptor?? [ 322.209910][ T938] hub 5-1:0.132: bad descriptor, ignoring hub [ 322.209936][ T938] hub 5-1:0.132: probe with driver hub failed with error -5 [ 322.241116][ T938] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input27 [ 323.613320][T12187] loop5: detected capacity change from 0 to 512 [ 323.616496][T12187] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.517936][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 324.517958][ T30] audit: type=1807 audit(1790289538.504:225): UNKNOWN=easure res=0 [ 324.518645][ T30] audit: type=1802 audit(1790289538.504:226): pid=12217 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=update_policy cause=invalid-policy comm="syz.2.2426" res=0 errno=0 [ 324.519046][T12216] ima: policy update failed [ 324.519278][ T30] audit: type=1802 audit(1790289538.504:227): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.2.2426" res=0 errno=0 [ 324.682986][ T5751] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 324.737597][T12221] use of bytesused == 0 is deprecated and will be removed in the future, [ 324.737617][T12221] use the actual size instead. [ 324.785698][T12208] loop4: detected capacity change from 0 to 32768 [ 324.817330][T12208] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 324.835649][ T5751] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 324.836966][ T5751] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.837000][ T5751] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.837031][ T5751] usb 6-1: config 0 interface 0 has no altsetting 0 [ 324.837068][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.882576][T12208] XFS (loop4): Ending clean mount [ 324.899762][ T5751] usb 6-1: config 0 descriptor?? [ 325.135782][ T5751] usbhid 6-1:0.0: can't add hid device: -71 [ 325.135896][ T5751] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 325.160634][ T5751] usb 6-1: USB disconnect, device number 17 [ 325.253496][ T5625] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 325.642984][ T5751] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 325.645376][T12249] loop3: detected capacity change from 0 to 512 [ 325.802949][ T5751] usb 3-1: Using ep0 maxpacket: 8 [ 325.804981][ T5751] usb 3-1: New USB device found, idVendor=0079, idProduct=1942, bcdDevice=28.1e [ 325.806193][ T5751] usb 3-1: config 249 has an invalid interface number: 214 but max is 0 [ 325.806221][ T5751] usb 3-1: config 249 has no interface number 0 [ 325.806265][ T5751] usb 3-1: config 249 interface 214 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 325.806298][ T5751] usb 3-1: config 249 interface 214 has no altsetting 0 [ 325.862419][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.862449][ T5751] usb 3-1: Product: syz [ 325.875189][ T5751] usb 3-1: Manufacturer: syz [ 325.875210][ T5751] usb 3-1: SerialNumber: syz [ 326.028300][ T5844] usb 5-1: USB disconnect, device number 11 [ 326.133762][ T5751] usb 3-1: USB disconnect, device number 19 [ 326.983506][T12269] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.990847][T12269] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.099614][T12269] tipc: Resetting bearer [ 327.112227][T12269] tipc: Resetting bearer [ 327.894634][T12299] sctp: [Deprecated]: syz.4.2459 (pid 12299) Use of int in maxseg socket option. [ 327.894634][T12299] Use struct sctp_assoc_value instead [ 328.482759][T12311] loop3: detected capacity change from 0 to 2048 [ 328.527655][T12311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.527755][T12311] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.546096][ T5633] Bluetooth: hci0: Zero size dump init pkt [ 328.854983][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.184277][T12335] loop2: detected capacity change from 0 to 1024 [ 329.188325][T12335] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 329.473813][T12341] loop2: detected capacity change from 0 to 64 [ 329.502001][T12341] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 329.635645][ T5844] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 329.785465][ T5844] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 329.787689][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 329.787720][ T5844] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 329.787770][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.818551][ T5844] usb 5-1: probing VID:PID(0424:012C) [ 329.827391][ T5844] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 329.827417][ T5844] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 329.827439][ T5844] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 329.827460][ T5844] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 329.827481][ T5844] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 330.235445][ T5844] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 330.355919][T12349] input: syz1 as /devices/virtual/input/input28 [ 330.454047][ T5844] vub300 5-1:1.0: probe with driver vub300 failed with error -22 [ 330.648513][ T5844] usb 5-1: USB disconnect, device number 12 [ 331.324278][T12367] loop4: detected capacity change from 0 to 512 [ 331.349877][T12367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.349974][T12367] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.412356][T12367] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #2: comm syz.4.2491: corrupted inode contents [ 331.429515][T12367] EXT4-fs (loop4): Remounting filesystem read-only [ 331.433887][ T5751] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 331.508237][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.584265][ T5751] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 331.584314][ T5751] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 331.585542][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.585593][ T5751] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.585623][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.586698][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.586751][ T5751] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.586783][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.587878][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.587927][ T5751] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.587956][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.588922][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.588968][ T5751] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.588997][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.590402][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.590450][ T5751] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.590479][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.636979][ T59] bond0: (slave bond_slave_0): interface is now down [ 331.637008][ T59] bond0: (slave bond_slave_1): interface is now down [ 331.710557][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.710614][ T5751] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.710644][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.738409][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.738463][ T5751] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.738494][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.743483][ T13] bond0: (slave bond_slave_0): interface is now down [ 331.743506][ T13] bond0: (slave bond_slave_1): interface is now down [ 331.760856][ T5751] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.760905][ T5751] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 331.760932][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.831081][ T5751] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 331.831113][ T5751] usb 4-1: Product: syz [ 331.831130][ T5751] usb 4-1: Manufacturer: syz [ 331.831147][ T5751] usb 4-1: SerialNumber: syz [ 331.838405][ T13] bond0: now running without any active interface! [ 331.912884][ T5751] usb 4-1: config 0 descriptor?? [ 331.934998][ T5751] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 332.135442][ T5751] usb 4-1: USB disconnect, device number 18 [ 332.150887][ T5751] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 332.459361][T12381] loop2: detected capacity change from 0 to 32768 [ 332.501411][T12381] find_entry called with index = 0 [ 332.501726][T12381] read_mapping_page failed! [ 332.501745][T12381] ERROR: (device loop2): txCommit: [ 332.501745][T12381] [ 333.061799][T12391] erspan0: entered promiscuous mode [ 333.095510][T12393] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2503'. [ 333.340814][T12387] loop4: detected capacity change from 0 to 32768 [ 333.381115][T12387] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 333.456453][T12387] XFS (loop4): Ending clean mount [ 333.491738][T12409] loop3: detected capacity change from 0 to 16 [ 333.531966][T12409] erofs (device loop3): mounted with root inode @ nid 36. [ 333.569468][T12409] syz.3.2506: attempt to access beyond end of device [ 333.569468][T12409] loop3: rw=8912896, sector=68719476744, nr_sectors = 32 limit=16 [ 333.602402][T12409] syz.3.2506: attempt to access beyond end of device [ 333.602402][T12409] loop3: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16 [ 333.618808][ T30] audit: type=1800 audit(1790289547.604:228): pid=12409 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2506" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 333.647498][T12387] XFS (loop4): User initiated shutdown received. [ 333.647558][T12387] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458). Shutting down filesystem. [ 333.647612][T12387] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 333.710652][ T5625] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 335.215400][T12435] loop2: detected capacity change from 0 to 256 [ 335.241151][T12435] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 335.241652][T12435] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 335.944785][T12431] loop4: detected capacity change from 0 to 131072 [ 335.966562][T12431] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 335.966589][T12431] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 335.966616][T12431] F2FS-fs (loop4): Test dummy encryption mode enabled [ 335.967571][T12431] F2FS-fs (loop4): invalid crc value [ 336.063126][T12431] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 336.065643][T12431] loop4: lost filesystem error report for type 5 error -117 [ 336.075335][T12431] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 336.090349][T12431] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 336.090376][T12431] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 336.090404][T12431] F2FS-fs (loop4): Start checkpoint disabled! [ 336.100532][T12431] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 336.108153][T12431] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 336.108178][T12431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 337.648213][T12464] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2530'. [ 337.803013][T12466] UHID_CREATE from different security context by process 1057 (syz.3.2531), this is not allowed. [ 338.127927][T12476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2535'. [ 338.127956][T12476] netlink: 'syz.2.2535': attribute type 1 has an invalid length. [ 338.231747][T12479] profile_transition: unconfined exec no attachment [ 338.506893][T12488] loop2: detected capacity change from 0 to 16 [ 338.527509][T12488] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 338.657240][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 338.662902][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 338.675324][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 338.689275][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 338.704722][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 338.740032][T12492] profile_transition: unconfined exec no attachment [ 338.778945][T12493] profile_transition: unconfined exec no attachment [ 338.816636][T12494] profile_transition: unconfined exec no attachment [ 338.881782][T12499] profile_transition: unconfined exec no attachment [ 339.059538][T12503] profile_transition: unconfined exec no attachment [ 339.234526][T12508] profile_transition: unconfined exec no attachment [ 339.301971][T12509] profile_transition: unconfined exec no attachment [ 339.490688][T12513] profile_transition: unconfined exec no attachment [ 339.599255][T12516] loop4: detected capacity change from 0 to 1024 [ 339.907265][T12523] profile_transition: unconfined exec no attachment [ 340.762987][ T5633] Bluetooth: hci8: command tx timeout [ 340.897345][T12490] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.898015][T12490] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.898155][T12490] bridge_slave_0: entered allmulticast mode [ 340.904371][T12490] bridge_slave_0: entered promiscuous mode [ 340.910089][T12490] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.910204][T12490] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.918684][T12490] bridge_slave_1: entered allmulticast mode [ 340.922110][T12490] bridge_slave_1: entered promiscuous mode [ 341.009862][T12490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.016616][T12490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.110698][T12490] team0: Port device team_slave_0 added [ 341.121968][T12490] team0: Port device team_slave_1 added [ 