last executing test programs: 14m46.801862684s ago: executing program 0 (id=16249): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x163) unlinkat(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0x200) 14m46.564111452s ago: executing program 0 (id=16253): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = eventfd(0xa9e4) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x0, 0xfffffffffffffff8, 0x3}) 14m46.376169848s ago: executing program 0 (id=16257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 14m46.012440946s ago: executing program 0 (id=16263): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000008c0)={0x3a, 0x22, 0x0, 0x1, 0x8, 0xac, 0x5, 0x2}) 14m45.680279122s ago: executing program 0 (id=16267): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x0) 14m45.458041967s ago: executing program 0 (id=16271): mount(0x0, &(0x7f0000000100)='./nfsd\x00', 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) 14m29.040462342s ago: executing program 32 (id=16271): mount(0x0, &(0x7f0000000100)='./nfsd\x00', 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) 14m0.195295409s ago: executing program 3 (id=16697): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x7b}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0x0, "e2350f0a"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "fd"}, @global=@item_4={0x3, 0x1, 0x6, "15270e83"}, @local=@item_4={0x3, 0x2, 0x8, "58bad77a"}, @local=@item_4={0x3, 0x2, 0x7, ');%d'}]}}, 0x0}, 0x0) 13m58.105937529s ago: executing program 3 (id=16714): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x80, {0x0, 0x0, 0x0, 0x0, 0x3209, 0x10403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) 13m54.280559947s ago: executing program 3 (id=16741): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setfsgid(0xee00) 13m53.802320164s ago: executing program 3 (id=16745): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, 0xffc1) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x29, 0x0, '\x00', [@ra={0x5, 0x2, 0xef}]}, 0x10) 13m53.353319347s ago: executing program 3 (id=16748): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 13m53.038034832s ago: executing program 3 (id=16750): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpriority(0x1, 0x0) 13m36.475999159s ago: executing program 33 (id=16750): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpriority(0x1, 0x0) 12m48.022080483s ago: executing program 1 (id=17538): ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0xfffffffe, 0x401, 0xffffffffffffffff, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) 12m47.881015917s ago: executing program 1 (id=17528): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000300)=0xfbf, 0x4) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x1, 0x2044) 12m47.666320332s ago: executing program 1 (id=17530): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 12m46.652722996s ago: executing program 1 (id=17545): r0 = socket$inet6(0xa, 0x3, 0x1) setresuid(0xee00, 0xee00, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 12m46.506848851s ago: executing program 1 (id=17547): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 12m46.394068887s ago: executing program 1 (id=17550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=@base={0x1, 0x4, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 12m44.683765938s ago: executing program 6 (id=17563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x4000000) 12m44.531883573s ago: executing program 6 (id=17564): r0 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000600)="370c099069", 0x5, 0xffffffffffffffff) r1 = add_key(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000700)={r1, r0, r0}, 0x0, 0x0, 0x0) 12m44.402023286s ago: executing program 6 (id=17567): r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x80800) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x81) close_range(r0, 0xffffffffffffffff, 0x0) 12m44.205929969s ago: executing program 6 (id=17571): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c0}}, {{&(0x7f0000001780)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, 0x0, 0x0, &(0x7f0000001e00)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x8048000}}], 0x2, 0x0) 12m44.116342884s ago: executing program 6 (id=17572): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 12m44.014627826s ago: executing program 6 (id=17575): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, 0x0, 0x0) 12m30.021227435s ago: executing program 34 (id=17550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=@base={0x1, 0x4, 0x2, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 12m27.528637437s ago: executing program 35 (id=17575): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, 0x0, 0x0) 10m20.972888968s ago: executing program 8 (id=19131): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffcf6) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x4000}) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) 