last executing test programs: 3.676275199s ago: executing program 0 (id=984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x20000000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x800, 0xfffffffa, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) 3.572201932s ago: executing program 0 (id=985): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) bind(r0, &(0x7f0000000200)=@generic={0x1f, "0000000000000100"}, 0xa) listen(r0, 0x3) setsockopt(r0, 0x112, 0x11, 0x0, 0x0) 3.494282594s ago: executing program 0 (id=986): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000001400), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}, {&(0x7f00000001c0)="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", 0x286}], 0x2}, 0x40) sendmsg$kcm(r0, &(0x7f0000001a80)={&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001b80)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 3.360578877s ago: executing program 0 (id=989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,,ers=3.0,nodfs\x00') 3.274731309s ago: executing program 2 (id=991): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000001e40)=[{0x1, 0x9000, 0x0, 0x0}, {0x6fc8, 0x8000, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], 0x3}) 2.392218251s ago: executing program 0 (id=1000): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.926234422s ago: executing program 3 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) close(r0) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 1.828443055s ago: executing program 3 (id=1005): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x28, r1, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x24004094) 1.827265205s ago: executing program 1 (id=1006): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000300)="02", 0x1, 0x8003, &(0x7f0000000340)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f000001fdc0)={r2, 0x9, 0x30, 0x7f, 0x1}, &(0x7f000001fe00)=0x18) 1.720154617s ago: executing program 3 (id=1007): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000cc0)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000d00)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3}) 1.719932197s ago: executing program 1 (id=1008): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0xa409b880, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="11") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 1.664901939s ago: executing program 3 (id=1009): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000840)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b", 0x20}], 0x1, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/88, 0x58}], 0x1}, 0x10001) 1.63395892s ago: executing program 1 (id=1010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000019c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) 1.541638162s ago: executing program 1 (id=1011): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) 1.412117305s ago: executing program 2 (id=1012): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x59f8, 0x4) sendto$inet6(r0, &(0x7f0000000380)="8d", 0x1, 0x80001, 0x0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/89, 0x59}, 0x1ff}], 0x1, 0x40002040, 0x0) 1.411944605s ago: executing program 1 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) 1.362687527s ago: executing program 2 (id=1014): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080)={[{@discard}, {@errors_continue}, {@nobarrier}, {@nobarrier}]}, 0x3, 0xda4, &(0x7f0000000340)="$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") mknod(&(0x7f0000001a00)='./file0\x00', 0x8000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000001a40)='./file1\x00', 0x101041, 0xf0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./proc\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='memory.stat\x00', 0x275a, 0x0) symlink(&(0x7f0000001700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000001840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.270188258s ago: executing program 1 (id=1015): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0xc0000000}, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) inotify_init() syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90010"], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) io_setup(0xc, 0x0) r5 = timerfd_create(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) 1.088127183s ago: executing program 2 (id=1016): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.087993263s ago: executing program 3 (id=1017): r0 = syz_open_dev$ndb(&(0x7f00000005c0), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x100000000400fe) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 1.005849635s ago: executing program 2 (id=1018): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 115.449197ms ago: executing program 3 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000100)='7', 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="038a", 0x2}, {&(0x7f00000001c0)='\t', 0x1}, {0x0}], 0x3) 100.804957ms ago: executing program 0 (id=1020): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) listen(r0, 0x80000001) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) 0s ago: executing program 2 (id=1021): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) kernel console output (not intermixed with test programs): state [ 80.671681][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.679093][ T5772] bridge_slave_1: entered allmulticast mode [ 80.686475][ T5772] bridge_slave_1: entered promiscuous mode [ 80.771368][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.830914][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.915587][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.922767][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.938609][ T5776] bridge_slave_0: entered allmulticast mode [ 80.958473][ T5776] bridge_slave_0: entered promiscuous mode [ 80.998156][ T5772] team0: Port device team_slave_0 added [ 81.008414][ T5772] team0: Port device team_slave_1 added [ 81.014897][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.046590][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.067154][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.087153][ T5776] bridge_slave_1: entered allmulticast mode [ 81.106802][ T5776] bridge_slave_1: entered promiscuous mode [ 81.191963][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.209926][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.240098][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.260322][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.270050][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.281686][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.289179][ T5771] bridge_slave_0: entered allmulticast mode [ 81.300261][ T5771] bridge_slave_0: entered promiscuous mode [ 81.316550][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.327623][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.357485][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.372176][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.385799][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.392984][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.401159][ T5771] bridge_slave_1: entered allmulticast mode [ 81.408616][ T5771] bridge_slave_1: entered promiscuous mode [ 81.446160][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.500173][ T5776] team0: Port device team_slave_0 added [ 81.509105][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.522103][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.555457][ T5776] team0: Port device team_slave_1 added [ 81.615476][ T5084] Bluetooth: hci1: command tx timeout [ 81.615493][ T5779] Bluetooth: hci2: command tx timeout [ 81.629567][ T5771] team0: Port device team_slave_0 added [ 81.652222][ T5771] team0: Port device team_slave_1 added [ 81.665894][ T5772] hsr_slave_0: entered promiscuous mode [ 81.672552][ T5772] hsr_slave_1: entered promiscuous mode [ 81.680151][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.687917][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.714111][ T5084] Bluetooth: hci0: command tx timeout [ 81.719742][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.730511][ T5084] Bluetooth: hci3: command tx timeout [ 81.774319][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.781306][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.807898][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.880173][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.889540][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.918762][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.972339][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.983132][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.013302][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.051635][ T5776] hsr_slave_0: entered promiscuous mode [ 82.059454][ T5776] hsr_slave_1: entered promiscuous mode [ 82.068836][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.077183][ T5776] Cannot create hsr debugfs directory [ 82.242177][ T5771] hsr_slave_0: entered promiscuous mode [ 82.252208][ T5771] hsr_slave_1: entered promiscuous mode [ 82.259845][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.270775][ T5771] Cannot create hsr debugfs directory [ 82.347764][ T971] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.605500][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.660272][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.672602][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.725702][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.736300][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 82.863087][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.876601][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.947278][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.992578][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.043222][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.054614][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.061737][ T5774] bridge_slave_0: entered allmulticast mode [ 83.070770][ T5774] bridge_slave_0: entered promiscuous mode [ 83.078558][ T5433] infiniband rxe0: set active [ 83.083473][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.097189][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.129769][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.142041][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.149774][ T5774] bridge_slave_1: entered allmulticast mode [ 83.162760][ T5774] bridge_slave_1: entered promiscuous mode [ 83.170598][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.179643][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.191957][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.236186][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.269734][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.315708][ T5774] team0: Port device team_slave_0 added [ 83.324739][ T5774] team0: Port device team_slave_1 added [ 83.356048][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.363164][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.390632][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.418876][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.427002][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.458539][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.576582][ T5774] hsr_slave_0: entered promiscuous mode [ 83.582979][ T5774] hsr_slave_1: entered promiscuous mode [ 83.589892][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.598315][ T5774] Cannot create hsr debugfs directory [ 83.667562][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.694172][ T5084] Bluetooth: hci1: command tx timeout [ 83.695464][ T5779] Bluetooth: hci2: command tx timeout [ 83.776827][ T5779] Bluetooth: hci3: command tx timeout [ 83.777049][ T5084] Bluetooth: hci0: command tx timeout [ 83.808448][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.849635][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.886092][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.893446][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.915203][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.922396][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.940539][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.964063][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.020317][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.035194][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.042396][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.075767][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.082923][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.099936][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.107105][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.115565][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.128246][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.140734][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.151716][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.189859][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.210731][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.217907][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.457304][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.486996][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.508876][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.516085][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.560356][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.567582][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.749044][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.828217][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.860654][ T5776] veth0_vlan: entered promiscuous mode [ 84.890648][ T5776] veth1_vlan: entered promiscuous mode [ 84.988412][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.000787][ T5776] veth0_macvtap: entered promiscuous mode [ 85.029513][ T5772] veth0_vlan: entered promiscuous mode [ 85.048976][ T5776] veth1_macvtap: entered promiscuous mode [ 85.075611][ T5772] veth1_vlan: entered promiscuous mode [ 