341.230567][T12490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.230588][T12490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.230619][T12490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.240225][T12490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.240241][T12490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.240271][T12490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.437454][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 341.619338][T12490] hsr_slave_0: entered promiscuous mode [ 341.620476][T12490] hsr_slave_1: entered promiscuous mode [ 341.624431][T12490] debugfs: 'hsr0' already exists in 'hsr' [ 341.624452][T12490] Cannot create hsr debugfs directory [ 341.822684][T12560] netlink: 'syz.4.2564': attribute type 22 has an invalid length. [ 341.825074][T12560] netlink: 'syz.4.2564': attribute type 22 has an invalid length. [ 341.825096][T12560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2564'. [ 342.242845][ T3210] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 342.392891][ T3210] usb 3-1: Using ep0 maxpacket: 32 [ 342.393617][ T3210] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 342.395824][ T3210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.402327][ T3210] usb 3-1: config 0 descriptor?? [ 342.442531][ T3210] gspca_main: sunplus-2.14.0 probing 041e:400b [ 342.537609][ T30] audit: type=1326 audit(1790289556.524:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.537877][ T30] audit: type=1326 audit(1790289556.524:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.549918][ T30] audit: type=1326 audit(1790289556.534:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.551920][ T30] audit: type=1326 audit(1790289556.534:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.553756][ T30] audit: type=1326 audit(1790289556.544:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.555055][ T30] audit: type=1326 audit(1790289556.544:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.555303][ T30] audit: type=1326 audit(1790289556.544:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.559447][ T30] audit: type=1326 audit(1790289556.544:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.559501][ T30] audit: type=1326 audit(1790289556.544:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.560713][ T30] audit: type=1326 audit(1790289556.544:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=12578 comm="syz.3.2573" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb1c199e159 code=0x7ffc0000 [ 342.843084][ T5633] Bluetooth: hci8: command tx timeout [ 343.402791][ T3210] gspca_sunplus: reg_w_riv err -71 [ 343.402883][ T3210] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 343.408069][ T3210] usb 3-1: USB disconnect, device number 20 [ 343.878368][T12607] profile_transition: 4 callbacks suppressed [ 343.878389][T12607] profile_transition: unconfined exec no attachment [ 344.102358][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 344.111328][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 344.114979][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 344.136896][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 344.137596][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 344.181368][T12615] profile_transition: unconfined exec no attachment [ 344.399337][T12624] profile_transition: unconfined exec no attachment [ 344.504988][T12628] profile_transition: unconfined exec no attachment [ 344.628203][T12631] profile_transition: unconfined exec no attachment [ 344.790774][T12633] Bluetooth: MGMT ver 1.23 [ 344.791560][T12633] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 344.808908][T12638] profile_transition: unconfined exec no attachment [ 344.815286][T12637] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 344.933369][ T5633] Bluetooth: hci8: command tx timeout [ 344.938779][T12639] profile_transition: unconfined exec no attachment [ 345.004527][T12642] profile_transition: unconfined exec no attachment [ 345.062697][T12647] profile_transition: unconfined exec no attachment [ 345.149263][ T1020] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.224694][T12651] loop4: detected capacity change from 0 to 128 [ 345.252926][T12651] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 345.252954][T12651] FAT-fs (loop4): Filesystem has been set read-only [ 345.314706][T12653] lwtunnel_output(): recursion limit reached on datapath [ 345.467854][ T1020] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.709139][ T1020] team0: Port device netdevsim1 removed [ 345.713563][ T1020] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.813026][ T1020] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.008881][T12681] profile_transition: unconfined exec no attachment [ 346.035953][T12679] loop3: detected capacity change from 0 to 2048 [ 346.078965][T12680] loop2: detected capacity change from 0 to 4096 [ 346.081123][T12679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 346.120614][T12685] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.149675][T12679] EXT4-fs (loop3): shut down requested (1) [ 346.203367][ T5633] Bluetooth: hci9: command tx timeout [ 346.276881][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 346.556509][T12692] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2617'. [ 346.594799][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2617'. [ 346.675422][ T1020] bridge_slave_1: left allmulticast mode [ 346.675454][ T1020] bridge_slave_1: left promiscuous mode [ 346.675671][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.696406][ T1020] bridge_slave_0: left allmulticast mode [ 346.696430][ T1020] bridge_slave_0: left promiscuous mode [ 346.699087][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.885077][T12700] loop2: detected capacity change from 0 to 1024 [ 346.922433][T12700] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 346.932275][T12700] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 346.950156][T12700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.002610][ T5633] Bluetooth: hci8: command tx timeout [ 347.070423][T12700] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 347.270769][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.607557][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.612344][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.622995][T12726] loop4: detected capacity change from 0 to 2048 [ 347.647109][ T1020] bond0 (unregistering): Released all slaves [ 347.678628][T12702] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2619'. [ 347.709867][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 347.908928][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.909044][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.909181][T12612] bridge_slave_0: entered allmulticast mode [ 347.943167][T12612] bridge_slave_0: entered promiscuous mode [ 347.953316][T12612] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.954998][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.955142][T12612] bridge_slave_1: entered allmulticast mode [ 347.958737][T12612] bridge_slave_1: entered promiscuous mode [ 347.972717][T12732] ALSA: mixer_oss: invalid OSS volume '' [ 347.973646][T12732] ALSA: mixer_oss: invalid OSS volume '' [ 348.117442][T12736] loop3: detected capacity change from 0 to 128 [ 348.204195][T12612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.222418][T12612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.267944][T12738] loop2: detected capacity change from 0 to 4096 [ 348.282748][ T5633] Bluetooth: hci9: command tx timeout [ 348.291227][T12738] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 348.308440][T12736] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 348.308948][T12736] ext4 filesystem being mounted at /523/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 348.445361][T12738] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 348.449157][T12738] ntfs3(loop2): ino=1a, mi_enum_attr [ 348.449349][T12738] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 348.506220][T12612] team0: Port device team_slave_0 added [ 348.576928][T12612] team0: Port device team_slave_1 added [ 348.585028][T12738] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 348.644935][T12736] overlayfs: upper fs needs to support d_type. [ 348.762710][ T1020] hsr_slave_0: left promiscuous mode [ 348.766600][ T1020] hsr_slave_1: left promiscuous mode [ 348.767685][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.767715][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.775123][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.775144][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.899421][T12756] profile_transition: 15 callbacks suppressed [ 348.899443][T12756] profile_transition: unconfined exec no attachment [ 348.927616][ T1020] veth1_macvtap: left promiscuous mode [ 348.927656][ T1020] veth0_macvtap: left promiscuous mode [ 348.927839][ T1020] veth1_vlan: left promiscuous mode [ 348.927917][ T1020] veth0_vlan: left promiscuous mode [ 348.996336][T12759] profile_transition: unconfined exec no attachment [ 349.006778][ T5628] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.054365][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 349.054403][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 349.205583][T12761] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 350.331244][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 350.366830][ T5633] Bluetooth: hci9: command tx timeout [ 350.380520][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 350.391577][T12776] loop2: detected capacity change from 0 to 256 [ 350.587686][T12778] loop2: detected capacity change from 0 to 64 [ 350.788101][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 350.800924][T12612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.800940][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.800971][T12612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.857688][T12612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.857713][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.857745][T12612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.990002][T12784] profile_transition: unconfined exec no attachment [ 351.116059][T12789] profile_transition: unconfined exec no attachment [ 351.199107][T12612] hsr_slave_0: entered promiscuous mode [ 351.205019][T12612] hsr_slave_1: entered promiscuous mode [ 351.205809][T12612] debugfs: 'hsr0' already exists in 'hsr' [ 351.205828][T12612] Cannot create hsr debugfs directory [ 351.467089][T12796] profile_transition: unconfined exec no attachment [ 351.512081][T12795] loop4: detected capacity change from 0 to 512 [ 351.661713][T12798] profile_transition: unconfined exec no attachment [ 351.676546][T12795] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 351.772993][T12802] profile_transition: unconfined exec no attachment [ 351.965952][T12807] profile_transition: unconfined exec no attachment [ 352.228249][T12813] profile_transition: unconfined exec no attachment [ 352.405451][T12819] profile_transition: unconfined exec no attachment [ 352.445288][ T52] Bluetooth: hci9: command tx timeout [ 352.614939][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 352.840242][T12826] loop4: detected capacity change from 0 to 512 [ 353.907122][T12862] profile_transition: 7 callbacks suppressed [ 353.907144][T12862] profile_transition: unconfined exec no attachment [ 354.108642][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 354.145285][T12867] profile_transition: unconfined exec no attachment [ 354.294027][T12872] profile_transition: unconfined exec no attachment [ 354.392622][ T5845] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 354.448400][T12876] profile_transition: unconfined exec no attachment [ 354.542980][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 354.544305][ T5845] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 354.550854][ T5845] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 354.550882][ T5845] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 354.550909][ T5845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 354.569744][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.569772][ T5845] usb 4-1: Product: syz [ 354.569790][ T5845] usb 4-1: Manufacturer: syz [ 354.569807][ T5845] usb 4-1: SerialNumber: syz [ 354.583361][ T5845] usb 4-1: config 0 descriptor?? [ 354.633156][T12877] profile_transition: unconfined exec no attachment [ 354.845291][T12879] loop2: detected capacity change from 0 to 64 [ 355.033304][ T5845] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 355.157278][T12881] loop4: detected capacity change from 0 to 764 [ 355.172407][T12881] iso9660: Bad value for 'dmode' [ 355.227521][T12881] ip6gre1: entered promiscuous mode [ 355.227548][T12881] ip6gre1: entered allmulticast mode [ 355.276806][ T5845] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 355.303427][ T5845] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 355.407673][ T938] hid-generic 0005:0008:0009.001D: item fetching failed at offset 0/1 [ 355.433093][ T938] hid-generic 0005:0008:0009.001D: probe with driver hid-generic failed with error -22 [ 355.447422][ T5845] usb 4-1: USB disconnect, device number 19 [ 355.627793][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 