last executing test programs: 7m19.961656007s ago: executing program 0 (id=1390): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@fd={0x8fc2, 0x3, 0x4, 0x100000, 0x1, {0x77359400}, {0x1, 0x8, 0x9, 0x2, 0x8, 0x4, "f6683975"}, 0xbcd6, 0x4, {}, 0x1}) 7m19.493679742s ago: executing program 0 (id=1394): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock i'], 0xe) 7m18.245954277s ago: executing program 0 (id=1401): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='mountproto\x00', &(0x7f0000000380)='udp\x9a\xca \x98jV\x14\x89\x99\xcd\x0e\x83\x94>\x88\xdf\xc9\xf7bR%\x10\x1e&\xf2\x87\x9cb\\\xa8QJ\n\x1bcQ\x00\a\x03H\xbe\xc6\x9e\xdc\x18\x19\x15i\x7fP\x1a\x9fC5}\x86\xc4\x91\x9b\x19-s\xc6lj\x06\x9f/E\xb3\x9d\x1b\xd8/w\xe4\xd2\xa4q\xf1\xffS\f\x90\xcaW\x91\xa9:D\xeaZg-k\xe4\x1b\x9e%\x12\xcb\xe0\x85\xbc\xa2\xfa\x85\x10h\xcf<\xdc\x01\x04\xea\x1e\xcb\xbf\x10w\x9e\xf9%M\x1a\x97)h\xcf\xa87P\x93H~\xc7\x17\xcb\xf0G\xd2\xb1\xac\x91e\xf9\x19x\xa2\xb05\x1f\xd0\x90x\xa1\xc6\x8d\xd2\x18\xc8\xe0,\x1c\x1b\v\x7f\xc9\xf7d\bQ\x7f\xdf\x7f\xbe7\xc7+\x00\x00\xa4t9\x06\x00\x00\x00', 0x0) 7m17.813216453s ago: executing program 0 (id=1403): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x300800c, &(0x7f0000000100)=ANY=[], 0x1, 0x259, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m17.049827617s ago: executing program 0 (id=1405): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1200000, &(0x7f00000001c0)={[{@grpquota}, {@resgid}]}, 0xfb, 0x569, &(0x7f00000003c0)="$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") llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 7m15.903847988s ago: executing program 0 (id=1410): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, 0x7, 0x8000) 7m15.04318598s ago: executing program 32 (id=1410): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, 0x7, 0x8000) 2m32.259491946s ago: executing program 2 (id=3557): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x4) 2m31.650983012s ago: executing program 2 (id=3562): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000002700)={0x8, {0x474, 0x9, 0x1, 0x8000000}, {0x9, 0x7fe, 0x6, 0x5}, {0xfffffffe, 0x4}}) 2m31.286642357s ago: executing program 2 (id=3564): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004010}, 0x40895) 2m30.925820423s ago: executing program 2 (id=3569): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, 0x0, 0x0, 0x0) 2m30.550103644s ago: executing program 2 (id=3573): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x40000cc4, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 2m30.173394507s ago: executing program 2 (id=3578): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x0, 0x1}, 0x9, 0xe1, &(0x7f00000001c0)={0x0, 0x3, 0xf801, 0x224}, 0x8, 0x1, 0x10000007, 0x0, 0x7, 0x7fffffff, 0x0}) 2m14.951501191s ago: executing program 33 (id=3578): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x0, 0x1}, 0x9, 0xe1, &(0x7f00000001c0)={0x0, 0x3, 0xf801, 0x224}, 0x8, 0x1, 0x10000007, 0x0, 0x7, 0x7fffffff, 0x0}) 6.507706535s ago: executing program 4 (id=4683): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0x7f, 0x44b, &(0x7f0000000dc0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000540)={0x4, 0x0, 0x1, 0x8, 0x1, 0x3, 0x20000001002, 0xf64, 0xfffff7fd}) 6.395540964s ago: executing program 6 (id=4685): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) 5.912360066s ago: executing program 6 (id=4688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000003820000004", @ANYRES32], 0x20) 5.872162409s ago: executing program 3 (id=4689): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000580)="$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") truncate(&(0x7f0000000a80)='./file2\x00', 0x2) 5.813077199s ago: executing program 7 (id=4690): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2, 0x2) 5.475678673s ago: executing program 6 (id=4693): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x401) 5.15737576s ago: executing program 3 (id=4695): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001e00)=ANY=[@ANYBLOB="380000002e00010a0000002bcd037d0008eeff00", @ANYRES32], 0x38}], 0x1}, 0x0) 4.816536201s ago: executing program 6 (id=4696): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") 4.807027827s ago: executing program 1 (id=4697): syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060102"], 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) 4.539017558s ago: executing program 4 (id=4698): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0x0) 4.465077064s ago: executing program 5 (id=4699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_cmd={0x3d, 0x20000, 0x4ec, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1, [0x0, 0x100000]}}) 4.173762629s ago: executing program 3 (id=4700): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) 4.045591508s ago: executing program 5 (id=4701): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 3.725691524s ago: executing program 6 (id=4702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000040)) 3.679496746s ago: executing program 5 (id=4703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000100), 0x0}, 0x20) 3.284786546s ago: executing program 4 (id=4704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.168164062s ago: executing program 5 (id=4705): syz_usb_connect(0x0, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a000005241301"], 0x0) socket$packet(0x11, 0x2, 0x300) 2.965463042s ago: executing program 6 (id=4706): r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200883, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000006bc0)="$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") ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000000)={0x2, 0x300, 0x7}) 2.935197705s ago: executing program 4 (id=4707): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x20}}, @TCA_POLICE_RESULT={0x7, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 2.721708752s ago: executing program 1 (id=4708): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x6c, 0x0, 0x4, 0x9}, 0x8) 2.574144827s ago: executing program 4 (id=4709): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x28, 0x1410, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x6) 2.397188708s ago: executing program 3 (id=4710): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f8, &(0x7f0000000900)={'sit0\x00', @random="1e40002000"}) 2.236884493s ago: executing program 4 (id=4711): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="ea8c82f9e77f8604d4a97969c43269745144ea6ca358208309446e4432d65e3088e0144d3735aee4c2c8c1868843bb4a531e2f601de9ea16ab32f828bd708e0ba154299ef44a672f5ba354ce727fd10f28d3ab8074653854571e486edbabf63a3cab900abf1d104966774a02290f9a069ef5205bde800a40c7f3cab43774455f5b92c226c0642242cc09d8556e13466adf3509584f20918f7b6a16bfe7a5dcd3bfad53be7d3fdc7df6d9c0c26bd67236eed488a26ba4b111fcd30001df825851b2a6f72f2f6d5c72417918c21786d7c2ef7f19a5e448ec2d8d77ad8572b5", 0xde}, {0x0}], 0x2, 0x3815, 0x1) 2.012120754s ago: executing program 1 (id=4712): r0 = socket(0x29, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) 2.010383419s ago: executing program 3 (id=4713): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) 1.8367602s ago: executing program 7 (id=4714): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200dfc907002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000000000002303be4ec7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 1.573515721s ago: executing program 3 (id=4715): syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x241a1, 0x0) 1.445592249s ago: executing program 7 (id=4716): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8}) 1.156376121s ago: executing program 7 (id=4717): r0 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) 1.121420485s ago: executing program 1 (id=4718): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000001240)=0x8) 1.042249911s ago: executing program 5 (id=4719): r0 = socket(0x1d, 0x2, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 597.119397ms ago: executing program 1 (id=4720): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x60040) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000580)={{0x0, 0x7}, 'port1\x00', 0x40, 0x130000, 0x98, 0x101, 0x200, 0x81, 0x0, 0x0, 0x4, 0x12}) 570.399428ms ago: executing program 7 (id=4721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x98, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0xfffffec7, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x138}}, 0x0) 528.134257ms ago: executing program 5 (id=4722): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x2, @capture={0x1000, 0x0, {0x401, 0x8}, 0x0, 0x12}}) 144.007361ms ago: executing program 1 (id=4723): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 0s ago: executing program 7 (id=4724): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x36, &(0x7f0000000180)={0xa, 0x8, 0x29b}) kernel console output (not intermixed with test programs): 326 audit(1786197300.897:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.3.3036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 419.714245][ T5848] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 419.844201][ T31] audit: type=1326 audit(1786197300.907:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.3.3036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 419.902301][ T5777] usb 3-1: USB disconnect, device number 11 [ 420.020752][ T31] audit: type=1326 audit(1786197300.937:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.3.3036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 420.096783][T12764] xt_hashlimit: size too large, truncated to 1048576 [ 420.117456][T12763] loop3: detected capacity change from 0 to 256 [ 420.198810][ T31] audit: type=1326 audit(1786197300.937:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.3.3036" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 420.561261][T12767] nfs: Unknown parameter 'ntext' [ 420.863656][T12771] loop5: detected capacity change from 0 to 4096 [ 420.914312][T12771] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.981494][T12771] EXT4-fs (loop5): Test dummy encryption mode enabled [ 421.058801][T12771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.087148][T12771] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 421.101863][T12771] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3042: bg 0: block 282: padding at end of block bitmap is not set [ 421.212341][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.740331][T12790] loop1: detected capacity change from 0 to 64 [ 421.960950][T12758] loop4: detected capacity change from 0 to 32768 [ 422.399333][T12758] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 422.441323][T12801] netlink: 'syz.1.3054': attribute type 8 has an invalid length. [ 422.639036][T12806] loop3: detected capacity change from 0 to 512 [ 422.733761][T12806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 422.816458][T12806] EXT4-fs (loop3): 1 truncate cleaned up [ 422.909105][T12806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.151225][T12806] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 423.226943][T12806] EXT4-fs (loop3): Remounting filesystem read-only [ 423.334576][ T5777] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 423.427075][T12820] mmap: syz.6.3064 (12820): VmData 175874048 exceed data ulimit 129. Update limits or use boot option ignore_rlimit_data. [ 423.561733][ T5777] usb 6-1: unable to get BOS descriptor or descriptor too short [ 423.582572][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.649944][ T5777] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 423.678889][ T5603] ocfs2: Unmounting device (7,4) on (node local) [ 423.707791][ T5777] usb 6-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 423.898336][ T5777] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 423.969367][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.012103][ T5777] usb 6-1: Product: syz [ 424.045440][ T5777] usb 6-1: Manufacturer: syz [ 424.076085][ T5777] usb 6-1: SerialNumber: syz [ 424.092379][ T31] audit: type=1326 audit(1786197305.337:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.6.3069" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 424.299526][ T31] audit: type=1326 audit(1786197305.337:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.6.3069" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 424.500990][ T5777] ati_remote2 6-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 424.511840][ T31] audit: type=1326 audit(1786197305.387:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.6.3069" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 424.590371][ T5777] usb 6-1: USB disconnect, device number 11 [ 424.696354][ T31] audit: type=1326 audit(1786197305.387:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.6.3069" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 424.873619][ T31] audit: type=1326 audit(1786197305.387:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz.6.3069" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 426.102961][T12862] loop4: detected capacity change from 0 to 2048 [ 426.344082][T12867] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.578621][T12862] NILFS (loop4): error -2 truncating bmap (ino=16) [ 426.797644][T12838] loop1: detected capacity change from 0 to 32768 [ 426.853659][T12867] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 426.927138][T12838] jfs_strtoUCS: char2uni returned -22. [ 426.945658][T12867] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 427.065143][T12838] charset = cp932, char = 0xfc [ 427.090838][T12867] Remounting filesystem read-only [ 427.124217][ T5603] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 427.550497][T12887] loop6: detected capacity change from 0 to 64 [ 428.206421][T12899] bond1: Unable to set up delay as MII monitoring is disabled [ 428.382169][T12899] bond1 (unregistering): Released all slaves [ 429.403239][T12913] comedi comedi0: Minor 2 could not be opened [ 430.125547][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 430.205881][ T31] audit: type=1326 audit(1786197311.447:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 430.343553][T12929] loop1: detected capacity change from 0 to 4096 [ 430.358876][T12937] sctp: [Deprecated]: syz.5.3115 (pid 12937) Use of int in maxseg socket option. [ 430.358876][T12937] Use struct sctp_assoc_value instead [ 430.373664][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 430.410785][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.424579][ T31] audit: type=1326 audit(1786197311.487:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 430.456926][T12929] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 430.512423][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.573212][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 430.629754][ T31] audit: type=1326 audit(1786197311.507:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 430.689900][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.732628][T12929] ntfs3(loop1): ino=19, mi_enum_attr [ 430.760073][T12929] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 430.791959][ T10] usb 4-1: config 0 descriptor?? [ 430.869059][ T10] hub 4-1:0.0: USB hub found [ 430.878619][ T31] audit: type=1326 audit(1786197311.507:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 430.939523][T12929] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 431.066221][ T10] hub 4-1:0.0: 26 ports detected [ 431.094274][ T31] audit: type=1326 audit(1786197311.507:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 431.123707][ T10] hub 4-1:0.0: insufficient power available to use all downstream