85.110887][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.122281][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.134740][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.146372][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.155868][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.165642][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.174786][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.268518][ T5772] veth0_macvtap: entered promiscuous mode [ 85.293421][ T5771] veth0_vlan: entered promiscuous mode [ 85.310654][ T5771] veth1_vlan: entered promiscuous mode [ 85.334902][ T5772] veth1_macvtap: entered promiscuous mode [ 85.351463][ T5774] veth0_vlan: entered promiscuous mode [ 85.412302][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.430136][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.440867][ T5774] veth1_vlan: entered promiscuous mode [ 85.455223][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.469658][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.480864][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.520336][ T5771] veth0_macvtap: entered promiscuous mode [ 85.529169][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.541835][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.555032][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.568651][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.570610][ T5771] veth1_macvtap: entered promiscuous mode [ 85.587153][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.598344][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.608545][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.621887][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.630664][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.689569][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.708694][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.719572][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.730114][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.751876][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.774683][ T5084] Bluetooth: hci2: command tx timeout [ 85.774693][ T5779] Bluetooth: hci1: command tx timeout [ 85.786613][ T5774] veth0_macvtap: entered promiscuous mode [ 85.809088][ T5774] veth1_macvtap: entered promiscuous mode [ 85.818650][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.837951][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.849083][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.859916][ T5779] Bluetooth: hci0: command tx timeout [ 85.865340][ T5779] Bluetooth: hci3: command tx timeout [ 85.875502][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.887108][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.917181][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.927322][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.937858][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.947163][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.981453][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.993672][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.008500][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.021412][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.032787][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.059364][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.091651][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.153297][ T5762] IPVS: starting estimator thread 0... [ 86.274072][ T5889] IPVS: using max 19 ests per chain, 45600 per kthread [ 86.303650][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.392459][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.406075][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.512630][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.585293][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.653302][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.723996][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.804480][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.935194][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.981349][ T5894] syz.1.5[5894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.036910][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.067880][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.093553][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.102287][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.225624][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.252002][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.362734][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.403588][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.494735][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.512807][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.623791][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.666959][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.706848][ T5899] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 87.739747][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.754663][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.853960][ T5084] Bluetooth: hci2: command tx timeout [ 87.859556][ T5779] Bluetooth: hci1: command tx timeout [ 87.931430][ T5894] loop1: detected capacity change from 0 to 40427 [ 87.938783][ T5084] Bluetooth: hci0: command tx timeout [ 87.938824][ T5779] Bluetooth: hci3: command tx timeout [ 88.025194][ T5894] ======================================================= [ 88.025194][ T5894] WARNING: The mand mount option has been deprecated and [ 88.025194][ T5894] and is ignored by this kernel. Remove the mand [ 88.025194][ T5894] option from the mount to silence this warning. [ 88.025194][ T5894] ======================================================= [ 88.125438][ T5894] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 88.152885][ T5894] F2FS-fs (loop1): Unrecognized mount option "checkpoint[enable" or missing value [ 89.737284][ T5902] Zero length message leads to an empty skb [ 91.553774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 91.804203][ T5921] loop1: detected capacity change from 0 to 512 [ 91.849281][ T5921] ext4: Unknown parameter 'appraise_type' [ 91.877277][ T9] cfg80211: failed to load regulatory.db [ 92.170953][ T23] IPVS: starting estimator thread 0... [ 92.260069][ T5929] loop1: detected capacity change from 0 to 512 [ 92.606422][ T5929] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 92.615458][ T5929] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.7: inode #15: comm syz.1.7: iget: illegal inode # [ 92.964725][ T5929] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.7: couldn't read orphan inode 15 (err -117) [ 92.999052][ T5929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.654100][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.716754][ T5927] IPVS: using max 18 ests per chain, 43200 per kthread [ 94.033367][ T5941] jffs2: notice: (5941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.697901][ T5966] capability: warning: `syz.0.16' uses 32-bit capabilities (legacy support in use) [ 98.202940][ T5976] loop2: detected capacity change from 0 to 512 [ 99.213720][ T5960] process 'syz.1.15' launched './file0' with NULL argv: empty string added [ 101.163515][ C1] sched: RT throttling activated [ 101.173698][ T28] audit: type=1800 audit(1792441621.688:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.18" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 101.375637][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.450235][ T5990] loop2: detected capacity change from 0 to 512 [ 101.493410][ T5990] EXT4-fs (loop2): invalid inodes per group: 0 [ 101.493410][ T5990] [ 102.072126][ T5993] loop1: detected capacity change from 0 to 32768 [ 102.303286][ T5993] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.312681][ T5993] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.491831][ T5993] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 102.504537][ T971] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.521192][ T971] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.605187][ T971] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 83ms [ 102.642363][ T971] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.655261][ T6000] 9pnet_virtio: no channels available for device syz [ 102.662907][ T5993] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 103.927358][ T6011] IPVS: stopping backup sync thread 6016 ... [ 103.990505][ T6016] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 104.316120][ T6011] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 105.803985][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 107.446753][ T6032] loop3: detected capacity change from 0 to 512 [ 107.513678][ T6032] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.20: corrupted in-inode xattr: invalid ea_ino [ 107.563896][ T6032] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.20: couldn't read orphan inode 15 (err -117) [ 107.625910][ T6032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.899496][ T6041] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 108.927185][ T6041] loop2: detected capacity change from 0 to 512 [ 108.934815][ T6041] FAT-fs (loop2): Unrecognized mount option "֛6GJR .zQ\wFMx7D7U d~zGcxEb4'IG(;e7+ʞ:!Y/Q:|ֿ'WMf_Z8{V@ Ayv7۾?3/R 5?: !l\z{0o-a18446744073709551615" or missing value [ 109.302729][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.311073][ T6057] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.784560][ T6068] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 111.793943][ T6068] overlayfs: missing 'lowerdir' [ 112.801592][ T6073] loop3: detected capacity change from 0 to 512 [ 114.188442][ T6073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.371795][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.413647][ T6073] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.269309][ T6098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 117.040865][ T6101] loop2: detected capacity change from 0 to 256 [ 117.070372][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.563611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.279583][ T28] audit: type=1800 audit(1792441639.858:3): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.38" name="file1" dev="loop2" ino=1048622 res=0 errno=0 [ 120.602220][ T6115] loop1: detected capacity change from 0 to 128 [ 120.681566][ T6115] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 120.896924][ T6123] loop2: detected capacity change from 0 to 2048 [ 120.904212][ T6123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.910892][ T6123] ext2: Bad value for 'mb_optimize_scan' [ 122.257339][ T5790] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.161070][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.186261][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.194904][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.252440][ T6130] bridge0: entered allmulticast mode [ 123.289732][ T6131] bridge_slave_1: left allmulticast mode [ 123.308926][ T6133] Bluetooth: MGMT ver 1.22 [ 123.319559][ T6131] bridge_slave_1: left promiscuous mode [ 123.352751][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.388434][ T6131] bridge_slave_0: left allmulticast mode [ 123.402436][ T6131] bridge_slave_0: left promiscuous mode [ 123.421442][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.476334][ T6136] loop1: detected capacity change from 0 to 1024 [ 123.731747][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.124516][ T27] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 124.217595][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.185533][ T27] usb 3-1: config 0 descriptor?? [ 125.445665][ T6149] loop1: detected capacity change from 0 to 8 [ 125.562291][ T6149] SQUASHFS error: Failed to read block 0x8f: -5 [ 125.630209][ T28] audit: type=1800 audit(1792441646.928:4): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.49" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 125.661420][ T8] usb 3-1: USB disconnect, device number 2 [ 126.693535][ T971] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.803688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.325433][ T5084] Bluetooth: hci3: command tx timeout [ 128.592304][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.606453][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.974443][ T6170] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6171] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6170] [ 133.431713][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.439149][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.685209][ T6196] loop3: detected capacity change from 0 to 512 [ 135.483567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 135.756892][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54'. [ 136.726342][ T6196] EXT4-fs (loop3): 1 truncate cleaned up [ 136.733359][ T6196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.791032][ T6214] loop1: detected capacity change from 0 to 256 [ 139.808353][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.868138][ T6214] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 139.983172][ T28] audit: type=1800 audit(1792441661.318:5): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.66" name="file1" dev="loop1" ino=1048627 res=0 errno=0 [ 140.047743][ T6217] loop3: detected capacity change from 0 to 256 [ 140.085556][ T6217] FAT-fs (loop3): Unrecognized mount option "nonutail=0" or missing value [ 142.086757][ T5861] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.163681][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 145.850908][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 146.621504][ T5861] usb 3-1: device descriptor read/all, error -71 [ 147.188180][ T6247] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.195753][ T6247] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.992654][ T6250] loop3: detected capacity change from 0 to 128 [ 148.001194][ T6250] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 150.638875][ T6259] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 150.649529][ T6259] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.672430][ T6259] autofs4:pid:6259:autofs_fill_super: called with bogus options [ 151.513708][ T6250] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 151.524397][ T6250] FAT-fs (loop3): Filesystem has been set read-only [ 153.941213][ T32] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 158.113757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 159.695214][ T5779] Bluetooth: hci3: command tx timeout [ 160.437983][ T6299] warning: `syz.0.