10m20.721791316s ago: executing program 8 (id=19135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, r1, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) 10m20.469794291s ago: executing program 8 (id=19139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) 10m20.25463195s ago: executing program 8 (id=19143): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x7}}]}) 10m20.064044376s ago: executing program 8 (id=19146): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) 10m19.759620054s ago: executing program 8 (id=19151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "e5"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 10m3.371055361s ago: executing program 36 (id=19151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "e5"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 5.16267444s ago: executing program 9 (id=24968): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x24, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.568080983s ago: executing program 2 (id=24985): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x4) write$FUSE_INIT(r0, 0x0, 0x0) 3.269254181s ago: executing program 2 (id=24988): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 3.238043453s ago: executing program 9 (id=24990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 3.167332383s ago: executing program 7 (id=24991): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 3.025000244s ago: executing program 9 (id=24994): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 2.57340964s ago: executing program 9 (id=24996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x72bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x1}, {0x7, 0x1}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.138161266s ago: executing program 4 (id=24999): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000440)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x10, @private1, 0xedd6}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)='>', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="f8000000000000002900000036000000011b000000000000086b9ab5db5b3a3b8113c0d67f320c17561b5edf0fdd7885aa181a08026f91c8a20514339f25ce5b21566b22d797a38c7048f44466e7c542d2084e26e25af6583e96b052266be9593712cb1cb38198a0d8c2deed9743eef9c82e1eefc11693b6dc49038c5db6ea01a06e616b0a0001000755d0640117f6dad04bd84a4b031cf8d2b2d3af034f66c7bd764322cd3ba9bdd522230695764001e92608c8181256e7e30982e46957a0b253461ff4ddf89f87f6d83d1a71462ddfdfdaa5031c385cd1d55a7771f33467040109c204000004030502000600010004010400000000000014"], 0x110}}], 0x2, 0x200488d4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000880)={0x0, 0x8007, 0x1}, &(0x7f00000008c0)=0x8) 2.005424975s ago: executing program 7 (id=25001): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001bc0)={'#! ', './file1/../file0', [{0x20, '#2\xb7\xfd\x84\xb9&\xc8! '}, {0x20, '\xecM8\xc6!\xb45Z~AD\t\xc3n\xc1i\x12\xc8\x9cW)}@M\x18\xcf\x93\xdbP\xc6C=\x84\x13\xb1?\xc0i\xbaE\x03\xb1J)\x99\xed\x939\x9ff\x84+r\xbf\xb77\xc3\x00\x00\x00\x00\xdeq\x01!\xd2\xe5\xc3\xffi\x11n\x8b\x8c\b\x1f\xd0sG@\xdd\x17k\x14r\x01\x18R\t)\x117\x8f\xddZj:\x8aA\x1fx\x97\x8f\x9d\x8eY2P4\xc5\xb3\xd1\x1a)I\xb9\xbbp\x06\a\xfe\xce\x11\x8ba\x9c\x82\xfd\xa4g\x87\xa6\x00\xcew\xb7A!Cx\xb5\xfe\x8f/8{\v\x14A\xe9*\xfa\xaf\x8b\xd2\xcfq@qS\xe8\xe4\x99{#\x1e\xfe6c\xac\xac\xc6N<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%+H\xcaN\xb5 u?\x1c9\x00\xfc\td\xc6\x13-\xa3\xd6\x84-HH=\xaa\xdc\x1d\xd7A&\xeb\xfe\x88\xf9\x80D\x9fH\xe0E\xe9|no\xac\x18\x80u&\xbe\xef\x1a\x8c\xea<\x8e\x9c\xf9\x1bZ\xa9]#\xeb\xb1\xdc\xdc\xc6Q\x03S4\xc3\x94q\x18 \xbcxXR\x92\x98_\x1d\xcc\xfb\xd7r\b\x93\x9e\xe8R\x8e0\xddqj\x87\xde\x1a\xdb{\xf8\xb9\xf4\xd2#\xda;\x13\xa1\xa6\xc6\xc9b\x16\x82\xfa\xe3\x01\xf6CKhO/\x7f2\x8dJ\x88\x04:\xf4\x7fk\xff\xcbY\x11\x1e^H\x9c\xa7i)\xe7 \xed\xbe\xa5B\x9cc4\xc2\xbb%R\b\x8c\x97\xc1\xfb\xea\x02r\xa0\x7f\r\xa12\xc4S\xcb\v\xc3\xe2\x8d[\xd6\xc7\xe4\xc0z\xb8\xcd\xe2\n\xb5r;\xdc\xbf\x86\x83r\xbe\xb1LA\xea&C\xf1\xfbn\xb3\x99\xc8\xc4twd\xa9\x80\x85q\xfe` \xc8g\xe5'}, {}, {0x20, '/dev/loop#\x00'}, {0x20, '#! '}, {0x20, '#! '}, {}, {}, {0x20, '\xecM8\xc6!\xb45Z~AD\t\xc3n\xc1i\x12\xc8\x9cW)}@M\x18\xcf\x93\xdbP\xc6C=\x84\x13\xb1?\xc0i\xbaE\x03\xb1J)\x99\xed\x939\x9ff\x84+r\xbf\xb77\xc3\x00\x00\x00\x00\xdeq\x01!\xd2\xe5\xc3\xffi\x11n\x8b\x8c\b\x1f\xd0sG@\xdd\x17k\x14r\x01\x18R\t)\x117\x8f\xddZj:\x8aA\x1fx\x97\x8f\x9d\x8eY2P4\xc5\xb3\xd1\x1a)I\xb9\xbbp\x06\a\xfe\xce\x11\x8ba\x9c\x82\xfd\xa4g\x87\xa6\x00\xcew\xb7A!Cx\xb5\xfe\x8f/8{\v\x14A\xe9*\xfa\xaf\x8b\xd2\xcfq@qS\xe8\xe4\x99{#\x1e\xfe6c\xac\xac\xc6N<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%+H\xcaN\xb5 u?