last executing test programs: 3m32.323349427s ago: executing program 3 (id=6947): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x90}, 0x1, 0x7}, 0x0) 3m32.03346163s ago: executing program 3 (id=6951): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3m31.8343854s ago: executing program 3 (id=6957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x71a07}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3m31.308928387s ago: executing program 3 (id=6967): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0xb, '\x00', @buffer={"21e109bbd40fa147212cff67a0000000000004903e9583d9fa9372c5b07700", 0x20}, 0x4}, {0x29, '\x00', @st={0x4, [{0x0, @svalue=0xfe9}, {0x0, @uvalue=0x3071}, {0x2, @uvalue=0x8}, {0x2, @svalue=0x100}]}, 0x2}]}) 3m31.133491825s ago: executing program 3 (id=6973): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000020940)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRES16, @ANYRES8, @ANYRES16], 0x1, 0x182, &(0x7f0000000280)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 3m30.834667209s ago: executing program 3 (id=6978): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) 3m14.737021658s ago: executing program 32 (id=6978): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) 2m54.943787826s ago: executing program 2 (id=7622): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}], 0x20) 2m54.850677701s ago: executing program 2 (id=7625): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001fc0)={{0x12, 0x1, 0x110, 0x47, 0xc6, 0x42, 0x20, 0xbda, 0x139, 0xc364, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7f, 0xa0, 0x8, "", [{{0x9, 0x4, 0x9, 0x7, 0x0, 0xb6, 0x79, 0x55, 0xff}}]}}]}}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000002580)=@string={0x2}}, {0xd0, &(0x7f00000027c0)=@string={0xd0, 0x3, "aed170f5f6dbcb6ec46bfc40ae5f30bf81c3634ecdf5b40c0f2d42a08123228f5f885313ae3af1c36654c138597ae0404a100185191d05e6b16f053c0b14236e54f0a7f212049aea9c064050324d68288366d13932ed19f5cd71dfcae42c6c03a0f7d06def648564e11c50ddae4b8051765e5f4b0ae7ba456d5aec6697d65d9d300aa80d4af77fc1776ee5b3dd580915b35f8b9998bf3028026fa554ddd03e195b3018a31918f890ad9b6cb20cc9b441ca02e61b02cbe52c5be0172ecd5cdca6e5de1a9dbefda1bd45f8c255d6da"}}]}) 2m54.557628494s ago: executing program 1 (id=7630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010402000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a128000040280000240012800e00010069703667726574617000000010000280040012000600030094000000ba377213"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040004) 2m54.401719563s ago: executing program 1 (id=7634): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x8000, &(0x7f00000023c0)=ANY=[@ANYBLOB='size=4%-']) 2m54.281408865s ago: executing program 1 (id=7636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x200}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m54.133307131s ago: executing program 1 (id=7638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x61806}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc1}, 0x8840) 2m53.893115276s ago: executing program 1 (id=7641): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x11080}) 2m53.683293052s ago: executing program 1 (id=7645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 2m53.390461635s ago: executing program 2 (id=7646): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2m51.916050374s ago: executing program 2 (id=7666): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) 2m51.803907382s ago: executing program 2 (id=7668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="1400000001090101"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) 2m51.569740994s ago: executing program 2 (id=7672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m37.541322679s ago: executing program 33 (id=7645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 2m36.943288838s ago: executing program 5 (id=7926): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000ac0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e22, 0x0, @empty, 0x1}}}, 0xa0) 2m36.724788792s ago: executing program 5 (id=7929): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x0, 0x0, 0x55, "0bc7d8c0e9d3858fbb58b2afe39e4d1324791ce077bb34afe4dc3a16377f5b18cde351c0128f687094b206124c25bd554d7ab2396e30c11b5d090a6629dae3fd9a03ee0ba203b526e6090e9597a155ae57ebe08dca"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}}) 2m35.256646913s ago: executing program 34 (id=7672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m35.014676541s ago: executing program 5 (id=7942): r0 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001e00)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m34.819710299s ago: executing program 5 (id=7943): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 2m34.644344145s ago: executing program 5 (id=7945): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"}) 2m34.311028968s ago: executing program 5 (id=7950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) 2m18.286398871s ago: executing program 35 (id=7950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1m3.505226047s ago: executing program 4 (id=9272): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103901) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) 1m3.315138265s ago: executing program 4 (id=9277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 1m3.166792134s ago: executing program 4 (id=9280): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 1m2.459896831s ago: executing program 4 (id=9292): syz_usb_connect(0x1, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x5e, 0xa3, 0x86, 0x8, 0xb48, 0x1008, 0x146e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0x89, 0x0, 0x0, 0xce, 0xea, 0x93, 0x9}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1m0.956176926s ago: executing program 4 (id=9313): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1m0.662973485s ago: executing program 4 (id=9318): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) 44.422035533s ago: executing program 36 (id=9318): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) 2.304789299s ago: executing program 7 (id=9951): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x8, 0x7f, 0x5, 0x0, "00e4e50400"}) 2.253556609s ago: executing program 8 (id=9953): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) 2.037071196s ago: executing program 0 (id=9955): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0xfffffd76}], 0x2) 2.011679456s ago: executing program 7 (id=9957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)={0x14, 0x2, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1.913390581s ago: executing program 8 (id=9958): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.913192897s ago: executing program 9 (id=9959): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000040)={[{@uid}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@hide}, {@cruft}, {@session={'session', 0x3d, 0x61}}, {@uid}, {@showassoc}, {@unhide}, {@showassoc}, {@overriderock}, {@map_normal}]}, 0xfe, 0xa36, &(0x7f00000018c0)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) 1.667441983s ago: executing program 7 (id=9960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x2c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc2c}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4002000}, 0x80) 1.457043566s ago: executing program 6 (id=9961): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0xffffffffffffffff, &(0x7f0000000540)) 1.419419703s ago: executing program 0 (id=9962): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x39, 0x301, 0x70bd25, 0x25dfdbfd, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 1.412364438s ago: executing program 9 (id=9963): r0 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0xa87, 0x9, 0x4, "42a524514cefa95ba0a0dafcbc5d9f6e5a3b787f4f4863a637018ff897d112fb", 0x4142317f}) 1.202091984s ago: executing program 6 (id=9964): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0xfffffff8, 0xffffffff, 0x9, 0xfffc, 0x8000004, 0x0, 0x7, 0x400}}) 1.164281264s ago: executing program 0 (id=9965): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-+x111111111111110x2222222222222222,nqn=n', 0x77) 1.061013705s ago: executing program 8 (id=9966): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000080)="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", 0x559, r0) 1.056653497s ago: executing program 7 (id=9967): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x800) 1.0494334s ago: executing program 9 (id=9968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 908.822239ms ago: executing program 6 (id=9969): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000041401002cbd7000fedbdf2508"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x88c0) 756.155287ms ago: executing program 8 (id=9970): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newnexthop={0x2c, 0x68, 0x45b500e12d8059b9, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 679.874233ms ago: executing program 0 (id=9971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff0307684426e5f2a029e2cc8c", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 565.362152ms ago: executing program 9 (id=9972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 557.695432ms ago: executing program 7 (id=9973): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x8100000b, 0xfffffffffffffffd) 505.37638ms ago: executing program 6 (id=9974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x80) 428.213781ms ago: executing program 8 (id=9975): r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0xa, @output={0x1000, 0x0, {0x2, 0x43}, 0x3, 0x30d}}) 350.815888ms ago: executing program 0 (id=9976): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) statx(r0, &(0x7f000000e8c0)='\x00', 0x1000, 0x4, &(0x7f000000e900)) 297.865807ms ago: executing program 9 (id=9977): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 260.927279ms ago: executing program 6 (id=9978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 208.785564ms ago: executing program 7 (id=9979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "9c979b32261fbabdae20b34f87"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) 186.292859ms ago: executing program 8 (id=9980): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) userfaultfd(0x801) 97.156132ms ago: executing program 0 (id=9981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 169.106µs ago: executing program 9 (id=9982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2024, 0x1920}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2c0400c0}, 0x40008c0) 0s ago: executing program 6 (id=9983): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x5, 0x0, 0x34325258, 0x7, 0x2, [{0x48000, 0x101}, {0xa, 0x3f6}, {0x238, 0x80000001}, {0x1b, 0x9}, {0x9}, {0x6, 0x1ff}, {0x2}, {0x7f, 0x9}], 0xfa, 0xa6, 0x6, 0x0, 0x1}}) kernel console output (not intermixed with test programs): new high-speed USB device number 5 using dummy_hcd [ 743.400723][ T5709] ath6kl: Failed to init ath6kl core: -71 [ 743.409382][ T5709] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 743.427914][ T5709] usb 1-1: USB disconnect, device number 119 [ 743.518501][ T25] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 743.519650][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.519673][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 743.519717][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.539481][ T25] usb 7-1: config 0 descriptor?? [ 743.789954][ T25] Bluetooth: Can't get state to change to load ram patch err [ 743.790003][ T25] Bluetooth: Loading patch file failed [ 743.790044][ T25] ath3k 7-1:0.0: probe with driver ath3k failed with error -71 [ 743.805617][ T25] usb 7-1: USB disconnect, device number 5 [ 743.986430][T25320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8609'. [ 744.364072][T25314] loop7: detected capacity change from 0 to 32768 [ 744.394580][T25314] JBD2: Ignoring recovery information on journal [ 744.560155][T25314] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 744.616236][T25325] block device autoloading is deprecated and will be removed. [ 745.139787][T23744] ocfs2: Unmounting device (7,7) on (node local) [ 745.390386][T25364] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8628'. [ 745.398127][ T5709] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 745.567154][ T5709] usb 5-1: unable to get BOS descriptor or descriptor too short [ 745.567228][ T5709] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 745.568366][ T5709] usb 5-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 745.568391][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.568409][ T5709] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 745.604648][ T5709] usb 5-1: string descriptor 0 read error: -22 [ 745.604779][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.675097][ T5709] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 745.716459][T25352] loop6: detected capacity change from 0 to 32768 [ 745.724935][T25352] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8623 (25352) [ 745.757107][T25352] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 745.757167][T25352] BTRFS info (device loop6): using sha256 checksum algorithm [ 745.885670][T25352] BTRFS info (device loop6): setting nodatasum [ 745.885712][T25352] BTRFS info (device loop6): setting nodatacow [ 745.885745][T25352] BTRFS info (device loop6): enabling ssd optimizations [ 745.885765][T25352] BTRFS info (device loop6): turning on async discard [ 745.885785][T25352] BTRFS info (device loop6): enabling free space tree [ 745.885804][T25352] BTRFS info (device loop6): force clearing of disk cache [ 745.885825][T25352] BTRFS info (device loop6): max_inline set to 0 [ 745.939285][T25352] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 745.980726][ T30] audit: type=1326 audit(2000000285.681:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25397 comm="syz.8.8639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 745.980799][ T30] audit: type=1326 audit(2000000285.681:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25397 comm="syz.8.8639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 746.036924][T25396] loop7: detected capacity change from 0 to 256 [ 746.130619][T25400] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.138419][ T5709] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 746.152992][ T5709] usb 5-1: USB disconnect, device number 112 [ 746.381850][ T5744] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 746.554638][ T5744] usb 8-1: Using ep0 maxpacket: 16 [ 746.569074][ T5744] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 746.599867][ T5744] usb 8-1: config index 0 descriptor too short (expected 59553, got 10) [ 746.599919][ T5744] usb 8-1: config 245 has too many interfaces: 105, using maximum allowed: 32 [ 746.599938][ T5744] usb 8-1: config 245 descriptor has 1 excess byte, ignoring [ 746.599954][ T5744] usb 8-1: config 245 has 0 interfaces, different from the descriptor's value: 105 [ 746.610029][ T5744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.610056][ T5744] usb 8-1: Product: syz [ 746.610069][ T5744] usb 8-1: Manufacturer: syz [ 746.610082][ T5744] usb 8-1: SerialNumber: syz [ 746.671758][T25407] loop0: detected capacity change from 0 to 4096 [ 746.702969][T25407] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 746.757649][T25407] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 746.758821][T25407] ntfs3(loop0): Failed to load $Extend (-22). [ 746.758844][T25407] ntfs3(loop0): Failed to initialize $Extend. [ 746.860105][ T5744] usb 8-1: USB disconnect, device number 3 [ 747.018305][T25412] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 748.064195][T25447] loop6: detected capacity change from 0 to 4096 [ 748.077581][T25447] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 748.140547][T25447] ntfs3(loop6): ino=19, mi_enum_attr [ 748.140611][T25447] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 748.232605][T25447] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 748.366731][T25446] loop4: detected capacity change from 0 to 32768 [ 748.397752][T25446] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 748.503213][T25446] XFS (loop4): Ending clean mount [ 748.514600][T25432] loop8: detected capacity change from 0 to 32768 [ 748.529182][T25432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8654 (25432) [ 748.573762][T25432] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 748.573817][T25432] BTRFS info (device loop8): using sha256 checksum algorithm [ 748.697328][ T5621] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 748.877968][T25432] BTRFS info (device loop8): enabling ssd optimizations [ 748.878016][T25432] BTRFS info (device loop8): turning