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.452404][ T6299] vivid-000: disconnect [ 160.562604][ T6294] vivid-000: reconnect [ 161.913903][ T6311] loop2: detected capacity change from 0 to 1024 [ 163.274162][ T6326] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 163.281131][ T6326] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 163.340647][ T6322] Config c/1 of g1 needs at least one function. [ 163.363950][ T6322] udc dummy_udc.0: failed to start g1: -22 [ 163.369916][ T6322] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 163.392376][ T6322] UDC core: g1: couldn't find an available UDC or it's busy [ 163.418160][ T28] audit: type=1800 audit(1792441684.748:6): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="UDC" dev="configfs" ino=9249 res=0 errno=0 [ 163.515531][ T6329] loop3: detected capacity change from 0 to 512 [ 163.545232][ T6329] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.624851][ T12] hfsplus: b-tree write err: -5, ino 25 [ 163.631075][ T12] hfsplus: b-tree write err: -5, ino 4 [ 163.655009][ T12] hfsplus: b-tree write err: -5, ino 2 [ 163.665676][ T12] hfsplus: b-tree write err: -5, ino 26 [ 163.684083][ T12] hfsplus: b-tree write err: -5, ino 27 [ 163.820153][ T6329] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.90: Allocating blocks 41-42 which overlap fs metadata [ 163.900193][ T6329] EXT4-fs (loop3): Remounting filesystem read-only [ 164.346088][ T6329] Quota error (device loop3): write_blk: dquota write failed [ 165.793892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 165.823532][ T6329] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 165.837694][ T6329] Quota error (device loop3): write_blk: dquota write failed [ 165.854526][ T6329] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 165.874181][ T6329] EXT4-fs (loop3): 1 truncate cleaned up [ 165.898629][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.273734][ T6343] misc userio: Invalid payload size [ 166.906632][ T6346] misc userio: No port type given on /dev/userio [ 167.590072][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.278333][ T6365] capability: warning: `syz.3.99' uses deprecated v2 capabilities in a way that may be insecure [ 170.458852][ T6365] input: syz0 as /devices/virtual/input/input5 [ 171.330011][ T6383] loop2: detected capacity change from 0 to 256 [ 171.337910][ T6383] exfat: Bad value for 'uid' [ 171.390666][ T6383] "syz.2.103" (6383) uses obsolete ecb(arc4) skcipher [ 171.399203][ T6369] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.826126][ T6389] trusted_key: syz.2.103 sent an empty control message without MSG_MORE. [ 172.781064][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 173.883646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 174.230093][ T28] audit: type=1326 audit(1792441694.668:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.2.104" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f807e19e559 code=0x0 [ 174.784887][ T6399] loop3: detected capacity change from 0 to 4096 [ 174.829630][ T6399] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 174.882573][ T6399] ntfs3: loop3: Failed to load $BadClus (-22). [ 175.171558][ T6405] loop3: detected capacity change from 0 to 128 [ 175.284727][ T6405] FAT-fs (loop3): bogus number of reserved sectors [ 175.329394][ T6405] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 175.392156][ T6405] FAT-fs (loop3): Can't find a valid FAT filesystem [ 176.303733][ T971] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 176.325837][ T6412] loop2: detected capacity change from 0 to 512 [ 176.364077][ T6412] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 176.383596][ T6412] FAT-fs (loop2): Filesystem has been set read-only [ 176.512523][ T971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.529101][ T971] usb 4-1: not running at top speed; connect to a high speed hub [ 176.544910][ T971] usb 4-1: config 1 has an invalid interface number: 188 but max is 0 [ 176.557214][ T971] usb 4-1: config 1 has no interface number 0 [ 176.566782][ T971] usb 4-1: config 1 interface 188 has no altsetting 0 [ 176.578129][ T971] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=6e.45 [ 176.597503][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.614223][ T971] usb 4-1: Product: syz [ 178.123564][ T971] usb 4-1: Manufacturer: syz [ 178.128342][ T971] usb 4-1: SerialNumber: syz [ 178.152517][ T6418] Bluetooth: ISO socket layer initialized [ 178.266300][ T5779] Bluetooth: hci1: unexpected event 0x01 length: 16 > 1 [ 178.415120][ T971] radio-si470x 4-1:1.188: could not find interrupt in endpoint [ 178.439929][ T971] radio-si470x: probe of 4-1:1.188 failed with error -5 [ 178.492726][ T971] radio-raremono 4-1:1.188: this is not Thanko's Raremono. [ 178.509627][ T971] usbhid 4-1:1.188: couldn't find an input interrupt endpoint [ 178.521603][ T971] usb 4-1: USB disconnect, device number 2 [ 178.988103][ T6429] loop2: detected capacity change from 0 to 256 [ 181.242796][ T6437] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6437] [ 182.448326][ T6440] loop2: detected capacity change from 0 to 32768 [ 182.463586][ T6440] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.118 (6440) [ 182.497817][ T6440] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 182.509070][ T6440] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 182.518096][ T6440] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 182.527806][ T6440] BTRFS info (device loop2): use zstd compression, level 3 [ 182.535102][ T6440] BTRFS info (device loop2): force clearing of disk cache [ 182.542259][ T6440] BTRFS info (device loop2): enabling disk space caching [ 182.549392][ T6440] BTRFS info (device loop2): disk space caching is enabled [ 182.626600][ T6440] BTRFS info (device loop2): enabling ssd optimizations [ 182.633897][ T6440] BTRFS info (device loop2): auto enabling async discard [ 182.644472][ T6440] BTRFS info (device loop2): rebuilding free space tree [ 182.691847][ T6440] BTRFS info (device loop2): disabling free space tree [ 182.698921][ T6440] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.708956][ T6440] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.475546][ T5772] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 185.775447][ T6485] loop2: detected capacity change from 0 to 256 [ 185.804950][ T6485] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.916625][ T6485] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 186.230903][ T6492] loop2: detected capacity change from 0 to 1024 [ 186.286389][ T6492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.373570][ T971] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 186.637790][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 186.645926][ T971] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.668566][ T971] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 186.758170][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.767035][ T971] usb 2-1: Product: syz [ 186.771278][ T971] usb 2-1: Manufacturer: syz [ 186.776866][ T971] usb 2-1: SerialNumber: syz [ 186.914246][ T28] audit: type=1800 audit(1792441708.208:8): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.127" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 187.209171][ T971] usb 2-1: unit 4 not found! [ 187.219551][ T971] usb 2-1: unit 127 not found! [ 187.405914][ T971] usb 2-1: USB disconnect, device number 2 [ 187.578548][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.628648][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.950395][ T6497] loop3: detected capacity change from 0 to 32768 [ 187.972339][ T6497] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.122 (6497) [ 188.056114][ T6497] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.090137][ T6497] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 188.122833][ T6497] BTRFS info (device loop3): setting nodatacow, compression disabled [ 188.158702][ T6497] BTRFS info (device loop3): setting datasum, datacow enabled [ 188.193572][ T6497] BTRFS info (device loop3): force clearing of disk cache [ 188.200903][ T6497] BTRFS info (device loop3): unrecognized rescue option 'ignoresuperflags' [ 188.223828][ T6497] BTRFS error (device loop3): unrecognized rescue value ignoresuperflags [ 188.254915][ T6497] BTRFS error (device loop3): open_ctree failed: -22 [ 191.309493][ T6528] loop3: detected capacity change from 0 to 512 [ 191.325617][ T6528] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 1536 [ 193.303937][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 193.566745][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.585313][ T27] usb 2-1: config 8 has an invalid interface number: 126 but max is 0 [ 193.602366][ T27] usb 2-1: config 8 has no interface number 0 [ 193.623596][ T27] usb 2-1: config 8 interface 126 altsetting 6 endpoint 0xF has an invalid bInterval 252, changing to 7 [ 193.653595][ T27] usb 2-1: config 8 interface 126 has no altsetting 0 [ 193.673161][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=08c7, bcdDevice=77.e9 [ 193.693267][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.703786][ T27] usb 2-1: Product: syz [ 193.707988][ T27] usb 2-1: Manufacturer: syz [ 193.726040][ T27] usb 2-1: SerialNumber: syz [ 194.006776][ T27] usb 2-1: Found UVC 0.00 device syz (046d:08c7) [ 194.033650][ T27] usb 2-1: No valid video chain found. [ 194.062508][ T27] usb 2-1: USB disconnect, device number 3 [ 194.258359][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270543][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.372219][ T6543] loop2: detected capacity change from 0 to 32768 [ 194.411473][ T6543] XFS (loop2): Invalid device [./file0], error=-2 [ 196.072366][ T28] audit: type=1326 audit(1792441716.458:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6554 comm="syz.0.144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99f379e559 code=0x0 [ 196.243671][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 196.423597][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 196.431938][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 196.449465][ T5883] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 196.463503][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.486254][ T5883] usb 3-1: Product: syz [ 196.490457][ T5883] usb 3-1: Manufacturer: syz [ 196.502697][ T5883] usb 3-1: SerialNumber: syz [ 196.550275][ T5883] usb 3-1: config 0 descriptor?? [ 196.585203][ T5883] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 196.662413][ T5883] usb 3-1: Detected FT232R [ 199.488447][ T5883] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 199.532466][ T5883] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 199.584053][ T5883] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 199.630575][ T5883] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 199.673427][ T5883] usb 3-1: USB disconnect, device number 5 [ 199.735078][ T5883] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 200.044339][ T5883] ftdi_sio 3-1:0.0: device disconnected [ 200.159616][ T6576] loop3: detected capacity change from 0 to 2048 [ 200.253166][ T5779] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 200.253265][ T5779] Bluetooth: hci3: Malformed LE Event: 0x0d [ 200.278058][ T6576] syz.3.153: attempt to access beyond end of device [ 200.278058][ T6576] loop3: rw=0, sector=50665495807918160, nr_sectors = 2 limit=2048 [ 200.318146][ T6576] NILFS (loop3): I/O error reading meta-data file (ino=4, block-offset=0) [ 200.338569][ T6576] NILFS (loop3): error -5 while loading last checkpoint (checkpoint number=2) [ 201.359071][ T6591] loop3: detected capacity change from 0 to 2048 [ 201.402540][ T6591] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.457866][ T6591] NILFS (loop3): mounting unchecked fs [ 201.481175][ T6502] udevd[6502]: incorrect nilfs2 checksum on /dev/loop3 [ 201.523170][ T6591] NILFS (loop3): recovery complete [ 201.546716][ T6596] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.802929][ T6600] loop3: detected capacity change from 0 to 256 [ 201.821493][ T6600] exfat: Bad value for 'uid' [ 201.849830][ T6600] "syz.3.160" (6600) uses obsolete ecb(arc4) skcipher [ 203.133935][ T5779] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 203.213661][ T5779] Bluetooth: hci0: command 0x206a tx timeout [ 204.193747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 206.181063][ T6622] netlink: 108 bytes leftover after parsing attributes in process `syz.3.167'. [ 206.190599][ T6623] FAULT_INJECTION: forcing a failure. [ 206.190599][ T6623] name failslab, interval 1, probability 0, space 0, times 1 [ 206.212980][ T6623] CPU: 0 PID: 6623 Comm: syz.0.166 Not tainted syzkaller #0 [ 206.220326][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.230418][ T6623] Call Trace: [ 206.233726][ T6623] [ 206.236712][ T6623] dump_stack_lvl+0x18c/0x250 [ 206.241434][ T6623] ? show_regs_print_info+0x20/0x20 [ 206.246674][ T6623] ? load_image+0x420/0x420 [ 206.251245][ T6623] ? __might_sleep+0xe0/0xe0 [ 206.255897][ T6623] ? __lock_acquire+0x7eb0/0x7eb0 [ 206.260958][ T6623] ? percpu_ref_put+0x12/0x100 [ 206.265766][ T6623] should_fail_ex+0x394/0x4c0 [ 206.270476][ T6623] should_failslab+0x9/0x20 [ 206.275025][ T6623] slab_pre_alloc_hook+0x59/0x300 [ 206.280089][ T6623] kmem_cache_alloc+0x5a/0x2c0 [ 206.284883][ T6623] ? vm_area_dup+0x61/0x270 [ 206.289413][ T6623] vm_area_dup+0x61/0x270 [ 206.293761][ T6623] __split_vma+0x1a8/0xc20 [ 206.298205][ T6623] ? mmap_write_unlock+0x160/0x160 [ 206.303352][ T6623] do_vmi_align_munmap+0x310/0x16a0 [ 206.308593][ T6623] ? do_vmi_munmap+0x2d0/0x2d0 [ 206.313390][ T6623] ? mtree_range_walk+0x68c/0x7b0 [ 206.318467][ T6623] ? mas_find_setup+0x47f/0x590 [ 206.323356][ T6623] do_vmi_munmap+0x252/0x2d0 [ 206.328068][ T6623] __vm_munmap+0x19e/0x3c0 [ 206.332518][ T6623] ? vm_munmap+0x20/0x20 [ 206.336796][ T6623] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 206.342805][ T6623] ? syscall_enter_from_user_mode+0x25/0x80 [ 206.348744][ T6623] __x64_sys_munmap+0x60/0x70 [ 206.353458][ T6623] do_syscall_64+0x55/0xb0 [ 