\x1c9\x00\xfc\td\xc6\x13-\xa3\xd6\x84-HH=\xaa\xdc\x1d\xd7A&\xeb\xfe\x88\xf9\x80D\x9fH\xe0E\xe9|no\xac\x18\x80u&\xbe\xef\x1a\x8c\xea<\x8e\x9c\xf9\x1bZ\xa9]#\xeb\xb1\xdc\xdc\xc6Q\x03S4\xc3\x94q\x18 \xbcxXR\x92\x98_\x1d\xcc\xfb\xd7r\b\x93\x9e\xe8R\x8e0\xddqj\x87\xde\x1a\xdb{\xf8\xb9\xf4\xd2#\xda;\x13\xa1\xa6\xc6\xc9b\x16\x82\xfa\xe3\x01\xf6CKhO/\x7f2\x8dJ\x88\x04:\xf4\x7fk\xff\xcbY\x11\x1e^H\x9c\xa7i)\xe7 \xed\xbe\xa5B\x9cc4\xc2\xbb%R\b\x8c\x97\xc1\xfb\xea\x02r\xa0\x7f\r\xa12\xc4S\xcb\v\xc3\xe2\x8d[\xd6\xc7\xe4\xc0z\xb8\xcd\xe2\n\xb5r;\xdc\xbf\x86\x83r\xbe\xb1LA\xea&C\xf1\xfbn\xb3\x99\xc8\xc4twd\xa9\x80\x85q\xfe` \xc8g\xe5'}]}, 0x374) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.860384726s ago: executing program 9 (id=25002): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x5e4}}, 0x4804) 1.801990408s ago: executing program 5 (id=25003): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semop(r0, &(0x7f0000000140)=[{0x2, 0x4, 0x1000}, {0x1, 0x5, 0x800}, {0x1, 0xefd, 0x1000}], 0x3) 1.718515647s ago: executing program 4 (id=25004): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x7, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='rdma,vers=3.0,ip=127.0.0.1,port=5445\x00') 1.717277646s ago: executing program 2 (id=25005): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000002500)={0x1, &(0x7f0000002540)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000002440)='./binfmt\x00', &(0x7f0000002480)='binfmt_misc\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000024c0)='./binfmt\x00', 0x0) 1.404405153s ago: executing program 9 (id=25006): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0x7) 1.396360294s ago: executing program 5 (id=25007): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x70bd2b, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xffff}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0xfffffffa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12ae10}, 0x0) 1.341478256s ago: executing program 7 (id=25008): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$kcm(r0, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000000), 0x4) 1.152696905s ago: executing program 2 (id=25009): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x13, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)={0x8, {{0x2, 0x4e23, @multicast1}}, 0x1, 0x1, [{{0x2, 0x5e21, @rand_addr=0x64010100}}]}, 0x110) 1.130823002s ago: executing program 4 (id=25010): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x7ff, {0xffff, 0x1}, {0x4c, 0x4}, @period={0x5c, 0xd9, 0x101, 0xfd, 0x6, {0xd2c0, 0x2, 0x6, 0x8}, 0x2, &(0x7f0000000000)=[0x7, 0x1]}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.01796155s ago: executing program 5 (id=25011): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 988.394464ms ago: executing program 7 (id=25012): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 856.029956ms ago: executing program 2 (id=25013): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003800)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000004214000000110001"], 0xdc}}, 0x8040) 800.153092ms ago: executing program 5 (id=25014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') 792.95938ms ago: executing program 4 (id=25015): r0 = syz_io_uring_setup(0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x41, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 748.763552ms ago: executing program 7 (id=25016): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x1, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x7c, 0x2, 0x4, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0xa, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x6, 0x3c5b, 0x10000001, 0xb, 0xb, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x3a3, 0x3, 0x8, 0x7, 0x80000000, 0x800242, 0xffffffff, 0x7a, 0x0, 0x4, 0x4, 0x57, 0x7, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a5, 0x4, 0x1, 0x20000000, 0x7e, 0x0, 0x20000007, 0x6, 0x6, 0x4, 0x1, 0xe], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x23f, 0x5, 0x1000, 0xfffffffc, 0x43, 0xffffffff, 0x7, 0x5, 0x2f, 0x1, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x809b, 0x3fe, 0x6, 0x7147, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3, 0x9, 0x8, 0xb392, 0x6, 0xb, 0xb, 0x1, 0x9, 0x9, 0x2, 0x79, 0x40009, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x6, 0x6, 0x80000001, 0x2, 0x4, 0x100, 0x8d2, 0xd, 0x5, 0x7, 0x0, 0x2, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0xa, 0x3e7, 0x9, 0x5, 0x5, 0x2, 0x1, 0xfffffff3, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1001000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x4, 0xac8, 0xbf, 0x10002, 0x403, 0x17c, 0x3, 0x0, 0x1, 0xffff, 0x100, 0x40010005, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x3, 0xfc], [0x100009, 0xbb31, 0x3, 0xb, 0x101, 0x1, 0x6, 0x65, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x400009, 0x5, 0x1003, 0x40000101, 0xc, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0xe00, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x7, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x832f, 0x5a2c, 0xc, 0x17, 0x1, 0x101, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x400200, 0xc9c2, 0xfff]}, 0x45c) eventfd(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 376.762099ms ago: executing program 7 (id=25017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x800, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00112233445566778899aabb0800", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 301.486436ms ago: executing program 4 (id=25018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 239.880016ms ago: executing program 5 (id=25019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="30005e8004000100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 67.109379ms ago: executing program 4 (id=25020): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x61000006, &(0x7f0000000340)) 13.367102ms ago: executing program 2 (id=25021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_a, @device_a, @initial, {0xe, 0x9}}, 0x110, 0x39, @default, @val, @val={0x2d, 0x1a, {0x400, 0x0, 0x4, 0x0, {0xfffffffffffffffe, 0x7, 0x0, 0x382, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x0, 0xed}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x8, 0x8]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 0s ago: executing program 5 (id=25022): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xf3f, 0x20bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0xf, 0xfff3}, {0x0, 0x1}, {0x4, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) kernel console output (not intermixed with test programs): esumed [ 1747.220824][T23094] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1747.220856][T23094] block device autoloading is deprecated and will be removed. [ 1747.707782][T23111] loop3: detected capacity change from 0 to 7 [ 1747.851641][T23111] Dev loop3: unable to read RDB block 7 [ 1747.853811][T23111] loop3: AHDI p1 p2 [ 1747.854195][T23111] loop3: partition table partially beyond EOD, truncated [ 1747.870217][T23111] loop3: p1 start 1702000233 is beyond EOD, truncated [ 1748.749571][T23137] netlink: 'syz.2.22581': attribute type 3 has an invalid length. [ 1748.749599][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22581'. [ 1749.224222][T23144] IPVS: Error connecting to the multicast addr [ 1750.941451][T12074] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1751.141852][T12074] usb 10-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 1751.178269][T12074] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.178330][T12074] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1751.178376][T12074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.379713][T23189] block2mtd: illegal erase size [ 1751.471413][T12074] usb 10-1: USB disconnect, device number 24 [ 1752.055374][T23206] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 1752.364108][T23211] sd 0:0:1:0: PR command failed: 1026 [ 1752.364215][T23211] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1752.364261][T23211] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1753.011354][T12074] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1753.197064][T12074] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1753.202420][T12074] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1753.202458][T12074] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1753.202514][T12074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.306580][T12074] usb 10-1: config 0 descriptor?? [ 1753.683888][T23225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1753.683920][T23225] block device autoloading is deprecated and will be removed. [ 1753.909364][T12074] hid_parser_main: 83 callbacks suppressed [ 1753.909391][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909425][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909455][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909484][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909513][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909543][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909572][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909600][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909630][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.909659][T12074] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0x0 [ 1753.997838][T12074] kovaplus 0003:1E7D:2D50.0056: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0 [ 1754.602594][T12074] kovaplus 0003:1E7D:2D50.0056: couldn't init struct kovaplus_device [ 1754.602656][T12074] kovaplus 0003:1E7D:2D50.0056: couldn't install mouse [ 1754.627882][T12074] kovaplus 0003:1E7D:2D50.0056: probe with driver kovaplus failed with error -71 [ 1754.635201][T12074] usb 10-1: USB disconnect, device number 25 [ 1757.183248][ T10] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1757.401430][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1757.402582][ T10] usb 10-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1757.405018][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.405054][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1757.405101][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.485498][ T10] usb 10-1: config 0 