355.627816][ T30] audit: type=1800 audit(1790289569.614:249): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.2681" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 356.204397][ T1020] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.204836][ T1020] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.233974][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.322859][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.405182][T12921] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 356.460238][T12924] profile_transition: unconfined exec no attachment [ 356.539677][T12926] profile_transition: unconfined exec no attachment [ 356.754109][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.803171][T12930] loop3: detected capacity change from 0 to 1024 [ 356.807050][T12930] EXT4-fs: Ignoring removed bh option [ 356.878026][T12930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.915873][T12930] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz.3.2695: path /538/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 356.918345][T12930] EXT4-fs (loop3): Remounting filesystem read-only [ 356.983805][ T5628] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.179782][T12938] loop2: detected capacity change from 0 to 131072 [ 358.181807][T12938] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 358.181833][T12938] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 358.181860][T12938] F2FS-fs (loop2): Test dummy encryption mode enabled [ 358.184803][T12938] F2FS-fs (loop2): invalid crc value [ 358.253345][T12938] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 358.253401][T12938] loop2: lost filesystem error report for type 5 error -117 [ 358.272797][T12938] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 358.279643][T12938] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 358.279669][T12938] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 358.279697][T12938] F2FS-fs (loop2): Start checkpoint disabled! [ 358.287132][T12938] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 358.315568][T12938] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 358.315594][T12938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 358.353755][T12938] F2FS-fs (loop2): truncate node fail, ino:8, nid:512, offset[0]:928, offset[1]:0, nofs:2041 [ 358.611788][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2701'. [ 358.922839][ T938] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 359.072692][ T938] usb 5-1: Using ep0 maxpacket: 16 [ 359.073521][ T938] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 359.074808][ T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.074855][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.074886][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 359.074911][ T938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 359.074937][ T938] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.075986][ T938] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 359.076012][ T938] usb 5-1: Manufacturer: syz [ 359.174994][T12958] loop3: detected capacity change from 0 to 128 [ 359.176213][ T938] usb 5-1: config 0 descriptor?? [ 359.180067][T12958] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.181095][T12958] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.236777][ T30] audit: type=1800 audit(1790289573.224:250): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.2706" name="bus" dev="loop3" ino=1048699 res=0 errno=0 [ 359.313753][ T40] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.371860][T12960] loop3: detected capacity change from 0 to 128 [ 359.395203][T12961] profile_transition: unconfined exec no attachment [ 359.398863][T12960] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 359.419743][T12960] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.522520][ T938] rc_core: IR keymap rc-hauppauge not found [ 359.522541][ T938] Registered IR keymap rc-empty [ 359.522958][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.543764][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.571483][ T938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 359.594071][ T938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 359.600271][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.622902][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.642835][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.662783][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.692665][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.712647][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.732847][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.752699][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.772617][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.792429][T12967] loop3: detected capacity change from 0 to 4096 [ 359.792608][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.816158][ T938] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 359.846526][ T938] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 359.846580][ T938] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 359.857559][T12972] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.932364][ T5844] usb 5-1: USB disconnect, device number 13 [ 360.042712][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.512568][ T5844] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 360.663419][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 360.665465][ T5844] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 360.667867][ T5844] usb 4-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 360.667914][ T5844] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 360.667946][ T5844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.667983][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.682220][ T5844] usb 4-1: config 0 descriptor?? [ 360.798090][T12983] loop2: detected capacity change from 0 to 512 [ 360.818416][T12983] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.2712: bg 0: block 5: invalid block bitmap [ 360.818452][T12983] loop2: lost filesystem error report for type 5 error -117 [ 360.822499][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 360.822522][ C1] EXT4-fs (loop2): initial error at time 1790289574: ext4_validate_block_bitmap:436 [ 360.822550][ C1] EXT4-fs (loop2): last error at time 1790289574: ext4_validate_block_bitmap:436 [ 360.893685][T12983] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 360.893714][T12983] loop2: lost filesystem error report for type 5 error -117 [ 360.895433][T12983] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2712: invalid indirect mapped block 3 (level 2) [ 360.895470][T12983] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 360.896035][T12983] EXT4-fs (loop2): 1 orphan inode deleted [ 360.896057][T12983] EXT4-fs (loop2): 1 truncate cleaned up [ 360.908844][T12983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.971783][T12983] CacheFiles: mkdir cache failed with error -105 [ 360.971837][T12983] CacheFiles: Failed to register: -105 [ 361.107647][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.109193][ T5844] zydacron 0003:13EC:0006.001E: item fetching failed at offset 0/40 [ 361.113053][ T5844] zydacron 0003:13EC:0006.001E: parse failed [ 361.113159][ T5844] zydacron 0003:13EC:0006.001E: probe with driver zydacron failed with error -22 [ 361.279885][T12981] loop4: detected capacity change from 0 to 256 [ 361.280924][T12981] vfat: Unknown parameter 'nonultail' [ 361.310885][T12991] program syz.2.2714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.311561][ T5845] usb 4-1: USB disconnect, device number 20 [ 361.951262][T13006] loop2: detected capacity change from 0 to 1024 [ 362.496816][ T30] audit: type=1326 audit(1790289576.484:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.498454][ T30] audit: type=1326 audit(1790289576.484:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.507458][ T30] audit: type=1326 audit(1790289576.494:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.509366][ T30] audit: type=1326 audit(1790289576.494:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.510919][ T30] audit: type=1326 audit(1790289576.494:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.510972][ T30] audit: type=1326 audit(1790289576.494:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.511023][ T30] audit: type=1326 audit(1790289576.494:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.513862][ T30] audit: type=1326 audit(1790289576.504:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.513914][ T30] audit: type=1326 audit(1790289576.504:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 362.514173][ T30] audit: type=1326 audit(1790289576.504:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13022 comm="syz.4.2729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd69dd9e159 code=0x7ffc0000 [ 363.692906][ T5751] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 363.822117][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2749'. [ 363.822147][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2749'. [ 363.863225][ T5751] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 363.864303][ T5751] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 363.864330][ T5751] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 363.864356][ T5751] usb 5-1: config 0 has no interface number 0 [ 363.866673][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.866700][ T5751] usb 5-1: Product: syz [ 363.866723][ T5751] usb 5-1: Manufacturer: syz [ 363.866740][ T5751] usb 5-1: SerialNumber: syz [ 363.931610][ T5751] usb 5-1: config 0 descriptor?? [ 363.987044][T13069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.344884][ T5751] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 364.344922][ T5751] uvcvideo 5-1:0.64: No valid video chain found. [ 364.550911][ T3210] usb 5-1: USB disconnect, device number 14 [ 364.759504][T13081] loop2: detected capacity change from 0 to 65536 [ 364.790375][T13081] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 364.815566][T13081] XFS (loop2): Ending clean mount [ 364.832686][T13081] XFS (loop2): Quotacheck needed: Please wait. [ 364.854238][ T3265] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 364.854292][ T3265] XFS (loop2): Unmount and run xfs_repair [ 364.854307][ T3265] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 364.854327][ T3265] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 364.854346][ T3265] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 364.854364][ T3265] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 364.854382][ T3265] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 364.854400][ T3265] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 364.854418][ T3265] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 364.854435][ T3265] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 364.854455][ T3265] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 364.854474][ T3265] XFS (loop2): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 364.854641][ T3265] loop2: lost filesystem error report for type 5 error -117 [ 364.859981][T13081] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 364.874221][T13081] loop2: lost filesystem error report for type 5 error -117 [ 364.991939][ T5624] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 364.996296][ T5624] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 365.270195][T13092] profile_transition: unconfined exec no attachment [ 365.431747][T13101] profile_transition: unconfined exec no attachment [ 365.628698][T13105] profile_transition: unconfined exec no attachment [ 365.751784][T13112] profile_transition: unconfined exec no attachment [ 365.776924][T13109] loop2: detected capacity change from 0 to 2048 [ 365.806717][T13109] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 365.832039][T13109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.938921][T13116] profile_transition: unconfined exec no attachment [ 366.096825][T13123] profile_transition: unconfined exec no attachment [ 366.258567][T13128] profile_transition: unconfined exec no attachment [ 366.483210][T13135] profile_transition: unconfined exec no attachment [ 366.631145][T13140] profile_transition: unconfined exec no attachment [ 366.751425][T13142] profile_transition: unconfined exec no attachment [ 366.797356][T13133] loop2: detected capacity change from 0 to 32768 [ 366.857457][T13133] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 366.903382][T13133] XFS (loop2): Ending clean mount [ 367.217863][ T5624] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 367.659090][T13170] loop2: detected capacity change from 0 to 64 [ 367.679698][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2773'. [ 367.726269][T13170] hfs: request for non-existent node 131072 in B*Tree [ 367.726289][T13170] hfs: request for non-existent node 131072 in B*Tree [ 367.893481][T13178] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 368.038688][T13182] loop2: detected capacity change from 0 to 512 [ 368.282741][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.238326][T13225] loop4: detected capacity change from 0 to 256 [ 369.265823][T13225] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 369.284267][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 