206.357889][ T6623] ? clear_bhb_loop+0x40/0x90 [ 206.362574][ T6623] ? clear_bhb_loop+0x40/0x90 [ 206.367264][ T6623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.373189][ T6623] RIP: 0033:0x7f99f379e559 [ 206.377645][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.397269][ T6623] RSP: 002b:00007f99f468c028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 206.405728][ T6623] RAX: ffffffffffffffda RBX: 00007f99f3a25fa0 RCX: 00007f99f379e559 [ 206.413726][ T6623] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 206.421709][ T6623] RBP: 00007f99f3835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 206.429699][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.437692][ T6623] R13: 00007f99f3a26038 R14: 00007f99f3a25fa0 R15: 00007ffdc49f0ce8 [ 206.445687][ T6623] [ 206.597977][ T5084] Bluetooth: hci0: command 0x206a tx timeout [ 206.643022][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 206.656752][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 206.662939][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 207.738472][ T28] audit: type=1326 audit(1792441729.068:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 209.651623][ T28] audit: type=1326 audit(1792441729.068:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 212.283556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 212.609399][ T28] audit: type=1326 audit(1792441729.068:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 212.723534][ T28] audit: type=1326 audit(1792441729.068:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 212.806770][ T28] audit: type=1326 audit(1792441729.068:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 212.883533][ T28] audit: type=1326 audit(1792441729.068:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 212.949865][ T28] audit: type=1326 audit(1792441729.068:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 212.999553][ T28] audit: type=1326 audit(1792441729.068:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 213.042461][ T28] audit: type=1326 audit(1792441729.068:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 213.082647][ T28] audit: type=1326 audit(1792441729.068:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 213.104126][ T6646] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 213.145690][ T6646] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 213.168521][ T28] audit: type=1326 audit(1792441729.068:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32f7f982d7 code=0x7ffc0000 [ 213.195686][ T6646] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 213.201773][ T28] audit: type=1326 audit(1792441729.068:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32f7f3f8d9 code=0x7ffc0000 [ 213.270099][ T28] audit: type=1326 audit(1792441729.068:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 213.306379][ T28] audit: type=1326 audit(1792441729.068:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32f7f9e559 code=0x7ffc0000 [ 216.918352][ T6672] loop3: detected capacity change from 0 to 32768 [ 216.940547][ T6672] (syz.3.180,6672,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 217.086170][ T6672] (syz.3.180,6672,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 217.152188][ T6672] JBD2: Ignoring recovery information on journal [ 218.662341][ T6672] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 219.932512][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 220.194431][ T5782] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 220.201918][ T5782] Bluetooth: hci1: unexpected event for opcode 0x203e [ 221.211189][ T6702] loop2: detected capacity change from 0 to 32768 [ 221.400211][ T6702] JBD2: Ignoring recovery information on journal [ 221.485757][ T6702] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.620958][ T6702] (syz.2.187,6702,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 221.744052][ T6702] (syz.2.187,6702,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 221.817305][ T6702] (syz.2.187,6702,1):ocfs2_mknod:504 ERROR: status = -117 [ 221.984749][ T6702] (syz.2.187,6702,1):ocfs2_create:678 ERROR: status = -117 [ 222.606438][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 224.266516][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 224.275332][ T5782] Bluetooth: hci1: Injecting HCI hardware error event [ 224.284151][ T5779] Bluetooth: hci1: hardware error 0x00 [ 224.703651][ T8] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 224.719906][ T6726] loop3: detected capacity change from 0 to 40427 [ 224.750147][ T6726] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x7ffff [ 224.782498][ T6726] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xed31 [ 224.797497][ T6726] F2FS-fs (loop3): invalid crc value [ 224.810181][ T6726] F2FS-fs (loop3): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x2fdf/0x4740 [ 224.832615][ T6726] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 224.916255][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.936192][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.963819][ T8] usb 1-1: string descriptor 0 read error: -22 [ 224.980898][ T8] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 224.999989][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.382050][ T6749] loop3: detected capacity change from 0 to 512 [ 226.483672][ T5779] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 226.662638][ T6749] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 226.671459][ T6749] FAT-fs (loop3): Filesystem has been set read-only [ 226.678871][ T6749] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 226.687143][ T6749] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 226.747975][ T6749] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 227.962398][ T9] usb 1-1: USB disconnect, device number 2 [ 228.119527][ T6756] loop3: detected capacity change from 0 to 1024 [ 228.149207][ T6756] EXT4-fs: inline encryption not supported [ 228.194369][ T6756] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.264548][ T6764] : renamed from bond_slave_0 (while UP) [ 228.281916][ T6756] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.201: Invalid inode bitmap blk 0 in block_group 0 [ 228.298495][ T1147] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 228.312949][ T6756] EXT4-fs (loop3): Remounting filesystem read-only [ 228.323718][ T6756] EXT4-fs (loop3): 1 orphan inode deleted [ 228.330754][ T6756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.373506][ T1147] __quota_error: 53 callbacks suppressed [ 228.373518][ T1147] Quota error (device loop3): write_blk: dquota write failed [ 228.415379][ T1147] Quota error (device loop3): remove_free_dqentry: Can't write block (2) with free entries [ 228.453515][ T1147] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 228.482483][ T1147] Quota error (device loop3): write_blk: dquota write failed [ 228.495169][ T1147] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list [ 228.521677][ T1147] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 228.535194][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.555440][ T1147] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 228.612409][ T6771] loop2: detected capacity change from 0 to 512 [ 228.675183][ T6771] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.208: dx entry: limit 1024 != root limit 124 [ 228.675326][ T6771] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.208: Corrupt directory, running e2fsck is recommended [ 228.676971][ T6771] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 228.677238][ T6771] EXT4-fs error (device loop2): __ext4_iget:5091: inode #15: block 1803188480: comm syz.2.208: invalid block [ 228.677568][ T6771] EXT4-fs (loop2): Remounting filesystem read-only [ 228.678827][ T6771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.864906][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.286159][ T6793] binder: 6792:6793 ioctl c0046209 0 returned -22 [ 235.971625][ T6808] syz.1.219 uses obsolete (PF_INET,SOCK_PACKET) [ 238.711985][ T6832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.217'. [ 242.443974][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 245.127280][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 245.294803][ T6863] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 38672 - 0 [ 245.323871][ T6863] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 38672 - 0 [ 245.343716][ T6863] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 38672 - 0 [ 245.352572][ T6863] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 38672 - 0 [ 245.383857][ T6863] geneve2: entered promiscuous mode [ 249.837563][ T6888] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 253.480709][ T6912] syz.1.246 (6912): drop_caches: 2 [ 254.506714][ T6944] loop2: detected capacity change from 0 to 8 [ 254.620074][ T6944] SQUASHFS error: Failed to read block 0x4de: -5 [ 255.500128][ T6944] SQUASHFS error: Failed to read block 0x4de: -5 [ 255.565745][ T28] audit: type=1800 audit(1792441777.898:77): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.255" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 255.594243][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 255.715163][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.725105][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.493600][ T5860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 256.708833][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 256.760240][ T5860] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 256.792465][ T5860] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.851117][ T5860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.906321][ T5860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.971086][ T5860] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.057898][ T5860] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 257.122769][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.549333][ T5860] usb 4-1: GET_CAPABILITIES returned 0 [ 257.575456][ T5860] usbtmc 4-1:16.0: can't read capabilities [ 257.807400][ T5861] usb 4-1: USB disconnect, device number 3 [ 257.906738][ T6989] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 259.075310][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.089779][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.342351][ T5762] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 259.467819][ T7008] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7009] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7008] [ 260.061193][ T7016] loop3: detected capacity change from 0 to 512 [ 260.107506][ T7016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 260.197124][ T5762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.106865][ T7023] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 261.486211][ T5762] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.496076][ T5762] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.621840][ T5762] usb 2-1: string descriptor 0 read error: -71 [ 261.642566][ T5762] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 261.668631][ T7016] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.285: bad orphan inode 15 [ 261.709590][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.759101][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.783840][ T5762] usb 2-1: can't set config #1, error -71 [ 261.813200][ T7016] EXT4-fs error (device loop3): __ext4_new_inode:1083: comm syz.3.285: reserved inode found cleared - inode=18 [ 261.815831][ T5762] usb 2-1: USB disconnect, device number 4 [ 262.050626][ T28] audit: type=1326 audit(1792441784.238:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807e19e559 code=0x7ffc0000 [ 262.862814][ T28] audit: type=1326 audit(1792441784.238:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807e19e559 code=0x7ffc0000 [ 262.887432][ T28] audit: type=1326 audit(1792441784.418:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f807e19e559 code=0x7ffc0000 [ 262.934730][ T28] audit: type=1326 audit(1792441784.418:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807e19e559 code=0x7ffc0000 [ 262.987218][ T28] audit: type=1326 audit(1792441784.428:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807e19e559 code=0x7ffc0000 [ 263.009032][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.657619][ T7064] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 266.806595][ T7068] misc userio: Invalid payload size [ 267.168510][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 267.182460][ T7079] misc userio: No port type given on /dev/userio [ 268.071141][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 268.751365][ T7090] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 270.714161][ T7102] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 275.483651][ T5762] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 275.805259][ T5762] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.823662][ T5762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.877882][ T5762] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.923986][ T5762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.973576][ T5762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.064223][ T5762] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.103700][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.152361][ T5762] usb 4-1: Product: syz [ 276.157139][ T5762] usb 4-1: Manufacturer: syz [ 276.219038][ T5762] cdc_wdm 4-1:1.0: skipping garbage [ 276.249084][ T5762] cdc_wdm 4-1:1.0: skipping garbage [ 276.276044][ T5762] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 276.282039][ T5762] cdc_wdm 4-1:1.0: Unknown control protocol [ 276.426042][ T7131] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 276.467086][ T5762] usb 4-1: USB disconnect, device number 4 [ 276.782964][ T7143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.323'. [ 276.993978][ T7145] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 277.609014][ T7154] geneve2: left promiscuous mode [ 277.861507][ T7154] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7155] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7154] [ 278.369238][ T7162] loop3: detected capacity change from 0 to 128 [ 278.388108][ T7162] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 