descriptor?? [ 1758.072787][ T10] uclogic 0003:5543:0005.0057: hidraw0: USB HID v0.02 Device [HID 5543:0005] on usb-dummy_hcd.9-1/input0 [ 1758.279553][ T5936] usb 10-1: USB disconnect, device number 26 [ 1759.058587][T23332] netlink: 56 bytes leftover after parsing attributes in process `syz.4.22659'. [ 1759.377710][T23342] netlink: 'syz.5.22663': attribute type 3 has an invalid length. [ 1759.874712][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22669'. [ 1760.254387][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1760.414002][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1760.419240][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.419273][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.419298][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1760.419341][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.488471][ T10] usb 3-1: config 0 descriptor?? [ 1760.981376][ T10] hid_parser_main: 222 callbacks suppressed [ 1760.981405][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981439][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981469][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981498][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981528][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981555][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981585][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981616][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981646][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1760.981676][ T10] apple 0003:05AC:026C.0058: unknown main item tag 0x0 [ 1761.066846][ T10] apple 0003:05AC:026C.0058: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.2-1/input0 [ 1761.278029][T12074] usb 3-1: USB disconnect, device number 74 [ 1761.640740][T23389] netlink: 'syz.9.22683': attribute type 4 has an invalid length. [ 1761.640767][T23389] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.22683'. [ 1762.647826][T12074] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1762.797758][T23419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1762.797984][T23419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1762.798005][T23419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1762.798025][T23419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1762.798452][T23419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1762.798475][T23419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1762.798539][T23419] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1762.851914][T12074] usb 10-1: Using ep0 maxpacket: 16 [ 1762.853167][T12074] usb 10-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 1762.911588][T12074] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.911621][T12074] usb 10-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1762.911651][T12074] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1762.911690][T12074] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.967857][T12074] usb 10-1: config 0 descriptor?? [ 1763.015198][T23419] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1763.015218][T23419] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1763.593228][T23424] netlink: 'syz.5.22697': attribute type 3 has an invalid length. [ 1763.593252][T23424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22697'. [ 1763.618523][T12074] wacom 0003:056A:032C.0059: hidraw0: USB HID v0.00 Joystick [HID 056a:032c] on usb-dummy_hcd.9-1/input0 [ 1763.847619][ T10] usb 10-1: USB disconnect, device number 27 [ 1763.929549][ T5936] kernel write not supported for file /media4 (pid: 5936 comm: kworker/0:7) [ 1763.982378][T23425] fido_id[23425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1763.982734][T23433] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22700'. [ 1765.816706][T23476] netlink: 'syz.4.22720': attribute type 12 has an invalid length. [ 1765.816731][T23476] netlink: 'syz.4.22720': attribute type 29 has an invalid length. [ 1765.816748][T23476] netlink: 148 bytes leftover after parsing attributes in process `syz.4.22720'. [ 1765.842620][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1766.001367][T23480] loop8: detected capacity change from 0 to 1 [ 1766.018825][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1766.020350][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1766.043307][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1766.070437][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.070466][ T10] usb 3-1: Product: syz [ 1766.070483][ T10] usb 3-1: Manufacturer: syz [ 1766.070500][ T10] usb 3-1: SerialNumber: syz [ 1766.109969][ T10] usb 3-1: config 0 descriptor?? [ 1766.127072][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1766.129066][ T10] usb 3-1: Detected FT232R [ 1766.300872][T23480] Dev loop8: unable to read RDB block 1 [ 1766.300931][T23480] loop8: unable to read partition table [ 1766.301134][T23480] loop8: partition table beyond EOD, truncated [ 