on async discard [ 748.878050][T25432] BTRFS info (device loop8): enabling free space tree [ 748.905271][T25485] netlink: 'syz.7.8670': attribute type 354 has an invalid length. [ 749.599715][T25508] netlink: 'syz.6.8679': attribute type 21 has an invalid length. [ 749.943122][T25432] BTRFS info (device loop8): balance: start -susage=3840,drange=7..7,vrange=1056968006..2199023255806,limit=9..1,stripes=3..3324 [ 749.964211][T25432] BTRFS info (device loop8): balance: ended with status: 0 [ 750.044401][T24317] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 750.417914][T25537] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8693'. [ 750.417958][T25537] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8693'. [ 750.562866][T25541] loop8: detected capacity change from 0 to 512 [ 750.566150][T25536] veth5: entered promiscuous mode [ 750.583253][T25541] EXT4-fs: Ignoring removed oldalloc option [ 750.727196][T25545] netlink: 'syz.4.8697': attribute type 4 has an invalid length. [ 750.793374][T25541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.793495][T25541] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.938984][T24317] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.212888][T25560] loop6: detected capacity change from 0 to 256 [ 751.213842][T25560] exfat: Deprecated parameter 'namecase' [ 751.213907][T25560] exfat: Deprecated parameter 'utf8' [ 751.253032][T25560] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 751.338161][T25549] loop0: detected capacity change from 0 to 32768 [ 751.355956][T25549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8699 (25549) [ 751.390553][T25549] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 751.390607][T25549] BTRFS info (device loop0): using sha256 checksum algorithm [ 751.555695][T25549] BTRFS info (device loop0): enabling ssd optimizations [ 751.555746][T25549] BTRFS info (device loop0): turning on async discard [ 751.555762][T25549] BTRFS info (device loop0): enabling free space tree [ 751.747414][ T5611] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 752.619130][T25625] netlink: 'syz.8.8727': attribute type 12 has an invalid length. [ 752.984616][T25609] loop6: detected capacity change from 0 to 32768 [ 753.071365][T25609] [ 753.071365][T25609] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.071365][T25609] [ 753.123052][T25609] JFS: metapage_get_blocks failed [ 753.142398][T25609] ERROR: (device loop6): release_metapage: metapage_write_one() failed [ 753.142398][T25609] [ 753.199410][T25609] ERROR: (device loop6): diWrite: ixpxd invalid [ 753.199410][T25609] [ 753.199473][T25609] ERROR: (device loop6): txCommit: [ 753.199473][T25609] [ 753.422962][T25622] loop7: detected capacity change from 0 to 32768 [ 753.432158][T25622] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.8725 (25622) [ 753.470947][T23683] [ 753.470947][T23683] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.470947][T23683] [ 753.493002][T23683] [ 753.493002][T23683] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.493002][T23683] [ 753.526571][T25622] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 753.526627][T25622] BTRFS info (device loop7): using sha256 checksum algorithm [ 753.679846][T25622] BTRFS info (device loop7): enabling ssd optimizations [ 753.679898][T25622] BTRFS info (device loop7): turning on async discard [ 753.679915][T25622] BTRFS info (device loop7): enabling free space tree [ 753.679930][T25622] BTRFS info (device loop7): force clearing of disk cache [ 753.679946][T25622] BTRFS info (device loop7): force zlib compression, level 3 [ 753.679963][T25622] BTRFS info (device loop7): max_inline set to 0 [ 753.772626][T25652] tmpfs: Bad value for 'mpol' [ 753.867582][T25653] bridge8: entered promiscuous mode [ 753.867631][T25653] bridge8: entered allmulticast mode [ 754.052462][T25658] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8736'. [ 754.154719][T25658] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 754.155225][T25658] bridge1: entered promiscuous mode [ 754.251330][T25660] bond2: entered allmulticast mode [ 754.263850][T25660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 754.524510][T23744] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 755.485389][T25700] ALSA: mixer_oss: invalid OSS volume 'H' [ 756.548828][T25753] netlink: 'syz.6.8780': attribute type 1 has an invalid length. [ 756.875535][T25770] loop7: detected capacity change from 0 to 512 [ 756.899475][T25770] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 756.913009][T25770] EXT4-fs (loop7): 1 truncate cleaned up [ 756.924137][T25770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.957662][T25770] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 756.980628][ T5803] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 757.011319][T25778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8791'. [ 757.037998][T25777] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 757.039996][T23744] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.061433][T25777] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 757.072300][T25777] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 757.087684][T25777] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 757.098332][T25777] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 757.108961][T25777] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x2000 instead [ 757.119779][T25777] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000258: 0x00e4 instead [ 757.140838][ T5803] usb 5-1: Using ep0 maxpacket: 8 [ 757.146561][ T5803] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 757.158473][ T5803] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 757.158518][ T5803] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 757.158568][ T5803] usb 5-1: config 0 has no interface number 0 [ 757.158609][ T5803] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.158638][ T5803] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 757.158667][ T5803] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 757.220132][ T5803] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 757.220159][ T5803] usb 5-1: Product: syz [ 757.220183][ T5803] usb 5-1: Manufacturer: syz [ 757.220502][T25777] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 757.220514][T25777] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 757.258596][ T5803] usb 5-1: config 0 descriptor?? [ 757.266649][T25763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 757.647205][T25795] loop8: detected capacity change from 0 to 1024 [ 757.751723][T25795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.781110][ T5803] usb 5-1: USB disconnect, device number 113 [ 757.830964][T25795] EXT4-fs error (device loop8): ext4_empty_dir:3116: inode #11: block 623: comm syz.8.8802: Attempting to read directory block (623) that is past i_size (638464) [ 757.997878][T24317] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.053015][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 758.053071][ T30] audit: type=1326 audit(2000000296.968:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.053120][ T30] audit: type=1326 audit(2000000296.977:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.084363][ T30] audit: type=1326 audit(2000000296.977:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.084412][ T30] audit: type=1326 audit(2000000296.977:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.084670][ T30] audit: type=1326 audit(2000000296.977:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.089532][ T30] audit: type=1326 audit(2000000297.015:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.089580][ T30] audit: type=1326 audit(2000000297.015:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.106204][ T30] audit: type=1326 audit(2000000297.015:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.106255][ T30] audit: type=1326 audit(2000000297.015:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25809 comm="syz.6.8806" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f070919e0d9 code=0x7ffc0000 [ 758.354548][T25819] loop4: detected capacity change from 0 to 512 [ 758.394744][T25819] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 758.395056][T25819] EXT4-fs (loop4): orphan cleanup on readonly fs [ 758.429659][T25819] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 758.446530][T25819] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 758.458244][T25819] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #16: comm syz.4.8813: corrupted xattr block 31: invalid header [ 758.458296][T25819] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 758.472217][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 758.472244][ C1] EXT4-fs (loop4): initial error at time 2000000297: ext4_xattr_delete_inode:2933: inode 16 [ 758.472276][ C1] EXT4-fs (loop4): last error at time 2000000297: ext4_xattr_delete_inode:2933: inode 16 [ 758.502824][T25819] EXT4-fs (loop4): Remounting filesystem read-only [ 758.502849][T25819] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 758.502941][T25819] EXT4-fs (loop4): 1 orphan inode deleted [ 758.544666][T25819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 758.615159][T25827] 9pnet_fd: p9_fd_create_unix (25827): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 758.690478][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.750560][T25831] loop6: detected capacity change from 0 to 2048 [ 758.771018][T25831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 758.891650][ T59] nvmet: connect request for invalid subsystem te! [ 758.891854][T25825] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 759.192384][ T5709] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 759.286560][T25850] loop4: detected capacity change from 0 to 4096 [ 759.290200][T25850] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 759.328574][T25850] ntfs3(loop4): ino=19, mi_enum_attr [ 759.328622][T25850] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 759.345885][T25850] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 759.375509][ T5709] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 759.386842][ T5709] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 759.386884][ T5709] usb 9-1: config 179 has no interface number 0 [ 759.386926][ T5709] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 759.386955][ T5709] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 759.386984][ T5709] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 759.387011][ T5709] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 759.387038][ T5709] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 759.387078][ T5709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.474059][T25841] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 759.481556][T25841] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 759.678295][T25859] loop0: detected capacity change from 0 to 16 [ 759.706096][T25859] erofs (device loop0): mounted with root inode @ nid 36. [ 759.725884][T25859] syz.0.8831: attempt to access beyond end of device [ 759.725884][T25859] loop0: rw=8388608, sector=34225530872, nr_sectors = 8 limit=16 [ 759.884403][ T4931] Bluetooth: hci8: Received unexpected HCI Event 0x00 [ 759.894792][ T191] usb 9-1: USB disconnect, device number 5 [ 759.894787][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 760.098658][T25875] kAFS: unable to lookup cell 'syze@s0' [ 760.203349][T25881] gre0: entered promiscuous mode [ 760.203415][T25881] gre0: entered allmulticast mode [ 760.231617][T25883] syz.0.8842 (25883): drop_caches: 0 [ 760.762864][T25907] loop0: detected capacity change from 0 to 512 [ 760.785977][T25907] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 760.797757][T25907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 760.806870][T25907] EXT4-fs (loop0): orphan cleanup on readonly fs [ 760.813944][T25907] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #13: comm syz.0.8852: iget: bad i_size value: 12154761577498 [ 760.827593][T25907] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 760.829285][T25907] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.8852: couldn't read orphan inode 13 (err -117) [ 760.839135][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 760.839161][ C1] EXT4-fs (loop0): initial error at time 2000000299: ext4_orphan_get:1403: inode 13 [ 760.839190][ C1] EXT4-fs (loop0): last error at time 2000000299: ext4_orphan_get:1403: inode 13 [ 760.883939][T25907] loop0: lost filesystem error report for type 5 error -117 [ 760.887629][T25907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 760.936763][T25913] loop6: detected capacity change from 0 to 512 [ 760.943437][T25907] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 760.943478][T25907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 760.974027][T25913] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 760.989152][T25913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 760.997647][T25913] System zones: 1-12 [ 761.002609][T25913] EXT4-fs (loop6): orphan cleanup on readonly fs [ 761.018673][T25913] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8856: invalid indirect mapped block 12 (level 1) [ 761.032526][T25913] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 761.034472][T25913] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8856: invalid indirect mapped block 2 (level 2) [ 761.044048][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 761.044073][ C1] EXT4-fs (loop6): initial error at time 2000000299: ext4_free_branches:1023: inode 11 [ 761.044103][ C1] EXT4-fs (loop6): last error at time 2000000299: ext4_free_branches:1023: inode 11 [ 761.066558][T25913] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 761.072580][T25913] EXT4-fs (loop6): 1 truncate cleaned up [ 761.085430][T25913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 761.178175][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.252637][T23683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 761.303465][T25924] ieee802154 phy0 wpan0: encryption failed: -22 [ 761.350912][ T191] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 761.511694][ T191] usb 5-1: Using ep0 maxpacket: 32 [ 761.512421][ T191] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 761.513435][ T191] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 761.513460][ T191] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 761.513483][ T191] usb 5-1: config 0 interface 0 has no altsetting 0 [ 761.515585][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.515608][ T191] usb 5-1: Product: syz [ 761.515623][ T191] usb 5-1: Manufacturer: syz [ 761.515636][ T191] usb 5-1: SerialNumber: syz [ 761.533035][ T191] usb 5-1: config 0 descriptor?? [ 761.691389][T25942] netlink: 'syz.0.8870': attribute type 64 has an invalid length. [ 761.707407][T25939] Option '&7f%R(ﮘWO]mA(BeTv_bJqQ-I:' to dns_resolver key: bad/missing value [ 761.903112][T25950] loop7: detected capacity change from 0 to 256 [ 761.987099][ T191] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 761.987153][ T191] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 762.021234][ T191] usb 5-1: USB disconnect, device number 114 [ 762.729394][ T191] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 762.739279][T25991] netlink: 'syz.7.8893': attribute type 3 has an invalid length. [ 762.890523][ T191] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 762.901188][ T191] usb 1-1: config index 0 descriptor too short (expected 86, got 72) [ 762.914457][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.922987][ T191] usb 1-1: Product: syz [ 762.928277][ T191] usb 1-1: Manufacturer: syz [ 762.935949][ T191] usb 1-1: SerialNumber: syz [ 762.987911][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 763.144235][T26008] netlink: 'syz.7.8903': attribute type 21 has an invalid length. [ 763.154298][T26008] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8903'. [ 763.288556][T26014] loop6: detected capacity change from 0 to 1024 [ 763.406480][T26016] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8907'. [ 763.492122][ T44] usb 1-1: USB disconnect, device number 120 [ 763.527198][T26020] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 763.527198][T26020] [ 763.527544][T26020] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 763.529659][T26020] CIFS mount error: No usable UNC path provided in device string! [ 763.529659][T26020] [ 763.529680][T26020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 763.695233][T26024] loop6: detected capacity change from 0 to 4096 [ 763.809663][T26024] ntfs3(loop6): Failed to load $Extend (-22). [ 763.809714][T26024] ntfs3(loop6): Failed to initialize $Extend. [ 