280.921032][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.322508][ T7178] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7178] [ 282.815471][ T7180] nvme nvme0: rdma connection establishment failed (-512) [ 284.091805][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.105740][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.481541][ T7202] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7203] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7202] [ 285.182404][ T7216] loop3: detected capacity change from 0 to 2048 [ 285.209854][ T7216] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.266512][ T7217] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.364478][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 285.521191][ T7219] loop3: detected capacity change from 0 to 4096 [ 285.540014][ T7219] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 285.572616][ T7219] ntfs3: loop3: Failed to load $Volume (-22). [ 285.583859][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 285.591325][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 285.603053][ T27] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 285.622383][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.642651][ T27] usb 1-1: Product: syz [ 285.650003][ T27] usb 1-1: Manufacturer: syz [ 285.663482][ T27] usb 1-1: SerialNumber: syz [ 285.922982][ T27] usb 1-1: unit 4 not found! [ 285.942522][ T27] usb 1-1: unit 127 not found! [ 286.023808][ T27] usb 1-1: USB disconnect, device number 3 [ 286.137047][ T7226] udevd[7226]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.183636][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 286.397073][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 286.418973][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.441605][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 286.456347][ T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 286.466250][ T9] usb 3-1: Product: syz [ 286.470854][ T9] usb 3-1: Manufacturer: syz [ 286.485592][ T9] hub 3-1:4.0: USB hub found [ 286.827360][ T7242] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7243] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7242] [ 287.480703][ T9] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 287.591328][ T9] usb 3-1: USB disconnect, device number 7 [ 287.745226][ T7251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.874236][ T7269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.159752][ T7272] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7275] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7272] [ 291.143723][ T5861] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 291.333515][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 291.356269][ T7294] xt_bpf: check failed: parse error [ 291.359416][ T5861] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 291.392234][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.403474][ T5861] usb 1-1: Product: syz [ 291.407688][ T5861] usb 1-1: Manufacturer: syz [ 291.412333][ T5861] usb 1-1: SerialNumber: syz [ 291.444353][ T5861] usb 1-1: config 0 descriptor?? [ 291.456088][ T5861] gspca_main: se401-2.14.0 probing 047d:5003 [ 291.743446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 292.081297][ T7299] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 293.644909][ T5861] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 293.652341][ T5861] se401: probe of 1-1:0.0 failed with error -71 [ 294.024611][ T7302] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7305] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7302] [ 294.504815][ T5861] usb 1-1: USB disconnect, device number 4 [ 294.923602][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 295.015640][ T7317] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 295.033083][ T7317] /dev/nullb0: Can't open blockdev [ 295.123662][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 295.137401][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.162812][ T8] usb 4-1: config 0 has no interface number 0 [ 295.183702][ T8] usb 4-1: config 0 interface 1 has no altsetting 0 [ 295.216906][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 295.227239][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.246533][ T8] usb 4-1: Product: syz [ 295.262003][ T8] usb 4-1: Manufacturer: syz [ 295.266936][ T8] usb 4-1: SerialNumber: syz [ 295.274679][ T8] usb 4-1: config 0 descriptor?? [ 295.493387][ T8] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 295.526425][ T7329] comedi comedi0: dt2815: I/O port conflict (0x7,2) [ 295.644899][ T5779] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 295.663010][ T5779] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 296.079977][ T7335] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7336] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7335] [ 296.345711][ T971] usb 4-1: USB disconnect, device number 5 [ 297.033806][ T5861] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 297.233547][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 297.246778][ T5861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 297.265408][ T5861] usb 2-1: config 4 interface 0 has no altsetting 0 [ 297.276245][ T5861] usb 2-1: string descriptor 0 read error: -22 [ 297.282528][ T5861] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 297.303531][ T5861] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 298.759937][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 298.775741][ T971] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 298.865755][ T5861] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 298.922080][ T5861] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.939124][ T5861] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 298.947161][ T5861] usb 2-1: media controller created [ 298.990225][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.033625][ T971] usb 1-1: Using ep0 maxpacket: 16 [ 299.042153][ T971] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 299.582829][ T7362] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7364] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7362] [ 299.944302][ T971] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 299.957042][ T5861] zl10353_read_register: readreg error (reg=127, ret==0) [ 299.964564][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.972599][ T971] usb 1-1: Product: syz [ 299.993607][ T971] usb 1-1: Manufacturer: syz [ 299.998266][ T971] usb 1-1: SerialNumber: syz [ 300.015577][ T971] usb 1-1: config 0 descriptor?? [ 300.039414][ T5861] usb 2-1: USB disconnect, device number 5 [ 300.086995][ T5779] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 300.087061][ T5779] Bluetooth: hci0: Malformed LE Event: 0x0d [ 300.101404][ T971] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 300.144263][ T971] usb 1-1: Detected FT232R [ 300.175502][ T971] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 300.193897][ T971] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 300.218789][ T971] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 300.230528][ T971] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 300.250664][ T971] usb 1-1: USB disconnect, device number 5 [ 300.275929][ T971] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 300.308974][ T971] ftdi_sio 1-1:0.0: device disconnected [ 300.615314][ T7371] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7371] [ 301.666473][ T7380] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7380] [ 302.048426][ T7381] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7381] [ 302.442779][ T5782] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 304.111156][ T5779] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 304.118110][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 304.568787][ T7404] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7404] [ 304.895981][ T7403] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7405] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7403] [ 305.966373][ T7413] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7413] [ 307.766904][ T7409] loop3: detected capacity change from 0 to 40427 [ 307.786900][ T7409] F2FS-fs (loop3): Small segment_count (20 < 1 * 24) [ 307.795749][ T7409] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 307.804987][ T7409] F2FS-fs (loop3): build fault injection attr: rate: 26, type: 0x7ffff [ 307.814844][ T7409] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7698c [ 307.827541][ T7409] F2FS-fs (loop3): invalid crc value [ 307.850767][ T7409] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 307.883602][ T7409] F2FS-fs (loop3): Found nat_bits in checkpoint [ 307.965024][ T7409] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x217/0x970 [ 308.066058][ T7409] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 308.073217][ T7409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 308.217033][ T5774] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4c3/0x1910 [ 308.234697][ T5774] F2FS-fs (loop3): invalid blkaddr: 1027, type: 10, run fsck to fix. [ 308.267754][ T5774] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4c3/0x1910 [ 308.306540][ T5774] F2FS-fs (loop3): invalid blkaddr: 517, type: 10, run fsck to fix. [ 310.093679][ T7499] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7499] [ 310.973566][ T7507] netlink: 80 bytes leftover after parsing attributes in process `syz.1.455'. [ 311.213515][ T5762] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 311.465777][ T5762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.520912][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.558387][ T5762] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.584790][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.459'. [ 311.658859][ T5762] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.693144][ T5762] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 311.709043][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.255772][ T7521] loop3: detected capacity change from 0 to 32768 [ 312.343715][ T7521] JBD2: Ignoring recovery information on journal [ 312.373615][ T5762] gud 1-1:1.0: Failed to get properties (error=-71) [ 312.458045][ T5762] gud: probe of 1-1:1.0 failed with error -71 [ 312.516911][ T7521] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 312.568685][ T5762] usb 1-1: USB disconnect, device number 6 [ 312.612839][ T7521] (syz.3.460,7521,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 312.621509][ T7521] (syz.3.460,7521,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 312.629700][ T7521] (syz.3.460,7521,0):ocfs2_mknod:504 ERROR: status = -117 [ 312.638920][ T7521] (syz.3.460,7521,0):ocfs2_create:678 ERROR: status = -117 [ 312.680136][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 312.920428][ T5779] Bluetooth: hci2: Unknown advertising packet type: 0x78 [ 312.920505][ T5779] Bluetooth: hci2: Malformed LE Event: 0x0d [ 314.103150][ T7548] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7548] [ 314.774017][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 314.794217][ T7551] : renamed from bond_slave_0 (while UP) [ 314.973588][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 314.980472][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.988845][ T23] usb 1-1: config 0 has no interface number 0 [ 314.995933][ T23] usb 1-1: config 0 interface 1 has no altsetting 0 [ 315.005502][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 315.014962][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.022977][ T23] usb 1-1: Product: syz [ 315.027242][ T23] usb 1-1: Manufacturer: syz [ 315.031870][ T23] usb 1-1: SerialNumber: syz [ 315.040406][ T23] usb 1-1: config 0 descriptor?? [ 315.257089][ T23] i2c-cp2615: probe of 1-1:0.1 failed with error -22 [ 315.467242][ T5762] usb 1-1: USB disconnect, device number 7 [ 316.511263][ T7565] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7565] [ 317.139732][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.146595][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.511985][ T7573] vivid-006: disconnect [ 318.015571][ T7568] vivid-006: reconnect [ 318.313562][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 318.431620][ T5762] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 318.497984][ T5860] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 318.547659][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 318.717848][ T23] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.049369][ T23] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.063375][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 319.070341][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 319.079722][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 319.085378][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.104047][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.125269][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 319.146191][ T23] usb 3-1: config 0 descriptor?? [ 319.177895][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.207472][ T5860] usb 4-1: config 0 descriptor?? [ 319.230922][ T5860] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 319.397275][ T5762] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 319.406585][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 319.415183][ T5762] usb 1-1: Product: syz [ 319.419399][ T5762] usb 1-1: Manufacturer: syz [ 319.581650][ T23] kye 0003:0458:5019.