ports [ 431.178583][T12929] ntfs3(loop1): failed to convert "076c" to cp949 [ 431.266445][T12929] ntfs3(loop1): ino=20, mi_enum_attr [ 431.277274][ T10] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 431.301886][ T31] audit: type=1326 audit(1786197311.507:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 431.362744][ T10] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 431.465365][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 431.510531][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 431.523210][ T31] audit: type=1326 audit(1786197311.507:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 431.647176][ T10] usb 4-1: USB disconnect, device number 16 [ 431.746887][ T31] audit: type=1326 audit(1786197311.527:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 431.934348][ T31] audit: type=1326 audit(1786197311.527:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.6.3117" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fae59d9e0d9 code=0x7ffc0000 [ 432.456916][T12969] raw_sendmsg: syz.2.3131 forgot to set AF_INET. Fix it! [ 433.067047][ T5777] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 433.278420][ T5777] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 433.337507][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.421622][ T5777] usb 3-1: config 0 descriptor?? [ 433.462581][ T5777] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 433.481710][T12994] loop5: detected capacity change from 0 to 24 [ 433.700693][ T5777] usb 3-1: USB disconnect, device number 12 [ 435.064749][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 435.237768][T13031] loop2: detected capacity change from 0 to 764 [ 435.296580][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 435.336846][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.404526][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.485493][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.560144][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.627954][ T10] usb 4-1: Product: syz [ 435.652763][ T10] usb 4-1: Manufacturer: syz [ 435.688069][ T10] usb 4-1: SerialNumber: syz [ 435.778102][ T10] usb 4-1: 0:2 : does not exist [ 435.990790][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 436.405805][ T10] usb 4-1: USB disconnect, device number 17 [ 436.894717][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.515792][ T5848] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 437.640442][T13082] x_tables: unsorted entry at hook 2 [ 437.739914][ T5848] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.821625][ T5848] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 437.910557][ T5848] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 438.009404][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 438.032837][T13090] netlink: 'syz.1.3181': attribute type 15 has an invalid length. [ 438.084656][ T5848] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 438.146180][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 438.216210][ T5848] usb 6-1: Product: syz [ 438.250531][ T5848] usb 6-1: Manufacturer: syz [ 438.295876][ T5848] usb 6-1: SerialNumber: syz [ 438.361346][ T5848] usb 6-1: config 0 descriptor?? [ 438.398014][T13074] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 438.497491][ T5848] usb 6-1: selecting invalid altsetting 0 [ 439.071734][T13116] netlink: 'syz.3.3199': attribute type 23 has an invalid length. [ 439.254538][ T10] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 439.310084][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.338544][ T5848] usb 6-1: USB disconnect, device number 12 [ 439.465885][T13121] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3201'. [ 439.526010][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.659570][ T6349] udevd[6349]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.701607][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.781605][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 439.870078][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.995393][ T10] usb 5-1: string descriptor 0 read error: -22 [ 440.026146][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 440.101895][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.222293][ T10] usb 5-1: low speed audio streaming not supported [ 440.616232][T13143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3211'. [ 440.800724][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 440.952979][ T10] usb 5-1: USB disconnect, device number 18 [ 441.131277][T13153] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 442.653328][T13191] loop3: detected capacity change from 0 to 64 [ 443.095288][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3240'. [ 444.756628][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 444.967625][ T10] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 445.027336][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.083081][ T10] usb 5-1: Product: syz [ 445.107672][ T10] usb 5-1: Manufacturer: syz [ 445.136748][ T10] usb 5-1: SerialNumber: syz [ 445.175199][ T10] usb 5-1: config 0 descriptor?? [ 445.215988][ T10] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 445.640721][ T10] gspca_m5602: Failed to find a sensor [ 445.676301][ T10] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 445.725161][ T10] usb 5-1: USB disconnect, device number 19 [ 446.575973][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3271'. [ 446.633301][T13277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3271'. [ 447.119115][T13288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3276'. [ 447.591011][T13298] team0: entered allmulticast mode [ 447.627994][T13298] team_slave_0: entered allmulticast mode [ 447.672074][T13298] team_slave_1: entered allmulticast mode [ 447.721046][T13298] bond0: entered allmulticast mode [ 447.770640][T13298] bond_slave_0: entered allmulticast mode [ 447.809131][T13298] bond_slave_1: entered allmulticast mode [ 448.036697][T13306] netlink: 'syz.1.3285': attribute type 9 has an invalid length. [ 448.071085][T13295] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3277'. [ 448.102662][T13306] netlink: 'syz.1.3285': attribute type 1 has an invalid length. [ 448.161784][T13306] netlink: 'syz.1.3285': attribute type 8 has an invalid length. [ 448.711242][T13322] loop1: detected capacity change from 0 to 128 [ 448.816146][T13321] loop5: detected capacity change from 0 to 2048 [ 448.823896][T13321] EXT4-fs: Ignoring removed i_version option [ 448.858756][T13322] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.901690][T13321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.988767][T13322] ext4 filesystem being mounted at /551/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 449.039749][T13332] loop6: detected capacity change from 0 to 512 [ 449.059881][T13321] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #12: block 2: comm syz.5.3292: lblock 0 mapped to illegal pblock 2 (length 1) [ 449.136077][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 449.162014][T13332] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 449.199167][T13332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 449.207494][T13332] EXT4-fs (loop6): orphan cleanup on readonly fs [ 449.214257][T13332] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #13: comm syz.6.3296: iget: bad i_size value: 12154761577498 [ 449.232254][T13332] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 449.232721][T13332] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3296: couldn't read orphan inode 13 (err -117) [ 449.241895][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 449.241917][ C0] EXT4-fs (loop6): initial error at time 1786197330: ext4_orphan_get:1399: inode 13 [ 449.241955][ C0] EXT4-fs (loop6): last error at time 1786197330: ext4_orphan_get:1399: inode 13 [ 449.591188][T13332] loop6: lost filesystem error report for type 5 error -117 [ 449.646407][T13332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 449.693118][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.746528][ T5615] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.913433][T13332] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.3296: dx entry: limit 65535 != root limit 120 [ 450.028803][T13344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3302'. [ 450.100975][T13332] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3296: Corrupt directory, running e2fsck is recommended [ 450.544242][ T8961] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.210202][T13394] geneve3: entered allmulticast mode [ 452.276844][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.357205][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.449494][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.534536][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.084519][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 453.305020][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 453.356596][ T10] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 453.403953][T13425] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3338'. [ 453.424372][ T10] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 453.470396][ T10] usb 5-1: Product: syz [ 453.477822][T13425] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3338'. [ 453.516358][ T10] usb 5-1: Manufacturer: syz [ 453.577081][ T10] usb 5-1: SerialNumber: syz [ 453.658480][ T10] usb 5-1: config 0 descriptor?? [ 453.718096][ T10] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 453.932554][T13433] openvswitch: netlink: IP tunnel dst address not specified [ 453.976092][ T10] usb 5-1: USB disconnect, device number 20 [ 455.816229][T13474] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3360'. [ 456.499873][T13486] loop3: detected capacity change from 0 to 1764 [ 456.625325][T13493] loop1: detected capacity change from 0 to 512 [ 456.744358][T13493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.770397][T13493] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.914802][ T5777] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 456.932666][T13493] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 457.027987][T13493] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 457.092478][T13493] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3370: Failed to acquire dquot type 0 [ 457.108397][ T5777] usb 5-1: Using ep0 maxpacket: 32 [ 457.159212][ T5777] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 457.219980][ T5777] usb 5-1: config 2 has no interface number 0 [ 457.262437][ T5777] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 457.346066][ T5777] usb 5-1: config 2 interface 88 has no altsetting 0 [ 457.408182][ T5777] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 457.481133][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 457.539757][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.569959][ T5777] usb 5-1: Product: syz [ 457.604099][ T5777] usb 5-1: Manufacturer: syz [ 457.637851][ T5777] usb 5-1: SerialNumber: syz [ 457.692764][T13494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 457.934974][ T5848] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 457.981731][T13494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 458.176892][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 458.255052][ T5848] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 458.298422][ T5777] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 458.368774][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.396974][ T5777] asix 5-1:2.88: probe with driver asix failed with error -71 [ 458.433936][ T5848] usb 4-1: Product: syz [ 458.467187][ T5848] usb 4-1: Manufacturer: syz [ 458.501899][ T5848] usb 4-1: SerialNumber: syz [ 458.516102][ T5777] usb 5-1: USB disconnect, device number 21 [ 458.616613][ T5848] hub 4-1:1.0: bad descriptor, ignoring hub [ 458.672860][ T5848] hub 4-1:1.0: probe with driver hub failed with error -5 [ 458.859278][ T5848] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 458.903851][ T5848] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 459.087651][ T5848] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 459.244031][ T5848] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 459.366462][ T5848] usb 4-1: USB disconnect, device number 18 [ 459.451550][ T5848] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 459.630775][ T5848] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 459.731532][ T5848] visor 4-1:1.0: device disconnected [ 461.031894][T13586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.177435][T13589] xt_policy: too many policy elements [ 461.662745][T13605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.700161][T13627] CIFS: Attempting to mount //::1/share [ 462.770142][T13618] loop1: detected capacity change from 0 to 4096 [ 462.807987][T13627] CIFS: VFS: Error connecting to socket. Aborting operation. [ 462.855346][T13618] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 462.888793][T13627] CIFS: VFS: cifs_mount failed w/return code = -101 [ 462.990572][T13632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.039986][T13618] ntfs3(loop1): ino=19, mi_enum_attr [ 463.163313][T13618] ntfs3(loop1): failed to convert "c46c" to maccroatian [ 463.230021][T13618] ntfs3(loop1): ino=20, mi_enum_attr [ 463.351215][T13638] netlink: 340 bytes leftover after parsing attributes in process `syz.6.3435'. [ 463.433451][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3435'. [ 464.240398][T13643] loop5: detected capacity change from 0 to 1764 [ 464.561063][T13652] x_tables: duplicate entry at hook 1 [ 464.902020][T13656] loop1: detected capacity change from 0 to 128 [ 465.431197][T13628] loop3: detected capacity change from 0 to 32768 [ 466.349123][T13678] loop2: detected capacity change from 0 to 2048 [ 466.453904][T13681] loop3: detected capacity change from 0 to 1024 [ 466.509923][T13678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.688651][T13678] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3455: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 466.715072][T13685] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 466.899542][T13685] EXT4-fs (loop2): Remounting filesystem read-only [ 467.943844][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.953786][T13706] loop3: detected capacity change from 0 to 512 [ 468.005943][T13706] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 468.094067][T13706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 468.162469][T13706] System zones: 1-12 [ 468.248355][T13706] EXT4-fs (loop3): orphan cleanup on readonly fs [ 468.286512][T13706] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3466: invalid indirect mapped block 12 (level 1) [ 468.405821][T13706] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 468.414448][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 468.430060][ C0] EXT4-fs (loop3): initial error at time 1786197349: ext4_free_branches:1023: inode 11 [ 468.439738][ C0] EXT4-fs (loop3): last error at time 1786197349: ext4_free_branches:1023: inode 11 [ 468.496530][T13706] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3466: invalid indirect mapped block 2 (level 2) [ 468.602828][T13706] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 468.608089][T13706] EXT4-fs (loop3): 1 truncate cleaned up [ 468.759444][T13706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 468.863682][T13723] netlink: 'syz.2.3474': attribute type 21 has an invalid length. [ 468.978718][T13706] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 469.319956][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3473'. [ 