369.284286][ T30] audit: type=1800 audit(1790289583.274:269): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.2788" name="file2" dev="loop4" ino=1048701 res=0 errno=0 [ 369.340039][T13226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2789'. [ 369.783032][T13229] loop4: detected capacity change from 0 to 40427 [ 369.789069][T13229] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 369.789093][T13229] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 369.790573][T13229] F2FS-fs (loop4): invalid crc value [ 370.011927][T13245] sctp: [Deprecated]: syz.3.2797 (pid 13245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.011927][T13245] Use struct sctp_sack_info instead [ 370.083434][T13229] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 370.138343][T13229] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 370.138373][T13229] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 370.298468][ T5625] syz-executor: attempt to access beyond end of device [ 370.298468][ T5625] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 370.308953][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 370.308989][ T5625] Tainted: [L]=SOFTLOCKUP [ 370.308998][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 370.309013][ T5625] Call Trace: [ 370.309023][ T5625] [ 370.309034][ T5625] dump_stack_lvl+0xe8/0x150 [ 370.309075][ T5625] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 370.309117][ T5625] f2fs_write_end_bio+0x1211/0x16e0 [ 370.309148][ T5625] ? blkg_put+0x22/0x240 [ 370.309201][ T5625] __submit_merged_bio+0x258/0x6a0 [ 370.309236][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.309264][ T5625] ? rcu_is_watching+0x16/0xb0 [ 370.309302][ T5625] __submit_merged_write_cond+0x3c9/0x4e0 [ 370.309353][ T5625] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 370.309405][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.309445][ T5625] f2fs_write_data_pages+0x2a27/0x36f0 [ 370.309528][ T5625] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 370.309584][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.309613][ T5625] ? lock_acquire+0x115/0x350 [ 370.309671][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.309699][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.309728][ T5625] ? __bfs+0x153/0x290 [ 370.309757][ T5625] ? __pfx_hlock_conflict+0x10/0x10 [ 370.309798][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.309840][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.309869][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.309898][ T5625] ? __lock_acquire+0x1511/0x2de0 [ 370.309956][ T5625] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 370.309998][ T5625] do_writepages+0x338/0x560 [ 370.310026][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.310058][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.310092][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.310121][ T5625] ? do_raw_spin_unlock+0xf5/0x200 [ 370.310163][ T5625] filemap_fdatawrite+0x1e9/0x2f0 [ 370.310196][ T5625] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 370.310267][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.310299][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.310334][ T5625] ? do_raw_spin_unlock+0xf5/0x200 [ 370.310375][ T5625] f2fs_sync_dirty_inodes+0x30e/0x830 [ 370.310420][ T5625] f2fs_write_checkpoint+0xa3d/0x2710 [ 370.310447][ T5625] ? __lock_acquire+0x747/0x2de0 [ 370.310510][ T5625] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 370.310536][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.310630][ T5625] kill_f2fs_super+0x2dd/0x700 [ 370.310666][ T5625] ? __pfx_kill_f2fs_super+0x10/0x10 [ 370.310707][ T5625] ? call_rcu+0x64d/0x8b0 [ 370.310737][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.310770][ T5625] ? lockdep_hardirqs_on+0x7b/0x110 [ 370.310803][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.310848][ T5625] deactivate_locked_super+0xbc/0x110 [ 370.310887][ T5625] cleanup_mnt+0x3d3/0x460 [ 370.310918][ T5625] task_work_run+0x1d9/0x270 [ 370.310950][ T5625] ? __pfx_task_work_run+0x10/0x10 [ 370.310991][ T5625] exit_to_user_mode_loop+0x204/0x770 [ 370.311017][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.311046][ T5625] ? rcu_is_watching+0x16/0xb0 [ 370.311082][ T5625] do_syscall_64+0x328/0x520 [ 370.311114][ T5625] ? trace_irq_disable+0x3b/0x140 [ 370.311140][ T5625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.311173][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.311199][ T5625] RIP: 0033:0x7fd69dd9f397 [ 370.311222][ T5625] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 370.311243][ T5625] RSP: 002b:00007ffdbcc641d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 370.311269][ T5625] RAX: 0000000000000000 RBX: 00007fd69de344bb RCX: 00007fd69dd9f397 [ 370.311288][ T5625] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbcc64290 [ 370.311304][ T5625] RBP: 00007ffdbcc64290 R08: 00007ffdbcc65290 R09: 00000000ffffffff [ 370.311322][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbcc65320 [ 370.311338][ T5625] R13: 00007fd69de344bb R14: 000000000005a5f5 R15: 00007ffdbcc65360 [ 370.311378][ T5625] [ 370.320155][ T5625] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 370.628158][T13257] loop2: detected capacity change from 0 to 164 [ 370.793998][T13260] profile_transition: 19 callbacks suppressed [ 370.794021][T13260] profile_transition: unconfined exec no attachment [ 371.128945][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.148752][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.150076][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.152773][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.160923][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.211631][T13273] profile_transition: unconfined exec no attachment [ 371.313944][T13276] profile_transition: unconfined exec no attachment [ 371.371771][T13279] profile_transition: unconfined exec no attachment [ 371.451688][T13280] profile_transition: unconfined exec no attachment [ 371.488029][T13282] loop3: detected capacity change from 0 to 8 [ 371.507906][T13282] SQUASHFS error: lzo decompression failed, data probably corrupt [ 371.507936][T13282] SQUASHFS error: Failed to read block 0x91: -5 [ 371.507951][T13282] SQUASHFS error: Unable to read metadata cache entry [8f] [ 371.507966][T13282] SQUASHFS error: Unable to read inode 0x11f [ 371.548692][T13283] profile_transition: unconfined exec no attachment [ 371.594344][T13284] profile_transition: unconfined exec no attachment [ 371.682655][T13285] profile_transition: unconfined exec no attachment [ 371.757749][T13268] loop2: detected capacity change from 0 to 32768 [ 371.778263][T13268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2807 (13268) [ 371.801565][T13268] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.801597][T13268] BTRFS info (device loop2): using crc32c checksum algorithm [ 371.822657][T13288] profile_transition: unconfined exec no attachment [ 372.026421][T13268] BTRFS info (device loop2): enabling ssd optimizations [ 372.026454][T13268] BTRFS info (device loop2): turning on async discard [ 372.026473][T13268] BTRFS info (device loop2): enabling free space tree [ 372.109767][T13308] profile_transition: unconfined exec no attachment [ 372.136775][T13268] BTRFS critical (device loop2 state E): emergency shutdown [ 372.212898][ T5624] BTRFS info (device loop2 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.063533][T13269] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.063722][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.063871][T13269] bridge_slave_0: entered allmulticast mode [ 373.066041][T13269] bridge_slave_0: entered promiscuous mode [ 373.070192][T13269] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.070352][T13269] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.070494][T13269] bridge_slave_1: entered allmulticast mode [ 373.121533][T13269] bridge_slave_1: entered promiscuous mode [ 373.160574][T13317] loop2: detected capacity change from 0 to 32768 [ 373.169075][T13317] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2815 (13317) [ 373.202652][T13317] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 373.202687][T13317] BTRFS info (device loop2): using crc32c checksum algorithm [ 373.243755][ T5633] Bluetooth: hci1: command tx timeout [ 373.386576][T13269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.418755][T13269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.438947][T13317] BTRFS info (device loop2): setting nodatasum [ 373.438972][T13317] BTRFS info (device loop2): setting nodatacow [ 373.438990][T13317] BTRFS info (device loop2): enabling ssd optimizations [ 373.439009][T13317] BTRFS info (device loop2): turning on flush-on-commit [ 373.439028][T13317] BTRFS info (device loop2): turning on async discard [ 373.439045][T13317] BTRFS info (device loop2): enabling free space tree [ 373.620181][T13269] team0: Port device team_slave_0 added [ 373.634073][ T5624] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 373.635009][T13269] team0: Port device team_slave_1 added [ 373.831767][ T3210] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 373.876728][T13269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.876748][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.876779][T13269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.886099][T13269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.886116][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.886147][T13269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.990688][T13269] hsr_slave_0: entered promiscuous mode [ 373.995811][T13269] hsr_slave_1: entered promiscuous mode [ 373.999673][T13269] debugfs: 'hsr0' already exists in 'hsr' [ 373.999695][T13269] Cannot create hsr debugfs directory [ 374.013869][ T3210] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 374.015145][ T3210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.015192][ T3210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 374.015232][ T3210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 374.015261][ T3210] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 374.016530][ T3210] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 374.016554][ T3210] usb 4-1: Manufacturer: syz [ 374.040623][ T3210] usb 4-1: config 0 descriptor?? [ 374.454248][ T3210] rc_core: IR keymap rc-hauppauge not found [ 374.454269][ T3210] Registered IR keymap rc-empty [ 374.454896][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.488963][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.505784][ T3210] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 374.508173][ T3210] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 374.530822][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.558275][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.573541][T13375] nfsd: exp_rootfh path not found ./export_dir [ 374.586772][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.614477][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.636761][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.653682][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.673330][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.692910][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.713466][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.734810][ T3210] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 374.755434][ T3210] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 374.755486][ T3210] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 374.820108][ T5759] usb 4-1: USB disconnect, device number 21 [ 375.091429][T13382] loop2: detected capacity change from 0 to 4096 [ 375.100010][T13382] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.101632][T13382] EXT4-fs (loop2): Test dummy encryption mode enabled [ 375.127144][T13382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.211217][T13382] fscrypt: AES-256-XTS using blk-crypto-fallback [ 375.260909][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.323544][ T5633] Bluetooth: hci1: command tx timeout [ 375.572671][ T3210] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 375.707463][T13392] loop2: detected capacity change from 0 to 32768 [ 375.734412][ T3210] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 375.737438][ T3210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.737491][ T3210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.745999][ T3210] usb 5-1: config 0 descriptor?? [ 375.757397][ T3210] pwc: Askey VC010 type 2 USB webcam detected. [ 375.807723][T13392] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 375.831963][T13394] loop3: detected capacity change from 0 to 32768 [ 375.848764][T13394] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 375.869861][T13394] JBD2: Ignoring recovery information on journal [ 375.975724][T13394] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 376.176782][ T5624] ocfs2: Unmounting device (7,2) on (node local) [ 376.189902][ T3210] pwc: recv_control_msg error -32 req 02 val 2b00 [ 376.236874][ T5628] ocfs2: Unmounting device (7,3) on (node local) [ 376.395996][ T3210] pwc: recv_control_msg error -71 req 02 val 2c00 [ 376.397926][ T3210] pwc: recv_control_msg error -71 req 04 val 1000 [ 