1766.301175][T23480] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1766.424144][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1766.751945][T23492] netlink: 'syz.7.22728': attribute type 3 has an invalid length. [ 1766.751972][T23492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22728'. [ 1766.751995][T23492] netlink: 'syz.7.22728': attribute type 3 has an invalid length. [ 1766.752011][T23492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22728'. [ 1766.792948][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1766.842741][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22728'. [ 1766.945199][ T5854] usb 3-1: USB disconnect, device number 75 [ 1767.332471][ T5854] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1767.333313][ T5854] ftdi_sio 3-1:0.0: device disconnected [ 1769.241143][T23557] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1769.241175][T23557] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 1770.000245][T23585] sd 0:0:1:0: PR command failed: 1026 [ 1770.000304][T23585] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1770.000354][T23585] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1770.014822][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1770.180812][ T10] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1770.183876][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.183911][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.183955][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.242032][ T10] usb 6-1: config 0 descriptor?? [ 1770.349398][T23592] netlink: 424 bytes leftover after parsing attributes in process `syz.7.22765'. [ 1770.349427][T23592] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 1770.765585][ T10] hid_parser_main: 14 callbacks suppressed [ 1770.765614][ T10] playstation 0003:054C:0DF2.005A: unknown main item tag 0x0 [ 1770.765653][ T10] playstation 0003:054C:0DF2.005A: unknown main item tag 0x0 [ 1770.765698][ T10] playstation 0003:054C:0DF2.005A: unknown main item tag 0x0 [ 1770.771305][ T10] playstation 0003:054C:0DF2.005A: unknown main item tag 0x0 [ 1770.771345][ T10] playstation 0003:054C:0DF2.005A: unknown main item tag 0x0 [ 1770.948886][ T10] playstation 0003:054C:0DF2.005A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 1771.018853][ T10] playstation 0003:054C:0DF2.005A: Invalid byte count transferred, expected 20 got 0 [ 1771.018935][ T10] playstation 0003:054C:0DF2.005A: Failed to retrieve DualSense pairing info: -22 [ 1771.018994][ T10] playstation 0003:054C:0DF2.005A: Failed to get MAC address from DualSense [ 1771.019038][ T10] playstation 0003:054C:0DF2.005A: Failed to create dualsense. [ 1771.060092][ T10] playstation 0003:054C:0DF2.005A: probe with driver playstation failed with error -22 [ 1771.283939][ T10] usb 6-1: USB disconnect, device number 28 [ 1771.546099][T23616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1771.546329][T23616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1771.546350][T23616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1771.546371][T23616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1771.546817][T23616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1771.546842][T23616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1771.546859][T23616] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1771.656071][T23616] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1771.656092][T23616] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1772.253287][T23637] netlink: 64 bytes leftover after parsing attributes in process `syz.9.22787'. [ 1772.438481][T23642] cougar: G6 mapped to F18 [ 1772.809002][T23650] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1774.152575][T23683] netlink: 84 bytes leftover after parsing attributes in process `syz.9.22808'. [ 1774.220434][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1774.382953][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1774.383977][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1774.385802][ T10] usb 6-1: config 32 has an invalid interface number: 85 but max is 0 [ 1774.385832][ T10] usb 6-1: config 32 has no interface number 0 [ 1774.385882][ T10] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1774.385914][ T10] usb 6-1: config 32 interface 85 has no altsetting 0 [ 1774.389791][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.389818][ T10] usb 6-1: Product: syz [ 1774.389835][ T10] usb 6-1: Manufacturer: syz [ 1774.389852][ T10] usb 6-1: SerialNumber: syz [ 1775.166909][ T10] appletouch 6-1:32.85: Geyser mode initialized. [ 1775.193488][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.85/input/input132 [ 1775.402985][ T10] usb 6-1: USB disconnect, device number 29 [ 1775.403076][ C0] appletouch 6-1:32.85: atp_complete: usb_submit_urb failed with result -19 [ 1775.443771][T23696] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1775.443803][T23696] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1775.656815][ T10] appletouch 6-1:32.85: input: appletouch disconnected [ 1776.087858][T23712] net_ratelimit: 54 callbacks suppressed [ 1776.087896][T23712] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 1776.764738][T23734] tmpfs: Using encoding : utf8-12.1.0 [ 1776.783455][T23734] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1777.472188][T23751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22836'. [ 1777.862075][ T5936] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1778.029211][ T5936] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1778.055759][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.055790][ T5936] usb 6-1: Product: syz [ 1778.055808][ T5936] usb 6-1: Manufacturer: syz [ 1778.055825][ T5936] usb 6-1: SerialNumber: syz [ 1778.094163][ T5936] usb 6-1: config 0 descriptor?? [ 1778.113653][ T5936] ch341 6-1:0.0: ch341-uart converter detected [ 1778.987407][ T5936] usb 6-1: failed to send control message: -71 [ 1778.987471][ T5936] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1779.010633][ T5936] usb 6-1: USB disconnect, device number 30 [ 1779.028959][ T5936] ch341 6-1:0.0: device disconnected [ 1779.802344][T23773] Process accounting paused [ 1780.496118][ T5702] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1780.659300][ T5702] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1780.689268][ T5702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.689298][ T5702] usb 3-1: config 0 has no interfaces? [ 1780.689333][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.718529][ T5702] usb 3-1: config 0 descriptor?? [ 1780.979056][ T5854] usb 3-1: USB disconnect, device number 76 [ 1781.061658][T23814] erspan0: entered promiscuous mode [ 1781.159557][T23816] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1781.366324][T23822] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1781.366731][T23822] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1781.366754][T23822] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1781.366775][T23822] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1781.367225][T23822] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1781.367245][T23822] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1781.367267][T23822] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1781.455860][T23822] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1781.455880][T23822] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1781.579646][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22871'. [ 1781.878860][T23836] netlink: 'syz.5.22875': attribute type 2 has an invalid length. [ 1781.989959][T23838] md: md2 stopped. [ 1783.023025][T23866] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1783.023057][T23866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1783.118485][ T5936] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1783.291808][ T5936] usb 6-1: Using ep0 maxpacket: 32 [ 1783.292835][ T5936] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1783.294568][ T5936] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1783.294594][ T5936] usb 6-1: config 0 has no interface number 0 [ 1783.294646][ T5936] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1783.297766][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.297794][ T5936] usb 6-1: Product: syz [ 1783.297810][ T5936] usb 6-1: Manufacturer: syz [ 1783.297828][ T5936] usb 6-1: SerialNumber: syz [ 1783.417236][ T5936] usb 6-1: config 0 descriptor?? [ 1783.418630][T23862] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1783.657454][T23862] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1783.783063][T23879] Line length is too long: Should be less than 4094 [ 1784.341662][ T5936] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1784.342237][ T5936] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1784.383677][ T5936] usb 6-1: USB disconnect, device number 31 [ 1784.724796][T23900] program syz.2.22902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1785.269593][ T35] audit: type=1400 audit(2000001045.520:1036): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=23914 comm="syz.5.22910" dest=20002 [ 1785.487555][T23923] program syz.4.22913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1787.680613][ T5854] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1787.856153][ T5854] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1787.866964][ T5854] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.867000][ T5854] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1787.867029][ T5854] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1787.867066][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.905577][ T5854] usb 3-1: config 0 descriptor?? [ 1788.483849][ T5854] hid-picolcd 0003:04D8:F002.005B: No report with id 0xf3 found [ 1788.483879][ T5854] hid-picolcd 0003:04D8:F002.005B: No report with id 0xf4 found [ 1788.624231][ C1] hid-picolcd 0003:04D8:F002.005B: invalid