469.348783][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 470.168474][T13745] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 470.641017][T13749] loop6: detected capacity change from 0 to 1024 [ 471.256983][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.042939][T13770] nvme_fabrics: missing parameter 'transport=%s' [ 472.406634][T13791] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 472.465948][T13791] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 472.978306][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3511'. [ 473.006916][T13804] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 473.066020][T13804] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 473.172212][T13809] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3513'. [ 473.562711][ T31] audit: type=1326 audit(1786197354.807:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 473.680208][T13814] loop4: detected capacity change from 0 to 512 [ 473.761257][T13817] loop2: detected capacity change from 0 to 128 [ 473.772167][ T31] audit: type=1326 audit(1786197354.807:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 473.849384][T13817] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 473.893973][T13814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.908082][ T31] audit: type=1326 audit(1786197354.857:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 473.933320][ T31] audit: type=1326 audit(1786197354.857:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 473.949585][T13814] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.969734][ T31] audit: type=1326 audit(1786197354.857:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 474.077324][ T31] audit: type=1326 audit(1786197354.857:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 474.120835][T13817] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 474.235553][T13824] binder: 13823:13824 ioctl c0046209 200000000000000 returned -22 [ 474.282706][T13817] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 474.309757][ T31] audit: type=1326 audit(1786197354.857:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 474.351566][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3520'. [ 474.385308][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.443531][T13826] team0 (unregistering): Port device team_slave_0 removed [ 474.499189][ T31] audit: type=1326 audit(1786197354.857:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 474.598927][T13826] team0 (unregistering): Port device team_slave_1 removed [ 474.618483][ T5612] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 474.703421][ T31] audit: type=1326 audit(1786197354.857:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.1.3515" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 475.066209][T13835] loop2: detected capacity change from 0 to 1764 [ 476.645838][T13857] loop3: detected capacity change from 0 to 4096 [ 476.888214][T13866] loop5: detected capacity change from 0 to 1024 [ 476.944168][T13866] EXT4-fs: Ignoring removed orlov option [ 477.001335][T13866] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 477.078979][T13866] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 477.182303][T13866] EXT4-fs (loop5): invalid journal inode [ 477.238676][T13866] EXT4-fs (loop5): can't get journal size [ 477.314111][T13866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 477.434528][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'. [ 477.497404][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.573915][T13898] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 478.635914][T13898] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 478.815451][ T5748] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 479.093211][T13911] loop3: detected capacity change from 0 to 164 [ 479.114543][ T5748] usb 5-1: Using ep0 maxpacket: 8 [ 479.156108][T13911] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 479.219126][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 479.262212][T13915] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3561'. [ 479.276733][T13911] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 479.301328][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.350186][T13911] Symlink component flag not implemented [ 479.355920][ T5748] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.396526][T13915] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3561'. [ 479.415023][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 479.453808][T13911] Symlink component flag not implemented (7) [ 479.466475][ T5748] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 479.535881][ T5748] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 479.592598][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.108856][ T5748] usb 5-1: config 0 descriptor?? [ 480.164818][T13896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.992229][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 482.147161][ T4921] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 482.159200][ T5748] usb 5-1: USB disconnect, device number 22 [ 482.651124][T13959] loop5: detected capacity change from 0 to 32768 [ 482.809278][T13988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3596'. [ 482.919662][T13959] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 483.278499][T13959] XFS (loop5): Ending clean mount [ 483.655079][ T5604] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 483.888952][T14017] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3603'. [ 484.506793][T14027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3612'. [ 485.062884][T14037] loop6: detected capacity change from 0 to 8 [ 485.168726][T14037] SQUASHFS error: xz decompression failed, data probably corrupt [ 485.240476][T14037] SQUASHFS error: Failed to read block 0x108: -5 [ 485.288320][T14037] SQUASHFS error: Unable to read metadata cache entry [106] [ 485.307368][T14041] loop3: detected capacity change from 0 to 256 [ 485.356422][T14037] SQUASHFS error: Unable to read inode 0x11f [ 485.375087][T14041] exfat: Deprecated parameter 'utf8' [ 485.429556][T14041] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 485.481155][ T31] audit: type=1326 audit(1786197366.727:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 485.562112][T14041] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 485.659178][ T31] audit: type=1326 audit(1786197366.727:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 485.834711][ T31] audit: type=1326 audit(1786197366.757:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 485.951538][ T31] audit: type=1326 audit(1786197367.187:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 486.107267][ T31] audit: type=1326 audit(1786197367.197:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 486.150702][T14052] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 486.279192][ T31] audit: type=1326 audit(1786197367.197:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 486.441603][ T31] audit: type=1326 audit(1786197367.197:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 486.607663][ T31] audit: type=1326 audit(1786197367.197:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 486.783277][ T31] audit: type=1326 audit(1786197367.267:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 486.946965][ T31] audit: type=1326 audit(1786197367.277:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14032 comm="syz.5.3605" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f677679e0d9 code=0x7ffc0000 [ 487.343865][T14078] loop6: detected capacity change from 0 to 256 [ 487.387793][T14078] exfat: Deprecated parameter 'utf8' [ 487.428868][T14078] exfat: Deprecated parameter 'namecase' [ 487.485228][T14080] loop3: detected capacity change from 0 to 1024 [ 487.489577][T14078] exfat: Deprecated parameter 'namecase' [ 487.996352][T14078] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 488.174503][ T5777] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 488.186549][T14078] exfat: Deprecated parameter 'utf8' [ 488.202334][T14078] exfat: Deprecated parameter 'namecase' [ 488.238924][T14078] exfat: Deprecated parameter 'namecase' [ 488.352165][ T5777] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.416804][ T5777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 488.463326][ T5777] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 488.510725][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.566707][ T5777] usb 2-1: config 0 descriptor?? [ 489.023655][ T5777] Bluetooth: Can't get state to change to load configuration err [ 489.061803][ T5777] Bluetooth: Loading sysconfig file failed [ 489.088318][ T5777] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 489.130074][ T5777] usb 2-1: USB disconnect, device number 10 [ 489.584620][ T5848] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 489.720189][T14120] loop5: detected capacity change from 0 to 128 [ 489.794835][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 489.831414][ T5848] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 489.888606][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 489.957352][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 490.038835][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 490.119333][ T5848] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 490.167207][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.210173][ T5848] usb 4-1: Product: syz [ 490.237530][ T5848] usb 4-1: Manufacturer: syz [ 490.262103][ T5848] usb 4-1: SerialNumber: syz [ 490.311217][ T5848] usb 4-1: config 0 descriptor?? [ 490.586038][ T5848] appledisplay: Apple Cinema Display connected [ 490.688283][T14135] tmpfs: Bad value for 'mpol' [ 490.734705][ T5734] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 490.888989][ T5848] usb 4-1: USB disconnect, device number 19 [ 490.895095][ C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 490.937829][ T5848] appledisplay: Apple Cinema Display disconnected [ 490.958850][ T5734] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 490.988270][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.017129][ T5734] usb 5-1: Product: syz [ 491.033111][ T5734] usb 5-1: Manufacturer: syz [ 491.046216][ T5734] usb 5-1: SerialNumber: syz [ 491.073863][ T5734] usb 5-1: config 0 descriptor?? [ 491.112958][ T5734] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 491.522865][ T5734] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 491.558346][ T5734] sq905c 5-1:0.0: Reading version command failed [ 491.586328][ T5734] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 491.647012][ T5734] usb 5-1: USB disconnect, device number 23 [ 491.915177][T14155] netlink: 1988 bytes leftover after parsing attributes in process `syz.5.3669'. [ 492.089112][T14157] loop3: detected capacity change from 0 to 512 [ 492.155517][T14157] EXT4-fs (loop3): Test dummy encryption mode enabled [ 492.222187][T14157] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 492.237132][T14157] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 492.247088][T14157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.278722][T14161] loop1: detected capacity change from 0 to 512 [ 492.295125][T14157] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 492.310155][T14161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.323794][T14161] ext4 filesystem being mounted at /626/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.362648][T14161] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:107: comm syz.1.3671: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 492.380733][T14161] EXT4-fs error (device loop1) in ext4_free_inode:363: Filesystem failed CRC [ 492.443839][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.530808][T14166] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3672'. [ 492.543139][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.053618][T14179] loop6: detected capacity change from 0 to 16 [ 493.145223][T14179] erofs (device loop6): mounted with root inode @ nid 36. [ 493.259186][T14184] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 494.420184][T14204] loop5: detected capacity change from 0 to 256 [ 494.518109][T14204] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 494.632607][T14204] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 494.693214][T14204] FAT-fs (loop5): Filesystem has been set read-only [ 495.057988][T14214] binder: 14213:14214 ioctl c0306201 200000000680 returned -14 [ 495.328969][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3699'. [ 495.494231][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3701'. [ 496.148001][T14241] netlink: 'syz.3.3707': attribute type 3 has an invalid length. [ 496.189850][T14242] loop5: detected capacity change from 0 to 1024 [ 497.077420][T14256] loop6: detected capacity change from 0 to 256 [ 497.723674][T14274] ipt_rpfilter: unknown options [ 497.907142][T14277] loop1: detected capacity change from 0 to 512 [ 497.960303][T14277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 498.037681][T14277] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 498.140949][T14277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 498.204623][T14277] System zones: 1-12 [ 498.251669][T14277] EXT4-fs (loop1): orphan cleanup on readonly fs [ 498.258878][T14277] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.3725: Block bitmap for bg 0 marked uninitialized [ 498.274465][T14277] loop1: lost filesystem error report for type 5 error -117 [ 498.277302][T14277] EXT4-fs (loop1): Remounting filesystem read-only [ 498.284706][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 498.284729][ C0] EXT4-fs (loop1): initial error at time 1786197379: ext4_read_block_bitmap_nowait:517 [ 498.284760][ C0] EXT4-fs (loop1): last error at time 1786197379: ext4_read_block_bitmap_nowait:517 [ 498.420154][T14277] EXT4-fs (loop1): 1 truncate cleaned up [ 498.478777][T14277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 498.729985][ T4921] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 498.751223][ T4921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 498.771238][ T4921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 498.805411][ T4921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 498.832831][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 498.926777][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.245645][T14302] netlink: 'syz.5.3735': attribute type 23 has an invalid length. [ 500.759704][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.904790][ T5621] Bluetooth: hci6: command tx timeout [ 501.124803][T14301] loop6: detected capacity change from 0 to 32768 [ 501.240044][T14301] ialloc: diAlloc returned -5! [ 502.051266][T14294] ÿ speed is unknown, defaulting to 1000 [ 502.984653][ T5621] Bluetooth: hci6: command tx timeout [ 503.194769][ T5848] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 503.210980][T14370] loop4: detected capacity change from 0 to 4096 [ 503.242502][T14370] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 503.374886][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 503.388371][T14337] loop1: detected capacity change from 0 to 32768 [ 503.405661][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.426831][T14370] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 503.464260][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.482478][T14370] ntfs3(loop4): ino=5, mi_enum_attr [ 503.507094][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.520234][ T5848] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 