376.399387][ T3210] pwc: recv_control_msg error -71 req 04 val 1300 [ 376.399822][ T3210] pwc: recv_control_msg error -71 req 04 val 1400 [ 376.400242][ T3210] pwc: recv_control_msg error -71 req 02 val 2000 [ 376.400662][ T3210] pwc: recv_control_msg error -71 req 02 val 2100 [ 376.401097][ T3210] pwc: recv_control_msg error -71 req 04 val 1500 [ 376.401528][ T3210] pwc: recv_control_msg error -71 req 02 val 2500 [ 376.401964][ T3210] pwc: recv_control_msg error -71 req 02 val 2400 [ 376.405764][ T3210] pwc: recv_control_msg error -71 req 02 val 2600 [ 376.406543][ T3210] pwc: recv_control_msg error -71 req 02 val 2900 [ 376.406961][ T3210] pwc: recv_control_msg error -71 req 02 val 2800 [ 376.408850][ T3210] pwc: recv_control_msg error -71 req 04 val 1100 [ 376.409272][ T3210] pwc: recv_control_msg error -71 req 04 val 1200 [ 376.430975][ T3210] pwc: Registered as video103. [ 376.443598][ T3210] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 376.536971][T13401] profile_transition: 4 callbacks suppressed [ 376.536992][T13401] profile_transition: unconfined exec no attachment [ 376.539826][ T3210] usb 5-1: USB disconnect, device number 15 [ 376.815669][T13406] loop2: detected capacity change from 0 to 4096 [ 377.113207][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 377.214494][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 377.402706][ T5633] Bluetooth: hci1: command tx timeout [ 377.886178][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.886243][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.482388][T13466] loop4: detected capacity change from 0 to 1024 [ 378.494179][T13466] EXT4-fs: Ignoring removed oldalloc option [ 378.510525][T13466] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 378.540344][T13466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2869'. [ 379.483410][ T5633] Bluetooth: hci1: command tx timeout [ 379.622067][T13481] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 379.653825][T13483] loop3: detected capacity change from 0 to 256 [ 379.904718][T13491] loop4: detected capacity change from 0 to 1024 [ 379.941107][T13491] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 380.412575][ T938] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 380.562523][ T938] usb 3-1: Using ep0 maxpacket: 8 [ 380.563924][ T938] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 380.564880][ T938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.566833][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.566862][ T938] usb 3-1: Product: syz [ 380.566879][ T938] usb 3-1: Manufacturer: syz [ 380.566895][ T938] usb 3-1: SerialNumber: syz [ 380.569475][ T938] usb 3-1: config 0 descriptor?? [ 380.626980][ T938] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 380.627047][ T938] usb 3-1: selecting invalid altsetting 1 [ 380.781724][ T938] gspca_stk014: init reg: 0x00 [ 380.781790][ T938] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 380.841891][T13513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2891'. [ 380.901655][T13515] kAFS: bad VL server IP address [ 380.987046][T13517] loop4: detected capacity change from 0 to 4096 [ 380.988152][T13517] EXT4-fs: Ignoring removed mblk_io_submit option [ 380.990532][ T5759] usb 3-1: USB disconnect, device number 21 [ 381.020422][T13517] EXT4-fs (loop4): Test dummy encryption mode enabled [ 381.041415][T13517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.121524][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.601679][T13535] loop2: detected capacity change from 0 to 512 [ 384.048367][T13576] loop4: detected capacity change from 0 to 40427 [ 384.051634][T13576] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 384.051660][T13576] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 384.076394][T13576] F2FS-fs (loop4): invalid crc value [ 384.166288][T13576] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 384.176333][T13576] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 384.176359][T13576] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 384.200323][T13576] syz.4.2920: attempt to access beyond end of device [ 384.200323][T13576] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 384.245521][ T5625] syz-executor: attempt to access beyond end of device [ 384.245521][ T5625] loop4: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 384.249568][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 384.249603][ T5625] Tainted: [L]=SOFTLOCKUP [ 384.249613][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 384.249629][ T5625] Call Trace: [ 384.249639][ T5625] [ 384.249649][ T5625] dump_stack_lvl+0xe8/0x150 [ 384.249691][ T5625] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 384.249741][ T5625] f2fs_write_end_bio+0x1211/0x16e0 [ 384.249773][ T5625] ? blkg_put+0x22/0x240 [ 384.249828][ T5625] __submit_merged_bio+0x258/0x6a0 [ 384.249863][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.249894][ T5625] ? rcu_is_watching+0x16/0xb0 [ 384.249933][ T5625] __submit_merged_write_cond+0x3c9/0x4e0 [ 384.249982][ T5625] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 384.250026][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250056][ T5625] f2fs_write_data_pages+0x2a27/0x36f0 [ 384.250119][ T5625] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 384.250189][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250210][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250233][ T5625] ? __bfs+0x153/0x290 [ 384.250252][ T5625] ? __pfx_hlock_conflict+0x10/0x10 [ 384.250280][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250312][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250334][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250355][ T5625] ? __lock_acquire+0x1511/0x2de0 [ 384.250399][ T5625] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 384.250431][ T5625] do_writepages+0x338/0x560 [ 384.250452][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250476][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250501][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250523][ T5625] ? do_raw_spin_unlock+0xf5/0x200 [ 384.250558][ T5625] filemap_fdatawrite+0x1e9/0x2f0 [ 384.250582][ T5625] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 384.250636][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250660][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250686][ T5625] ? do_raw_spin_unlock+0xf5/0x200 [ 384.250722][ T5625] f2fs_sync_dirty_inodes+0x30e/0x830 [ 384.250756][ T5625] f2fs_write_checkpoint+0xa3d/0x2710 [ 384.250775][ T5625] ? __lock_acquire+0x747/0x2de0 [ 384.250823][ T5625] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 384.250842][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.250916][ T5625] kill_f2fs_super+0x2dd/0x700 [ 384.250944][ T5625] ? __pfx_kill_f2fs_super+0x10/0x10 [ 384.250974][ T5625] ? call_rcu+0x64d/0x8b0 [ 384.250996][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.251018][ T5625] ? lockdep_hardirqs_on+0x7b/0x110 [ 384.251047][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.251087][ T5625] deactivate_locked_super+0xbc/0x110 [ 384.251116][ T5625] cleanup_mnt+0x3d3/0x460 [ 384.251139][ T5625] task_work_run+0x1d9/0x270 [ 384.251164][ T5625] ? __pfx_task_work_run+0x10/0x10 [ 384.251195][ T5625] exit_to_user_mode_loop+0x204/0x770 [ 384.251214][ T5625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.251237][ T5625] ? rcu_is_watching+0x16/0xb0 [ 384.251264][ T5625] do_syscall_64+0x328/0x520 [ 384.251288][ T5625] ? trace_irq_disable+0x3b/0x140 [ 384.251308][ T5625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.251332][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.251351][ T5625] RIP: 0033:0x7fd69dd9f397 [ 384.251369][ T5625] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 384.251384][ T5625] RSP: 002b:00007ffdbcc641d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 384.251404][ T5625] RAX: 0000000000000000 RBX: 00007fd69de344bb RCX: 00007fd69dd9f397 [ 384.251417][ T5625] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbcc64290 [ 384.251429][ T5625] RBP: 00007ffdbcc64290 R08: 00007ffdbcc65290 R09: 00000000ffffffff [ 384.251442][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbcc65320 [ 384.251453][ T5625] R13: 00007fd69de344bb R14: 000000000005dcc4 R15: 00007ffdbcc65360 [ 384.251484][ T5625] [ 384.252237][ T5625] F2FS-fs (loop4): Remounting filesystem read-only [ 384.282657][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.587666][T13579] profile_transition: unconfined exec no attachment [ 395.838067][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 395.856852][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 395.865038][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 395.866128][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 395.868773][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 395.909605][T13592] profile_transition: unconfined exec no attachment [ 395.948351][T13595] profile_transition: unconfined exec no attachment [ 395.990973][T13596] profile_transition: unconfined exec no attachment [ 395.999743][ T44] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 396.071758][T13599] profile_transition: unconfined exec no attachment [ 396.101762][T13600] profile_transition: unconfined exec no attachment [ 396.138587][T13601] profile_transition: unconfined exec no attachment [ 396.149813][ T44] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 396.166421][ T44] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.167366][ T44] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.169333][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.169358][ T44] usb 3-1: Product: syz [ 396.169374][ T44] usb 3-1: Manufacturer: syz [ 396.169389][ T44] usb 3-1: SerialNumber: syz [ 396.220330][T13602] profile_transition: unconfined exec no attachment [ 396.231922][ T44] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 396.258948][ T44] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 396.274129][ T44] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 396.301367][T13603] profile_transition: unconfined exec no attachment [ 396.511459][T13606] profile_transition: unconfined exec no attachment [ 396.706747][T13589] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.706900][T13589] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.707027][T13589] bridge_slave_0: entered allmulticast mode [ 396.709327][T13589] bridge_slave_0: entered promiscuous mode [ 396.713162][T13589] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.713373][T13589] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.713533][T13589] bridge_slave_1: entered allmulticast mode [ 396.715992][T13589] bridge_slave_1: entered promiscuous mode [ 396.760212][T13589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.765996][T13589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.814026][T13589] team0: Port device team_slave_0 added [ 396.816906][T13589] team0: Port device team_slave_1 added [ 396.858371][T13589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.858388][T13589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.858419][T13589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.860293][T13589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.860308][T13589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.860338][T13589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.067328][T13589] hsr_slave_0: entered promiscuous mode [ 397.068724][T13589] hsr_slave_1: entered promiscuous mode [ 397.071706][T13589] debugfs: 'hsr0' already exists in 'hsr' [ 397.071758][T13589] Cannot create hsr debugfs directory [ 397.483013][T13586] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 397.484054][T13586] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 397.484086][T13586] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 397.484372][T13586] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 397.486344][ T5845] usb 3-1: USB disconnect, device number 22 [ 397.536301][ T5845] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 397.550021][ T5845] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 397.551150][ T5845] ti_usb_3410_5052 3-1:2.0: device disconnected [ 397.962801][ T52] Bluetooth: hci10: command tx timeout [ 398.096742][T13625] aa_policy_admin_capable: cap_mac_admin? 1 [ 398.096891][T13625] aa_policy_admin_capable: policy locked? 