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 319.593306][ T23] kye 0003:0458:5019.0001: unknown main item tag 0x0 [ 319.616956][ T23] kye 0003:0458:5019.0001: hidraw0: USB HID v0.03 Device [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 319.633702][ T23] kye 0003:0458:5019.0001: tablet-enabling feature report not found [ 319.641796][ T23] kye 0003:0458:5019.0001: tablet enabling failed [ 319.810593][ T23] usb 3-1: USB disconnect, device number 8 [ 319.831613][ T5860] gspca_vc032x: reg_r err -71 [ 319.843348][ T5860] vc032x: probe of 4-1:0.0 failed with error -71 [ 319.855455][ T5860] usb 4-1: USB disconnect, device number 6 [ 320.024580][ T5762] scsi host1: uas [ 320.039298][ C1] usb 1-1: stat urb: no pending cmd for uas-tag 0 [ 320.242649][ C1] usb 1-1: cmd cmplt err -71 [ 320.246696][ T5762] usb 1-1: USB disconnect, device number 8 [ 320.260708][ T5762] scsi 1:0:0:0: tag#28 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 320.268863][ T5762] scsi 1:0:0:0: tag#28 CDB: Inquiry 12 00 00 00 24 00 [ 322.318258][ T7607] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7607] [ 323.907772][ T7609] nvme nvme0: rdma connection establishment failed (-512) [ 324.053583][ T5762] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 324.236261][ T5762] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.293203][ T5762] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.363523][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 324.374075][ T5762] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 324.436844][ T5762] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 324.465203][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.502943][ T5762] usb 3-1: Product: syz [ 324.517575][ T5762] usb 3-1: Manufacturer: syz [ 324.528556][ T5762] usb 3-1: SerialNumber: syz [ 324.585479][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.705310][ T9] usb 4-1: config 0 has no interface number 0 [ 324.719406][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.739731][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.802874][ T7649] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7649] [ 325.240971][ T5762] usb 3-1: Cannot retrieve CPort count: -110 [ 325.260513][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 325.291373][ T5762] usb 3-1: Cannot retrieve CPort count: -110 [ 325.321275][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.335927][ T5762] es2_ap_driver: probe of 3-1:1.0 failed with error -110 [ 325.425766][ T9] usb 4-1: config 0 descriptor?? [ 325.879589][ T9] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 326.017180][ T9] hid_prodikeys: hid-prodikeys: failed to find output report [ 326.017180][ T9] [ 326.095643][ T9] usb 4-1: USB disconnect, device number 7 [ 327.336896][ T9] usb 3-1: USB disconnect, device number 9 [ 327.870502][ T7675] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7675] [ 328.426989][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 328.652240][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.674148][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 328.683123][ T8] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 328.712668][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.939353][ T8] usb 4-1: cannot find UAC_HEADER [ 329.076729][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 329.152003][ T971] usb 4-1: USB disconnect, device number 8 [ 329.173566][ T5861] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 329.385046][ T5861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.395314][ T5861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.405455][ T5861] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 329.421568][ T5861] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 329.432955][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.441060][ T5861] usb 1-1: Product: syz [ 329.445411][ T5861] usb 1-1: Manufacturer: syz [ 329.450030][ T5861] usb 1-1: SerialNumber: syz [ 329.677202][ T5861] usb 1-1: Unknown endpoint type found, address 0x81 [ 329.692936][ T5861] usb 1-1: Not enough endpoints found in device, aborting! [ 329.886333][ T971] usb 1-1: USB disconnect, device number 9 [ 330.900606][ T7708] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7708] [ 331.529940][ T28] audit: type=1326 audit(1792441853.868:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.524" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 331.573643][ T28] audit: type=1326 audit(1792441853.898:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.524" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 331.650703][ T28] audit: type=1326 audit(1792441853.908:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.524" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 331.708524][ T28] audit: type=1326 audit(1792441853.908:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.524" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 331.805207][ T28] audit: type=1326 audit(1792441853.908:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.524" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 331.946789][ T28] audit: type=1326 audit(1792441853.908:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.524" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 332.038196][ T28] audit: type=1326 audit(1792441853.908:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.524" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 335.754442][ T7742] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7742] [ 336.947474][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 337.413554][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.551854][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.005197][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.053547][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.099722][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 338.146092][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.430870][ T7774] binder: 7773:7774 ioctl c0046209 0 returned -22 [ 340.629242][ T8] gud 2-1:1.0: Failed to get properties (error=-71) [ 340.643867][ T8] gud: probe of 2-1:1.0 failed with error -71 [ 340.668263][ T8] usb 2-1: USB disconnect, device number 6 [ 340.975296][ T7802] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7802] [ 341.023537][ T5762] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 341.284962][ T5762] usb 4-1: Using ep0 maxpacket: 8 [ 341.333063][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 341.382321][ T5883] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 341.460491][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.571842][ T5762] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.643565][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 341.655993][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 341.668130][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.683509][ T5762] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 341.693914][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 341.702968][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.711274][ T5762] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 341.721328][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.731708][ T5883] usb 1-1: config 0 descriptor?? [ 341.745826][ T5762] usb 4-1: config 0 descriptor?? [ 341.755335][ T5883] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 341.762564][ T7799] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.988803][ T5782] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8 [ 342.003658][ T5782] Bluetooth: hci4: Malformed Event: 0x02 [ 342.009435][ T5782] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 342.195487][ T23] usb 4-1: USB disconnect, device number 9 [ 342.317215][ T5779] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 342.360399][ T971] hid-generic 0008:046D:C082.0003: hidraw0: HID v0.04 Device [syz0] on syz0 [ 342.393138][ T5883] gspca_vc032x: reg_r err -71 [ 342.425933][ T5883] vc032x: probe of 1-1:0.0 failed with error -71 [ 342.502594][ T5883] usb 1-1: USB disconnect, device number 10 [ 343.547332][ T7814] fido_id[7814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 344.221255][ T7832] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7832] [ 347.492735][ T7855] Bluetooth: MGMT ver 1.22 [ 347.896434][ T7867] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7867] [ 348.573705][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 348.638565][ T8] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 348.835489][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.867634][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 348.887273][ T8] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 348.913511][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.033294][ T8] usb 3-1: config 0 descriptor?? [ 349.042738][ T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 349.050916][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 349.062549][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 349.073817][ T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 349.080912][ T8] usb 3-1: media controller created [ 349.088312][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.115679][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 349.121889][ T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 349.140423][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 349.162001][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 349.169267][ T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 349.271607][ T7857] dvb-usb: bulk message failed: -22 (2/0) [ 349.278923][ T971] usb 3-1: USB disconnect, device number 10 [ 349.311181][ T971] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 350.174953][ T7892] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7892] [ 350.552184][ T5779] Bluetooth: Frame is too long (len 16, expected len 4) [ 353.824439][ T7934] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7934] [ 355.328515][ T7975] IPv6: addrconf: prefix option has invalid lifetime [ 356.113295][ T28] audit: type=1326 audit(1792441878.448:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 356.166523][ T28] audit: type=1326 audit(1792441878.448:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 356.235615][ T28] audit: type=1326 audit(1792441878.488:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 356.306477][ T28] audit: type=1326 audit(1792441878.488:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99f379e2c2 code=0x7ffc0000 [ 356.364812][ T28] audit: type=1326 audit(1792441878.498:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99f375ed8e code=0x7ffc0000 [ 356.413452][ T28] audit: type=1326 audit(1792441878.498:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f99f379e387 code=0x7ffc0000 [ 356.463870][ T28] audit: type=1326 audit(1792441878.498:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99f375ed8e code=0x7ffc0000 [ 356.529297][ T28] audit: type=1326 audit(1792441878.498:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99f375ed8e code=0x7ffc0000 [ 356.571429][ T28] audit: type=1326 audit(1792441878.498:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 356.803779][ T28] audit: type=1326 audit(1792441878.498:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 358.653583][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 359.506243][ T8] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.517374][ T8] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.530792][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 359.538213][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 359.547796][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.566223][ T8] usb 2-1: config 0 descriptor?? [ 359.633546][ T5860] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 359.840267][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.877746][ T5860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.893752][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.917455][ T5860] usb 1-1: SerialNumber: syz [ 359.937835][ T5860] usb 1-1: bad CDC descriptors [ 360.161812][ T5860] usb 1-1: USB disconnect, device number 11 [ 360.187602][ T8] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x0 [ 360.195577][ T8] hid-picolcd 0003:04D8:F002.0004: unbalanced collection at end of report description [ 360.206039][ T8] hid-picolcd 0003:04D8:F002.0004: device report parse failed [ 360.221569][ T8] hid-picolcd: probe of 0003:04D8:F002.0004 failed with error -22 [ 360.270958][ T8] usb 2-1: USB disconnect, device number 7 [ 360.813619][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 366.358497][ T8123] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 366.519123][ T8128] Invalid ELF header magic: != ELF [ 366.766705][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 366.836505][ T8149] jffs2: notice: (8149) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 367.433534][ T5762] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 367.618647][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.630132][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.640003][ T5762] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 367.649232][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.659285][ T5762] usb 1-1: config 0 descriptor?? [ 368.084433][ T5762] hid (null): report_id 3828616022 is invalid [ 368.098964][ T5762] wacom 0003:056A:0331.0005: collection stack underflow [ 368.112177][ T5762] wacom 0003:056A:0331.0005: item 0 2 0 12 parsing failed [ 368.120634][ T5762] wacom 0003:056A:0331.0005: parse failed [ 368.133764][ T8181] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 368.140550][ T5762] wacom: probe of 0003:056A:0331.0005 failed with error -22 [ 368.321512][ T5861] usb 1-1: USB disconnect, device number 12 [ 368.974368][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 370.013596][ T5782] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 371.413468][ T971] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 372.367882][ T971] usb 2-1: Using ep0 maxpacket: 32 [ 372.480017][ T971] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 372.492744][ T971] usb 2-1: config 0 has no interface number 0 [ 372.500025][ T971] usb 2-1: config 0 interface 12 has no altsetting 0 [ 372.515056][ T971] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 372.533477][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.542078][ T971] usb 2-1: Product: syz [ 372.561509][ T971] usb 2-1: Manufacturer: syz [ 372.566840][ T971] usb 2-1: SerialNumber: syz [ 372.574874][ T971] usb 2-1: config 0 descriptor?? [ 372.791890][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 372.791939][ T28] audit: type=1326 audit(1792441895.128:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 372.863445][ T28] audit: type=1326 audit(1792441895.128:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 372.927781][ T28] audit: type=1326 audit(1792441895.138:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 372.980540][ T28] audit: type=1326 audit(1792441895.138:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 373.033527][ T28] audit: type=1326 audit(1792441895.138:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 373.060766][ T28] audit: type=1326 audit(1792441895.138:107): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 373.090934][ T28] audit: type=1326 audit(1792441895.138:108): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 373.121188][ T28] audit: type=1326 audit(1792441895.138:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 373.195914][ T28] audit: type=1326 audit(1792441895.138:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 373.225109][ T28] audit: type=1326 audit(1792441895.138:111): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8259 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f99f379e559 code=0x7ffc0000 [ 373.265256][ T971] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 373.287670][ T971] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 373.303478][ T971] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 373.319142][ T971] f81534: probe of 2-1:0.12 failed with error -71 [ 373.346261][ T971] usb 2-1: USB disconnect, device number 8 [ 373.906890][ T8285] program syz.0.