503.532155][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.550549][T14337] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 503.559713][T14370] ntfs3(loop4): Failed to load root (-22). [ 503.568707][ T5848] usb 6-1: config 0 descriptor?? [ 503.672389][ T5848] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15 [ 503.843212][ T4956] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 504.016724][T14337] XFS (loop1): Ending clean mount [ 504.057193][ T4956] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 504.127079][ T5848] usb 6-1: USB disconnect, device number 13 [ 504.312644][ T5615] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 504.489606][T14388] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.3765'. [ 505.012105][T14394] loop4: detected capacity change from 0 to 512 [ 505.061135][T14394] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 505.070332][ T5621] Bluetooth: hci6: command tx timeout [ 505.104495][ T5734] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 505.171013][T14394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.206373][T14394] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.263213][T14394] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 505.282018][T14394] EXT4-fs (loop4): Remounting filesystem read-only [ 505.308920][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 505.324176][ T5734] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 505.358752][ T5734] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 505.400154][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.413284][ T76] __quota_error: 8 callbacks suppressed [ 505.413302][ T76] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 505.461964][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 505.498867][ T5734] usb 2-1: Product: syz [ 505.536029][ T5734] usb 2-1: Manufacturer: syz [ 505.552230][ T76] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 505.578248][ T5734] usb 2-1: SerialNumber: syz [ 505.645481][ T5734] usb 2-1: config 0 descriptor?? [ 505.702768][T14390] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 505.748243][T14403] loop3: detected capacity change from 0 to 1024 [ 505.778333][ T5734] hub 2-1:0.0: bad descriptor, ignoring hub [ 505.788234][T14403] EXT4-fs: Ignoring removed bh option [ 505.820703][ T5734] hub 2-1:0.0: probe with driver hub failed with error -5 [ 505.852705][T14403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.933502][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3775'. [ 506.204815][ T5777] usb 2-1: USB disconnect, device number 11 [ 506.219867][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.753526][T14294] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.813224][T14294] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.875448][T14294] bridge_slave_0: entered allmulticast mode [ 506.932512][T14294] bridge_slave_0: entered promiscuous mode [ 506.982252][T14426] netlink: 'syz.5.3780': attribute type 3 has an invalid length. [ 507.035388][T14294] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.087038][T14294] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.133509][T14294] bridge_slave_1: entered allmulticast mode [ 507.145297][ T5605] Bluetooth: hci6: command tx timeout [ 507.177962][T14294] bridge_slave_1: entered promiscuous mode [ 507.445669][T14294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.525974][T14294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.829273][T14294] team0: Port device team_slave_0 added [ 507.888984][T14294] team0: Port device team_slave_1 added [ 508.143673][T14294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.188697][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.354004][T14294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.460488][T14294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.500960][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.676035][T14294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.258087][T14294] hsr_slave_0: entered promiscuous mode [ 509.305955][T14294] hsr_slave_1: entered promiscuous mode [ 509.353417][T14294] debugfs: 'hsr0' already exists in 'hsr' [ 509.391105][T14294] Cannot create hsr debugfs directory [ 509.595845][T14472] loop4: detected capacity change from 0 to 4096 [ 509.773809][T14472] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 509.926886][T14472] ntfs3(loop4): Failed to load $Extend (-22). [ 509.974589][T14472] ntfs3(loop4): Failed to initialize $Extend. [ 510.225652][ T5848] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 510.431511][ T5848] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 510.497296][ T5848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.582542][ T5848] usb 6-1: config 0 has no interface number 0 [ 510.632938][ T5848] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 510.689502][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.749063][ T5848] usb 6-1: Product: syz [ 510.793227][ T5848] usb 6-1: Manufacturer: syz [ 510.832661][ T5848] usb 6-1: SerialNumber: syz [ 510.889119][ T5848] usb 6-1: config 0 descriptor?? [ 511.390485][ T5848] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 511.436349][ T5848] uvcvideo 6-1:0.64: No valid video chain found. [ 511.488404][ T5848] usb 6-1: USB disconnect, device number 14 [ 511.620345][ T31] audit: type=1326 audit(1786197392.867:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14503 comm="syz.1.3816" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 511.732662][T14294] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 511.805867][ T31] audit: type=1326 audit(1786197392.867:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14503 comm="syz.1.3816" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 511.861349][T14294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.934058][T14294] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 512.022935][T14294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.031199][ T31] audit: type=1326 audit(1786197392.957:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14503 comm="syz.1.3816" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 512.170310][T14515] loop4: detected capacity change from 0 to 256 [ 512.178775][T14294] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 512.209412][ T31] audit: type=1326 audit(1786197392.957:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14503 comm="syz.1.3816" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb339e0d9 code=0x7ffc0000 [ 512.277116][T14294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.464969][T14294] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 512.540036][T14294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.874553][ T31] audit: type=1800 audit(1786197394.117:324): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3828" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 513.462497][T14294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.731493][T14294] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.756435][T14549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.866035][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.881298][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.922744][T14552] loop4: detected capacity change from 0 to 512 [ 513.988499][T14552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.049213][T14552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.122853][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.130125][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.186818][T14552] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 514.403926][T14552] EXT4-fs (loop4): 1 truncate cleaned up [ 514.521095][T14552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.310238][T14578] xt_socket: unknown flags 0x8 [ 515.700928][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.361704][T14294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.674657][T14628] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 518.065046][T14633] loop3: detected capacity change from 0 to 2048 [ 518.144816][T14633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.598611][T14294] veth0_vlan: entered promiscuous mode [ 519.666304][T14294] veth1_vlan: entered promiscuous mode [ 519.702328][ T5734] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 519.886587][ T5734] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 519.903430][ T5734] usb 4-1: config 1 has no interface number 0 [ 519.945894][ T5734] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 519.983035][T14294] veth0_macvtap: entered promiscuous mode [ 520.057694][ T5734] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 80 [ 520.088107][T14294] veth1_macvtap: entered promiscuous mode [ 520.112856][ T5734] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 520.208817][ T5734] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 520.227899][T14294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.235516][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.304141][ T5734] usb 4-1: Product: syz [ 520.313387][T14294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.328970][ T5734] usb 4-1: Manufacturer: syz [ 520.351577][ T5734] usb 4-1: SerialNumber: syz [ 520.448141][T14656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.526095][ T78] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.558026][ T78] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.715747][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.730189][T14656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 520.779360][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.818032][ T5734] usb 4-1: No status endpoint found [ 521.091381][ T5734] usb 4-1: USB disconnect, device number 20 [ 521.298226][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.349232][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.372687][T14674] loop6: detected capacity change from 0 to 128 [ 521.447433][T14674] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 521.580124][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.653643][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.160772][T14682] loop3: detected capacity change from 0 to 256 [ 522.545266][T14663] loop4: detected capacity change from 0 to 32768 [ 522.687795][T14663] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 522.936038][T14700] xt_TCPMSS: Only works on TCP SYN packets [ 523.159260][T14663] XFS (loop4): Ending clean mount [ 523.287628][T14704] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3893'. [ 523.413569][ T5603] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.493147][T14706] loop5: detected capacity change from 0 to 2048 [ 523.802647][T14706] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 523.901161][T14706] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 523.990697][T14706] UDF-fs: Scanning with blocksize 512 failed [ 524.072127][T14706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.803726][T14721] loop4: detected capacity change from 0 to 512 [ 524.903711][T14721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.976079][T14721] ext4 filesystem being mounted at /610/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.027668][T14728] loop5: detected capacity change from 0 to 64 [ 525.150839][T14721] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:107: comm syz.4.3897: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 525.592223][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.657868][T14741] netlink: 'syz.5.3908': attribute type 1 has an invalid length. [ 525.714310][T14741] netlink: 'syz.5.3908': attribute type 3 has an invalid length. [ 525.784097][T14741] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3908'. [ 526.979169][T14761] netlink: 292 bytes leftover after parsing attributes in process `syz.7.3919'. [ 527.699293][ T31] audit: type=1326 audit(1786197408.947:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.3.3925" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x0 [ 527.781268][T14774] loop6: detected capacity change from 0 to 2048 [ 527.956676][T14779] loop7: detected capacity change from 0 to 1024 [ 528.140547][T14744] loop4: detected capacity change from 0 to 32768 [ 528.153249][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3927'. [ 528.196391][T14781] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 528.214717][T14779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.326685][T14779] EXT4-fs warning (device loop7): ext4_rmdir:3192: inode #11: comm syz.7.3926: empty directory 'file1' has too many links (111) [ 528.733074][T14294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.268032][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 529.323263][T14794] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 529.466679][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 529.685913][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 529.739034][ T10] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 529.800582][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.892376][ T10] usb 8-1: config 0 has no interface number 0 [ 529.958014][T14803] loop3: detected capacity change from 0 to 512 [ 529.970982][ T10] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 530.020227][T14803] EXT4-fs: Ignoring removed oldalloc option [ 530.051312][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.111639][T14803] EXT4-fs (loop3): Test dummy encryption mode enabled [ 530.118845][T14805] loop4: detected capacity change from 0 to 2048 [ 530.158108][ T10] usb 8-1: config 0 descriptor?? [ 530.242713][T14803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.289090][ T10] hub 8-1:0.4: bad descriptor, ignoring hub [ 530.339069][ T10] hub 8-1:0.4: probe with driver hub failed with error -5 [ 530.392035][T14813] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.446010][ T10] sierra 8-1:0.4: Sierra USB modem converter detected [ 530.548693][ T10] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 530.626907][T14817] overlayfs: cannot append lower layer [ 530.685804][ T10] usb 8-1: USB disconnect, device number 2 [ 530.780485][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 530.885295][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.897373][ T10] sierra 8-1:0.4: device disconnected [ 531.771327][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3949'. [ 531.864185][T14834] netlink: 'syz.4.3949': attribute type 1 has an invalid length. [ 531.907432][ T31] audit: type=1326 audit(1786197413.157:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 532.100614][ T31] audit: type=1326 audit(1786197413.157:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 532.289144][ T31] audit: type=1326 audit(1786197413.207:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 532.426833][T14841] loop6: detected capacity change from 0 to 2048 [ 532.480060][T14841] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 532.523504][ T31] audit: type=1326 audit(1786197413.207:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 532.625745][T14841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.765457][ T31] audit: type=1326 audit(1786197413.207:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 532.968310][ T31] audit: type=1326 audit(1786197413.207:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 533.124857][ T5848] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 533.168128][ T31] audit: type=1326 audit(1786197413.207:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 533.330445][ T31] audit: type=1326 audit(1786197413.207:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 533.375529][ T5848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.439538][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.505794][ T5848] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 533.530709][T14863] [U] ]4ãï#i­ÁŽqViñ“-ÍóÉõÇ롉 ðJÂZ [ 533.540836][ T31] audit: type=1326 audit(1786197413.207:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14835 comm="syz.3.3950" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe5499e0d9 code=0x7ffc0000 [ 533.581370][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 533.605046][T14863] [U] IIü­P‘’‘¸~¾-ñ¹)à [ 533.639344][T14863] [U] ÀZ;ك‹Qé-D¤Ù±î#XnuS¡‚ù–Yï¯Úþ”¡õºˆˆÿñܼ'úGŽá=€ý¥Å!FÅ–¾o$ró"iŠ”§–%£8ÝGÔ^Giסdšj}D¦z*0¾UÀâï]îCÁðb`Þ·©Ú®îFÎ= ôqÈŸèã¾ç©:yãWB–zå¹ÝB“Æ~KÞp1}Ò\a^6±q&2ÇÓ8¦S [ 533.656956][ T5848] usb 4-1: SerialNumber: syz [ 533.764236][T14863] [U] B>Ûì4Ðãö4Íã@".'4úM}bË-Å'·ߨÊ£5,N[C5ÁeÅ;cZ[îŽ ´Îý#HÛºÂk(÷ÂJ`õFI§¶¨‰/»XA3-ùÓjHjJ€Ÿ5M ÝžÖ0ÂV…ßÁœN˜Ù£Ý`))ÛÖsÚŒÖj@Cöí [ 533.808039][T14863] [U] Ÿ$žTJêÅÓ«ŠŠâ¤ŽûRvAGÒO úŽ/žc–"ºÂáÛ&w{ïM5êaïéÎ+yÙ]® [ 533.974027][ T5848] usb 4-1: 0:2 : does not exist [ 534.240426][T14869] loop6: detected capacity change from 0 to 1024 [ 534.257211][ T5848] usb 4-1: USB disconnect, device number 21 [ 534.607035][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.869802][T14849] loop5: detected capacity change from 0 to 32768 [ 534.932882][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3972'. [ 535.651407][T14883] nvme_fabrics: missing parameter 'host_traddr=%s' [ 536.056251][T14899] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3981'. [ 536.134981][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3981'. [ 536.236915][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3981'. [ 536.315149][T14905] loop4: detected capacity change from 0 to 512 [ 536.375227][T14905] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 536.919315][T14905] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.3983: corrupted xattr entries [ 537.018493][T14905] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 537.024471][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 537.040108][ C1] EXT4-fs (loop4): initial error at time 1786197418: xattr_find_entry:337: inode 15 [ 537.049658][ C1] EXT4-fs (loop4): last error at time 1786197418: xattr_find_entry:337: inode 15 [ 537.063767][T14905] EXT4-fs (loop4): Remounting filesystem read-only [ 537.115032][T14905] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 537.228021][T14905] EXT4-fs (loop4): 1 truncate cleaned up [ 537.289900][T14905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.425534][T14905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.203802][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4002'. [ 538.272153][T14941] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 539.325850][T14959] loop1: detected capacity change from 0 to 2048 [ 539.816395][T14930] loop3: detected capacity change from 0 to 32768 [ 539.908507][T14959] loop1: unable to read partition table [ 539.961374][T14959] loop1: partition table beyond EOD, truncated [ 539.989369][T14930] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 539.989369][T14930] [ 540.056087][T14959] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 540.171746][T14942] loop4: detected capacity change from 0 to 32768 [ 540.202905][T14930] ERROR: (device loop3): remounting filesystem as read-only [ 540.255975][T14942] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 540.268002][T14930] ialloc: diAlloc returned -5! [ 540.431721][T14976] loop7: detected capacity change from 0 to 128 [ 540.452134][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 540.464531][T14976] FAT-fs (loop7): Filesystem has been set read-only [ 540.517592][T14942] JBD2: Ignoring recovery information on journal [ 540.524731][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 540.588176][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 540.671087][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 540.753682][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 540.823368][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 540.834375][T14942] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 540.907023][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 540.957578][ T4971] loop1: unable to read partition table [ 540.978309][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 541.014095][ T4971] loop1: partition table beyond EOD, truncated [ 541.040082][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 541.094395][T14976] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 541.176311][ T31] audit: type=1800 audit(1786197422.427:335): pid=14976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4017" name="file1" dev="loop7" ino=1048656 res=0 errno=0 [ 541.381673][T14976] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 541.841441][ T5603] ocfs2: Unmounting device (7,4) on (node local) [ 541.968257][T14993] loop3: detected capacity change from 0 to 1024 [ 542.194611][ T5734] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 542.364839][T14996] bond2 (unregistering): Released all slaves [ 542.435370][ T5734] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.528176][ T5734] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 542.658055][ T5734] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 542.737864][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.804791][ T5734] usb 8-1: Product: syz [ 542.843473][ T5734] usb 8-1: Manufacturer: syz [ 542.885090][ T5734] usb 8-1: SerialNumber: syz [ 542.971184][ T5734] usb-storage 8-1:1.0: USB Mass Storage device detected [ 543.070642][ T5734] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 543.129204][T15009] loop4: detected capacity change from 0 to 2048 [ 543.177105][ T5734] scsi host1: usb-storage 8-1:1.0 [ 543.322797][ T5734] usb 8-1: USB disconnect, device number 3 [ 544.459850][T15033] comedi comedi2: board detection failed [ 544.849955][ T4971] loop4: unable to read partition table [ 544.887304][ T4971] loop4: partition table beyond EOD, truncated [ 545.421399][T15051] loop5: detected capacity change from 0 to 256 [ 545.558935][T15051] exfat: Deprecated parameter 'namecase' [ 545.640472][T15057] loop7: detected capacity change from 0 to 512 [ 545.658259][T15051] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d) [ 545.760803][T15057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 545.837493][T15057] System zones: 0-2, 18-18, 34-34 [ 545.959538][T15057] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 546.045234][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 546.051700][ C0] EXT4-fs (loop7): initial error at time 1786197427: ext4_mb_generate_buddy:1317 [ 546.060877][ C0] EXT4-fs (loop7): last error at time 1786197427: ext4_mb_generate_buddy:1317 [ 546.096164][T15057] EXT4-fs (loop7): Remounting filesystem read-only [ 546.152127][T15057] EXT4-fs (loop7): 1 truncate cleaned up [ 546.169574][ T78] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 546.221110][T15057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.244051][T15064] loop6: detected capacity change from 0 to 4096 [ 546.258385][ T78] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 546.300767][T15057] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.333214][ T78] Quota error (device loop7): write_blk: dquota write failed [ 546.351444][T15064] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 546.420430][ T78] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 546.502405][ T78] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 546.609546][ T78] Quota error (device loop7): write_blk: dquota write failed [ 546.633098][T15064] ntfs3(loop6): Inode r=19 is not in use! [ 546.667963][T15074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4061'. [ 546.702291][T15064] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 546.719572][ T5734] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 546.727835][ T78] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 546.829289][ T78] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 546.919922][T15064] ntfs3(loop6): ino=1b, mi_enum_attr [ 546.946156][ T78] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 546.968921][ T5734] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.001320][T15064] ntfs3(loop6): ino=1b, mi_enum_attr [ 547.103750][ T5734] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 547.143647][ T78] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 547.269569][ T5734] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.289470][ T78] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 547.303044][T15080] tmpfs: Bad value for 'mpol' [ 547.367370][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.451832][ T5734] usb 8-1: Product: syz [ 547.500066][ T5734] usb 8-1: Manufacturer: syz [ 547.546327][ T5734] usb 8-1: SerialNumber: syz [ 547.597809][T15086] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4067'. [ 547.648264][ T5734] cdc_ncm 8-1:1.0: skipping garbage [ 547.688290][ T5734] cdc_ncm 8-1:1.0: NCM or ECM functional descriptors missing [ 547.741336][ T5734] cdc_ncm 8-1:1.0: bind() failure [ 547.815934][ T5848] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 547.846714][ T5734] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 547.902486][ T5734] cdc_ncm 8-1:1.1: bind() failure [ 547.958059][T15092] loop1: detected capacity change from 0 to 256 [ 547.985931][ T5734] usb 8-1: USB disconnect, device number 4 [ 548.048498][ T5848] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 548.103537][ T5848] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 548.171147][ T5848] usb 4-1: config 0 has no interface number 0 [ 548.221295][ T5848] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.299334][ T5848] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 548.378667][ T5848] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 548.417074][T15091] netlink: 'syz.4.4069': attribute type 61 has an invalid length. [ 548.477575][ T5848] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 548.547866][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.636267][ T5848] usb 4-1: config 0 descriptor?? [ 548.682828][T15084] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 548.726015][T14294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.212189][ T5848] usb 4-1: USB disconnect, device number 22 [ 549.776956][T15117] loop4: detected capacity change from 0 to 2048 [ 549.837444][T15117] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 550.043685][T15117] UDF-fs: unknown compression code (0) [ 550.127737][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4086'. [ 550.428478][T15130] netlink: 'syz.3.4087': attribute type 2 has an invalid length. [ 550.905062][ T5848] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 551.008947][T15143] loop4: detected capacity change from 0 to 64 [ 551.132579][ T5848] usb 8-1: unable to get BOS descriptor or descriptor too short [ 551.191337][ T5848] usb 8-1: config 0 has an invalid interface number: 59 but max is 2 [ 551.256595][ T5848] usb 8-1: config 0 has an invalid interface number: 59 but max is 2 [ 551.289877][T15148] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4097'. [ 551.320938][ T5848] usb 8-1: config 0 has an invalid interface number: 56 but max is 2 [ 551.387670][ T5848] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 551.459226][ T5848] usb 8-1: config 0 has no interface number 0 [ 551.473620][T15150] loop1: detected capacity change from 0 to 16 [ 551.511728][ T5848] usb 8-1: config 0 has no interface number 1 [ 551.540115][T15150] erofs (device loop1): mounted with root inode @ nid 36. [ 551.572063][ T5848] usb 8-1: config 0 interface 59 has no altsetting 0 [ 551.616412][ T5848] usb 8-1: config 0 interface 59 has no altsetting 1 [ 551.662107][T15152] loop5: detected capacity change from 0 to 128 [ 551.684099][ T5848] usb 8-1: config 0 interface 56 has no altsetting 0 [ 551.729479][T15152] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 551.746605][ T5848] usb 8-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 551.812300][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.842338][T15152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.881353][ T5848] usb 8-1: Product: syz [ 551.908185][ T5848] usb 8-1: Manufacturer: syz [ 551.948527][ T5848] usb 8-1: SerialNumber: syz [ 552.005909][ T5848] usb 8-1: config 0 descriptor?? [ 552.311994][ T5848] rndis_host 8-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 552.397989][ T5848] cdc_acm 8-1:0.59: Zero length descriptor references [ 552.459376][ T5848] cdc_acm 8-1:0.59: probe with driver cdc_acm failed with error -22 [ 552.580315][ T5848] usb 8-1: USB disconnect, device number 5 [ 552.693116][T15171] loop1: detected capacity change from 0 to 16 [ 552.750338][T15171] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 552.797048][T15171] cramfs: empty filesystem [ 553.107475][T15176] loop3: detected capacity change from 0 to 1764 [ 553.493787][T15185] žÿ: renamed from team_slave_1 [ 553.588984][T15182] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4109'. [ 553.767649][T15192] loop7: detected capacity change from 0 to 8 [ 553.831906][T15192] SQUASHFS error: zlib decompression failed, data probably corrupt [ 553.895664][T15192] SQUASHFS error: Failed to read block 0x9b: -5 [ 553.936463][T15192] SQUASHFS error: Unable to read metadata cache entry [99] [ 553.992790][T15192] SQUASHFS error: Unable to read inode 0x127 [ 554.295005][T15194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4115'. [ 554.359375][T15194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4115'. [ 555.453874][ T5734] IPVS: starting estimator thread 0... [ 555.470816][T15227] loop1: detected capacity change from 0 to 256 [ 555.616195][T15228] IPVS: using max 24 ests per chain, 57600 per kthread [ 556.634694][ T5734] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 556.843888][ T5734] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.879513][T15256] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4144'. [ 556.898320][ T5734] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.943263][ T5734] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.993580][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 557.032174][ T5734] usb 4-1: SerialNumber: syz [ 557.203175][T15260] loop4: detected capacity change from 0 to 8 [ 557.317947][T15260] SQUASHFS error: lzo decompression failed, data probably corrupt [ 557.377169][T15260] SQUASHFS error: Failed to read block 0x1dd: -5 [ 557.413384][ T5734] usb 4-1: 0:2 : does not exist [ 557.418559][T15260] SQUASHFS error: Unable to read metadata cache entry [1db] [ 557.493281][T15260] SQUASHFS error: Unable to read inode 0xa7 [ 557.655119][ T5734] usb 4-1: USB disconnect, device number 23 [ 557.785659][T15266] loop5: detected capacity change from 0 to 256 [ 558.587265][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.547945][T15282] loop1: detected capacity change from 0 to 32768 [ 560.662203][T15282] JBD2: Ignoring recovery information on journal [ 561.088889][T15282] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 561.112599][T15316] loop5: detected capacity change from 0 to 4096 [ 561.165599][T15316] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 561.451912][T15282] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 561.496601][T15316] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 561.616455][T15282] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 561.687739][T15282] OCFS2: File system is now read-only. [ 561.733913][T15282] (syz.1.4156,15282,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30 [ 561.767082][ T5734] IPVS: starting estimator