0 [ 398.097089][T13625] unpack_pdb: unpacking tags [ 398.097174][T13625] unpack_pdb: done unpacking tags [ 398.097305][T13625] unpack_pdb: unpacking tags [ 398.097314][T13625] unpack_pdb: done unpacking tags [ 398.101305][ T30] audit: type=1400 audit(1790289612.084:270): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=13624 comm="syz.2.2934" [ 398.416838][T13634] loop2: detected capacity change from 0 to 1024 [ 398.503904][T13632] loop4: detected capacity change from 0 to 8192 [ 398.561293][ T5633] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 398.575265][ T5633] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 398.576134][ T5633] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 398.577107][ T5633] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 398.586755][ T5633] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 399.530513][T13662] loop2: detected capacity change from 0 to 1024 [ 400.042719][ T5633] Bluetooth: hci10: command tx timeout [ 400.095669][T13671] loop2: detected capacity change from 0 to 164 [ 400.122913][T13671] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 400.146508][T13671] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 400.309033][T13673] kAFS: bad VL server IP address [ 400.416920][T13661] loop4: detected capacity change from 0 to 131072 [ 400.419554][T13661] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 400.419582][T13661] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 400.456581][T13661] F2FS-fs (loop4): invalid crc value [ 400.602374][T13661] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 400.625154][T13661] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 400.625180][T13661] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 400.684760][ T5633] Bluetooth: hci11: command tx timeout [ 400.762325][T13685] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2953'. [ 400.786520][T13685] eql: entered promiscuous mode [ 400.799180][T13685] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2953'. [ 400.820113][T13685] 0ªX¹¦Dö»: renamed from eql [ 400.830937][T13685] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 400.830970][T13685] 0ªX¹¦Dö»: left promiscuous mode [ 400.830986][T13685] 0ªX¹¦Dö»: entered allmulticast mode [ 400.890463][T13635] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.890686][T13635] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.890835][T13635] bridge_slave_0: entered allmulticast mode [ 400.895647][T13635] bridge_slave_0: entered promiscuous mode [ 400.903297][T13635] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.903508][T13635] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.903663][T13635] bridge_slave_1: entered allmulticast mode [ 400.907966][T13635] bridge_slave_1: entered promiscuous mode [ 400.942577][T13688] profile_transition: 12 callbacks suppressed [ 400.942598][T13688] profile_transition: unconfined exec no attachment [ 401.039627][T13635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.048176][T13689] profile_transition: unconfined exec no attachment [ 401.049924][T13635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.223692][T13635] team0: Port device team_slave_0 added [ 401.243087][T13635] team0: Port device team_slave_1 added [ 401.318261][T13635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.318283][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.318313][T13635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.320349][T13635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.320366][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.320396][T13635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.398756][T13635] hsr_slave_0: entered promiscuous mode [ 401.399926][T13635] hsr_slave_1: entered promiscuous mode [ 401.400742][T13635] debugfs: 'hsr0' already exists in 'hsr' [ 401.400763][T13635] Cannot create hsr debugfs directory [ 402.122939][ T5633] Bluetooth: hci10: command tx timeout [ 402.762550][ T5633] Bluetooth: hci11: command tx timeout [ 402.834696][T13706] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 403.691995][T13729] netlink: Only one type of NAT may be specified [ 403.692030][T13729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.986431][T13740] profile_transition: unconfined exec no attachment [ 404.204104][ T5614] Bluetooth: hci10: command tx timeout [ 404.227764][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 404.244649][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 404.245493][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 404.246567][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 404.275651][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 404.303183][T13735] loop2: detected capacity change from 0 to 40427 [ 404.324805][T13735] F2FS-fs (loop2): invalid crc value [ 404.352364][T13748] profile_transition: unconfined exec no attachment [ 404.421757][T13749] profile_transition: unconfined exec no attachment [ 404.513175][T13735] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 404.520079][T13750] profile_transition: unconfined exec no attachment [ 404.522335][T13735] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 404.522363][T13735] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 404.522391][T13735] F2FS-fs (loop2): Start checkpoint disabled! [ 404.578308][T13751] profile_transition: unconfined exec no attachment [ 404.590445][T13735] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 404.590858][T13735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 404.629457][T13753] profile_transition: unconfined exec no attachment [ 404.655272][ T40] kworker/u8:2: attempt to access beyond end of device [ 404.655272][ T40] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 404.655359][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.655392][ T40] Tainted: [L]=SOFTLOCKUP [ 404.655401][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 404.655418][ T40] Workqueue: writeback wb_workfn (flush-7:2) [ 404.655456][ T40] Call Trace: [ 404.655466][ T40] [ 404.655477][ T40] dump_stack_lvl+0xe8/0x150 [ 404.655516][ T40] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 404.655559][ T40] f2fs_write_end_bio+0x1211/0x16e0 [ 404.655590][ T40] ? blkg_put+0x22/0x240 [ 404.655650][ T40] __submit_merged_bio+0x258/0x6a0 [ 404.655684][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.655715][ T40] ? rcu_is_watching+0x16/0xb0 [ 404.655758][ T40] __submit_merged_write_cond+0x3c9/0x4e0 [ 404.655806][ T40] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 404.655859][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.655899][ T40] f2fs_write_data_pages+0x2a27/0x36f0 [ 404.655985][ T40] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 404.656043][ T40] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 404.656114][ T40] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 404.656174][ T40] ? __lock_acquire+0x747/0x2de0 [ 404.656210][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.656257][ T40] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 404.656299][ T40] do_writepages+0x338/0x560 [ 404.656334][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.656363][ T40] ? reacquire_held_locks+0x117/0x1a0 [ 404.656394][ T40] ? writeback_sb_inodes+0x450/0x1b00 [ 404.656435][ T40] __writeback_single_inode+0x136/0x1220 [ 404.656474][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.656503][ T40] ? do_raw_spin_unlock+0xf5/0x200 [ 404.656546][ T40] writeback_sb_inodes+0x9de/0x1b00 [ 404.656579][ T40] ? __lock_acquire+0x747/0x2de0 [ 404.656623][ T40] ? lock_acquire+0x115/0x350 [ 404.656657][ T40] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 404.656752][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.656782][ T40] ? rcu_is_watching+0x16/0xb0 [ 404.656812][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.656842][ T40] ? queue_io+0x2d3/0x470 [ 404.656880][ T40] wb_writeback+0x41c/0xad0 [ 404.656917][ T40] ? queue_io+0x231/0x470 [ 404.656958][ T40] ? __pfx_wb_writeback+0x10/0x10 [ 404.656990][ T40] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.657046][ T40] wb_workfn+0x431/0x10f0 [ 404.657097][ T40] ? __pfx_wb_workfn+0x10/0x10 [ 404.657140][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657170][ T40] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.657232][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657262][ T40] ? lock_acquire+0x115/0x350 [ 404.657289][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657327][ T40] ? rcu_is_watching+0x16/0xb0 [ 404.657357][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657387][ T40] ? process_scheduled_works+0x97a/0x1630 [ 404.657424][ T40] process_scheduled_works+0xc3d/0x1630 [ 404.657458][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657526][ T40] ? __pfx_process_scheduled_works+0x10/0x10 [ 404.657569][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657597][ T40] ? assign_work+0x3cf/0x5d0 [ 404.657638][ T40] worker_thread+0xa47/0xfb0 [ 404.657676][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657718][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657754][ T40] ? __kthread_parkme+0x71/0x1f0 [ 404.657805][ T40] kthread+0x38b/0x480 [ 404.657831][ T40] ? __pfx_worker_thread+0x10/0x10 [ 404.657865][ T40] ? __pfx_kthread+0x10/0x10 [ 404.657893][ T40] ret_from_fork+0x514/0xb70 [ 404.657921][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 404.657947][ T40] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.657976][ T40] ? __switch_to+0xc89/0x1420 [ 404.658016][ T40] ? __pfx_kthread+0x10/0x10 [ 404.658043][ T40] ret_from_fork_asm+0x1a/0x30 [ 404.658103][ T40] [ 404.660287][ T40] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 404.796189][T13754] profile_transition: unconfined exec no attachment [ 404.842571][ T52] Bluetooth: hci11: command tx timeout [ 404.860208][T13755] profile_transition: unconfined exec no attachment [ 405.692627][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.692792][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.692935][T13745] bridge_slave_0: entered allmulticast mode [ 405.696390][T13745] bridge_slave_0: entered promiscuous mode [ 405.714579][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.714689][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.714911][T13745] bridge_slave_1: entered allmulticast mode [ 405.717134][T13745] bridge_slave_1: entered promiscuous mode [ 405.782086][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.790501][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.861902][T13745] team0: Port device team_slave_0 added [ 405.870304][T13745] team0: Port device team_slave_1 added [ 405.929500][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.929519][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.929550][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.933150][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.933166][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.933195][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.079467][T13745] hsr_slave_0: entered promiscuous mode [ 406.080402][T13745] hsr_slave_1: entered promiscuous mode [ 406.081641][T13745] debugfs: 'hsr0' already exists in 'hsr' [ 406.081661][T13745] Cannot create hsr debugfs directory [ 406.363042][ T52] Bluetooth: hci12: command tx timeout [ 406.426605][T13796] loop4: detected capacity change from 0 to 128 [ 406.471476][T13796] syz.4.2992: attempt to access beyond end of device [ 406.471476][T13796] loop4: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 406.922629][ T52] Bluetooth: hci11: command tx timeout [ 407.711842][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 408.068111][T13820] loop4: detected capacity change from 0 to 32768 [ 408.082622][T13820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3004 (13820) [ 408.089701][T13820] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 408.089733][T13820] BTRFS info (device loop4): using sha256 checksum algorithm [ 408.177039][T13820] BTRFS info (device loop4): enabling ssd optimizations [ 408.177069][T13820] BTRFS info (device loop4): turning on async discard [ 408.177088][T13820] BTRFS info (device loop4): enabling free space tree [ 408.180879][T13835] profile_transition: 3 callbacks suppressed [ 408.180897][T13835] profile_transition: unconfined exec no attachment [ 408.256822][ T5625] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 408.443389][ T52] Bluetooth: hci12: command tx timeout [ 408.539326][T13839] profile_transition: unconfined exec no attachment [ 408.912966][ T5845] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 409.064515][ T5845] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 409.068967][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.068995][ T5845] usb 3-1: Product: syz [ 409.069012][ T5845] usb 3-1: Manufacturer: syz [ 409.069029][ T5845] usb 3-1: SerialNumber: syz [ 409.078424][ T5845] usb 3-1: config 0 descriptor?? [ 409.082218][ T5845] hub 3-1:0.0: bad descriptor, ignoring hub [ 409.082250][ T5845] hub 3-1:0.0: probe with driver hub failed with error -5 [ 409.126981][T13853] loop4: detected capacity change from 0 to 1024 [ 409.128352][T13853] EXT4-fs: Ignoring removed bh option [ 409.172254][T13853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.228535][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.300735][T13858] netlink: 480 bytes leftover after parsing attributes in process `syz.4.3013'. [ 409.300813][T13858] netlink: 480 bytes leftover after parsing attributes in process `syz.4.3013'. [ 409.304388][ T5845] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 409.328285][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.331371][ T5845] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 409.331425][ T5845] usb 3-1: media controller created [ 409.367707][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.400777][T13859] profile_transition: unconfined exec no attachment [ 409.451912][ T5845] DVB: Unable to find symbol dib7000p_attach() [ 409.451931][ T5845] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 409.454239][T13862] profile_transition: unconfined exec no attachment [ 409.542868][ T5845] rc_core: IR keymap rc-dib0700-rc5 not found [ 409.542890][ T5845] Registered IR keymap rc-empty [ 409.543197][ T5845] dvb-usb: could