764.059519][T26036] loop7: detected capacity change from 0 to 4096 [ 764.080420][T26036] EXT4-fs (loop7): Test dummy encryption mode enabled [ 764.082438][T26036] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 764.088285][T26036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.157897][T26036] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 764.181499][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 764.181694][ T9] ath9k_htc: Failed to initialize the device [ 764.197317][ T44] usb 1-1: ath9k_htc: USB layer deinitialized [ 764.281034][T23744] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.481623][T26053] loop0: detected capacity change from 0 to 128 [ 764.537821][T26055] loop8: detected capacity change from 0 to 1024 [ 764.544030][T26055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 764.544081][T26055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 764.558779][T26055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 764.580304][T26053] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 764.595674][T26053] ext4 filesystem being mounted at /1878/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.634790][T26055] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.657596][T26053] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.8925: No space for directory leaf checksum. Please run e2fsck -D. [ 764.657658][T26053] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #2: comm syz.0.8925: checksumming directory block 0 [ 764.704438][T26058] loop6: detected capacity change from 0 to 4096 [ 764.739295][T26058] ntfs3(loop6): ino=0, mi_enum_attr [ 764.766173][T26058] ntfs3(loop6): ino=0, mi_enum_attr [ 764.766238][T26058] ntfs3(loop6): ino=0, mi_enum_attr [ 764.819289][T26068] netlink: 'syz.7.8929': attribute type 1 has an invalid length. [ 764.861533][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 764.902566][T24317] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.249893][T26082] loop8: detected capacity change from 0 to 256 [ 765.263164][T26082] exfat: Deprecated parameter 'utf8' [ 765.263288][T26082] exfat: Deprecated parameter 'namecase' [ 765.263340][T26082] exfat: Deprecated parameter 'namecase' [ 765.357107][T26082] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 765.410610][T26087] netlink: 'syz.7.8939': attribute type 1 has an invalid length. [ 765.433083][ T30] audit: type=1800 audit(2000000303.894:662): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8938" name="file1" dev="loop8" ino=1048690 res=0 errno=0 [ 765.451634][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8940'. [ 765.451729][T26088] bridge_slave_1: left allmulticast mode [ 765.451751][T26088] bridge_slave_1: left promiscuous mode [ 765.452057][T26088] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.520605][T26088] bridge_slave_0: left allmulticast mode [ 765.520663][T26088] bridge_slave_0: left promiscuous mode [ 765.528071][T26088] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.619831][T26098] netlink: 'syz.7.8945': attribute type 1 has an invalid length. [ 766.331750][T26100] loop7: detected capacity change from 0 to 32768 [ 766.345291][T26100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.8948 (26100) [ 766.365808][T26100] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 766.376303][T26100] BTRFS info (device loop7): using sha256 checksum algorithm [ 766.526765][T26139] fuse: blksize only supported for fuseblk [ 766.604285][T26100] BTRFS info (device loop7): enabling ssd optimizations [ 766.604344][T26100] BTRFS info (device loop7): turning on async discard [ 766.604693][T26100] BTRFS info (device loop7): enabling free space tree [ 766.883085][T26143] loop8: detected capacity change from 0 to 4096 [ 766.890968][T26143] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 766.975925][T26143] ntfs3(loop8): ino=19, mi_enum_attr [ 766.975972][T26143] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 766.983056][T26143] ntfs3(loop8): ino=1a, mi_enum_attr [ 766.983188][T26143] ntfs3(loop8): ino=1a, mi_enum_attr [ 766.983206][T26143] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 767.244485][T23744] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 767.449427][T26104] loop4: detected capacity change from 0 to 32768 [ 767.479956][T26104] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 767.491139][T26104] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 767.559576][T26104] gfs2: fsid=syz:syz.s: fatal: invalid metadata block - bh = 19 (type: exp=4, found=5), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 460 [ 767.559646][T26104] CPU: 1 UID: 0 PID: 26104 Comm: syz.4.8949 Not tainted syzkaller #0 PREEMPT(full) [ 767.559670][T26104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.559680][T26104] Call Trace: [ 767.559688][T26104] [ 767.559699][T26104] dump_stack_lvl+0xe8/0x150 [ 767.559733][T26104] gfs2_withdraw+0xc3/0x1b0 [ 767.559758][T26104] gfs2_meta_buffer+0x250/0x2e0 [ 767.559792][T26104] inode_go_instantiate+0xf4/0x12b0 [ 767.559821][T26104] ? __wait_on_bit+0xef/0x300 [ 767.559847][T26104] ? __pfx_bit_wait+0x10/0x10 [ 767.559871][T26104] ? out_of_line_wait_on_bit+0x13b/0x190 [ 767.559895][T26104] ? __pfx_bit_wait+0x10/0x10 [ 767.559918][T26104] ? __pfx_inode_go_instantiate+0x10/0x10 [ 767.559945][T26104] ? do_raw_spin_unlock+0xf5/0x210 [ 767.559972][T26104] ? __pfx_wake_bit_function+0x10/0x10 [ 767.560002][T26104] gfs2_instantiate+0x168/0x220 [ 767.560026][T26104] gfs2_glock_wait+0x1d4/0x2a0 [ 767.560051][T26104] check_journal_clean+0x151/0x360 [ 767.560074][T26104] ? __pfx_check_journal_clean+0x10/0x10 [ 767.560096][T26104] ? init_journal+0x1b2a/0x2330 [ 767.560144][T26104] ? do_raw_spin_unlock+0xf5/0x210 [ 767.560170][T26104] ? _raw_spin_unlock+0x28/0x50 [ 767.560274][T26104] ? gfs2_jdesc_find+0xab/0xc0 [ 767.560300][T26104] init_journal+0x1b2a/0x2330 [ 767.560332][T26104] ? init_inodes+0xdb/0x320 [ 767.560354][T26104] ? __asan_memcpy+0x40/0x70 [ 767.560377][T26104] ? __pfx_init_journal+0x10/0x10 [ 767.560396][T26104] ? vsnprintf+0xe42/0xef0 [ 767.560429][T26104] ? snprintf+0xe8/0x140 [ 767.560451][T26104] ? init_inodes+0xdb/0x320 [ 767.560478][T26104] ? __pfx_snprintf+0x10/0x10 [ 767.560500][T26104] ? gfs2_glock_nq_num+0x15f/0x1a0 [ 767.560527][T26104] init_inodes+0xdb/0x320 [ 767.560550][T26104] gfs2_fill_super+0x1959/0x20d0 [ 767.560583][T26104] ? __pfx_gfs2_fill_super+0x10/0x10 [ 767.560606][T26104] ? init_locking+0xb8/0x210 [ 767.560625][T26104] ? sb_set_blocksize+0x155/0x240 [ 767.560658][T26104] ? setup_bdev_super+0x586/0x680 [ 767.560682][T26104] get_tree_bdev_flags+0x430/0x4f0 [ 767.560706][T26104] ? __pfx_gfs2_fill_super+0x10/0x10 [ 767.560725][T26104] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 767.560758][T26104] gfs2_get_tree+0x51/0x1e0 [ 767.560780][T26104] vfs_get_tree+0x92/0x2a0 [ 767.560804][T26104] do_new_mount+0x319/0xdc0 [ 767.560838][T26104] ? __pfx_do_new_mount+0x10/0x10 [ 767.560867][T26104] ? ns_capable+0x89/0xe0 [ 767.560893][T26104] ? path_mount+0x647/0x1050 [ 767.560923][T26104] ? user_path_at+0xd4/0x160 [ 767.560946][T26104] __se_sys_mount+0x31d/0x420 [ 767.560980][T26104] ? __pfx___se_sys_mount+0x10/0x10 [ 767.561015][T26104] ? __x64_sys_mount+0x20/0xc0 [ 767.561045][T26104] do_syscall_64+0x166/0x510 [ 767.561070][T26104] ? trace_irq_disable+0x3b/0x140 [ 767.561097][T26104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.561117][T26104] ? clear_bhb_loop+0x70/0xc0 [ 767.561141][T26104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.561161][T26104] RIP: 0033:0x7f5fe4d9f34a [ 767.561182][T26104] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.561199][T26104] RSP: 002b:00007f5fe5d50e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 767.561222][T26104] RAX: ffffffffffffffda RBX: 00007f5fe5d50ee0 RCX: 00007f5fe4d9f34a [ 767.561237][T26104] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f5fe5d50ea0 [ 767.561252][T26104] RBP: 0000200000000400 R08: 00007f5fe5d50ee0 R09: 0000000000210401 [ 767.561266][T26104] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 767.561280][T26104] R13: 00007f5fe5d50ea0 R14: 00000000000125d8 R15: 0000200000000240 [ 767.561311][T26104] [ 767.574165][T26104] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount. [ 768.216650][T26167] cgroup: name respecified [ 768.249849][T26152] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8965 (26152) [ 768.294436][T26152] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 768.310406][T26152] BTRFS info (device loop6): using sha256 checksum algorithm [ 768.558710][T26193] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 768.558797][T26152] BTRFS info (device loop6): enabling ssd optimizations [ 768.558817][T26152] BTRFS info (device loop6): turning on async discard [ 768.558831][T26152] BTRFS info (device loop6): enabling free space tree [ 768.791234][T23683] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 768.886988][T26206] set_capacity_and_notify: 1 callbacks suppressed [ 768.906936][T26206] loop8: detected capacity change from 0 to 256 [ 769.111240][T26208] xt_CT: No such helper "snmp" [ 769.683967][T26234] sit0: entered promiscuous mode [ 769.721036][T26234] netlink: 21 bytes leftover after parsing attributes in process `syz.6.8993'. [ 769.860438][T26239] netlink: 'syz.7.8998': attribute type 8 has an invalid length. [ 770.094069][T26249] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 771.575409][T26317] loop0: detected capacity change from 0 to 128 [ 771.592208][T26317] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 771.611470][T26317] ext4 filesystem being mounted at /1904/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 771.683533][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 771.724099][T26323] loop8: detected capacity change from 0 to 4096 [ 771.808721][T26323] ntfs3(loop8): Failed to load $Extend (-22). [ 771.822847][T26323] ntfs3(loop8): Failed to initialize $Extend. [ 772.143158][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 772.299683][T26344] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9049'. [ 772.309245][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 772.316984][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 772.317063][ T9] usb 7-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=93.12 [ 772.336038][ T9] usb 7-1: config 7 has an invalid interface number: 201 but max is 0 [ 772.336078][ T9] usb 7-1: config 7 has no interface number 0 [ 772.356181][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.366141][ T9] usb 7-1: Product: syz [ 772.370663][ T9] usb 7-1: Manufacturer: syz [ 772.375361][ T9] usb 7-1: SerialNumber: syz [ 772.425779][T26350] netlink: 'syz.8.9052': attribute type 10 has an invalid length. [ 772.455865][T26350] team0: Port device dummy0 added [ 772.543509][T26354] loop4: detected capacity change from 0 to 512 [ 772.546905][T26353] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 772.569298][T26354] EXT4-fs: Ignoring removed bh option [ 772.585561][T26354] EXT4-fs (loop4): Test dummy encryption mode enabled [ 772.585622][T26354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 772.596154][T26354] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.9053: inode has both inline data and extents flags [ 772.596188][T26354] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 772.596606][T26354] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.9053: couldn't read orphan inode 15 (err -117) [ 772.596633][T26354] loop4: lost filesystem error report for type 5 error -117 [ 772.609100][T26354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.687842][ T5709] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 772.707507][ T9] option 7-1:7.201: GSM modem (1-port) converter detected [ 772.732324][ T9] usb 7-1: USB disconnect, device number 6 [ 772.741553][ T9] option 7-1:7.201: device disconnected [ 772.804098][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.832869][T26334] loop7: detected capacity change from 0 to 32768 [ 772.853161][ T5709] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 772.857491][ T5709] usb 1-1: config 8 has an invalid interface number: 137 but max is 0 [ 772.857518][ T5709] usb 1-1: config 8 has no interface number 0 [ 772.870101][ T5709] usb 1-1: string descriptor 0 read error: -22 [ 772.870232][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.978922][ T5709] ttusb_dec_send_command: command bulk message failed: error -22 [ 772.979181][ T5709] ttusb-dec 1-1:8.137: probe with driver ttusb-dec failed with error -22 [ 773.155051][ T5348] usb 1-1: USB disconnect, device number 121 [ 773.244829][T26368] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 773.268468][T26368] Error validating options; rc = [-22] [ 773.407925][T26370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9062'. [ 773.705057][T26386] loop4: detected capacity change from 0 to 16 [ 773.711939][T26386] erofs (device loop4): mounted with root inode @ nid 36. [ 773.734062][ T4931] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 773.749786][T26386] erofs (device loop4): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 773.761797][T26386] erofs (device loop4): read error -117 @ 1 of nid 89 [ 773.769331][ T30] audit: type=1800 audit(2000000311.690:663): pid=26386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9067" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 773.892269][ T30] audit: type=1326 audit(2000000311.802:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 773.920746][ T30] audit: type=1326 audit(2000000311.830:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 773.923540][T26394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9072'. [ 773.931073][ T30] audit: type=1326 audit(2000000311.840:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 773.931121][ T30] audit: type=1326 audit(2000000311.840:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 773.949893][ T30] audit: type=1326 audit(2000000311.858:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 773.949943][ T30] audit: type=1326 audit(2000000311.858:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 773.949983][ T30] audit: type=1326 audit(2000000311.858:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 773.957366][ T30] audit: type=1326 audit(2000000311.858:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 773.957417][ T30] audit: type=1326 audit(2000000311.858:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26391 comm="syz.8.9073" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 774.153973][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 774.288368][T26403] x_tables: duplicate underflow at hook 4 [ 774.314507][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 774.314587][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 774.317556][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.317582][ T9] usb 7-1: Product: syz [ 774.317595][ T9] usb 7-1: Manufacturer: syz [ 774.317609][ T9] usb 7-1: SerialNumber: syz [ 774.325346][ T9] usb 7-1: config 0 descriptor?? [ 774.501283][T26396] loop7: detected capacity change from 0 to 32768 [ 774.575809][T26396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9075 (26396) [ 774.608633][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 774.615371][ T9] gspca_sn9c2028: read1 error -71 [ 774.620464][ T9] gspca_sn9c2028: read1 error -71 [ 774.621008][ T9] gspca_sn9c2028: read1 error -71 [ 774.621082][ T9] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 774.631440][ T9] usb 7-1: USB disconnect, device number 7 [ 774.683459][T26396] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 774.698554][T26396] BTRFS info (device loop7): using sha256 checksum algorithm [ 774.838853][T26396] BTRFS info (device loop7): enabling ssd optimizations [ 774.838901][T26396] BTRFS info (device loop7): turning on async discard [ 774.838945][T26396] BTRFS info (device loop7): enabling free space tree [ 774.964582][T23744] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 775.043884][T26434] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 775.572356][ T5348] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 775.694740][T26458] loop0: detected capacity change from 0 to 256 [ 775.732822][ T5348] usb 9-1: Using ep0 maxpacket: 32 [ 775.738907][ T5348] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 775.751074][ T5348] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.751158][ T5348] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.778169][ T5348] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 775.778212][ T5348] usb 9-1: Product: syz [ 775.778252][ T5348] usb 9-1: Manufacturer: syz [ 775.778270][ T5348] usb 9-1: SerialNumber: syz [ 775.805530][ T5348] usb 9-1: config 0 descriptor?? [ 775.814288][ T5348] hub 9-1:0.0: bad descriptor, ignoring hub [ 775.820510][ T5348] hub 9-1:0.0: probe with driver hub failed with error -5 [ 776.171283][ T5348] usb 9-1: USB disconnect, device number 6 [ 776.271056][T26476] loop7: detected capacity change from 0 to 256 [ 776.281447][T26476] exfat: Deprecated parameter 'utf8' [ 776.288533][T26476] exfat: Deprecated parameter 'namecase' [ 776.294708][T26476] exfat: Deprecated parameter 'namecase' [ 776.301783][T26476] exfat: Deprecated parameter 'utf8' [ 776.334884][T26476] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 776.335237][T26476] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 776.392414][T26449] loop4: detected capacity change from 0 to 32768 [ 776.517126][T26449] dmapctl: leaf value 127 too large at index 344 [ 776.517174][T26449] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 776.517174][T26449] [ 776.517455][T26449] ERROR: (device loop4): remounting filesystem as read-only [ 776.656660][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9108'. [ 776.656766][T26482] bridge_slave_1: left allmulticast mode [ 776.656788][T26482] bridge_slave_1: left promiscuous mode [ 776.657008][T26482] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.735639][T26482] bridge_slave_0: left allmulticast mode [ 776.735672][T26482] bridge_slave_0: left promiscuous mode [ 776.738977][T26482] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.225053][T26472] loop0: detected capacity change from 0 to 32768 [ 777.490271][T26511] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 777.522164][T26513] netlink: 25 bytes leftover after parsing attributes in process `syz.7.9120'. [ 777.522222][T26513] netlink: 25 bytes leftover after parsing attributes in process `syz.7.9120'. [ 777.781466][T26519] netlink: 196 bytes leftover after parsing attributes in process `syz.7.9126'. [ 777.796108][T26519] netlink: 196 bytes leftover after parsing attributes in process `syz.7.9126'. [ 777.796162][T26519] netlink: 19 bytes leftover after parsing attributes in process `syz.7.9126'. [ 777.961876][T26505] loop6: detected capacity change from 0 to 40427 [ 777.971604][T26505] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 777.971661][T26505] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 777.972465][T26505] F2FS-fs (loop6): Image doesn't support compression [ 777.972485][T26505] F2FS-fs (loop6): build fault injection rate: 690 [ 777.972500][T26505] F2FS-fs (loop6): build fault injection type: 0x35f7 [ 777.975059][T26505] F2FS-fs (loop6): invalid crc value [ 778.428337][T26543] loop7: detected capacity change from 0 to 256 [ 778.444775][T26505] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 778.569590][T26549] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9139'. [ 778.571475][T26505] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 778.571505][T26505] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 778.571530][T26505] F2FS-fs (loop6): Start checkpoint disabled! [ 778.728385][T26553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9143'. [ 778.810764][T26505] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 778.822204][T26505] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 778.822250][T26505] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 778.859928][T26558] loop7: detected capacity change from 0 to 256 [ 779.033338][ T1113] kworker/u8:8: attempt to access beyond end of device [ 779.033338][ T1113] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 779.089550][ T1113] CPU: 1 UID: 0 PID: 1113 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 779.089582][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 779.089593][ T1113] Workqueue: writeback wb_workfn (flush-7:6) [ 779.089628][ T1113] Call Trace: [ 779.089636][ T1113] [ 779.089645][ T1113] dump_stack_lvl+0xe8/0x150 [ 779.089675][ T1113] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 779.089703][ T1113] f2fs_write_end_bio+0x1211/0x16e0 [ 779.089734][ T1113] ? blkg_put+0x22/0x240 [ 779.089771][ T1113] __submit_merged_bio+0x258/0x6a0 [ 779.089792][ T1113] ? rcu_is_watching+0x15/0xb0 [ 779.089816][ T1113] __submit_merged_write_cond+0x3c9/0x4e0 [ 779.089847][ T1113] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 779.089892][ T1113] f2fs_write_data_pages+0x2a27/0x36f0 [ 779.089954][ T1113] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 779.089993][ T1113] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 779.090054][ T1113] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 779.090097][ T1113] ? __lock_acquire+0x6df/0x2e50 [ 779.090142][ T1113] ? set_shrinker_bit+0x7c/0x350 [ 779.090169][ T1113] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 779.090195][ T1113] do_writepages+0x338/0x560 [ 779.090225][ T1113] ? reacquire_held_locks+0x117/0x1a0 [ 779.090246][ T1113] ? writeback_sb_inodes+0x450/0x1b00 [ 779.090278][ T1113] __writeback_single_inode+0x136/0x1220 [ 779.090316][ T1113] ? do_raw_spin_unlock+0xf5/0x210 [ 779.090353][ T1113] writeback_sb_inodes+0x9de/0x1b00 [ 779.090379][ T1113] ? __lock_acquire+0x6df/0x2e50 [ 779.090420][ T1113] ? lock_acquire+0x115/0x350 [ 779.090454][ T1113] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 779.090522][ T1113] ? rcu_is_watching+0x15/0xb0 [ 779.090544][ T1113] ? queue_io+0x2d3/0x470 [ 779.090573][ T1113] wb_writeback+0x41c/0xad0 [ 779.090601][ T1113] ? queue_io+0x261/0x470 [ 779.090632][ T1113] ? __pfx_wb_writeback+0x10/0x10 [ 779.090654][ T1113] ? do_raw_spin_lock+0x12b/0x2f0 [ 779.090695][ T1113] wb_workfn+0x431/0x10f0 [ 779.090736][ T1113] ? __pfx_wb_workfn+0x10/0x10 [ 779.090759][ T1113] ? rcu_is_watching+0x15/0xb0 [ 779.090779][ T1113] ? trace_hrtimer_start+0x82/0x200 [ 779.090807][ T1113] ? do_raw_spin_lock+0x12b/0x2f0 [ 779.090840][ T1113] ? lock_acquire+0x115/0x350 [ 779.090877][ T1113] ? rcu_is_watching+0x15/0xb0 [ 779.090900][ T1113] ? process_scheduled_works+0x97e/0x1630 [ 779.090923][ T1113] process_scheduled_works+0xc4e/0x1630 [ 779.090983][ T1113] ? __pfx_process_scheduled_works+0x10/0x10 [ 779.091009][ T1113] ? assign_work+0x3cf/0x5d0 [ 779.091034][ T1113] worker_thread+0xa47/0xfb0 [ 779.091069][ T1113] ? __kthread_parkme+0x71/0x1f0 [ 779.091105][ T1113] kthread+0x388/0x470 [ 779.091133][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 779.091153][ T1113] ? __pfx_kthread+0x10/0x10 [ 779.091179][ T1113] ret_from_fork+0x514/0xb70 [ 779.091207][ T1113] ? __pfx_ret_from_fork+0x10/0x10 [ 779.091231][ T1113] ? __switch_to+0xc89/0x1420 [ 779.091256][ T1113] ? __pfx_kthread+0x10/0x10 [ 779.091283][ T1113] ret_from_fork_asm+0x1a/0x30 [ 779.091330][ T1113] [ 779.133081][T26566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9147'. [ 779.175023][ T1113] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 779.927787][ T30] audit: type=1326 audit(2000000317.455:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.4.9161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4d9e0d9 code=0x7ffc0000 [ 779.927858][ T30] audit: type=1326 audit(2000000317.455:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.4.9161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4d9e0d9 code=0x7ffc0000 [ 780.000463][ T30] audit: type=1326 audit(2000000317.520:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.4.9161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5fe4d9e0d9 code=0x7ffc0000 [ 780.000690][ T30] audit: type=1326 audit(2000000317.520:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.4.9161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4d9e0d9 code=0x7ffc0000 [ 780.000906][ T30] audit: type=1326 audit(2000000317.520:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26591 comm="syz.4.9161" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe4d9e0d9 code=0x7ffc0000 [ 780.721416][T26626] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9176'. [ 780.804217][T26628] loop4: detected capacity change from 0 to 128 [ 780.848113][T26628] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 780.883648][T26628] ext4 filesystem being mounted at /1939/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 781.053472][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 781.263779][T26655] loop6: detected capacity change from 0 to 512 [ 781.290883][T26655] EXT4-fs (loop6): 1 truncate cleaned up [ 781.292827][T26655] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.311742][T26654] loop4: detected capacity change from 0 to 512 [ 781.371512][T23683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.385122][ T191] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 781.505899][T26663] netlink: 'syz.0.9193': attribute type 1 has an invalid length. [ 781.545127][ T191] usb 8-1: Using ep0 maxpacket: 8 [ 781.554019][ T191] usb 8-1: unable to get BOS descriptor or descriptor too short [ 781.554099][ T191] usb 8-1: New USB device found, idVendor=04e8, idProduct=6619, bcdDevice=ea.dc [ 781.575523][ T191] usb 8-1: config 7 has an invalid interface number: 99 but max is 0 [ 781.575567][ T191] usb 8-1: config 7 has an invalid interface association descriptor of length 2, skipping [ 781.575601][ T191] usb 8-1: config 7 has no interface number 0 [ 781.575652][ T191] usb 8-1: config 7 interface 99 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 781.618962][ T191] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.619007][ T191] usb 8-1: Product: syz [ 781.619039][ T191] usb 8-1: Manufacturer: syz [ 781.619058][ T191] usb 8-1: SerialNumber: syz [ 781.919859][ T191] usb 8-1: USB disconnect, device number 4 [ 782.334561][T26697] netlink: 'syz.4.9211': attribute type 32 has an invalid length. [ 782.546791][T26705] loop4: detected capacity change from 0 to 1024 [ 782.556175][T26707] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 782.860804][T26700] loop6: detected capacity change from 0 to 32768 [ 782.927729][T26700] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 783.035476][T26700] XFS (loop6): Ending clean mount [ 783.220459][T23683] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 784.185752][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 784.345641][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 784.346386][ T25] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 784.347502][ T25] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 784.349655][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.349680][ T25] usb 7-1: Product: syz [ 784.349694][ T25] usb 7-1: Manufacturer: syz [ 784.349708][ T25] usb 7-1: SerialNumber: syz [ 784.359819][ T25] ch9200 7-1:2.0: probe with driver ch9200 failed with error -22 [ 785.110501][T26793] __nla_validate_parse: 6 callbacks suppressed [ 785.118686][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9253'. [ 785.305592][T26732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.361574][T26732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.389379][T26791] loop7: detected capacity change from 0 to 32768 [ 785.401030][T26791] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9251 (26791) [ 785.432854][T26791] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 785.432909][T26791] BTRFS info (device loop7): using sha256 checksum algorithm [ 785.540261][T26791] BTRFS info (device loop7): enabling ssd optimizations [ 785.540312][T26791] BTRFS info (device loop7): turning on async discard [ 785.540328][T26791] BTRFS info (device loop7): enabling free space tree [ 785.637157][T23744] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 786.246534][ T5782] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 786.374801][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.374868][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.374896][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.374923][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.420847][ T5782] usb 8-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 786.433581][ T5782] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.447254][ T5782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.456716][ T5782] usb 8-1: Product: syz [ 786.461825][ T5782] usb 8-1: Manufacturer: syz [ 786.466633][ T5782] usb 8-1: SerialNumber: syz [ 786.479975][ T5782] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 786.534459][T26821] loop4: detected capacity change from 0 to 512 [ 786.548537][T26821] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 786.566694][T26821] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.9258: bad orphan inode 131083 [ 786.580044][T26821] loop4: lost filesystem error report for type 5 error -117 [ 786.592994][T26821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.681648][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.725377][ T5782] gspca_mr97310a: reg read [21] error -71 [ 786.731939][ T5782] mr97310a 8-1:1.0: probe with driver mr97310a failed with error -71 [ 786.759731][ T5782] usb 8-1: USB disconnect, device number 5 [ 786.813828][T26812] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 786.952662][T26838] loop4: detected capacity change from 0 to 256 [ 786.973116][T26812] usb 1-1: Using ep0 maxpacket: 32 [ 786.973855][T26812] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 786.975429][T26812] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 786.975456][T26812] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 786.975477][T26812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.975495][T26812] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 786.975515][T26812] usb 1-1: config 1 has no interface number 0 [ 786.975555][T26812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.983250][T26812] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 787.017700][T26838] exFAT-fs (loop4): error, The cluster chain has a loop [ 787.017723][T26838] exFAT-fs (loop4): failed to count the number of clusters in root [ 787.017734][T26838] exFAT-fs (loop4): failed to recognize exfat type [ 787.219959][ T1219] usb 7-1: USB disconnect, device number 8 [ 787.234426][T26812] snd_usb_pod 1-1:1.1: set_interface failed [ 787.234627][T26812] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 787.234794][T26812] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 787.247573][T26812] usb 1-1: USB disconnect, device number 122 [ 787.296270][T26847] loop8: detected capacity change from 0 to 8 [ 787.749277][T14703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.749322][T14703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.799990][ T5782] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 787.942755][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.977511][ T5782] usb 9-1: Using ep0 maxpacket: 16 [ 787.984484][ T5782] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 788.000684][ T5782] usb 9-1: config 252 has an invalid interface number: 15 but max is 0 [ 788.012033][ T5782] usb 9-1: config 252 has no interface number 0 [ 788.018483][ T5782] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 788.034803][ T5782] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.043125][ T5782] usb 9-1: Product: syz [ 788.047490][ T5782] usb 9-1: Manufacturer: syz [ 788.052264][ T5782] usb 9-1: SerialNumber: syz [ 788.071868][ T5782] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 788.124465][T26887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.189335][T26884] loop7: detected capacity change from 0 to 2048 [ 788.198972][T26884] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 788.259478][T26890] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 788.316758][T26812] usb 9-1: USB disconnect, device number 7 [ 788.329252][ T1113] usb 9-1: Failed to submit usb control message: -71 [ 788.345263][ T1113] usb 9-1: unable to send the bmi data to the device: -71 [ 788.353171][ T1113] usb 9-1: unable to get target info from device [ 788.360164][ T1113] usb 9-1: could not get target info (-71) [ 788.366198][ T1113] usb 9-1: could not probe fw (-71) [ 788.738630][ T5803] usb 5-1: new low-speed USB device number 115 using dummy_hcd [ 788.821336][T26911] loop7: detected capacity change from 0 to 8 [ 788.866513][T26911] SQUASHFS error: lzo decompression failed, data probably corrupt [ 788.866578][T26911] SQUASHFS error: Failed to read block 0x144: -5 [ 788.866611][T26911] SQUASHFS error: Unable to read metadata cache entry [142] [ 788.866630][T26911] SQUASHFS error: Unable to read directory block [142:26] [ 788.918595][ T5803] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 788.929163][ T5803] usb 5-1: config 8 has an invalid interface number: 137 but max is 0 [ 788.929204][ T5803] usb 5-1: config 8 has no interface number 0 [ 788.947419][ T5803] usb 5-1: string descriptor 0 read error: -22 [ 788.947567][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.006455][ T5803] ttusb_dec_send_command: command bulk message