thread 0... [ 561.806072][T15282] (syz.1.4156,15282,0):ocfs2_reserve_cluster_bitmap_bits:1255 ERROR: status = -30 [ 561.848626][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4180'. [ 561.869276][T15282] (syz.1.4156,15282,0):ocfs2_reserve_clusters_with_limit:1324 ERROR: status = -30 [ 561.910476][T15328] IPVS: using max 25 ests per chain, 60000 per kthread [ 561.954990][T15282] (syz.1.4156,15282,0):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30 [ 562.013036][T15282] (syz.1.4156,15282,0):ocfs2_block_group_alloc:795 ERROR: status = -30 [ 562.090791][T15282] (syz.1.4156,15282,0):ocfs2_block_group_alloc:880 ERROR: status = -30 [ 562.157671][T15282] (syz.1.4156,15282,0):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30 [ 562.187097][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.234892][T15282] (syz.1.4156,15282,0):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30 [ 562.313958][T15282] (syz.1.4156,15282,0):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30 [ 562.384045][T15282] (syz.1.4156,15282,0):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30 [ 562.449654][T15282] (syz.1.4156,15282,0):ocfs2_expand_inline_dir:2875 ERROR: status = -30 [ 562.489942][T15335] loop5: detected capacity change from 0 to 4096 [ 562.508550][T15282] (syz.1.4156,15282,0):ocfs2_extend_dir:3239 ERROR: status = -30 [ 562.575596][T15282] (syz.1.4156,15282,0):ocfs2_prepare_dir_for_insert:4357 ERROR: status = -30 [ 562.635380][T15343] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 562.664267][T15282] (syz.1.4156,15282,0):ocfs2_mknod:302 ERROR: status = -30 [ 562.716392][T15282] (syz.1.4156,15282,0):ocfs2_mknod:506 ERROR: status = -30 [ 563.182086][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 563.872510][T15358] loop4: detected capacity change from 0 to 64 [ 564.027265][T15332] loop6: detected capacity change from 0 to 32768 [ 564.189456][T15332] dmapctl: invalid leafidx 1365 (expected 341) [ 564.232852][T15332] ERROR: (device loop6): dbAllocAG: Corrupt dmapctl page [ 564.232852][T15332] [ 564.270534][ T5734] IPVS: starting estimator thread 0... [ 564.319821][T15332] ERROR: (device loop6): remounting filesystem as read-only [ 564.381865][T15332] jfs_mkdir: dtInsert returned -EIO [ 564.417978][T15364] IPVS: using max 25 ests per chain, 60000 per kthread [ 564.450392][T15332] ERROR: (device loop6): jfs_mkdir: [ 564.450392][T15332] [ 564.989497][T15377] loop6: detected capacity change from 0 to 128 [ 565.967617][T15396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4208'. [ 566.032317][T15400] loop5: detected capacity change from 0 to 256 [ 566.781080][T15416] openvswitch: netlink: Actions may not be safe on all matching packets [ 567.481836][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4229'. [ 567.665701][ T5734] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 567.676167][T15442] loop4: detected capacity change from 0 to 512 [ 567.734167][T15442] EXT4-fs (loop4): Test dummy encryption mode enabled [ 567.791431][T15442] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.4232: inode has both inline data and extents flags [ 567.805586][T15442] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 567.806055][T15442] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4232: couldn't read orphan inode 15 (err -117) [ 567.815286][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 567.815315][ C0] EXT4-fs (loop4): initial error at time 1786197449: ext4_orphan_get:1399: inode 15 [ 567.815355][ C0] EXT4-fs (loop4): last error at time 1786197449: ext4_orphan_get:1399: inode 15 [ 567.868364][T15442] loop4: lost filesystem error report for type 5 error -117 [ 567.870722][T15442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.894473][ T5734] usb 4-1: Using ep0 maxpacket: 8 [ 567.925058][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.963277][ T5734] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 568.051390][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 568.132102][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 568.202734][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.212336][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 568.298258][ T5734] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.383988][ T5734] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 568.443570][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.494772][ T5734] usb 4-1: Product: syz [ 568.523098][ T5734] usb 4-1: Manufacturer: syz [ 568.551395][ T5734] usb 4-1: SerialNumber: syz [ 568.605111][ T5734] usb 4-1: config 0 descriptor?? [ 568.637849][T15433] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 568.979300][T15462] xt_CT: No such helper "pptp" [ 569.001523][T15471] loop5: detected capacity change from 0 to 164 [ 570.314666][ T5734] rc_core: IR keymap rc-snapstream-firefly not found [ 570.380957][ T5734] Registered IR keymap rc-empty [ 570.423298][ T5734] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 570.506080][ T5734] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 570.578864][ T5734] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 570.756129][ T5734] usb 4-1: USB disconnect, device number 24 [ 570.762134][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 570.952996][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4264'. [ 571.185760][ T5848] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 571.350145][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4268'. [ 571.364561][ T5734] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 571.404707][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 571.433466][ T5848] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 571.482305][ T5848] usb 5-1: config 0 has no interface number 0 [ 571.518331][ T5848] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.584909][ T5734] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 571.635074][ T5848] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 571.667954][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 571.711908][ T5848] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 571.734781][ T5734] usb 4-1: Product: syz [ 571.765010][ T5734] usb 4-1: SerialNumber: syz [ 571.781075][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 571.816240][ T5734] usb 4-1: config 0 descriptor?? [ 571.860755][ T5848] usb 5-1: Product: syz [ 571.908812][ T5848] usb 5-1: SerialNumber: syz [ 572.088382][ T5848] usb 5-1: config 0 descriptor?? [ 572.201638][ T5848] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 572.316369][ T5848] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input19 [ 572.493238][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 572.806675][ T5848] usb 4-1: USB disconnect, device number 25 [ 572.856352][ T10] usb 5-1: USB disconnect, device number 24 [ 572.960198][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 573.007983][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4274'. [ 573.086072][T15533] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4274'. [ 573.165476][T15533] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4274'. [ 573.541706][T15518] loop5: detected capacity change from 0 to 32768 [ 573.634639][T15518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4267 (15518) [ 573.729949][T15543] comedi comedi0: 8255: I/O base address not correctly aligned [ 573.792236][T15518] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 573.881208][T15518] BTRFS info (device loop5): using sha256 checksum algorithm [ 574.301678][T15518] BTRFS error (device loop5): open_ctree failed: -4 [ 576.038732][T15596] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4297'. [ 576.122248][T15603] overlayfs: conflicting options: nfs_export=on,index=off [ 576.480939][T15599] loop7: detected capacity change from 0 to 4096 [ 576.548629][T15599] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 576.818596][T15599] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 576.945788][ T5734] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 577.165877][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 577.220148][ T5734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 577.292582][ T5734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.375240][ T5734] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 577.439917][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.504710][ T5734] usb 2-1: Product: syz [ 577.531534][ T5734] usb 2-1: Manufacturer: syz [ 577.583486][ T5734] usb 2-1: SerialNumber: syz [ 577.697126][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4311'. [ 577.774871][T15626] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4311'. [ 577.993161][T15634] loop3: detected capacity change from 0 to 1024 [ 578.079490][ T5734] snd-ua101 2-1:1.1: sample format descriptor not found [ 578.206994][ T5734] snd-ua101 2-1:1.0: invalid num_altsetting [ 578.425335][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4316'. [ 578.513334][T15638] netlink: 83 bytes leftover after parsing attributes in process `syz.7.4316'. [ 578.574124][ T5734] usb 2-1: USB disconnect, device number 12 [ 579.150848][T15653] netlink: 'syz.5.4323': attribute type 1 has an invalid length. [ 579.806810][T15668] netlink: 'syz.6.4329': attribute type 21 has an invalid length. [ 579.868611][T15668] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4329'. [ 580.285911][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 580.488438][ T10] usb 6-1: device descriptor read/64, error -71 [ 580.521346][T15687] loop1: detected capacity change from 0 to 512 [ 580.582620][T15687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.639292][T15687] EXT4-fs: Ignoring removed mblk_io_submit option [ 580.791878][T15687] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 580.814801][T15687] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 580.824799][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 580.865157][T15687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 580.916145][T15687] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.4338: bad symlink. [ 580.993142][ T10] usb 6-1: device descriptor read/64, error -71 [ 581.017702][T15687] EXT4-fs (loop1): Remounting filesystem read-only [ 581.146134][ T10] usb usb6-port1: attempt power cycle [ 581.333267][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.566729][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 581.657468][ T10] usb 6-1: device descriptor read/8, error -71 [ 581.965127][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 582.071767][ T10] usb 6-1: device descriptor read/8, error -71 [ 582.206158][ T10] usb usb6-port1: unable to enumerate USB device [ 582.761303][T15733] comedi comedi0: no devices specified [ 583.393469][T15748] sg_write: data in/out 200860/136 bytes for SCSI command 0x0-- guessing data in; [ 583.393469][T15748] program syz.4.4363 not setting count and/or reply_len properly [ 584.223606][T15767] sg_write: data in/out 229343/32 bytes for SCSI command 0x0-- guessing data in; [ 584.223606][T15767] program syz.3.4375 not setting count and/or reply_len properly [ 584.408551][T15771] loop6: detected capacity change from 0 to 2048 [ 584.480854][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4378'. [ 584.541968][T15771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.653662][T15779] loop5: detected capacity change from 0 to 8 [ 584.675871][T15771] EXT4-fs error (device loop6): ext4_lookup:1777: inode #2: comm syz.6.4377: bad inode number: 15 [ 584.769380][T15771] EXT4-fs (loop6): Remounting filesystem read-only [ 584.797149][T15779] SQUASHFS error: Failed to read block 0xdfa: -5 [ 584.852757][T15779] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 584.899735][T15779] SQUASHFS error: Failed to read block 0x4e8: -5 [ 584.946848][T15784] loop4: detected capacity change from 0 to 1024 [ 584.997654][T15779] SQUASHFS error: Failed to read block 0x4de: -5 [ 585.038118][ T8961] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.068193][T15779] SQUASHFS error: Failed to read block 0x4de: -5 [ 585.083417][T15789] xt_hashlimit: max too large, truncated to 1048576 [ 585.121026][T15779] SQUASHFS error: Failed to read block 0x4de: -5 [ 585.130635][T15784] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 585.163358][T15779] SQUASHFS error: Failed to read block 0x4de: -5 [ 585.243242][T15779] SQUASHFS error: Failed to read block 0x4de: -5 [ 585.292092][T15779] SQUASHFS error: Failed to read block 0x4de: -5 [ 585.427413][T15779] SQUASHFS error: Failed to read block 0x4de: -5 [ 585.494253][T15779] SQUASHFS error: Failed to read block 0x4de: -5 [ 585.560641][T15779] SQUASHFS error: Failed to read block 0x4e8: -5 [ 585.598162][ T31] audit: type=1800 audit(1786197466.847:336): pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4380" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 585.753720][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4389'. [ 585.823877][T15799] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4389'. [ 585.883672][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4389'. [ 585.975453][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4392'. [ 586.372887][T15811] xt_TCPMSS: Only works on TCP SYN packets [ 586.515719][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 586.733121][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 586.779750][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 586.861664][ T10] usb 2-1: string descriptor 0 read error: -22 [ 586.871652][T15825] loop5: detected capacity change from 0 to 256 [ 586.903919][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 586.956979][T15825] exFAT-fs (loop5): error, no upcase table entry. Please run fsck [ 587.001214][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.026152][T15825] exFAT-fs (loop5): Filesystem has been set read-only [ 587.079070][T15809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 587.109822][T15825] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 587.171305][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.219998][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 587.727759][T15840] netlink: 'syz.5.4407': attribute type 1 has an invalid length. [ 587.822193][ T10] usb 2-1: USB disconnect, device number 13 [ 588.535807][ T5777] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 588.737239][T15860] xt_l2tp: unknown flags: 10 [ 588.756276][ T5777] usb 8-1: Using ep0 maxpacket: 8 [ 588.817829][ T5777] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 588.944548][ T5777] usb 8-1: config 0 interface 0 has no altsetting 0 [ 589.038702][ T5777] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 589.130629][ T5777] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.153015][ T8686] udevd[8686]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.226540][ T5777] usb 8-1: Product: syz [ 589.272527][ T5777] usb 8-1: Manufacturer: syz [ 589.284117][T15824] loop3: detected capacity change from 0 to 32768 [ 589.337396][ T5777] usb 8-1: SerialNumber: syz [ 589.427566][ T5777] usb 8-1: config 0 descriptor?? [ 589.452014][T15858] loop6: detected capacity change from 0 to 2048 [ 589.548801][ T5777] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 589.649159][T15858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.765321][ T5777] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 589.815392][ T8961] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.828904][ T5777] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 590.013778][ T5777] usb 8-1: USB disconnect, device number 6 [ 590.021994][T15873] bond0: (slave bond_slave_1): Releasing backup interface [ 