not initialize remote control. [ 409.543206][ T5845] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 409.557073][ T5845] usb 3-1: USB disconnect, device number 23 [ 409.654698][ T5845] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 410.130498][T13881] syz_tun: Device is already in use. [ 410.221501][T13883] netlink: 'syz.2.3024': attribute type 4 has an invalid length. [ 410.256011][T13879] loop4: detected capacity change from 0 to 32768 [ 410.277359][T13879] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 410.329060][T13879] XFS (loop4): Ending clean mount [ 410.346837][T13879] XFS (loop4): Quotacheck needed: Please wait. [ 410.462176][T13879] XFS (loop4): Quotacheck: Done. [ 410.517360][ T5625] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 410.523873][ T52] Bluetooth: hci12: command tx timeout [ 410.555991][T13897] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 410.987816][T13908] profile_transition: unconfined exec no attachment [ 411.074160][T13912] profile_transition: unconfined exec no attachment [ 411.256491][T13915] profile_transition: unconfined exec no attachment [ 411.382548][T13919] profile_transition: unconfined exec no attachment [ 411.419750][T13921] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3033'. [ 411.583991][T13925] profile_transition: unconfined exec no attachment [ 411.660433][T13926] profile_transition: unconfined exec no attachment [ 412.199661][T13934] loop4: detected capacity change from 0 to 32768 [ 412.204669][T13934] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3037 (13934) [ 412.249456][T13934] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 412.249489][T13934] BTRFS info (device loop4): using crc32c checksum algorithm [ 412.340534][T13934] BTRFS info (device loop4): setting nodatasum [ 412.340562][T13934] BTRFS info (device loop4): setting nodatacow [ 412.340581][T13934] BTRFS info (device loop4): enabling ssd optimizations [ 412.340601][T13934] BTRFS info (device loop4): turning on flush-on-commit [ 412.340620][T13934] BTRFS info (device loop4): turning on async discard [ 412.340638][T13934] BTRFS info (device loop4): enabling free space tree [ 412.580029][ T5625] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 412.605597][ T5633] Bluetooth: hci12: command tx timeout [ 413.339067][T13972] loop4: detected capacity change from 0 to 2048 [ 413.457634][T13972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.546717][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.697726][T13962] loop2: detected capacity change from 0 to 131072 [ 413.707839][T13962] xfs: Deprecated parameter 'ikeep' [ 413.707861][T13962] XFS: ikeep mount option is deprecated. [ 413.739628][T13978] nbd: couldn't find device at index 234 [ 413.795091][T13962] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 413.901141][T13962] XFS (loop2): Starting recovery (logdev: internal) [ 413.933861][T13962] XFS (loop2): Ending recovery (logdev: internal) [ 413.974525][T13990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3050'. [ 414.030951][ T5624] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 414.362670][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.767712][T14008] loop4: detected capacity change from 0 to 256 [ 414.791737][T14008] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 414.792123][T14008] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 415.111437][ T30] audit: type=1326 audit(1790289629.094:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14022 comm="syz.4.3065" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd69dd9e159 code=0x0 [ 416.501859][T14046] netlink: Invalid conntrack helper [ 416.501886][T14046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.652564][ T5751] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 416.813277][ T5751] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 416.814630][ T5751] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 416.814659][ T5751] usb 3-1: config 0 interface 0 has no altsetting 0 [ 416.814687][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.817993][ T5751] usb 3-1: config 0 descriptor?? [ 416.818827][T14042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 417.229777][ T5751] hid_parser_main: 14 callbacks suppressed [ 417.229802][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.229828][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.229893][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.229916][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.229939][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.229962][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.229984][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.230006][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.230029][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.230051][ T5751] razer 0003:1532:010D.001F: unknown main item tag 0x0 [ 417.231882][ T5751] razer 0003:1532:010D.001F: collection stack underflow [ 417.231909][ T5751] razer 0003:1532:010D.001F: item 0 0 0 12 parsing failed [ 417.259357][ T5751] razer 0003:1532:010D.001F: probe with driver razer failed with error -22 [ 417.431628][ T5751] usb 3-1: USB disconnect, device number 24 [ 417.912376][T14065] loop4: detected capacity change from 0 to 256 [ 417.914807][T14065] exfat: Deprecated parameter 'namecase' [ 417.914861][T14065] exfat: Deprecated parameter 'utf8' [ 417.922389][T14065] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 418.082857][T14069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3087'. [ 418.469864][T14084] profile_transition: 3 callbacks suppressed [ 418.469886][T14084] profile_transition: unconfined exec no attachment [ 418.524476][T14083] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.612394][T14090] Line length is too long: Should be less than 4094 [ 418.928865][ T40] IPVS: starting estimator thread 0... [ 419.012624][T14103] IPVS: using max 25 ests per chain, 60000 per kthread [ 419.102586][ T44] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 419.253458][ T44] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 419.254857][ T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.254884][ T44] usb 3-1: config 0 has no interface number 0 [ 419.254926][ T44] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.254954][ T44] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.254973][ T44] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.254995][ T44] usb 3-1: config 0 interface 1 has no altsetting 0 [ 419.255948][ T44] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 419.255974][ T44] usb 3-1: Manufacturer: syz [ 419.286855][ T44] usb 3-1: config 0 descriptor?? [ 419.926419][ T44] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0020/input/input33 [ 420.068139][ T44] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0020/input/input34 [ 420.091488][ T44] uclogic 0003:145F:0212.0020: input,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.2-1/input1 [ 420.148290][ T44] usb 3-1: USB disconnect, device number 25 [ 420.185375][T14127] profile_transition: unconfined exec no attachment [ 420.361899][T14127] fido_id[14127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 420.489159][T14134] aa_policy_admin_capable: cap_mac_admin? 1 [ 420.489183][T14134] aa_policy_admin_capable: policy locked? 0 [ 420.489360][ T30] audit: type=1400 audit(1790289634.474:272): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=14133 comm="syz.4.3116" name="unknown" offset=16 [ 420.489567][T14134] aa_free_profile: aa_free_profile(0000000000000000) [ 420.856521][T14145] pimreg: tun_chr_ioctl cmd 1074025677 [ 420.856609][T14145] pimreg: linktype set to 1 [ 421.071016][T14148] can0: slcan on pty24. [ 421.114336][T14151] profile_transition: unconfined exec no attachment [ 421.162065][T14152] profile_transition: unconfined exec no attachment [ 421.245468][T14157] profile_transition: unconfined exec no attachment [ 421.325757][T14161] profile_transition: unconfined exec no attachment [ 421.429333][T14166] profile_transition: unconfined exec no attachment [ 421.525918][T14170] profile_transition: unconfined exec no attachment [ 421.595627][T14171] profile_transition: unconfined exec no attachment [ 421.664139][T14174] profile_transition: unconfined exec no attachment [ 421.731246][T14176] profile_transition: name lookup ix on error [ 421.786498][T14178] loop4: detected capacity change from 0 to 256 [ 421.787468][T14178] exfat: Deprecated parameter 'namecase' [ 421.826914][T14178] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8114471f, utbl_chksum : 0xe619d30d) [ 421.996794][T14183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.056944][T14147] can0 (unregistered): slcan off pty24. [ 422.141202][T14188] program syz.4.3132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.475378][T14203] aa_policy_admin_capable: cap_mac_admin? 1 [ 422.475401][T14203] aa_policy_admin_capable: policy locked? 0 [ 422.475564][T14203] unpack_pdb: unpacking tags [ 422.475576][T14203] unpack_pdb: done unpacking tags [ 422.476630][T14203] aa_free_profile: aa_free_profile(ffff88804cbf7800) [ 422.481453][ T30] audit: type=1400 audit(1790289636.464:273): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=66226F pid=14202 comm="syz.2.3137" name=66226F offset=66 [ 422.663882][T14208] loop2: detected capacity change from 0 to 512 [ 423.324869][ T31] INFO: task syz-executor:10235 blocked for more than 143 seconds. [ 423.324900][ T31] Tainted: G L syzkaller #0 [ 423.324914][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.324926][ T31] task:syz-executor state:D stack:22744 pid:10235 tgid:10235 ppid:1 task_flags:0x480140 flags:0x00080002 [ 423.324999][ T31] Call Trace: [ 423.325008][ T31] [ 423.325024][ T31] __schedule+0x17db/0x58f0 [ 423.325060][ T31] ? __lock_acquire+0x747/0x2de0 [ 423.325107][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.325149][ T31] ? __pfx___schedule+0x10/0x10 [ 423.325175][ T31] ? lock_acquire+0x115/0x350 [ 423.325208][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.325247][ T31] ? schedule+0x90/0x2b0 [ 423.325280][ T31] schedule+0x164/0x2b0 [ 423.325326][ T31] schedule_timeout+0xc0/0x2c0 [ 423.325353][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 423.325379][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.325408][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 423.325445][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.325485][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.325514][ T31] ? wait_for_completion+0x272/0x5e0 [ 423.325546][ T31] wait_for_completion+0x2ca/0x5e0 [ 423.325592][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 423.325625][ T31] ? d_walk+0x642/0x6d0 [ 423.325664][ ** replaying previous printk message ** [ 423.325664][ T31] ? __pfx_find_submount+0x10/0x10 [ 423.325707][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.325743][ T31] remove_one+0x2df/0x3b0 [ 423.325771][ T31] ? __pfx_remove_one+0x10/0x10 [ 423.325813][ T31] __simple_recursive_removal+0x215/0x520 [ 423.325850][ T31] ? __pfx_remove_one+0x10/0x10 [ 423.325894][ T31] debugfs_remove+0x5b/0x70 [ 423.325932][ T31] nsim_dev_health_exit+0x41/0xc0 [ 423.325964][ T31] nsim_dev_reload_destroy+0x2bf/0x490 [ 423.326006][ T31] nsim_drv_remove+0x58/0x170 [ 423.326040][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 423.326066][ T31] device_release_driver_internal+0x48b/0x880 [ 423.326107][ T31] bus_remove_device+0x444/0x560 [ 423.326154][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 423.326198][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.326232][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 423.326293][ T31] device_del+0x524/0x8f0 [ 423.326321][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 423.326362][ T31] ? __pfx_device_del+0x10/0x10 [ 423.326393][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.326423][ T31] ? lock_acquire+0x115/0x350 [ 423.326453][ T31] device_unregister+0x21/0xf0 [ 423.326484][ T31] del_device_store+0x2b5/0x370 [ 423.326516][ T31] ? __pfx_del_device_store+0x10/0x10 [ 423.326544][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.326574][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 423.326609][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.326638][ T31] ? sysfs_kf_write+0x166/0x260 [ 423.326673][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.326708][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 423.326742][ T31] kernfs_fop_write_iter+0x3a4/0x540 [ 423.326783][ T31] vfs_write+0x612/0xba0 [ 423.326833][ T31] ? __pfx_vfs_write+0x10/0x10 [ 423.326875][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.326904][ T31] ? kmem_cache_free+0x182/0x650 [ 423.326939][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.326973][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.327008][ T31] ksys_write+0x150/0x270 [ 423.327051][ T31] ? __pfx_ksys_write+0x10/0x10 [ 423.327090][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.327135][ T31] do_syscall_64+0x166/0x520 [ 423.327167][ T31] ? trace_irq_disable+0x3b/0x140 [ 423.327194][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.327234][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.327260][ T31] RIP: 0033:0x7f0b27d5e98e [ 423.327282][ T31] RSP: 002b:00007ffe2c463428 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.327309][ T31] RAX: ffffffffffffffda RBX: 0000555577d89500 RCX: 00007f0b27d5e98e [ 423.327329][ T31] RDX: 0000000000000001 RSI: 00007ffe2c4634b0 RDI: 0000000000000005 [ 423.327346][ T31] RBP: 00007f0b27e358ee R08: 0000000000000000 R09: 0000000000000000 [ 423.327363][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.327379][ T31] R13: 00007ffe2c4634b0 R14: 00007f0b28b54620 R15: 0000000000000003 [ 423.327418][ T31] [ 423.327433][ T31] INFO: task syz.1.1825:10529 blocked for more than 143 seconds. [ 423.327454][ T31] Tainted: G L syzkaller #0 [ 423.327468][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.327479][ T31] task:syz.1.1825 state:D stack:28512 pid:10529 tgid:10528 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 423.327558][ T31] Call Trace: [ 423.327566][ T31] [ 423.327582][ T31] __schedule+0x17db/0x58f0 [ 423.327645][ T31] ? __pfx___schedule+0x10/0x10 [ 423.327686][ T31] ? schedule+0x90/0x2b0 [ 423.327719][ T31] schedule+0x164/0x2b0 [ 423.327751][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.327780][ T31] __mutex_lock+0x7c1/0x1550 [ 423.327820][ T31] ? __mutex_lock+0x5d4/0x1550 [ 423.327859][ T31] ? devlink_health_report+0x305/0xb20 [ 423.327895][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.327929][ T31] ? __pfx_devlink_recover_notify+0x10/0x10 [ 423.327958][ T31] ? lock_acquire+0x115/0x350 [ 423.328006][ T31] devlink_health_report+0x305/0xb20 [ 423.328048][ T31] nsim_dev_health_break_write+0x194/0x240 [ 423.328085][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 423.328119][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.328161][ T31] full_proxy_write+0x127/0x1f0 [ 423.328196][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 423.328225][ T31] vfs_write+0x296/0xba0 [ 423.328281][ T31] ? __pfx_vfs_write+0x10/0x10 [ 423.328323][ T31] ? __fget_files+0x2a/0x420 [ 423.328364][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.328395][ T31] ? __fget_files+0x3a2/0x420 [ 423.328430][ T31] ? __fget_files+0x2a/0x420 [ 423.328470][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.328506][ T31] ksys_write+0x150/0x270 [ 423.328548][ T31] ? __pfx_ksys_write+0x10/0x10 [ 423.328602][ T31] do_syscall_64+0x166/0x520 [ 423.328634][ T31] ? trace_irq_disable+0x3b/0x140 [ 423.328661][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.328695][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.328720][ T31] RIP: 0033:0x7ff51099e159 [ 423.328743][ T31] RSP: 002b:00007ff51182e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.328769][ T31] RAX: ffffffffffffffda RBX: 00007ff510c25fa0 RCX: 00007ff51099e159 [ 423.328789][ T31] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 423.328806][ T31] RBP: 00007ff510a3506b R08: 0000000000000000 R09: 0000000000000000 [ 423.328824][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.328840][ T31] R13: 00007ff510c26038 R14: 00007ff510c25fa0 R15: 00007ffe0d3e8918 [ 423.328881][ T31] [ 423.328935][ T31] [ 423.328935][ T31] Showing all locks held in the system: [ 423.328949][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 423.328969][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 423.329061][ T31] locks held by getty/5376: 2, on CPU#1: [ 423.329080][ T31] #0: ffff88803665b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 423.329158][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 423.329243][ T31] locks held by syz-executor/10235: 7, on CPU#0: [ 423.329262][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.329342][ T31] #1: ffff88805335c080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.329412][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.329487][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.329552][ T31] #4: ffff88802c5bb128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 423.329622][ T31] #5: ffff88802c5ba258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 423.329690][ T31] #6: ffff8880510ba2f0 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 [ 423.348502][ T31] locks held by syz.1.1825/10529: 3, on CPU#1: [ 423.348523][ T31] #0: ffff88803679c0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 423.348599][ T31] #1: ffff88801fea2460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.348680][ T31] #2: ffff88802c5ba258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_health_report+0x305/0xb20 [ 423.348758][ T31] locks held by syz-executor/10979: 4, on CPU#0: [ 423.348777][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.348856][ T31] #1: ffff88803184c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.348925][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.349001][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.349070][ T31] locks held by syz-executor/11807: 4, on CPU#1: [ 423.349087][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.349162][ T31] #1: ffff888034fe2480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.349227][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.349300][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.349365][ T31] locks held by syz-executor/12490: 4, on CPU#0: [ 423.349382][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.349457][ T31] #1: ffff888069d0d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.349520][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.349608][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.349670][ T31] locks held by syz-executor/12612: 4, on CPU#0: [ 423.349689][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.349773][ T31] #1: ffff88805162fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.349840][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.349912][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.453198][ T31] locks held by syz-executor/13269: 4, on CPU#1: [ 423.453219][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.453312][ T31] #1: ffff888052f76480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.453382][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.453458][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.453525][ T31] locks held by syz.3.2889/13509: 5, on CPU#0: [ 423.453543][ T31] #0: ffff88802be822b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 423.453617][ T31] #1: ffff8880796e6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.453697][ T31] #2: ffff888069daf880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.453766][ T31] #3: ffff88802949ff08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.453841][ T31] #4: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 423.453907][ T31] locks held by syz-executor/13589: 4, on CPU#1: [ 423.453926][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.454006][ T31] #1: ffff888069d99480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.454107][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.454309][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.454376][ T31] locks held by syz-executor/13635: 4, on CPU#1: [ 423.454395][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.454475][ T31] #1: ffff88807a392c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.454544][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.454620][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.454686][ T31] locks held by syz-executor/13745: 4, on CPU#0: [ 423.454705][ T31] #0: ffff888024850460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 423.454784][ T31] #1: ffff88807bb2a480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 423.454852][ T31] #2: ffff88802949fe18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 423.454928][ T31] #3: ffffffff8facb860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 423.456547][ T31] locks held by cmp/14239: 1, last CPU#0: [ 423.456565][ T31] #0: ffff88807a90d038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 423.456696][ T31] [ 423.456704][ T31] ============================================= [ 423.456704][ T31] [ 423.456716][ T31] NMI backtrace for cpu 0 [ 423.456735][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 423.456767][ T31] Tainted: [L]=SOFTLOCKUP [ 423.456777][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 423.456793][ T31] Call Trace: [ 423.456804][ T31] [ 423.456815][ T31] dump_stack_lvl+0xe8/0x150 [ 423.456854][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 423.456881][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 423.456925][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 423.456956][ T31] sys_info+0x135/0x170 [ 423.456992][ T31] watchdog+0xfd7/0x1030 [ 423.457029][ T31] ? watchdog+0x1c7/0x1030 [ 423.457063][ T31] kthread+0x38b/0x480 [ 423.457090][ T31] ? __pfx_watchdog+0x10/0x10 [ 423.457114][ T31] ? __pfx_kthread+0x10/0x10 [ 423.457142][ T31] ret_from_fork+0x514/0xb70 [ 423.457171][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 423.457196][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.457253][ T31] ? __switch_to+0xc89/0x1420 [ 423.457293][ T31] ? __pfx_kthread+0x10/0x10 [ 423.457323][ T31] ret_from_fork_asm+0x1a/0x30 [ 423.457381][ T31] [ 423.457391][ T31] Sending NMI from CPU 0 to CPUs 1: [ 423.457419][ C1] NMI backtrace for cpu 1 [ 423.457436][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.457466][ C1] Tainted: [L]=SOFTLOCKUP [ 423.457475][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 423.457489][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 423.457523][ C1] Code: e8 7e ae 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f b7 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 55 13 9d fb cc 44 89 f9 80 e1 07 [ 423.457544][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 423.457564][ C1] RAX: 1ffffffff35a8000 RBX: 00000000000003fd RCX: 0000000000000000 [ 423.457581][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 423.457595][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 423.457611][ C1] R10: dffffc0000000000 R11: ffffffff85732d30 R12: dffffc0000000000 [ 423.457629][ C1] R13: 0000000000000000 R14: ffffffff9ad40280 R15: 0000000000000000 [ 423.457648][ C1] FS: 0000000000000000(0000) GS:ffff888124dcb000(0000) knlGS:0000000000000000 [ 423.457668][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.457684][ C1] CR2: 00007f0b965707b8 CR3: 0000000047633000 CR4: 0000000000350ef0 [ 423.457703][ C1] Call Trace: [ 423.457712][ C1] [ 423.457724][ C1] wait_for_lsr+0x184/0x2f0 [ 423.457762][ C1] __serial8250_console_fifo_write+0x346/0x3e0 [ 423.457804][ C1] serial8250_console_write+0xaa1/0x1200 [ 423.457838][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 423.457864][ C1] ? __schedule+0x17f1/0x58f0 [ 423.457891][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.457924][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.457957][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 423.457996][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 423.458030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.458057][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 423.458095][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.458121][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 423.458151][ C1] nbcon_kthread_func+0x679/0x880 [ 423.458183][ C1] ? nbcon_kthread_func+0x163/0x880 [ 423.458208][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 423.458234][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.458266][ C1] ? __kthread_parkme+0x71/0x1f0 [ 423.458301][ C1] ? __kthread_parkme+0x199/0x1f0 [ 423.458340][ C1] kthread+0x38b/0x480 [ 423.458363][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 423.458386][ C1] ? __pfx_kthread+0x10/0x10 [ 423.458411][ C1] ret_from_fork+0x514/0xb70 [ 423.458435][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 423.458460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.458487][ C1] ? __switch_to+0xc89/0x1420 [ 423.458522][ C1] ? __pfx_kthread+0x10/0x10 [ 423.458546][ C1] ret_from_fork_asm+0x1a/0x30 [ 423.458598][ C1] [ 423.471753][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 425.009874][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 425.020544][ T31] Tainted: [L]=SOFTLOCKUP [ 425.024852][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.034892][ T31] Call Trace: [ 425.038159][ T31] [ 425.041078][ T31] vpanic+0x56d/0xa60 [ 425.045065][ T31] ? __pfx___schedule+0x10/0x10 [ 425.049912][ T31] ? __pfx_vpanic+0x10/0x10 [ 425.054418][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.060056][ T31] panic+0xc5/0xd0 [ 425.063779][ T31] ? __pfx_panic+0x10/0x10 [ 425.068193][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 425.073649][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 425.079019][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 425.085168][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 425.091318][ T31] watchdog+0x1030/0x1030 [ 425.095648][ T31] ? watchdog+0x1c7/0x1030 [ 425.100092][ T31] kthread+0x38b/0x480 [ 425.104158][ T31] ? __pfx_watchdog+0x10/0x10 [ 425.108823][ T31] ? __pfx_kthread+0x10/0x10 [ 425.113406][ T31] ret_from_fork+0x514/0xb70 [ 425.117993][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 425.123093][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.128720][ T31] ? __switch_to+0xc89/0x1420 [ 425.133405][ T31] ? __pfx_kthread+0x10/0x10 [ 425.137989][ T31] ret_from_fork_asm+0x1a/0x30 [ 425.142773][ T31] [ 425.145992][ T31] Kernel Offset: disabled [ 425.150299][ T31] Rebooting in 86400 seconds..