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.254964][ T8298] nvmet: Invalid value 'e6]HQd] .<ɟB@y' for trsvcid [ 374.686802][ T8314] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8314] [ 376.038832][ T8341] kvm_intel: kvm [8340]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 376.424109][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 376.638099][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.651133][ T8373] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8373] [ 376.764814][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.887503][ T9] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 377.007097][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.312145][ T9] usb 3-1: config 0 descriptor?? [ 377.713766][ T5861] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 377.768658][ T9] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 377.778631][ T9] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 377.785818][ T9] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 377.794623][ T23] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 377.925602][ T5861] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.943626][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 377.971474][ T5861] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.982494][ T9] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 377.993479][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.004327][ T5861] usb 4-1: Product: syz [ 378.013633][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.021666][ T23] usb 1-1: config 0 has no interface number 0 [ 378.036645][ T5861] usb 4-1: Manufacturer: syz [ 378.041283][ T5861] usb 4-1: SerialNumber: syz [ 378.042064][ T9] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 378.069443][ T23] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 378.080096][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.088378][ T23] usb 1-1: Product: syz [ 378.092774][ T23] usb 1-1: Manufacturer: syz [ 378.098531][ T23] usb 1-1: SerialNumber: syz [ 378.106619][ T5861] usb 4-1: selecting invalid altsetting 1 [ 378.124389][ T23] usb 1-1: config 0 descriptor?? [ 378.137689][ T23] usb 1-1: selecting invalid altsetting 1 [ 378.148448][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 378.154971][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 378.198176][ T9] usb 3-1: USB disconnect, device number 11 [ 378.240580][ T8394] fido_id[8394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 378.364992][ T23] DVB: Unable to find symbol stv0299_attach() [ 378.419674][ T23] DVB: Unable to find symbol tda8083_attach() [ 378.430610][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 378.464898][ T23] usb 1-1: USB disconnect, device number 13 [ 378.578839][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.588057][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.963123][ T5861] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 379.023608][ T5861] usb 4-1: selecting invalid altsetting 1 [ 379.044599][ T5861] cdc_ncm 4-1:1.0: bind() failure [ 379.066771][ T5861] usb 4-1: USB disconnect, device number 10 [ 380.784462][ T5782] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 380.834170][ T8431] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8431] [ 382.156430][ T8447] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8447] [ 382.182540][ T5883] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 382.975702][ T8457] netem: incorrect ge model size [ 382.981014][ T8457] netem: change failed [ 383.019077][ T5883] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 383.034147][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.052753][ T5883] usb 4-1: Product: syz [ 383.062860][ T5883] usb 4-1: Manufacturer: syz [ 383.067629][ T5883] usb 4-1: SerialNumber: syz [ 383.085332][ T5883] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 383.111278][ T5883] scsi host1: usb-storage 4-1:1.0 [ 383.379430][ T5782] Bluetooth: hci0: Zero size dump init pkt [ 383.998092][ T5883] ums_eneub6250: probe of 4-1:1.0 failed with error 3 [ 384.014263][ T5883] usb 4-1: USB disconnect, device number 11 [ 384.072195][ T8493] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8493] [ 385.153645][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 385.346659][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 385.376574][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.399569][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 385.414368][ T9] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 385.433158][ T9] usb 2-1: Manufacturer: syz [ 385.451141][ T9] usb 2-1: config 0 descriptor?? [ 385.753530][ T971] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 385.896790][ T9] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0007/input/input9 [ 385.963478][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 385.972807][ T971] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 386.003806][ T971] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 386.005557][ T9] creative-sb0540 0003:041E:3100.0007: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 386.027390][ T971] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 386.057011][ T971] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 386.103664][ T971] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 386.123597][ T971] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.172655][ T971] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.203212][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.317009][ T5861] usb 2-1: USB disconnect, device number 9 [ 386.442770][ T971] usb 4-1: GET_CAPABILITIES returned 0 [ 386.461688][ T971] usbtmc 4-1:16.0: can't read capabilities [ 386.658416][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 386.673784][ T8508] usbtmc 4-1:16.0: Unable to send data, error -71 [ 386.696125][ T5861] usb 4-1: USB disconnect, device number 12 [ 387.276786][ T5883] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 387.493054][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.501372][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.566705][ T5762] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 387.703712][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 387.887653][ T9] usb 2-1: too many configurations: 181, using maximum allowed: 8 [ 387.913838][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 387.921545][ T9] usb 2-1: can't read configurations, error -71 [ 388.075814][ T8538] ceph: No mds server is up or the cluster is laggy [ 388.087202][ T8] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 388.246050][ T8573] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 388.374379][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 388.564967][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 388.576505][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 388.592543][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 388.603222][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.617419][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.630497][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.639694][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.819408][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 388.861357][ T8] usb 4-1: GET_CAPABILITIES returned 0 [ 388.867065][ T8] usbtmc 4-1:16.0: can't read capabilities [ 389.015398][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.028857][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 389.038711][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.079921][ T8569] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 389.091054][ T27] usb 4-1: USB disconnect, device number 13 [ 389.107472][ T5860] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 389.154534][ T9] rtsx_usb: probe of 2-1:1.0 failed with error -22 [ 389.303757][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 389.315866][ T5861] usb 2-1: USB disconnect, device number 11 [ 389.330105][ T5860] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 389.340655][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.349433][ T5860] usb 3-1: Product: syz [ 389.355299][ T5860] usb 3-1: Manufacturer: syz [ 389.360244][ T5860] usb 3-1: SerialNumber: syz [ 389.368642][ T5860] usb 3-1: config 0 descriptor?? [ 389.378322][ T5860] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 389.387865][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 389.399467][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.409672][ T5860] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 389.418099][ T5860] usb 3-1: media controller created [ 389.441634][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.460973][ T5860] usb 3-1: selecting invalid altsetting 7 [ 389.466906][ T5860] cxusb: set interface failed [ 389.471673][ T5860] dvb-usb: bulk message failed: -22 (1/0) [ 389.506043][ T5860] DVB: Unable to find symbol lgdt330x_attach() [ 389.512280][ T5860] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 389.595530][ T5860] rc_core: IR keymap rc-dvico-portable not found [ 389.601934][ T5860] Registered IR keymap rc-empty [ 389.610447][ T5860] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 389.627620][ T5860] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 389.643726][ T5860] dvb-usb: schedule remote query interval to 100 msecs. [ 389.663603][ T5860] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 389.784913][ T5860] dvb-usb: bulk message failed: -22 (1/0) [ 389.804171][ T5860] usb 3-1: USB disconnect, device number 12 [ 389.877823][ T5860] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 390.166776][ T5860] logitech-hidpp-device 0003:046D:C082.0008: Device not connected [ 390.852955][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 390.937234][ T8634] netlink: 'syz.0.903': attribute type 39 has an invalid length. [ 391.003083][ T5860] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 391.265394][ T5860] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 391.622571][ T8662] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8662] [ 391.779608][ T5861] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 391.855581][ T8635] ceph: No mds server is up or the cluster is laggy [ 392.786141][ T971] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 392.899661][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 392.908979][ T5762] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 392.983455][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 392.993804][ T971] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 393.003038][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.021321][ T971] usb 4-1: Product: syz [ 393.026810][ T971] usb 4-1: Manufacturer: syz [ 393.031520][ T971] usb 4-1: SerialNumber: syz [ 393.119511][ T5762] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.131266][ T5762] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.158658][ T5762] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.178966][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.264323][ T971] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 393.280122][ T971] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.291341][ T971] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 393.301105][ T971] usb 4-1: media controller created [ 393.328679][ T971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.423544][ T5762] usb 1-1: GET_CAPABILITIES returned 0 [ 393.443484][ T5762] usbtmc 1-1:16.0: can't read capabilities [ 393.568923][ T971] zl10353_read_register: readreg error (reg=127, ret==-110) [ 393.618870][ T971] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 393.641136][ T971] usb 4-1: USB disconnect, device number 14 [ 393.666390][ T5861] usb 1-1: USB disconnect, device number 14 [ 394.163526][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 394.296421][ T8712] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8712] [ 394.373662][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 394.451174][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 394.647036][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 394.857924][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.992550][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.026170][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.054040][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.174909][ T8716] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 395.310078][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 395.319989][ T9] usbtmc 3-1:16.0: can't read capabilities [ 395.549592][ T8706] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32 [ 395.563830][ T5860] usb 3-1: USB disconnect, device number 13 [ 396.141347][ T8750] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8750] [ 397.031732][ T8764] jffs2: notice: (8764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 397.100108][ T8767] FAULT_INJECTION: forcing a failure. [ 397.100108][ T8767] name failslab, interval 1, probability 0, space 0, times 0 [ 397.133598][ T8767] CPU: 0 PID: 8767 Comm: syz.0.948 Not tainted syzkaller #0 [ 397.140960][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.151058][ T8767] Call Trace: [ 397.154430][ T8767] [ 397.157430][ T8767] dump_stack_lvl+0x18c/0x250 [ 397.162212][ T8767] ? show_regs_print_info+0x20/0x20 [ 397.167482][ T8767] ? load_image+0x420/0x420 [ 397.172050][ T8767] ? __lock_acquire+0x7eb0/0x7eb0 [ 397.177192][ T8767] should_fail_ex+0x394/0x4c0 [ 397.181953][ T8767] should_failslab+0x9/0x20 [ 397.186538][ T8767] slab_pre_alloc_hook+0x59/0x300 [ 397.191648][ T8767] kmem_cache_alloc_lru+0x4d/0x2b0 [ 397.196807][ T8767] ? sock_alloc_inode+0x28/0xc0 [ 397.201816][ T8767] sock_alloc_inode+0x28/0xc0 [ 397.206530][ T8767] ? sockfs_init_fs_context+0xb0/0xb0 [ 397.211947][ T8767] new_inode_pseudo+0x63/0x1d0 [ 397.216778][ T8767] __sock_create+0x12d/0x940 [ 397.221396][ T8767] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 397.227413][ T8767] __sys_socket+0xd7/0x1b0 [ 397.231855][ T8767] __x64_sys_socket+0x7a/0x90 [ 397.236560][ T8767] do_syscall_64+0x55/0xb0 [ 397.240999][ T8767] ? clear_bhb_loop+0x40/0x90 [ 397.245758][ T8767] ? clear_bhb_loop+0x40/0x90 [ 397.250454][ T8767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.256405][ T8767] RIP: 0033:0x7f99f379e559 [ 397.260866][ T8767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.280511][ T8767] RSP: 002b:00007f99f468c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 397.289012][ T8767] RAX: ffffffffffffffda RBX: 00007f99f3a25fa0 RCX: 00007f99f379e559 [ 397.297001][ T8767] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 397.304991][ T8767] RBP: 00007f99f3835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 397.312983][ T8767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.320969][ T8767] R13: 00007f99f3a26038 R14: 00007f99f3a25fa0 R15: 00007ffdc49f0ce8 [ 397.328970][ T8767] [ 397.363696][ T8767] socket: no more sockets [ 397.945393][ T8784] xt_hashlimit: size too large, truncated to 1048576 [ 397.976755][ T8784] xt_hashlimit: max too large, truncated to 1048576 [ 398.196817][ T8795] gadgetfs: bound to dummy_udc driver [ 398.464800][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 398.998355][ T8821] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8821] [ 400.805647][ T8852] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8852] [ 401.974090][ T8862] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8862] [ 402.660368][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.979'. [ 403.122616][ T8886] Dead loop on virtual device ip6_vti0, fix it urgently! [ 403.251727][ T8892] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 403.290938][ T8892] CIFS: Attempting to mount //127.0.0.1/share [ 403.583537][ T5860] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 403.759658][ T8910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.774021][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 403.782977][ T5860] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.794581][ T5860] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.805411][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 403.812168][ T5860] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 403.822129][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.834162][ T5860] usb 3-1: config 0 descriptor?? [ 404.118493][ T8892] CIFS: VFS: cifs_mount failed w/return code = -112 [ 404.284776][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 404.293595][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 404.300684][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 404.308513][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 404.327062][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 404.335860][ T5860] mcp2221 0003:04D8:00DD.0009: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 404.480902][ T8896] i2c i2c-1: unsupported multi-msg i2c transaction [ 404.508388][ T5860] usb 3-1: USB disconnect, device number 14 [ 404.813540][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 405.591897][ T8980] ip_tables: iptables: counters copy to user failed while replacing table [ 405.670522][ T8981] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8981] [ 405.726573][ T5084] Bluetooth: Frame is too long (len 16, expected len 4) [ 406.335232][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 406.342194][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 406.352907][ T5782] block nbd3: Receive control failed (result -32) [ 406.379024][ T8977] block nbd3: shutting down sockets [ 406.520337][ T8985] FAULT_INJECTION: forcing a failure. [ 406.520337][ T8985] name failslab, interval 1, probability 0, space 0, times 0 [ 406.548309][ T8982] [ 406.550679][ T8982] ====================================================== [ 406.557711][ T8982] WARNING: possible circular locking dependency detected [ 406.564754][ T8982] syzkaller #0 Not tainted [ 406.569190][ T8982] ------------------------------------------------------ [ 406.576223][ T8982] syz.0.1020/8982 is trying to acquire lock: [ 406.582214][ T8982] ffff88807b4db618 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x120/0xac0 [ 406.593758][ T8982] [ 406.593758][ T8982] but task is already holding lock: [ 406.601151][ T8982] ffff88807b4d97b0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x530 [ 406.610261][ T8982] [ 406.610261][ T8982] which lock already depends on the new lock. [ 406.610261][ T8982] [ 406.620674][ T8982] [ 406.620674][ T8982] the existing dependency chain (in reverse order) is: [ 406.629701][ T8982] [ 406.629701][ T8982] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 406.637454][ T8982] lock_sock_nested+0x48/0x100 [ 406.642759][ T8982] smc_listen_out+0xd4/0x3c0 [ 406.647936][ T8982] smc_listen_work+0x580/0xf40 [ 406.653264][ T8982] process_scheduled_works+0xa60/0x1600 [ 406.659370][ T8982] worker_thread+0xa5e/0xfe0 [ 406.664501][ T8982] kthread+0x2fa/0x390 [ 406.669103][ T8982] ret_from_fork+0x48/0x80 [ 406.674078][ T8982] ret_from_fork_asm+0x11/0x20 [ 406.679424][ T8982] [ 406.679424][ T8982] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 406.689594][ T8982] __lock_acquire+0x3a07/0x7eb0 [ 406.694981][ T8982] lock_acquire+0x19e/0x420 [ 406.700023][ T8982] __flush_work+0x66e/0xac0 [ 406.705058][ T8982] __cancel_work_timer+0x3f8/0x560 [ 406.710702][ T8982] smc_clcsock_release+0x60/0xf0 [ 406.716220][ T8982] __smc_release+0x644/0x7b0 [ 406.721342][ T8982] smc_close_non_accepted+0xd5/0x1f0 [ 406.727158][ T8982] smc_close_active+0xb3b/0xf20 [ 406.732536][ T8982] __smc_release+0x9c/0x7b0 [ 406.737572][ T8982] smc_release+0x2c5/0x530 [ 406.742553][ T8982] sock_close+0xa7/0x210 [ 406.747332][ T8982] __fput+0x221/0x940 [ 406.751840][ T8982] task_work_run+0x1d4/0x260 [ 406.757053][ T8982] exit_to_user_mode_loop+0xe6/0x110 [ 406.762876][ T8982] exit_to_user_mode_prepare+0xee/0x180 [ 406.768972][ T8982] syscall_exit_to_user_mode+0x1a/0x50 [ 406.774969][ T8982] do_syscall_64+0x61/0xb0 [ 406.779912][ T8982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.786339][ T8982] [ 406.786339][ T8982] other info that might help us debug this: [ 406.786339][ T8982] [ 406.796610][ T8982] Possible unsafe locking scenario: [ 406.796610][ T8982] [ 406.804084][ T8982] CPU0 CPU1 [ 406.809456][ T8982] ---- ---- [ 406.814821][ T8982] lock(sk_lock-AF_SMC/1); [ 406.819339][ T8982] lock((work_completion)(&new_smc->smc_listen_work)); [ 406.828793][ T8982] lock(sk_lock-AF_SMC/1); [ 406.835824][ T8982] lock((work_completion)(&new_smc->smc_listen_work)); [ 406.842764][ T8982] [ 406.842764][ T8982] *** DEADLOCK *** [ 406.842764][ T8982] [ 406.850913][ T8982] 3 locks held by syz.0.1020/8982: [ 406.856024][ T8982] #0: ffff88805b515c20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 406.866239][ T8982] #1: ffff88807b4d97b0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x530 [ 406.875666][ T8982] #2: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: __flush_work+0x120/0xac0 [ 406.884902][ T8982] [ 406.884902][ T8982] stack backtrace: [ 406.890791][ T8982] CPU: 1 PID: 8982 Comm: syz.0.1020 Not tainted syzkaller #0 [ 406.898162][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.908220][ T8982] Call Trace: [ 406.911521][ T8982] [ 406.914467][ T8982] dump_stack_lvl+0x18c/0x250 [ 406.919158][ T8982] ? load_image+0x420/0x420 [ 406.923670][ T8982] ? show_regs_print_info+0x20/0x20 [ 406.928873][ T8982] ? print_circular_bug+0x12b/0x1a0 [ 406.934106][ T8982] check_noncircular+0x2fc/0x400 [ 406.939066][ T8982] ? look_up_lock_class+0x75/0x140 [ 406.944198][ T8982] ? print_deadlock_bug+0x5d0/0x5d0 [ 406.949423][ T8982] ? lockdep_lock+0xf5/0x230 [ 406.954030][ T8982] ? _find_first_zero_bit+0xd6/0x100 [ 406.959372][ T8982] __lock_acquire+0x3a07/0x7eb0 [ 406.964259][ T8982] ? verify_lock_unused+0x140/0x140 [ 406.969484][ T8982] ? debug_object_activate+0x309/0x500 [ 406.974965][ T8982] ? __lock_acquire+0x7eb0/0x7eb0 [ 406.980009][ T8982] ? __rwlock_init+0x150/0x150 [ 406.984788][ T8982] lock_acquire+0x19e/0x420 [ 406.989313][ T8982] ? __flush_work+0x120/0xac0 [ 406.994002][ T8982] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 407.000011][ T8982] ? __lock_acquire+0x7eb0/0x7eb0 [ 407.005047][ T8982] ? read_lock_is_recursive+0x20/0x20 [ 407.010440][ T8982] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.015743][ T8982] ? __flush_work+0x120/0xac0 [ 407.020445][ T8982] __flush_work+0x66e/0xac0 [ 407.024958][ T8982] ? __flush_work+0x120/0xac0 [ 407.029648][ T8982] ? __flush_work+0x120/0xac0 [ 407.034339][ T8982] ? flush_work+0x20/0x20 [ 407.038688][ T8982] ? move_linked_works+0x230/0x230 [ 407.043811][ T8982] ? mod_delayed_work_on+0x1c0/0x1c0 [ 407.049118][ T8982] ? lock_chain_count+0x20/0x20 [ 407.053995][ T8982] ? __cancel_work_timer+0x36e/0x560 [ 407.059296][ T8982] __cancel_work_timer+0x3f8/0x560 [ 407.064418][ T8982] ? cancel_work_sync+0x20/0x20 [ 407.069295][ T8982] ? __smc_release+0x63c/0x7b0 [ 407.074084][ T8982] ? __local_bh_enable_ip+0x13a/0x1c0 [ 407.079469][ T8982] ? lockdep_hardirqs_on+0x98/0x150 [ 407.084679][ T8982] ? __local_bh_enable_ip+0x13a/0x1c0 [ 407.090061][ T8982] ? _local_bh_enable+0xa0/0xa0 [ 407.094937][ T8982] smc_clcsock_release+0x60/0xf0 [ 407.099897][ T8982] __smc_release+0x644/0x7b0 [ 407.104510][ T8982] smc_close_non_accepted+0xd5/0x1f0 [ 407.109833][ T8982] smc_close_active+0xb3b/0xf20 [ 407.114694][ T8982] ? __receive_sock+0x90/0x90 [ 407.119390][ T8982] __smc_release+0x9c/0x7b0 [ 407.123920][ T8982] smc_release+0x2c5/0x530 [ 407.128369][ T8982] sock_close+0xa7/0x210 [ 407.132643][ T8982] ? sock_mmap+0xa0/0xa0 [ 407.136904][ T8982] __fput+0x221/0x940 [ 407.140903][ T8982] task_work_run+0x1d4/0x260 [ 407.145516][ T8982] ? task_work_cancel+0x220/0x220 [ 407.150573][ T8982] ? exit_to_user_mode_loop+0x3b/0x110 [ 407.156054][ T8982] exit_to_user_mode_loop+0xe6/0x110 [ 407.161356][ T8982] exit_to_user_mode_prepare+0xee/0x180 [ 407.166915][ T8982] syscall_exit_to_user_mode+0x1a/0x50 [ 407.172399][ T8982] do_syscall_64+0x61/0xb0 [ 407.176829][ T8982] ? clear_bhb_loop+0x40/0x90 [ 407.181519][ T8982] ? clear_bhb_loop+0x40/0x90 [ 407.186215][ T8982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.192155][ T8982] RIP: 0033:0x7f99f379e559 [ 407.196576][ T8982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.216192][ T8982] RSP: 002b:00007ffdc49f0e48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 407.224615][ T8982] RAX: 0000000000000000 RBX: 00007ffdc49f0f30 RCX: 00007f99f379e559 [ 407.232590][ T8982] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 407.240562][ T8982] RBP: 00000000000633b2 R08: 0000000000000001 R09: 0000000000000000 [ 407.248554][ T8982] R10: 0000001b2c720000 R11: 0000000000000246 R12: 00007ffdc49f0f70 [ 407.256543][ T8982] R13: 00007f99f3a25fac R14: 00000000000633f8 R15: 00007f99f3a25fa0 [ 407.264538][ T8982] [ 407.272425][ T8985] CPU: 1 PID: 8985 Comm: syz.3.1019 Not tainted syzkaller #0 [ 407.279846][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.290099][ T8985] Call Trace: [ 407.293405][ T8985] [ 407.296365][ T8985] dump_stack_lvl+0x18c/0x250 [ 407.301077][ T8985] ? show_regs_print_info+0x20/0x20 [ 407.306310][ T8985] ? load_image+0x420/0x420 [ 407.310860][ T8985] ? verify_lock_unused+0x140/0x140 [ 407.316099][ T8985] should_fail_ex+0x394/0x4c0 [ 407.320838][ T8985] should_failslab+0x9/0x20 [ 407.325396][ T8985] slab_pre_alloc_hook+0x59/0x300 [ 407.330468][ T8985] kmem_cache_alloc+0x5a/0x2c0 [ 407.335285][ T8985] ? skb_clone+0x1eb/0x370 [ 407.339782][ T8985] skb_clone+0x1eb/0x370 [ 407.344093][ T8985] __netlink_deliver_tap+0x411/0x7f0 [ 407.349485][ T8985] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.354729][ T8985] netlink_deliver_tap+0x19c/0x1b0 [ 407.359880][ T8985] netlink_unicast+0x77b/0x930 [ 407.364682][ T8985] netlink_sendmsg+0x8d0/0xbf0 [ 407.369499][ T8985] ? netlink_getsockopt+0x590/0x590 [ 407.374737][ T8985] ? apparmor_socket_sendmsg+0x8e/0x330 [ 407.380342][ T8985] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 407.385656][ T8985] ? security_socket_sendmsg+0x80/0xa0 [ 407.391148][ T8985] sock_write_iter+0x2dc/0x420 [ 407.395940][ T8985] ? sock_read_iter+0x3f0/0x3f0 [ 407.400836][ T8985] ? common_file_perm+0x198/0x1f0 [ 407.405904][ T8985] do_iter_write+0x747/0xc50 [ 407.410516][ T8985] ? __asan_memset+0x22/0x40 [ 407.415154][ T8985] ? vfs_iter_write+0xa0/0xa0 [ 407.419868][ T8985] ? __import_iovec+0x3fa/0x850 [ 407.424750][ T8985] ? import_iovec+0x73/0xa0 [ 407.429280][ T8985] do_writev+0x27f/0x480 [ 407.433542][ T8985] ? do_readv+0x460/0x460 [ 407.437898][ T8985] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 407.443884][ T8985] ? lock_chain_count+0x20/0x20 [ 407.448742][ T8985] ? lockdep_hardirqs_on+0x98/0x150 [ 407.453954][ T8985] do_syscall_64+0x55/0xb0 [ 407.458377][ T8985] ? clear_bhb_loop+0x40/0x90 [ 407.463062][ T8985] ? clear_bhb_loop+0x40/0x90 [ 407.467742][ T8985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.473655][ T8985] RIP: 0033:0x7f282839e559 [ 407.478082][ T8985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.497706][ T8985] RSP: 002b:00007f2829222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 407.506130][ T8985] RAX: ffffffffffffffda RBX: 00007f2828625fa0 RCX: 00007f282839e559 [ 407.514114][ T8985] RDX: 0000000000000003 RSI: 0000200000000140 RDI: 0000000000000003 [ 407.522096][ T8985] RBP: 00007f2828435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 407.530077][ T8985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.538065][ T8985] R13: 00007f2828626038 R14: 00007f2828625fa0 R15: 00007fff6e1b7278 [ 407.546058][ T8985]