failed: error -22 [ 789.033029][ T5803] ttusb-dec 5-1:8.137: probe with driver ttusb-dec failed with error -22 [ 789.291232][ T5803] usb 5-1: USB disconnect, device number 115 [ 789.337893][T26927] loop6: detected capacity change from 0 to 2048 [ 789.374641][T26927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.374795][T26927] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.409357][T26812] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 789.451079][T26932] loop7: detected capacity change from 0 to 16 [ 789.458960][T26932] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 789.488872][T23683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.580333][T26812] usb 1-1: Using ep0 maxpacket: 8 [ 789.588533][T26812] usb 1-1: unable to get BOS descriptor or descriptor too short [ 789.596917][T26812] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.608381][T26812] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 789.608436][T26812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.608459][T26812] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 789.608482][T26812] usb 1-1: config 1 has no interface number 1 [ 789.608530][T26812] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 789.608569][T26812] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.608599][T26812] usb 1-1: config 1 interface 2 has no altsetting 0 [ 789.685820][T26812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.694208][T26812] usb 1-1: Product: syz [ 789.694228][T26812] usb 1-1: Manufacturer: syz [ 789.694240][T26812] usb 1-1: SerialNumber: syz [ 789.731223][T26812] usb 1-1: selecting invalid altsetting 0 [ 790.012696][ T5803] usb 1-1: USB disconnect, device number 123 [ 790.291692][T26953] loop6: detected capacity change from 0 to 2048 [ 790.326337][T26953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.654381][T26958] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.655060][T26958] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.771355][ T30] audit: type=1326 audit(2000000327.600:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26961 comm="syz.0.9322" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfd6b9e0d9 code=0x0 [ 790.993089][T26958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.030579][T26958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.463450][ T5803] wg2 speed is unknown, defaulting to 1000 [ 791.463501][ T5803] syz2: Port: 1 Link DOWN [ 791.483621][ T170] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.484524][ T170] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.484561][ T170] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.484593][ T170] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.878920][ T5723] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 792.053494][ T5723] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 792.054964][ T5723] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 792.054989][ T5723] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.055008][ T5723] usb 8-1: config 0 has no interface number 0 [ 792.055044][ T5723] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 792.058622][ T5723] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 792.058659][ T5723] usb 8-1: Product: syz [ 792.058674][ T5723] usb 8-1: SerialNumber: syz [ 792.066642][ T5723] usb 8-1: config 0 descriptor?? [ 792.072675][ T5723] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 792.285143][T26988] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9335'. [ 792.324295][ T5723] usb 8-1: USB disconnect, device number 6 [ 792.363468][T26990] nvme_fabrics: missing parameter 'host_traddr=%s' [ 792.549546][T26999] loop8: detected capacity change from 0 to 2048 [ 792.573893][T26999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 792.815393][T27010] loop6: detected capacity change from 0 to 512 [ 792.836189][T27010] EXT4-fs error (device loop6): __ext4_iget:5592: inode #11: block 1: comm syz.6.9345: invalid block [ 792.836244][T27010] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 792.836685][T27010] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.9345: couldn't read orphan inode 11 (err -117) [ 792.836714][T27010] loop6: lost filesystem error report for type 5 error -117 [ 792.863085][T27010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.909980][T27015] netlink: 'syz.8.9347': attribute type 30 has an invalid length. [ 793.000825][T23683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.046290][T27019] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 793.921909][T27047] IPv6: NLM_F_CREATE should be specified when creating new route [ 794.023876][T27049] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 794.135332][T27051] loop7: detected capacity change from 0 to 128 [ 794.147381][T27051] EXT4-fs (loop7): Test dummy encryption mode enabled [ 794.167822][T27051] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 794.182921][T27051] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 794.597558][T27059] loop0: detected capacity change from 0 to 64 [ 794.740543][T27051] fscrypt: AES-256-XTS using blk-crypto-fallback [ 794.810842][T27051] EXT4-fs error (device loop7): ext4_validate_block_bitmap:427: comm syz.7.9365: bg 0: bad block bitmap checksum [ 794.917512][T23744] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 795.120535][T27067] loop0: detected capacity change from 0 to 1024 [ 795.122307][T27067] EXT4-fs: Ignoring removed bh option [ 795.131492][T27067] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 795.162206][T27067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.262663][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.760313][T27086] loop7: detected capacity change from 0 to 1024 [ 795.998990][T27094] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9384'. [ 796.051616][T27095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 796.051699][T27095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 796.051733][T27095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 796.051748][T27095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 796.051762][T27095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 796.051804][T27095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x2000 instead [ 796.051822][T27095] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000258: 0x00e4 instead [ 796.146084][T27095] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 796.155779][T27095] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 796.220453][T27101] netlink: 'syz.8.9389': attribute type 10 has an invalid length. [ 796.290459][T27103] netlink: 'syz.6.9388': attribute type 62 has an invalid length. [ 796.459046][T27112] loop6: detected capacity change from 0 to 8 [ 796.467274][T27112] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 796.736118][T27130] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9402'. [ 796.736175][T27130] veth0_to_bond: default FDB implementation only supports local addresses [ 796.886594][ T30] audit: type=1326 audit(2000000333.318:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 796.925993][ T30] audit: type=1326 audit(2000000333.365:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 796.964464][ T30] audit: type=1326 audit(2000000333.403:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 796.993551][ T30] audit: type=1326 audit(2000000333.421:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 797.021311][ T30] audit: type=1326 audit(2000000333.449:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 797.030678][ T30] audit: type=1326 audit(2000000333.449:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 797.030727][ T30] audit: type=1326 audit(2000000333.449:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 797.031474][ T30] audit: type=1326 audit(2000000333.459:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 797.031517][ T30] audit: type=1326 audit(2000000333.459:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27135 comm="syz.7.9405" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd3f959e0d9 code=0x7ffc0000 [ 797.166862][T27145] loop0: detected capacity change from 0 to 1024 [ 797.183592][T27145] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 797.251638][T27145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.414659][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.707348][T27166] netlink: 'syz.0.9415': attribute type 1 has an invalid length. [ 797.707554][T27166] netlink: 'syz.0.9415': attribute type 1 has an invalid length. [ 798.002386][T27175] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9423'. [ 798.600698][T27194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9432'. [ 798.854609][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9435'. [ 798.854654][T27202] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9435'. [ 798.854687][T27202] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9435'. [ 798.938436][T27206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9438'. [ 799.434947][T27221] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9446'. [ 800.245256][ T5723] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 800.583603][T27230] loop8: detected capacity change from 0 to 32768 [ 800.590911][ T5723] usb 1-1: Using ep0 maxpacket: 8 [ 800.594473][T27230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.9450 (27230) [ 800.610620][ T5723] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 800.621576][T27230] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 800.621623][T27230] BTRFS info (device loop8): using crc32c checksum algorithm [ 800.640914][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.641098][ T5723] usb 1-1: Product: syz [ 800.641269][ T5723] usb 1-1: Manufacturer: syz [ 800.641431][ T5723] usb 1-1: SerialNumber: syz [ 800.680279][ T5723] usb 1-1: config 0 descriptor?? [ 800.712892][ T5723] gspca_main: sq930x-2.14.0 probing 2770:930c [ 800.753264][T27230] BTRFS info (device loop8): enabling ssd optimizations [ 800.753320][T27230] BTRFS info (device loop8): turning on flush-on-commit [ 800.754655][T27230] BTRFS info (device loop8): enabling free space tree [ 800.754677][T27230] BTRFS info (device loop8): enabling auto defrag [ 800.754704][T27230] BTRFS info (device loop8): use lzo compression, level 1 [ 800.754723][T27230] BTRFS info (device loop8): max_inline set to 4096 [ 801.044670][T24317] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 801.160093][ T5723] gspca_sq930x: ucbus_write failed -71 [ 801.388407][ T5723] gspca_sq930x: Sensor ov9630 not yet treated [ 801.388664][ T5723] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 801.399660][T27263] tmpfs: Bad value for 'mpol' [ 801.410923][ T5723] usb 1-1: USB disconnect, device number 124 [ 802.129314][T27275] loop0: detected capacity change from 0 to 2048 [ 802.182664][T27275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 802.319054][T27275] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 802.505192][T27285] loop6: detected capacity change from 0 to 64 [ 802.600570][T27285] syz.6.9471: attempt to access beyond end of device [ 802.600570][T27285] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 802.661834][T27285] Buffer I/O error on dev loop6, logical block 512, async page read [ 802.672315][T27285] syz.6.9471: attempt to access beyond end of device [ 802.672315][T27285] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 802.694481][T27285] Buffer I/O error on dev loop6, logical block 56576, async page read [ 802.702951][ T1219] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 802.733486][T26812] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 802.861527][ T1219] usb 9-1: Using ep0 maxpacket: 8 [ 802.867353][ T1219] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 802.881502][ T1219] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.881545][ T1219] usb 9-1: Product: syz [ 802.881576][ T1219] usb 9-1: Manufacturer: syz [ 802.881595][ T1219] usb 9-1: SerialNumber: syz [ 802.909322][ T1219] usb 9-1: config 0 descriptor?? [ 802.923362][ T1219] gspca_main: sq930x-2.14.0 probing 2770:930c [ 802.930502][T26812] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 802.953672][T26812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.953717][T26812] usb 8-1: Product: syz [ 802.953745][T26812] usb 8-1: Manufacturer: syz [ 802.953762][T26812] usb 8-1: SerialNumber: syz [ 803.030799][ T44] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 803.291546][ C1] usb 8-1: ath: unknown panic pattern! [ 803.386135][T27297] sit0: entered promiscuous mode [ 803.415902][ T1219] gspca_sq930x: ucbus_write failed -71 [ 803.416013][ T1219] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 803.435362][ T1219] usb 9-1: USB disconnect, device number 8 [ 803.516641][T27299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.529787][T26812] usb 8-1: USB disconnect, device number 7 [ 803.984452][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 803.986934][T27311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9483'. [ 803.986955][T27311] tc_dump_action: action bad kind [ 804.145026][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 804.147693][ T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 804.150322][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 804.150354][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.150374][ T25] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 804.150395][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 804.150418][ T25] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 804.150454][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.153675][ T25] usb 7-1: config 0 descriptor?? [ 804.154655][T27304] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 804.194909][ T44] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 804.195080][ T44] ath9k_htc: Failed to initialize the device [ 804.197152][T26812] usb 8-1: ath9k_htc: USB layer deinitialized [ 804.685964][ T4931] Bluetooth: hci9: Opcode 0x0c03 failed: -71 [ 804.697340][ T25] usb 7-1: USB disconnect, device number 9 [ 805.267353][T27337] bond3: entered promiscuous mode [ 805.273704][T27337] bond3: entered allmulticast mode [ 805.280335][T27337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 805.302881][ T30] audit: type=1326 audit(2000000341.199:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.9498" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 805.303100][ T30] audit: type=1326 audit(2000000341.199:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.9498" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 805.369405][ T30] audit: type=1326 audit(2000000341.264:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.9498" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 805.369635][ T30] audit: type=1326 audit(2000000341.264:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.9498" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 805.369853][ T30] audit: type=1326 audit(2000000341.264:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.9498" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136e19e0d9 code=0x7ffc0000 [ 805.938442][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9507'. [ 806.120523][T26812] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 806.296253][T26812] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 806.307224][T26812] usb 9-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0x76, changing to 0x6 [ 806.307272][T26812] usb 9-1: config 2 interface 0 altsetting 178 endpoint 0x6 has an invalid bInterval 109, changing to 10 [ 806.307312][T26812] usb 9-1: config 2 interface 0 altsetting 178 endpoint 0x6 has invalid maxpacket 26219, setting to 1024 [ 806.307342][T26812] usb 9-1: config 2 interface 0 has no altsetting 0 [ 806.354409][T26812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.354452][T26812] usb 9-1: Product: syz [ 806.354482][T26812] usb 9-1: Manufacturer: syz [ 806.354500][T26812] usb 9-1: SerialNumber: syz [ 806.393322][T27356] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 806.436862][T27372] ieee802154 phy0 wpan0: encryption failed: -90 [ 806.640248][T26812] ims_pcu 9-1:2.0: Control endpoint is not INTERRUPT IN [ 806.647656][T26812] ims_pcu 9-1:2.0: probe with driver ims_pcu failed with error -22 [ 806.664092][T26812] usb 9-1: USB disconnect, device number 9 [ 806.759974][T27379] XFS (nullb0): Invalid superblock magic number [ 806.853995][ T4931] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 806.885785][ T4931] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 806.917947][ T4931] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 806.931905][ T4931] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 806.943168][ T4931] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 807.378996][T27396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9516'. [ 807.919807][T27416] [U] v3f"S/4:XTzWtlW= [ 807.920078][T27416] [U] J"e:" [ 808.010282][T27418] netlink: zone id is out of range [ 808.010471][T27418] netlink: zone id is out of range [ 808.010481][T27418] netlink: zone id is out of range [ 808.010490][T27418] netlink: zone id is out of range [ 808.010498][T27418] netlink: zone id is out of range [ 808.010506][T27418] netlink: zone id is out of range [ 808.010519][T27418] netlink: zone id is out of range [ 808.010527][T27418] netlink: zone id is out of range [ 808.010534][T27418] netlink: zone id is out of range [ 808.727093][T27439] loop7: detected capacity change from 0 to 256 [ 808.735929][T27439] exfat: Deprecated parameter 'utf8' [ 808.746369][T27439] exfat: Deprecated parameter 'namecase' [ 808.752959][T27439] exfat: Deprecated parameter 'namecase' [ 808.836334][T27383] wg2 speed is unknown, defaulting to 1000 [ 808.878308][T27439] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 808.973571][ T25] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 809.154995][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 809.161215][ T25] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 809.173561][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.188058][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.188101][ T25] usb 9-1: Product: syz [ 809.188130][ T25] usb 9-1: Manufacturer: syz [ 809.188148][ T25] usb 9-1: SerialNumber: syz [ 809.216797][ T25] usb 9-1: config 0 descriptor?? [ 809.221979][ T4931] Bluetooth: hci9: command tx timeout [ 809.267237][ T25] pegasus_notetaker 9-1:0.0: Invalid number of endpoints [ 809.267291][ T25] pegasus_notetaker 9-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 809.476635][ T25] usb 9-1: USB disconnect, device number 10 [ 809.545576][T27383] wg2 speed is unknown, defaulting to 1000 [ 809.655897][T27452] net_ratelimit: 1062 callbacks suppressed [ 809.655967][T27452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.680749][T27455] loop0: detected capacity change from 0 to 64 [ 810.619772][ T10] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 810.749301][T27491] loop7: detected capacity change from 0 to 256 [ 810.789730][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 810.793699][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 810.793750][ T10] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 810.802565][ T10] usb 1-1: config 8 has an invalid interface number: 42 but max is 0 [ 810.802593][ T10] usb 1-1: config 8 has no interface number 0 [ 810.816141][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.816174][ T10] usb 1-1: Product: syz [ 810.816188][ T10] usb 1-1: Manufacturer: syz [ 810.816201][ T10] usb 1-1: SerialNumber: syz [ 811.040686][T27493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.116236][ T10] empeg 1-1:8.42: empeg converter detected [ 811.124942][ T10] usb 1-1: active config #8 != 1 ?? [ 811.160119][ T10] usb 1-1: USB disconnect, device number 125 [ 811.273497][T27383] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.281300][T27383] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.281495][T27383] bridge_slave_0: entered allmulticast mode [ 811.300656][T27383] bridge_slave_0: entered promiscuous mode [ 811.444747][ T4931] Bluetooth: hci9: command tx timeout [ 811.472734][T27383] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.477784][T27511] loop8: detected capacity change from 0 to 128 [ 811.492348][T27383] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.500021][T27383] bridge_slave_1: entered allmulticast mode [ 811.510483][T27383] bridge_slave_1: entered promiscuous mode [ 811.742854][T27383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.773852][T27383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.845296][T27518] netlink: 'syz.0.9572': attribute type 2 has an invalid length. [ 811.959027][T27519] loop7: detected capacity change from 0 to 2048 [ 812.010118][T27519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 812.055836][T27383] team0: Port device team_slave_0 added [ 812.069526][T27519] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #12: comm syz.7.9570: corrupted in-inode xattr: invalid size in ea xattr [ 812.111891][T27383] team0: Port device team_slave_1 added [ 812.288635][T23744] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 812.316501][T27383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.316694][T27383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.316868][T27383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.324902][T27383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.325088][T27383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.325264][T27383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.891957][T27383] hsr_slave_0: entered promiscuous mode [ 812.909315][T27383] hsr_slave_1: entered promiscuous mode [ 812.911009][T27383] debugfs: 'hsr0' already exists in 'hsr' [ 812.911030][T27383] Cannot create hsr debugfs directory [ 813.332885][ T1219] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 813.493034][ T1219] usb 7-1: Using ep0 maxpacket: 32 [ 813.499230][ T1219] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 813.510740][ T1219] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 813.510823][ T1219] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.534799][ T1219] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.534843][ T1219] usb 7-1: Product: syz [ 813.534885][ T1219] usb 7-1: Manufacturer: syz [ 813.534910][ T1219] usb 7-1: SerialNumber: syz [ 813.675801][ T4931] Bluetooth: hci9: command tx timeout [ 813.705725][T27558] loop7: detected capacity change from 0 to 2048 [ 813.797776][T27558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.817636][ T1219] ljca 7-1:1.0: probe with driver ljca failed with error -110 [ 813.845920][T27542] loop0: detected capacity change from 0 to 32768 [ 813.875827][ T1219] usb 7-1: USB disconnect, device number 10 [ 813.894572][T27542] (syz.0.9581,27542,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 813.921039][T27542] (syz.0.9581,27542,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 813.998614][T27542] (syz.0.9581,27542,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 814.045469][T27542] JBD2: Ignoring recovery information on journal [ 814.185451][T23744] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.284541][T27542] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 814.876870][T27576] loop6: detected capacity change from 0 to 512 [ 814.903605][T27542] (syz.0.9581,27542,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 814.964945][T27542] (syz.0.9581,27542,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 814.977984][T27542] (syz.0.9581,27542,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 814.978199][T27542] (syz.0.9581,27542,1):ocfs2_quota_read:201 ERROR: status = -5 [ 814.978226][T27542] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 814.978380][T27542] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 814.978454][T27542] (syz.0.9581,27542,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 814.989567][T27576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.989673][T27576] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.101562][T27542] (syz.0.9581,27542,1):ocfs2_mknod:319 ERROR: status = -5 [ 815.111398][T27542] (syz.0.9581,27542,1):ocfs2_mknod:513 ERROR: status = -5 [ 815.205011][T23683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.272139][T27383] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 815.324747][T27383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.337664][T27383] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 815.379419][T27383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 815.440315][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 815.588454][T27383] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 815.616742][T27383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 815.653565][T27383] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 815.732511][T27383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.740635][T27592] netlink: 'syz.8.9601': attribute type 2 has an invalid length. [ 815.896169][ T4931] Bluetooth: hci9: command tx timeout [ 815.935682][T27603] binder: 27597:27603 ioctl c00c620f 0 returned -14 [ 816.028653][T27608] loop7: detected capacity change from 0 to 256 [ 816.048411][T27608] exFAT-fs (loop7): error, no upcase table entry. Please run fsck [ 816.059519][T27608] exFAT-fs (loop7): Filesystem has been set read-only [ 816.082374][T27608] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 816.100435][ T44] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 816.130465][T27608] exFAT-fs (loop7): start_clu is invalid cluster(0x400) [ 816.284139][ T44] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 816.296165][ T44] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 816.296209][ T44] usb 9-1: config 0 has no interface number 0 [ 816.296282][ T44] usb 9-1: config 0 interface 41 has no altsetting 0 [ 816.322878][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.322922][ T44] usb 9-1: Product: syz [ 816.322966][ T44] usb 9-1: Manufacturer: syz [ 816.322983][ T44] usb 9-1: SerialNumber: syz [ 816.350170][ T44] usb 9-1: config 0 descriptor?? [ 816.478903][T27383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.519339][T27383] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.572861][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.572972][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.601700][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.601821][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.861035][ T44] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 816.861285][ T44] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 816.905669][ T44] usb 9-1: USB disconnect, device number 11 [ 817.135620][T27623] xt_CT: No such helper "snmp_trap" [ 817.286240][ T25] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 817.337008][T27633] netlink: 260 bytes leftover after parsing attributes in process `syz.7.9616'. [ 817.347952][T27633] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9616'. [ 817.363446][T27633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9616'. [ 817.458091][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 817.464106][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 817.481495][ T25] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 817.493038][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 817.504308][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 817.504369][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.533101][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.533147][ T25] usb 7-1: Product: syz [ 817.533184][ T25] usb 7-1: Manufacturer: syz [ 817.533202][ T25] usb 7-1: SerialNumber: syz [ 817.566715][T27626] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 817.578240][ T25] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 817.587917][ T25] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 817.597749][ T25] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 817.812693][ T1219] usb 7-1: USB disconnect, device number 11 [ 818.504801][T26812] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 818.664504][T26812] usb 9-1: Using ep0 maxpacket: 16 [ 818.670546][T26812] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.687261][T26812] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 818.687303][T26812] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.687337][T26812] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.731393][T26812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.731440][T26812] usb 9-1: Product: syz [ 818.731471][T26812] usb 9-1: Manufacturer: syz [ 818.731489][T26812] usb 9-1: SerialNumber: syz [ 818.810876][T26812] usb 9-1: 0:2 : does not exist [ 818.881827][T27383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.280150][T26812] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 819.378473][T26812] usb 9-1: USB disconnect, device number 12 [ 819.448249][T27686] loop6: detected capacity change from 0 to 512 [ 819.479257][T27688] xt_CONNSECMARK: invalid mode: 0 [ 819.762863][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.212086][T27383] veth0_vlan: entered promiscuous mode [ 820.252554][T27383] veth1_vlan: entered promiscuous mode [ 820.365659][T27707] loop0: detected capacity change from 0 to 4096 [ 820.380199][T27383] veth0_macvtap: entered promiscuous mode [ 820.392999][T27383] veth1_macvtap: entered promiscuous mode [ 820.498730][T27716] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 820.603543][T27383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.680971][T27383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.823198][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.825304][ T170] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.825618][ T170] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.826207][ T170] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.619187][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.619226][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.844861][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.845052][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.990899][T27744] loop0: detected capacity change from 0 to 256 [ 822.033286][T27751] loop8: detected capacity change from 0 to 4096 [ 822.049048][T27748] geneve3: entered allmulticast mode [ 822.064785][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.070279][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.070327][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.070360][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.108412][T27744] exFAT-fs (loop0): error, no upcase table entry. Please run fsck [ 822.108903][T27744] exFAT-fs (loop0): Filesystem has been set read-only [ 822.109137][T27744] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 822.380722][T27751] ntfs3(loop8): ino=5, "/" indx_read_ra [ 822.539176][T27751] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 822.870695][T27762] comedi comedi1: 8255: I/O port conflict (0xc0000000,4) [ 822.937097][T27763] loop6: detected capacity change from 0 to 4096 [ 822.958025][T27763] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 822.988282][T27766] netlink: 'syz.8.9672': attribute type 1 has an invalid length. [ 823.145497][T27763] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 823.214335][T27763] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 823.279354][ T30] audit: type=1326 audit(2000000359.023:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd6b9e0d9 code=0x7ffc0000 [ 823.279595][ T30] audit: type=1326 audit(2000000359.023:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd6b9e0d9 code=0x7ffc0000 [ 823.343723][ T30] audit: type=1326 audit(2000000359.079:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd6b9e0d9 code=0x7ffc0000 [ 823.343942][ T30] audit: type=1326 audit(2000000359.079:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd6b9e0d9 code=0x7ffc0000 [ 823.384588][ T30] audit: type=1326 audit(2000000359.117:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcfd6b9e0d9 code=0x7ffc0000 [ 823.384653][ T30] audit: type=1326 audit(2000000359.117:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcfd6b9de42 code=0x7ffc0000 [ 823.396545][ T30] audit: type=1326 audit(2000000359.126:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfd6b5e90e code=0x7ffc0000 [ 823.411855][T27773] loop9: detected capacity change from 0 to 2048 [ 823.414183][ T30] audit: type=1326 audit(2000000359.154:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcfd6b9df07 code=0x7ffc0000 [ 823.473570][ T30] audit: type=1326 audit(2000000359.210:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfd6b5e90e code=0x7ffc0000 [ 823.474041][ T30] audit: type=1326 audit(2000000359.210:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27772 comm="syz.0.9678" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfd6b9dd6b code=0x7ffc0000 [ 823.475262][T27776] loop0: detected capacity change from 0 to 512 [ 823.701817][T27776] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 823.723076][T27776] EXT4-fs (loop0): 1 truncate cleaned up [ 823.750213][T27776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.901154][T27773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 824.150114][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.263469][ T44] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 824.401020][T27798] loop0: detected capacity change from 0 to 256 [ 824.435323][ T44] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 824.449682][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.461010][ T44] usb 7-1: config 0 descriptor?? [ 824.471175][ T44] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 824.936199][ T44] gp8psk: usb in 128 operation failed. [ 824.942490][ T44] gp8psk: usb in 137 operation failed. [ 824.942512][ T44] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 824.942552][ T44] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 824.973543][ T44] usb 7-1: USB disconnect, device number 12 [ 825.071878][T27814] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.162323][ T1219] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 825.352684][ T1219] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 825.365526][ T1219] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.365568][ T1219] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 825.365629][ T1219] usb 1-1: config 1 interface 0 has no altsetting 0 [ 825.397979][ T1219] usb 1-1: string descriptor 0 read error: -22 [ 825.398135][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 825.433869][ T1219] usb 1-1: 0:2 : does not exist [ 825.775685][ T1219] usb-storage 1-1:1.1: USB Mass Storage device detected [ 825.964384][ T1219] snd-usb-us122l 1-1:1.1: usb_set_interface error [ 825.964773][ T1219] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 826.001897][ T1219] usb 1-1: USB disconnect, device number 126 [ 826.459821][T27841] tipc: Trying to set illegal importance in message [ 826.568950][T27848] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 827.518572][T27864] xt_CT: No such helper "netbios-ns" [ 827.695053][T27842] loop9: detected capacity change from 0 to 32768 [ 828.251048][T27882] loop9: detected capacity change from 0 to 512 [ 828.252309][T27882] EXT4-fs: Ignoring removed mblk_io_submit option [ 828.333893][T27882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.334028][T27882] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.557279][T27859] kexec: Could not allocate control_code_buffer [ 828.770997][T27383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.904048][T27898] loop7: detected capacity change from 0 to 256 [ 829.623050][T27917] ubi: mtd0 is already attached to ubi16 [ 829.905886][T27921] netlink: 'syz.8.9746': attribute type 21 has an invalid length. [ 829.906082][T27921] netlink: 128 bytes leftover after parsing attributes in process `syz.8.9746'. [ 829.906327][T27921] netlink: 3 bytes leftover after parsing attributes in process `syz.8.9746'. [ 830.045175][T27925] loop0: detected capacity change from 0 to 2048 [ 830.063698][T27927] loop9: detected capacity change from 0 to 128 [ 830.199646][T27928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 830.312125][T27925] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=80, inode=15, rec_len=1498, name_len=5 [ 830.431444][T27925] Remounting filesystem read-only [ 830.612553][T27936] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 830.616801][T27936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 831.300377][T27942] nvme nvme0: failed to connect socket: -111 [ 831.502720][T27951] loop7: detected capacity change from 0 to 4096 [ 831.505661][T27951] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 831.512813][T27951] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 4096) [ 831.512844][T27951] NILFS (loop7): mounting unchecked fs [ 831.520241][T27951] NILFS (loop7): invalid segment: Checksum error in segment payload [ 831.520409][T27951] NILFS (loop7): unable to fall back to spare super block [ 831.520424][T27951] NILFS (loop7): error -22 while searching super root [ 831.891487][T27969] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 833.142277][T27971] loop8: detected capacity change from 0 to 32768 [ 833.871294][ T50] JFS: metapage_get_blocks failed [ 833.871463][ T50] JFS: metapage_get_blocks failed [ 833.871552][ T50] JFS: metapage_get_blocks failed [ 833.876313][ T121] blkno = 50030, nblocks = 1 [ 833.876338][ T121] ERROR: (device loop8): dbUpdatePMap: blocks are outside the map [ 833.876338][ T121] [ 833.911381][ T121] ERROR: (device loop8): remounting filesystem as read-only [ 833.911428][ T121] blkno = 5002c, nblocks = 4 [ 833.911442][ T121] ERROR: (device loop8): dbUpdatePMap: blocks are outside the map [ 833.911442][ T121] [ 833.976146][ T5723] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 834.007152][T28012] loop7: detected capacity change from 0 to 16 [ 834.030804][T28012] erofs (device loop7): mounted with root inode @ nid 36. [ 834.150492][ T5723] usb 7-1: unable to get BOS descriptor or descriptor too short [ 834.151210][ T5723] usb 7-1: not running at top speed; connect to a high speed hub [ 834.151241][ T5723] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 834.153185][ T5723] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 79, changing to 4 [ 834.153215][ T5723] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 834.165903][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.165931][ T5723] usb 7-1: Product: syz [ 834.165946][ T5723] usb 7-1: Manufacturer: syz [ 834.165960][ T5723] usb 7-1: SerialNumber: syz [ 834.179490][T24317] JFS: metapage_get_blocks failed [ 834.179546][T24317] JFS: metapage_get_blocks failed [ 834.449484][T28022] netlink: 'syz.9.9795': attribute type 1 has an invalid length. [ 834.734586][ T5723] usb 7-1: us122l: couldn't allocate write buffer [ 834.735208][ T5723] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 834.768825][ T5723] usb 7-1: USB disconnect, device number 13 [ 835.205031][T28042] netlink: 'syz.8.9789': attribute type 61 has an invalid length. [ 835.205074][T28042] netlink: 'syz.8.9789': attribute type 62 has an invalid length. [ 835.287492][T28044] loop0: detected capacity change from 0 to 64 [ 835.316756][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.479326][T28041] loop7: detected capacity change from 0 to 4096 [ 836.156539][T28054] loop8: detected capacity change from 0 to 4096 [ 836.393237][T28054] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 836.788699][T28074] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9820'. [ 836.855383][T28075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9821'. [ 837.399864][T28058] loop6: detected capacity change from 0 to 32768 [ 837.425317][T28058] [ 837.425317][T28058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.425317][T28058] [ 837.907410][T28058] [ 837.907410][T28058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.907410][T28058] [ 837.972189][T28058] [ 837.972189][T28058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.972189][T28058] [ 837.983066][T28058] [ 837.983066][T28058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.983066][T28058] [ 837.983131][T28058] [ 837.983131][T28058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.983131][T28058] [ 837.983280][T28058] [ 837.983280][T28058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.983280][T28058] [ 837.983325][T28058] [ 837.983325][T28058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 837.983325][T28058] [ 838.105215][T23683] [ 838.105215][T23683] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 838.105215][T23683] [ 838.196841][ T121] [ 838.196841][ T121] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 838.196841][ T121] [ 838.228920][T23683] [ 838.228920][T23683] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 838.228920][T23683] [ 838.250681][T28081] loop9: detected capacity change from 0 to 32768 [ 838.271955][T28081] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9825 (28081) [ 838.525723][T28102] SET target dimension over the limit! [ 838.564528][T28081] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 838.575687][T28081] BTRFS info (device loop9): using sha256 checksum algorithm [ 838.823679][T28081] BTRFS info (device loop9): enabling ssd optimizations [ 838.823724][T28081] BTRFS info (device loop9): turning on async discard [ 838.823757][T28081] BTRFS info (device loop9): enabling free space tree [ 838.998191][T27383] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 839.081377][T28127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9840'. [ 839.081746][T28127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9840'. [ 839.672079][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9843'. [ 839.834861][T28139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 840.298265][T28150] overlay: Bad value for 'workdir' [ 840.374313][T28153] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9853'. [ 840.383719][T28153] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9853'. [ 840.444175][T28155] loop0: detected capacity change from 0 to 128 [ 840.486694][T28151] loop8: detected capacity change from 0 to 2048 [ 840.492828][T28155] EXT4-fs (loop0): Test dummy encryption mode enabled [ 840.555892][T28155] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 840.573496][T28155] ext4 filesystem being mounted at /2077/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 840.914868][T28155] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 841.184503][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 841.340495][T28175] loop7: detected capacity change from 0 to 256 [ 842.168372][ T5782] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 842.332119][ T5782] usb 8-1: Using ep0 maxpacket: 16 [ 842.333314][ T5782] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 842.335882][ T5782] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 842.335907][ T5782] usb 8-1: config 0 has no interface number 0 [ 842.335944][ T5782] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 842.341050][ T5782] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 842.341249][ T5782] usb 8-1: Product: syz [ 842.341264][ T5782] usb 8-1: SerialNumber: syz [ 842.368137][ T5782] usb 8-1: config 0 descriptor?? [ 842.427013][ T5782] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input67 [ 842.550600][T28208] gre0: entered promiscuous mode [ 842.550642][T28208] gre0: entered allmulticast mode [ 842.581961][T28208] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 842.730501][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 842.730721][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 842.730952][T26812] usb 8-1: USB disconnect, device number 8 [ 842.731034][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 842.731053][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 842.784349][T26812] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 842.968703][T28215] usb usb1: check_ctrlrecip: process 28215 (syz.6.9878) requesting ep 01 but needs 81 [ 842.992261][T28215] usb usb1: usbfs: process 28215 (syz.6.9878) did not claim interface 0 before use [ 843.038822][T28217] netlink: 'syz.8.9879': attribute type 7 has an invalid length. [ 844.341714][T28253] tmpfs: Bad value for 'mpol' [ 844.385991][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 844.386034][ T30] audit: type=1326 audit(2000000378.780:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.404621][ T30] audit: type=1326 audit(2000000378.780:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.404675][ T30] audit: type=1326 audit(2000000378.789:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.404715][ T30] audit: type=1326 audit(2000000378.789:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.404754][ T30] audit: type=1326 audit(2000000378.789:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.404793][ T30] audit: type=1326 audit(2000000378.789:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.404833][ T30] audit: type=1326 audit(2000000378.789:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.404880][ T30] audit: type=1326 audit(2000000378.789:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.404920][ T30] audit: type=1326 audit(2000000378.789:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28254 comm="syz.9.9897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89d7f9e0d9 code=0x7ffc0000 [ 844.864961][ T4931] Bluetooth: hci8: command 0x0406 tx timeout [ 845.056638][T28262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.736151][T28285] loop0: detected capacity change from 0 to 512 [ 845.790237][T28288] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9913'. [ 845.812563][T28285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.827439][T28285] ext4 filesystem being mounted at /2092/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 846.012129][T28285] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes [ 846.197328][T28298] loop8: detected capacity change from 0 to 16 [ 846.219903][T28298] erofs (device loop8): mounted with root inode @ nid 36. [ 846.266932][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.499532][T28336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9936'. [ 847.508820][T28336] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9936'. [ 847.698736][T28340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9938'. [ 847.827140][T28338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 847.849706][T28340] veth7: entered allmulticast mode [ 848.599542][T28364] loop0: detected capacity change from 0 to 512 [ 848.671187][T28364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.690231][T28364] ext4 filesystem being mounted at /2099/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.836041][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.077949][T28379] loop8: detected capacity change from 0 to 128 [ 849.185315][T28380] loop9: detected capacity change from 0 to 1764 [ 850.037004][T28404] netlink: 'syz.7.9967': attribute type 4 has an invalid length. [ 850.037045][T28404] netlink: 152 bytes leftover after parsing attributes in process `syz.7.9967'. [ 850.111577][T28396] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 850.215135][T28404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 850.848276][ T31] INFO: task syz.1.7645:23090 blocked for more than 143 seconds. [ 850.849992][ T31] Not tainted syzkaller #0 [ 850.850926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 850.850942][ T31] task:syz.1.7645 state:D stack:27784 pid:23090 tgid:23089 ppid:5612 task_flags:0x400140 flags:0x00080002 [ 850.851000][ T31] Call Trace: [ 850.851008][ T31] [ 850.851021][ T31] __schedule+0x1b2a/0x59a0 [ 850.851086][ T31] ? __pfx___schedule+0x10/0x10 [ 850.851117][ T31] ? schedule+0x90/0x2b0 [ 850.851140][ T31] schedule+0x164/0x2b0 [ 850.851175][ T31] schedule_preempt_disabled+0x13/0x30 [ 850.851195][ T31] __mutex_lock+0x7bf/0x1550 [ 850.851222][ T31] ? __mutex_lock+0x5d4/0x1550 [ 850.851275][ T31] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 850.851442][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 850.851464][ T31] ? net_generic+0x1e/0x240 [ 850.851492][ T31] ? net_generic+0x1e/0x240 [ 850.851515][ T31] ? net_generic+0x1e/0x240 [ 850.851536][ T31] ? net_generic+0x1e/0x240 [ 850.851565][ T31] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 850.851593][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 850.851710][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 850.851749][ T31] ? bpf_lsm_capable+0x9/0x20 [ 850.851772][ T31] ? security_capable+0x7e/0x2c0 [ 850.851858][ T31] genl_rcv_msg+0x614/0x7a0 [ 850.851905][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.851932][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 850.851970][ T31] netlink_rcv_skb+0x226/0x4a0 [ 850.851995][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.852023][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 850.852060][ T31] ? down_read+0x2be/0x330 [ 850.852094][ T31] genl_rcv+0x28/0x40 [ 850.852119][ T31] netlink_unicast+0x7bb/0x940 [ 850.852193][ T31] netlink_sendmsg+0x813/0xb40 [ 850.852227][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.852247][ T31] ? lock_acquire+0x115/0x350 [ 850.852280][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 850.852325][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.852348][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 850.852423][ T31] ____sys_sendmsg+0x54e/0x850 [ 850.852489][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.852529][ T31] ? import_iovec+0x73/0xa0 [ 850.852634][ T31] ___sys_sendmsg+0x2a5/0x360 [ 850.852676][ T31] ? __lock_acquire+0x6df/0x2e50 [ 850.852707][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.852729][ T31] ? futex_wait+0x2a2/0x390 [ 850.852781][ T31] ? __fget_files+0x2a/0x420 [ 850.852804][ T31] ? __fget_files+0x3a2/0x420 [ 850.852831][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 850.852853][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.852892][ T31] do_syscall_64+0x166/0x510 [ 850.852917][ T31] ? trace_irq_disable+0x3b/0x140 [ 