590.309182][ T31] audit: type=1326 audit(1786197471.547:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15877 comm="syz.4.4427" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311fb9e0d9 code=0x7ffc0000 [ 590.596979][ T31] audit: type=1326 audit(1786197471.547:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15877 comm="syz.4.4427" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311fb9e0d9 code=0x7ffc0000 [ 590.913642][ T31] audit: type=1326 audit(1786197471.597:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15877 comm="syz.4.4427" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f311fb9e0d9 code=0x7ffc0000 [ 591.183105][ T31] audit: type=1326 audit(1786197471.597:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15877 comm="syz.4.4427" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311fb9e0d9 code=0x7ffc0000 [ 591.263578][T15886] loop6: detected capacity change from 0 to 16 [ 591.379572][T15886] erofs (device loop6): mounted with root inode @ nid 36. [ 591.411410][T15894] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 591.697363][ T5621] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 591.756148][T15886] erofs (device loop6): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 591.870689][T15886] erofs (device loop6): read error -117 @ 1 of nid 89 [ 591.925878][ T31] audit: type=1800 audit(1786197473.177:341): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4431" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 592.414050][T15912] nftables ruleset with unbound chain [ 593.275720][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4449'. [ 593.443160][T15887] loop4: detected capacity change from 0 to 32768 [ 593.520163][T15887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4430 (15887) [ 593.660324][T15887] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 593.734458][T15887] BTRFS info (device loop4): using sha256 checksum algorithm [ 594.162527][T15887] BTRFS error (device loop4): open_ctree failed: -4 [ 594.206453][T15953] loop5: detected capacity change from 0 to 512 [ 594.389854][T15953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.417165][T15953] ext4 filesystem being mounted at /793/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.941828][ T5604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.865513][T15925] loop6: detected capacity change from 0 to 32768 [ 595.944845][T15925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4448 (15925) [ 596.052313][T15933] loop7: detected capacity change from 0 to 32768 [ 596.103846][T15925] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 596.184248][T15933] [ 596.184248][T15933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 596.184248][T15933] [ 596.228155][T15925] BTRFS info (device loop6): using sha256 checksum algorithm [ 596.306125][T15933] ialloc: diAlloc returned -5! [ 596.331357][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 596.331742][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 596.477820][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 596.581980][T14294] [ 596.581980][T14294] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 596.581980][T14294] [ 596.746074][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 596.746495][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 596.786264][T14294] [ 596.786264][T14294] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 596.786264][T14294] [ 596.849354][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 596.849664][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 596.909801][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 596.959103][T15997] xt_TCPMSS: Only works on TCP SYN packets [ 597.014149][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 597.014583][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 597.097603][T15925] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 597.214858][T16001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4467'. [ 597.289830][T15925] BTRFS error (device loop6): open_ctree failed: -12 [ 597.313249][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4470'. [ 597.390935][T16001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4467'. [ 597.446973][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4467'. [ 599.722749][T16054] netlink: 'syz.1.4494': attribute type 11 has an invalid length. [ 600.100143][T16061] libceph: secret too big 289 [ 600.625313][ T31] audit: type=1400 audit(1786197481.867:342): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16071 comm="syz.5.4503" [ 600.698264][T16069] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 600.739717][T16069] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 601.023310][T16075] loop1: detected capacity change from 0 to 4096 [ 601.096738][T16079] loop5: detected capacity change from 0 to 2048 [ 601.162066][T16079] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 601.213505][T16083] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 601.244019][T16079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 601.415491][ T29] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 601.939475][ T29] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 601.983343][T16092] loop5: detected capacity change from 0 to 1024 [ 601.991814][ T29] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 602.024309][T16097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4514'. [ 602.092058][ T29] usb 5-1: Product: syz [ 602.101800][T16097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4514'. [ 602.110226][ T29] usb 5-1: SerialNumber: syz [ 602.189547][T16097] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4514'. [ 602.437997][T16098] loop7: detected capacity change from 0 to 4096 [ 602.506858][T16098] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 602.577000][T16098] ntfs3(loop7): It is recommended to use chkdsk. [ 602.784624][ T29] usb 5-1: config 0 descriptor?? [ 602.941661][T16108] loop6: detected capacity change from 0 to 256 [ 603.498150][T16119] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4522'. [ 603.518974][ T29] usb 5-1: USB disconnect, device number 25 [ 603.565305][T16119] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4522'. [ 603.770658][T16122] loop1: detected capacity change from 0 to 64 [ 603.897198][T16122] Trying to free block not in datazone [ 605.069687][T16149] xt_limit: Overflow, try lower: 268435456/134217728 [ 606.831014][T16185] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4555'. [ 607.070569][T16191] comedi comedi0: 8255: I/O base address not correctly aligned [ 607.541873][T16203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4563'. [ 609.010130][T16236] netlink: 'syz.3.4580': attribute type 49 has an invalid length. [ 609.131168][T16236] bond0: (slave bond_slave_0): Releasing backup interface [ 609.343546][T16236] bond_slave_0: entered promiscuous mode [ 609.379937][T16236] bond_slave_0: entered allmulticast mode [ 610.146255][T16207] loop6: detected capacity change from 0 to 32768 [ 610.244212][T16207] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 610.463617][T16207] XFS (loop6): Ending clean mount [ 611.150236][ T8961] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 611.432197][T16282] loop4: detected capacity change from 0 to 256 [ 613.067035][T16316] loop6: detected capacity change from 0 to 1024 [ 613.128000][T16316] EXT4-fs: Ignoring removed bh option [ 613.217992][T16316] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 613.432891][T16316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.582727][T16329] netlink: 'syz.3.4612': attribute type 17 has an invalid length. [ 613.692471][T16329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.852755][ T8961] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.368189][T16346] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4622'. [ 614.461389][T16346] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4622'. [ 615.310879][T16367] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4631'. [ 615.435167][T16369] loop6: detected capacity change from 0 to 512 [ 615.510719][T16369] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 615.610589][T16369] EXT4-fs (loop6): orphan cleanup on readonly fs [ 615.688577][T16369] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 615.770792][T16369] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 615.805391][T16377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4635'. [ 616.060641][T16369] EXT4-fs (loop6): 1 truncate cleaned up [ 616.181452][T16369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 616.451124][T16389] netlink: 'syz.4.4640': attribute type 2 has an invalid length. [ 616.582879][T16369] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 616.892792][ T8961] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.009329][T16398] loop4: detected capacity change from 0 to 764 [ 617.186794][T16400] loop7: detected capacity change from 0 to 256 [ 618.345648][T16383] loop1: detected capacity change from 0 to 32768 [ 618.405006][T16383] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4637 (16383) [ 618.538621][T16383] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 618.598253][T16383] BTRFS info (device loop1): using crc32c checksum algorithm [ 618.694739][ T5734] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 618.854151][T16383] BTRFS info (device loop1): setting nodatasum [ 618.898743][ T5734] usb 5-1: unable to get BOS descriptor or descriptor too short [ 618.921666][T16383] BTRFS info (device loop1): setting nodatacow [ 618.960676][ T5734] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 618.982073][T16383] BTRFS info (device loop1): enabling ssd optimizations [ 619.042138][T16383] BTRFS info (device loop1): turning on flush-on-commit [ 619.064144][ T5734] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 619.106007][T16383] BTRFS info (device loop1): turning on async discard [ 619.146859][ T5734] usb 5-1: string descriptor 0 read error: -22 [ 619.162768][T16452] loop5: detected capacity change from 0 to 64 [ 619.169356][T16383] BTRFS info (device loop1): enabling free space tree [ 619.202323][ T5734] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 619.275170][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.417438][T16427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.459980][ T5615] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 619.479209][T16427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.578508][ T5734] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 620.188079][ T5734] usb 5-1: USB disconnect, device number 26 [ 620.407495][T16419] loop7: detected capacity change from 0 to 32768 [ 620.538288][T16465] netlink: 'syz.5.4667': attribute type 13 has an invalid length. [ 620.673596][T16419] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 621.009255][T16419] XFS (loop7): Ending clean mount [ 621.087667][T16477] openvswitch: netlink: IP tunnel TTL not specified. [ 621.265112][T14294] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 621.301531][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4663'. [ 622.067992][ T5733] udevd[5733]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.735669][ T5734] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 622.968569][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.051137][ T5734] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 623.119443][ T5734] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 623.190655][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.274301][ T5734] usb 2-1: config 0 descriptor?? [ 623.403929][T16506] loop3: detected capacity change from 0 to 512 [ 623.472356][T16506] EXT4-fs (loop3): Test dummy encryption mode enabled [ 623.480582][T16504] loop5: detected capacity change from 0 to 4096 [ 623.627116][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.697383][T16506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.738432][T16504] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 623.851239][T16504] ntfs3(loop5): Failed to load $Extend (-22). [ 623.873112][T16506] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 623.910560][ T5734] Bluetooth: Can't get version to change to load ram patch err [ 623.925504][T16504] ntfs3(loop5): Failed to initialize $Extend. [ 623.969145][ T5734] Bluetooth: Loading patch file failed [ 624.023112][ T5734] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 624.112583][ T5734] usb 2-1: USB disconnect, device number 14 [ 624.267985][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.615376][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4684'. [ 624.941479][T16524] loop1: detected capacity change from 0 to 256 [ 625.081222][T16529] loop3: detected capacity change from 0 to 64 [ 625.151023][T16526] loop4: detected capacity change from 0 to 512 [ 625.268371][T16526] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 625.416489][T16526] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 625.435402][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 625.441848][ C0] EXT4-fs (loop4): initial error at time 1786197506: ext4_mb_generate_buddy:1317 [ 625.451004][ C0] EXT4-fs (loop4): last error at time 1786197506: ext4_mb_generate_buddy:1317 [ 625.548317][T16526] EXT4-fs (loop4): 1 truncate cleaned up [ 625.648965][T16526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.720949][ T5605] Bluetooth: hci6: command 0x0406 tx timeout [ 625.934722][T16540] loop5: detected capacity change from 0 to 16 [ 626.000453][T16540] erofs (device loop5): mounted with root inode @ nid 36. [ 626.212361][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4695'. [ 626.235462][T16545] loop6: detected capacity change from 0 to 512 [ 626.273494][T16545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 626.351284][T16545] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.4696: corrupted in-inode xattr: invalid ea_ino [ 626.377218][T16545] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.377602][T16545] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.4696: couldn't read orphan inode 15 (err -117) [ 626.386808][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 626.386831][ C0] EXT4-fs (loop6): initial error at time 1786197507: ext4_iget_extra_inode:5180: inode 15 [ 626.386869][ C0] EXT4-fs (loop6): last error at time 1786197507: ext4_iget_extra_inode:5180: inode 15 [ 626.431642][ T5734] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 626.441837][T16545] loop6: lost filesystem error report for type 5 error -117 [ 626.492967][T16545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.605113][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 626.615962][ T5734] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 626.639606][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.655680][T16545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.704353][ T5734] usb 2-1: config 0 has no interface number 0 [ 626.763376][ T5734] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 626.787600][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.807201][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.823144][T16555] x_tables: duplicate entry at hook 3 [ 626.882048][ T5734] usb 2-1: Product: syz [ 626.912189][ T5734] usb 2-1: Manufacturer: syz [ 626.939928][ T5734] usb 2-1: SerialNumber: syz [ 626.977988][ T5734] usb 2-1: config 0 descriptor?? [ 627.053007][ T5734] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 627.122984][ T5734] uvcvideo 2-1:0.31: Failed to create links for entity 32774 [ 627.192310][ T5734] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 627.298408][ T5734] usb 2-1: USB disconnect, device number 15 [ 627.962638][T16570] netlink: 'syz.4.4707': attribute type 5 has an invalid length. [ 628.105425][ T5734] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 628.288719][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 628.324028][ T5734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.392990][ T5734] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 628.458610][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.518723][ T5734] usb 6-1: Product: syz [ 628.549490][ T5734] usb 6-1: Manufacturer: syz [ 628.579116][ T5734] usb 6-1: SerialNumber: syz [ 628.638818][ T5734] usb 6-1: config 0 descriptor?? [ 628.686352][ T5734] usb 6-1: No union descriptors [ 628.724238][ T5734] usb 6-1: unsupported MDLM descriptors [ 628.994309][ T5848] usb 6-1: USB disconnect, device number 19 [ 629.634527][ T5848] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 629.782162][T16571] loop6: detected capacity change from 0 to 32768 [ 629.893587][T16571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4706 (16571) [ 629.938438][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 629.995159][ T5848] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 630.092425][ T5848] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 630.195675][ T5848] usb 4-1: string descriptor 0 read error: -22 [ 630.226995][T16571] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 630.257121][ T5848] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 630.333683][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.346297][T16571] BTRFS info (device loop6): using sha256 checksum algorithm [ 630.446762][T16588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.520465][T16588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.641445][ T5848] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.677417][ T32] INFO: task syz.2.3578:13950 blocked for more than 143 seconds. [ 630.769138][ T32] Not tainted syzkaller #0 [ 630.832501][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.882528][T16571] BTRFS info (device loop6): enabling ssd optimizations [ 630.930686][ T32] task:syz.2.3578 state:D stack:27280 pid:13950 tgid:13948 ppid:5612 task_flags:0x400040 flags:0x00080002 [ 630.960688][T16571] BTRFS info (device loop6): turning on async discard [ 631.032386][T16571] BTRFS info (device loop6): enabling free space tree [ 631.059510][ T32] Call Trace: [ 631.104969][ T32] [ 631.137730][ T32] __schedule+0x17d9/0x56c0 [ 631.177149][ T32] ? __lock_acquire+0x683/0x2cf0 [ 631.215425][ T32] ? __lock_acquire+0x683/0x2cf0 [ 631.259134][ T32] ? __pfx___schedule+0x10/0x10 [ 631.291200][ T32] ? schedule+0x90/0x2b0 [ 631.301591][ T5848] usb 4-1: USB disconnect, device number 26 [ 631.330836][ T32] schedule+0x164/0x2b0 [ 631.361605][ T32] schedule_preempt_disabled+0x13/0x30 [ 631.388676][ T32] __mutex_lock+0x7bf/0x1550 [ 631.425379][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.473079][ T32] ? __mutex_lock+0x5d4/0x1550 [ 631.501619][ T32] ? usbdev_open+0x151/0x770 [ 631.540511][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 631.580896][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.616978][ T32] ? bus_find_device+0x27d/0x2d0 [ 631.651799][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 631.685816][ T32] ? usbdev_open+0xa7/0x770 [ 631.712806][ T32] ? usbdev_open+0xa7/0x770 [ 631.731407][ T32] usbdev_open+0x151/0x770 [ 631.755798][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 631.782173][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.810448][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.828542][ T32] ? do_raw_spin_unlock+0xf5/0x210 [ 631.846682][ T32] chrdev_open+0x4d9/0x600 [ 631.861046][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 631.879934][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.903101][ T32] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 631.928082][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 631.944218][ T32] do_dentry_open+0x816/0x1380 [ 631.965703][ T32] vfs_open+0x3b/0x340 [ 631.986949][ T32] ? path_openat+0x2e2d/0x3830 [ 632.010705][ T32] path_openat+0x2e44/0x3830 [ 632.032949][ T32] ? kasan_save_track+0x3e/0x80 [ 632.058552][ T32] ? do_sys_openat2+0xcc/0x200 [ 632.076450][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.108039][ T32] do_file_open+0x23e/0x4a0 [ 632.136482][ T32] ? __pfx_do_file_open+0x10/0x10 [ 632.159226][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.188250][ T32] ? _raw_spin_unlock+0x28/0x50 [ 632.209875][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.235353][ T32] ? alloc_fd+0x651/0x6c0 [ 632.260481][ T32] do_sys_openat2+0x115/0x200 [ 632.280347][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 632.308348][ T32] ? rcu_is_watching+0x15/0xb0 [ 632.325399][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.349811][ T32] __x64_sys_openat+0x138/0x170 [ 632.357316][T16579] syz.4.4711 (16579): drop_caches: 2 [ 632.379994][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.401413][ T32] do_syscall_64+0x174/0x580 [ 632.420582][ T32] ? trace_irq_disable+0x3b/0x140 [ 632.443154][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.472084][ T32] RIP: 0033:0x7f86f5d5e90e [ 632.491474][ T32] RSP: 002b:00007f86f6bedb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 632.536095][ T32] RAX: ffffffffffffffda RBX: 00007f86f6bee6c0 RCX: 00007f86f5d5e90e [ 632.572736][ T32] RDX: 0000000000109301 RSI: 00007f86f6bedc00 RDI: ffffffffffffff9c [ 632.604252][ T32] RBP: 00007f86f6bedc00 R08: 0000000000000000 R09: 0000000000000000 [ 632.632175][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 632.659147][ T32] R13: 00007f86f6026038 R14: 00007f86f6025fa0 R15: 00007ffe15a9d288 [ 632.686326][ T32] [ 632.698858][ T32] [ 632.698858][ T32] Showing all locks held in the system: [ 632.953843][ T32] 6 locks held by kworker/1:0/24: [ 632.961777][ T32] 3 locks held by kworker/1:2/30: [ 632.967664][ T32] 1 lock held by khungtaskd/32: [ 632.972594][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 632.982921][ T32] 5 locks held by kworker/u8:5/78: [ 632.988470][ T32] 2 locks held by getty/5358: [ 632.993263][ T32] #0: ffff8880354d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 633.005005][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 633.018918][ T32] 3 locks held by kworker/u8:9/5810: [ 633.029700][ T32] 1 lock held by syz.2.3578/13950: [ 633.040727][ T32] #0: ffff888029fd31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 633.080038][ T32] 1 lock held by sed/16628: [ 633.096478][ T8961] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 633.107665][ T32] [ 633.115039][ T32] ============================================= [ 633.115039][ T32] [ 633.153317][ T32] NMI backtrace for cpu 0 [ 633.153342][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 633.153369][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 633.153383][ T32] Call Trace: [ 633.153393][ T32] [ 633.153404][ T32] dump_stack_lvl+0xe8/0x150 [ 633.153443][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 633.153474][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.153508][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 633.153546][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 633.153578][ T32] sys_info+0x135/0x170 [ 633.153602][ T32] watchdog+0xfd7/0x1030 [ 633.153641][ T32] ? watchdog+0x1c7/0x1030 [ 633.153678][ T32] kthread+0x388/0x470 [ 633.153713][ T32] ? __pfx_watchdog+0x10/0x10 [ 633.153739][ T32] ? __pfx_kthread+0x10/0x10 [ 633.153776][ T32] ret_from_fork+0x514/0xb70 [ 633.153814][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 633.153849][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.153878][ T32] ? __switch_to+0xc89/0x1420 [ 633.153911][ T32] ? __pfx_kthread+0x10/0x10 [ 633.153948][ T32] ret_from_fork_asm+0x1a/0x30 [ 633.154003][ T32] [ 633.154017][ T32] Sending NMI from CPU 0 to CPUs 1: [ 633.277927][ C1] NMI backtrace for cpu 1 [ 633.277946][ C1] CPU: 1 UID: 0 PID: 16627 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 633.277971][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 633.277984][ C1] RIP: 0010:memset+0xf/0x30 [ 633.278020][ C1] Code: 44 88 1f e9 2e 64 3f f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 e9 02 64 3f f5 90 90 90 90 90 90 90 90 90 90 90 90 [ 633.278039][ C1] RSP: 0018:ffffc90000a08d60 EFLAGS: 00000002 [ 633.278057][ C1] RAX: 6de0dfc606eab900 RBX: ffff88807b3ed938 RCX: 000000000000000f [ 633.278073][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000a08d81 [ 633.278087][ C1] RBP: 0000000000000000 R08: ffffc90000a08d8f R09: ffffc90000a08d80 [ 633.278102][ C1] R10: dffffc0000000000 R11: fffff520001411b2 R12: 0000000000000001 [ 633.278117][ C1] R13: dffffc0000000000 R14: ffffffff8bef7f00 R15: 0000000000000000 [ 633.278135][ C1] FS: 0000000000000000(0000) GS:ffff888125055000(0000) knlGS:0000000000000000 [ 633.278153][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.278168][ C1] CR2: 00007efce4540a10 CR3: 0000000079d99000 CR4: 0000000000350ef0 [ 633.278185][ C1] Call Trace: [ 633.278193][ C1] [ 633.278200][ C1] debug_object_activate+0x38/0x420 [ 633.278234][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.278265][ C1] enqueue_hrtimer+0xa9/0x2c0 [ 633.278292][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 633.278326][ C1] hrtimer_run_softirq+0x17a/0x240 [ 633.278353][ C1] handle_softirqs+0x225/0x840 [ 633.278380][ C1] ? __irq_exit_rcu+0xca/0x220 [ 633.278408][ C1] __irq_exit_rcu+0xca/0x220 [ 633.278433][ C1] irq_exit_rcu+0x9/0x30 [ 633.278454][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 633.278482][ C1] [ 633.278489][ C1] [ 633.278497][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 633.278525][ C1] RIP: 0010:__kernel_text_address+0x25/0x30 [ 633.278559][ C1] Code: 90 90 90 90 90 0f 1f 40 d6 53 48 89 fb e8 33 00 00 00 48 81 fb 00 e0 c8 91 0f 93 c1 48 81 fb 50 1f e1 91 0f 92 c2 20 ca 08 c2 <0f> b6 c2 5b e9 0d dd 7f ff cc 90 90 90 90 90 90 90 90 90 90 90 90 [ 633.278576][ C1] RSP: 0018:ffffc9000204f5f8 EFLAGS: 00000202 [ 633.278593][ C1] RAX: 0000000000000001 RBX: ffffffff81000130 RCX: 0000000000000000 [ 633.278608][ C1] RDX: 0000000000000001 RSI: ffffffff8e4ad94a RDI: ffffffff81000130 [ 633.278623][ C1] RBP: ffffc9000204f6b0 R08: ffffc9000204ff38 R09: ffffc9000204f678 [ 633.278638][ C1] R10: dffffc0000000000 R11: fffff52000409ed1 R12: ffff88801e39be00 [ 633.278654][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000409ece [ 633.278673][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.278699][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.278724][ C1] ? __kernel_text_address+0xd/0x30 [ 633.278759][ C1] unwind_get_return_address+0x4d/0x90 [ 633.278795][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.278821][ C1] arch_stack_walk+0xfb/0x150 [ 633.278861][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.278887][ C1] stack_trace_save+0xa9/0x100 [ 633.278912][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 633.278936][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 633.278966][ C1] ? exit_mmap+0x4ca/0x9f0 [ 633.278989][ C1] ? __mmput+0x118/0x420 [ 633.279008][ C1] ? exit_mm+0x221/0x2d0 [ 633.279036][ C1] ? do_exit+0x6cd/0x2360 [ 633.279064][ C1] ? do_group_exit+0x22d/0x2f0 [ 633.279094][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 633.279124][ C1] ? x64_sys_call+0x221a/0x2240 [ 633.279155][ C1] ? do_syscall_64+0x174/0x580 [ 633.279187][ C1] kasan_save_stack+0x3e/0x60 [ 633.279212][ C1] ? kasan_save_stack+0x3e/0x60 [ 633.279238][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 633.279258][ C1] ? kmem_cache_free+0x44f/0x650 [ 633.279285][ C1] ? tear_down_vmas+0x312/0x520 [ 633.279308][ C1] ? exit_mmap+0x4ca/0x9f0 [ 633.279329][ C1] ? __mmput+0x118/0x420 [ 633.279348][ C1] ? exit_mm+0x221/0x2d0 [ 633.279376][ C1] ? do_exit+0x6cd/0x2360 [ 633.279403][ C1] ? do_group_exit+0x22d/0x2f0 [ 633.279433][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 633.279462][ C1] ? x64_sys_call+0x221a/0x2240 [ 633.279493][ C1] ? do_syscall_64+0x174/0x580 [ 633.279557][ C1] ? tear_down_vmas+0x312/0x520 [ 633.279580][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 633.279602][ C1] kmem_cache_free+0x44f/0x650 [ 633.279635][ C1] tear_down_vmas+0x312/0x520 [ 633.279664][ C1] exit_mmap+0x4ca/0x9f0 [ 633.279689][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 633.279731][ C1] ? __pfx_exit_aio+0x10/0x10 [ 633.279764][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.279789][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 633.279822][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.279848][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 633.279871][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.279900][ C1] __mmput+0x118/0x420 [ 633.279922][ C1] exit_mm+0x221/0x2d0 [ 633.279954][ C1] do_exit+0x6cd/0x2360 [ 633.279990][ C1] ? __pfx_do_exit+0x10/0x10 [ 633.280018][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 633.280042][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.280071][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.280098][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.280127][ C1] do_group_exit+0x22d/0x2f0 [ 633.280158][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.280182][ C1] __x64_sys_exit_group+0x3f/0x40 [ 633.280212][ C1] x64_sys_call+0x221a/0x2240 [ 633.280244][ C1] do_syscall_64+0x174/0x580 [ 633.280271][ C1] ? trace_irq_disable+0x3b/0x140 [ 633.280302][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.280324][ C1] RIP: 0033:0x7f695e6e66c5 [ 633.280342][ C1] Code: Unable to access opcode bytes at 0x7f695e6e669b. [ 633.280353][ C1] RSP: 002b:00007ffd88c8cfe8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 633.280372][ C1] RAX: ffffffffffffffda RBX: 00007ffd88c8d304 RCX: 00007f695e6e66c5 [ 633.280388][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 633.280402][ C1] RBP: 0000000000000003 R08: 00007ffd88c8d0e0 R09: 0000000000000002 [ 633.280415][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 633.280428][ C1] R13: 00007ffd88c8d320 R14: 00007f695e8f6000 R15: 0000560580e6ad98 [ 633.280456][ C1] [ 633.898459][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 633.905314][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 633.914426][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 633.924488][ T32] Call Trace: [ 633.927774][ T32] [ 633.930705][ T32] vpanic+0x56c/0xa60 [ 633.934711][ T32] ? __pfx___schedule+0x10/0x10 [ 633.939581][ T32] ? __pfx_vpanic+0x10/0x10 [ 633.944102][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.949749][ T32] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 633.955925][ T32] panic+0xc5/0xd0 [ 633.959670][ T32] ? __pfx_panic+0x10/0x10 [ 633.964110][ T32] ? preempt_schedule_common+0x82/0xd0 [ 633.969582][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 633.974963][ T32] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 633.981128][ T32] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 633.987329][ T32] watchdog+0x1030/0x1030 [ 633.991679][ T32] ? watchdog+0x1c7/0x1030 [ 633.996114][ T32] kthread+0x388/0x470 [ 634.000202][ T32] ? __pfx_watchdog+0x10/0x10 [ 634.004886][ T32] ? __pfx_kthread+0x10/0x10 [ 634.009499][ T32] ret_from_fork+0x514/0xb70 [ 634.014116][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 634.019247][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.024895][ T32] ? __switch_to+0xc89/0x1420 [ 634.029590][ T32] ? __pfx_kthread+0x10/0x10 [ 634.034201][ T32] ret_from_fork_asm+0x1a/0x30 [ 634.039004][ T32] [ 634.042264][ T32] Kernel Offset: disabled [ 634.046572][ T32] Rebooting in 86400 seconds..