850.852946][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.852970][ T31] ? clear_bhb_loop+0x70/0xc0 [ 850.852997][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.853020][ T31] RIP: 0033:0x7f268519e0d9 [ 850.853041][ T31] RSP: 002b:00007f26860f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.853069][ T31] RAX: ffffffffffffffda RBX: 00007f2685425fa0 RCX: 00007f268519e0d9 [ 850.853087][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 850.853104][ T31] RBP: 00007f2685235024 R08: 0000000000000000 R09: 0000000000000000 [ 850.853119][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.853135][ T31] R13: 00007f2685426038 R14 ** replaying previous printk message ** [ 850.853135][ T31] R13: 00007f2685426038 R14: 00007f2685425fa0 R15: 00007ffd7d253a08 [ 850.853172][ T31] [ 850.853187][ T31] INFO: task syz.2.7672:23148 blocked for more than 143 seconds. [ 850.853205][ T31] Not tainted syzkaller #0 [ 850.853219][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 850.853232][ T31] task:syz.2.7672 state:D stack:27320 pid:23148 tgid:23147 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 850.853304][ T31] Call Trace: [ 850.853314][ T31] [ 850.853330][ T31] __schedule+0x1b2a/0x59a0 [ 850.853375][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 850.853411][ T31] ? __pfx___schedule+0x10/0x10 [ 850.853447][ T31] ? schedule+0x90/0x2b0 [ 850.853477][ T31] schedule+0x164/0x2b0 [ 850.853507][ T31] schedule_preempt_disabled+0x13/0x30 [ 850.853533][ T31] __mutex_lock+0x7bf/0x1550 [ 850.853567][ T31] ? __mutex_lock+0x5d4/0x1550 [ 850.853600][ T31] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 850.853648][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 850.853686][ T31] ? net_generic+0x1e/0x240 [ 850.853712][ T31] ? net_generic+0x1e/0x240 [ 850.853744][ T31] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 850.853778][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 850.853814][ T31] ? rcu_is_watching+0x15/0xb0 [ 850.853839][ T31] ? trace_kmalloc+0x2a/0xf0 [ 850.853868][ T31] ? __kmalloc_noprof+0x388/0x710 [ 850.853896][ T31] ? __nla_parse+0x40/0x60 [ 850.853978][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 850.854008][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 850.854046][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 850.854082][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 850.854134][ T31] ? bpf_lsm_capable+0x9/0x20 [ 850.854158][ T31] ? security_capable+0x7e/0x2c0 [ 850.854188][ T31] genl_rcv_msg+0x614/0x7a0 [ 850.854223][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.854251][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 850.854300][ T31] netlink_rcv_skb+0x226/0x4a0 [ 850.854325][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.854355][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 850.854395][ T31] ? down_read+0x2be/0x330 [ 850.854429][ T31] genl_rcv+0x28/0x40 [ 850.854455][ T31] netlink_unicast+0x7bb/0x940 [ 850.854499][ T31] netlink_sendmsg+0x813/0xb40 [ 850.854532][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.854554][ T31] ? lock_acquire+0x115/0x350 [ 850.854590][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 850.854620][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.854643][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 850.854673][ T31] ____sys_sendmsg+0x54e/0x850 [ 850.854712][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.854752][ T31] ? import_iovec+0x73/0xa0 [ 850.854781][ T31] ___sys_sendmsg+0x2a5/0x360 [ 850.854800][ T31] ? __lock_acquire+0x6df/0x2e50 [ 850.854836][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.854860][ T31] ? futex_wait+0x2a2/0x390 [ 850.854919][ T31] ? __fget_files+0x2a/0x420 [ 850.854940][ T31] ? __fget_files+0x3a2/0x420 [ 850.854973][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 850.854999][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.855044][ T31] do_syscall_64+0x166/0x510 [ 850.855072][ T31] ? trace_irq_disable+0x3b/0x140 [ 850.855102][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.855126][ T31] ? clear_bhb_loop+0x70/0xc0 [ 850.855154][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.855177][ T31] RIP: 0033:0x7f2630f9e0d9 [ 850.855198][ T31] RSP: 002b:00007f2631ebb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.855224][ T31] RAX: ffffffffffffffda RBX: 00007f2631225fa0 RCX: 00007f2630f9e0d9 [ 850.855243][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 850.855260][ T31] RBP: 00007f2631035024 R08: 0000000000000000 R09: 0000000000000000 [ 850.855276][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.855297][ T31] R13: 00007f2631226038 R14: 00007f2631225fa0 R15: 00007fff795c8158 [ 850.855333][ T31] [ 850.855351][ T31] INFO: task syz.5.7950:23763 blocked for more than 143 seconds. [ 850.855370][ T31] Not tainted syzkaller #0 [ 850.855384][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 850.855396][ T31] task:syz.5.7950 state:D stack:27200 pid:23763 tgid:23760 ppid:22248 task_flags:0x400040 flags:0x00080002 [ 850.855461][ T31] Call Trace: [ 850.855472][ T31] [ 850.855487][ T31] __schedule+0x1b2a/0x59a0 [ 850.855532][ T31] ? kasan_save_track+0x4f/0x80 [ 850.855558][ T31] ? kasan_save_track+0x3e/0x80 [ 850.855594][ T31] ? __pfx___schedule+0x10/0x10 [ 850.855630][ T31] ? schedule+0x90/0x2b0 [ 850.855660][ T31] schedule+0x164/0x2b0 [ 850.855690][ T31] schedule_preempt_disabled+0x13/0x30 [ 850.855717][ T31] __mutex_lock+0x7bf/0x1550 [ 850.855751][ T31] ? __mutex_lock+0x5d4/0x1550 [ 850.855783][ T31] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 850.855813][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 850.855850][ T31] ? __nlmsg_put+0xef/0x1b0 [ 850.855885][ T31] ? genlmsg_put+0x137/0x2e0 [ 850.855916][ T31] nfsd_nl_listener_get_doit+0x104/0x610 [ 850.855946][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 850.855975][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 850.856011][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 850.856047][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 850.856086][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 850.856162][ T31] genl_rcv_msg+0x614/0x7a0 [ 850.856198][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.856226][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 850.856255][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 850.856327][ T31] netlink_rcv_skb+0x226/0x4a0 [ 850.856352][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.856382][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 850.856421][ T31] ? down_read+0x2be/0x330 [ 850.856456][ T31] genl_rcv+0x28/0x40 [ 850.856482][ T31] netlink_unicast+0x7bb/0x940 [ 850.856525][ T31] netlink_sendmsg+0x813/0xb40 [ 850.856559][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.856581][ T31] ? lock_acquire+0x115/0x350 [ 850.856616][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 850.856646][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.856670][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 850.856699][ T31] ____sys_sendmsg+0x54e/0x850 [ 850.856737][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.856777][ T31] ? import_iovec+0x73/0xa0 [ 850.856807][ T31] ___sys_sendmsg+0x2a5/0x360 [ 850.856828][ T31] ? __lock_acquire+0x6df/0x2e50 [ 850.856864][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.856891][ T31] ? futex_wait+0x2a2/0x390 [ 850.856956][ T31] ? __fget_files+0x2a/0x420 [ 850.856977][ T31] ? __fget_files+0x3a2/0x420 [ 850.857010][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 850.857036][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.857081][ T31] do_syscall_64+0x166/0x510 [ 850.857109][ T31] ? trace_irq_disable+0x3b/0x140 [ 850.857143][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.857166][ T31] ? clear_bhb_loop+0x70/0xc0 [ 850.857193][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.857216][ T31] RIP: 0033:0x7f17f479e0d9 [ 850.857236][ T31] RSP: 002b:00007f17f5628028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.857263][ T31] RAX: ffffffffffffffda RBX: 00007f17f4a25fa0 RCX: 00007f17f479e0d9 [ 850.857280][ T31] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 850.857305][ T31] RBP: 00007f17f4835024 R08: 0000000000000000 R09: 0000000000000000 [ 850.857322][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.857337][ T31] R13: 00007f17f4a26038 R14: 00007f17f4a25fa0 R15: 00007ffc8018fc98 [ 850.857373][ T31] [ 850.857425][ T31] [ 850.857425][ T31] Showing all locks held in the system: [ 850.857442][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 850.857573][ T31] #0: ffffffff8eb5c6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 850.857733][ T31] locks held by kworker/u8:3/50: 5, last CPU#0: [ 850.857751][ T31] #0: ffff8880431a6140 ((wq_completion)wg-kex-wg2#20){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 850.857830][ T31] #1: ffffc90000ba7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 850.857904][ T31] #2: ffff888069ed5440 (&wg->static_identity.lock){++++}-{4:4}, at: __mod_timer+0x904/0xed0 [ 850.994223][ T31] #3: ffffffff9a9eff08 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 850.994276][ T31] #4: ffffffff9a7ec788 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x220 [ 850.994357][ T31] locks held by udevd/4981: 1, last CPU#0: [ 850.994372][ T31] #0: ffffffff8eb5c6a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 850.994420][ T31] locks held by getty/5364: 2, on CPU#1: [ 850.994433][ T31] #0: ffff888036ef10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 850.994573][ T31] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 850.994638][ T31] locks held by syz-executor/5611: 4, last CPU#0: [ 850.994651][ T31] #0: ffffffff8ec2ee10 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 850.994894][ T31] #1: ffff8880361e36b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 850.994939][ T31] #2: ffff8880352e7678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 850.994988][ T31] #3: ffffffff8eb5c6a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 850.995050][ T31] locks held by syz.3.6978/21631: 2, on CPU#0: [ 850.995063][ T31] #0: ffffffff900ad428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 850.995111][ T31] #1: ffffffff8ee94f60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 850.995173][ T31] locks held by syz.1.7645/23090: 2, on CPU#1: [ 850.995187][ T31] #0: ffffffff900ad428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 850.995233][ T31] #1: ffffffff8ee94f60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 850.995282][ T31] locks held by syz.2.7672/23148: 2, on CPU#1: [ 850.995296][ T31] #0: ffffffff900ad428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 850.995342][ T31] #1: ffffffff8ee94f60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 850.995392][ T31] locks held by syz.5.7950/23763: 2, on CPU#1: [ 850.995406][ T31] #0: ffffffff900ad428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 850.995451][ T31] #1: ffffffff8ee94f60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 850.995504][ T31] locks held by syz.4.9318/26954: 2, on CPU#1: [ 850.995518][ T31] #0: ffffffff900ad428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 850.995563][ T31] #1: ffffffff8ee94f60 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 850.995611][ T31] locks held by syz-executor/27383: 1, last CPU#0: [ 850.995624][ T31] #0: ffff8880786e1d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0x8e0/0x3180 [ 850.995734][ T31] locks held by syz.7.9979/28428: 1, last CPU#0: [ 850.995749][ T31] #0: ffff888027dad038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 850.995791][ T31] locks held by syz.8.9980/28429: 2, last CPU#0: [ 850.995805][ T31] #0: ffff8880352e5038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 850.995848][ T31] #1: ffffffff8eb5c6a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 850.995901][ T31] [ 850.995907][ T31] ============================================= [ 850.995907][ T31] [ 850.996003][ T31] NMI backtrace for cpu 0 [ 850.996019][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 850.996041][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.996052][ T31] Call Trace: [ 850.996062][ T31] [ 850.996072][ T31] dump_stack_lvl+0xe8/0x150 [ 850.996105][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 850.996131][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 850.996162][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 850.996194][ T31] sys_info+0x135/0x170 [ 850.996212][ T31] watchdog+0xfd7/0x1030 [ 850.996247][ T31] ? watchdog+0x1c7/0x1030 [ 850.996281][ T31] kthread+0x388/0x470 [ 850.996310][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.996334][ T31] ? __pfx_kthread+0x10/0x10 [ 850.996365][ T31] ret_from_fork+0x514/0xb70 [ 850.996397][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 850.996427][ T31] ? __switch_to+0xc89/0x1420 [ 850.996456][ T31] ? __pfx_kthread+0x10/0x10 [ 850.996485][ T31] ret_from_fork_asm+0x1a/0x30 [ 850.996531][ T31] [ 850.996540][ T31] Sending NMI from CPU 0 to CPUs 1: [ 850.996578][ C1] NMI backtrace for cpu 1 [ 850.996592][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 850.996612][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.996623][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 850.996722][ C1] Code: e8 fe 10 5b fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f d4 c9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 850.996737][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 850.996754][ C1] RAX: 1ffffffff355fd00 RBX: 00000000000003fd RCX: 0000000000000000 [ 850.996767][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 850.996779][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 850.996796][ C1] R10: dffffc0000000000 R11: ffffffff856c73b0 R12: dffffc0000000000 [ 850.996809][ C1] R13: 0000000000000000 R14: ffffffff9aafec40 R15: 0000000000000000 [ 850.996822][ C1] FS: 0000000000000000(0000) GS:ffff88812500c000(0000) knlGS:0000000000000000 [ 850.996837][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 850.996848][ C1] CR2: 000055555ac07a48 CR3: 00000000571cc000 CR4: 00000000003526f0 [ 850.996863][ C1] Call Trace: [ 850.996870][ C1] [ 850.996877][ C1] wait_for_lsr+0x184/0x2f0 [ 850.996971][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 850.996997][ C1] serial8250_console_write+0xaa1/0x1200 [ 850.997023][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 850.997052][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 850.997077][ C1] ? __schedule+0x1b40/0x59a0 [ 850.997106][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 850.997134][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 850.997154][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 850.997187][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 850.997210][ C1] nbcon_kthread_func+0x679/0x880 [ 850.997238][ C1] ? nbcon_kthread_func+0x163/0x880 [ 850.997262][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 850.997291][ C1] ? __kthread_parkme+0x71/0x1f0 [ 850.997317][ C1] ? __kthread_parkme+0x196/0x1f0 [ 850.997345][ C1] kthread+0x388/0x470 [ 850.997372][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 850.997398][ C1] ? __pfx_kthread+0x10/0x10 [ 850.997425][ C1] ret_from_fork+0x514/0xb70 [ 850.997452][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 850.997477][ C1] ? __switch_to+0xc89/0x1420 [ 850.997502][ C1] ? __pfx_kthread+0x10/0x10 [ 850.997528][ C1] ret_from_fork_asm+0x1a/0x30 [ 850.997561][ C1] [ 851.204363][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 852.666831][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 852.675939][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.686008][ T31] Call Trace: [ 852.689300][ T31] [ 852.692227][ T31] vpanic+0x56c/0xa60 [ 852.696235][ T31] ? __pfx___schedule+0x10/0x10 [ 852.701088][ T31] ? __pfx_vpanic+0x10/0x10 [ 852.705603][ T31] panic+0xc5/0xd0 [ 852.709326][ T31] ? __pfx_panic+0x10/0x10 [ 852.713744][ T31] ? preempt_schedule_common+0x82/0xd0 [ 852.719215][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 852.724608][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 852.730859][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 852.737016][ T31] watchdog+0x1030/0x1030 [ 852.741370][ T31] ? watchdog+0x1c7/0x1030 [ 852.745801][ T31] kthread+0x388/0x470 [ 852.749874][ T31] ? __pfx_watchdog+0x10/0x10 [ 852.754554][ T31] ? __pfx_kthread+0x10/0x10 [ 852.759163][ T31] ret_from_fork+0x514/0xb70 [ 852.763780][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 852.768896][ T31] ? __switch_to+0xc89/0x1420 [ 852.774014][ T31] ? __pfx_kthread+0x10/0x10 [ 852.778783][ T31] ret_from_fork_asm+0x1a/0x30 [ 852.783563][ T31] [ 852.786923][ T31] Kernel Offset: disabled [ 852.791258][ T31] Rebooting in 86400 seconds..