size value (65) for picolcd raw event (0) [ 1788.869463][ T10] usb 3-1: USB disconnect, device number 77 [ 1789.176937][ T5854] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1789.342061][T24017] input: syz1 as /devices/virtual/input/input133 [ 1789.349882][T24016] tun0: tun_chr_ioctl cmd 2147767506 [ 1789.365265][ T5854] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1789.370357][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.370498][ T5854] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1789.384516][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1789.384575][ T5854] usb 6-1: SerialNumber: syz [ 1789.492221][ T5854] usb 6-1: No union descriptors [ 1789.633430][T24020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1789.782022][ T5702] usb 6-1: USB disconnect, device number 32 [ 1790.344536][T24041] syzkaller0: tun_chr_ioctl cmd 35108 [ 1790.872879][ T35] audit: type=1400 audit(2000001051.691:1037): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=24056 comm="syz.5.22970" daddr=::7fff:fffe dest=65535 [ 1792.432993][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22991'. [ 1792.534251][T24111] block2mtd: illegal erase size [ 1793.803099][T24145] program syz.7.23005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1794.608186][ T5936] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1794.768921][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 1794.774426][ T5936] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1794.793959][ T5936] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1794.793996][ T5936] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1794.794026][ T5936] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1794.794054][ T5936] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1794.794102][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.112899][ T5936] usb 3-1: GET_CAPABILITIES returned 0 [ 1795.112952][ T5936] usbtmc 3-1:16.0: can't read capabilities [ 1795.375549][ T5936] usb 3-1: USB disconnect, device number 78 [ 1796.148051][T24181] device-mapper: table: 248:17: crypt: Error decoding and setting key (-EINVAL) [ 1796.148095][T24181] device-mapper: ioctl: error adding target to table [ 1796.409184][T24194] tap0: tun_chr_ioctl cmd 2147767507 [ 1797.253683][T24212] sctp: [Deprecated]: syz.4.23033 (pid 24212) Use of int in maxseg socket option. [ 1797.253683][T24212] Use struct sctp_assoc_value instead [ 1798.564654][T24231] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1798.564685][T24231] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1798.777308][T24231] overlayfs: failed to set uuid (1444/file2, err=-13); falling back to uuid=null. [ 1799.390826][T24244] scsi_dev_info_list_add_str: bad dev info string ';wru' '' '' [ 1801.347094][ T5936] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1801.607029][ T5936] usb 10-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1801.670272][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.781997][ T5936] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.782032][ T5936] usb 10-1: Product: syz [ 1801.782049][ T5936] usb 10-1: Manufacturer: syz [ 1801.782067][ T5936] usb 10-1: SerialNumber: syz [ 1801.813562][ T5936] usb 10-1: config 0 descriptor?? [ 1801.829306][ T5936] keyspan 10-1:0.0: Keyspan 2 port adapter converter detected [ 1801.832946][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 87 [ 1801.833029][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7 [ 1801.854202][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81 [ 1801.854460][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1 [ 1801.854701][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2 [ 1801.854928][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 85 [ 1801.855050][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 5 [ 1801.866237][ T5936] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1801.888438][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83 [ 1801.888535][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 3 [ 1801.888646][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4 [ 1801.891224][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 86 [ 1801.891490][ T5936] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6 [ 1801.908739][ T5936] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1802.569028][T12074] usb 10-1: USB disconnect, device number 28 [ 1802.592132][T12074] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1802.623369][T12074] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1802.640601][T12074] keyspan 10-1:0.0: device disconnected [ 1803.530423][T24311] kvm: kvm [24310]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006f) = 0x3 [ 1806.322598][T24388] program syz.5.23107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1806.697346][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23113'. [ 1806.697443][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23113'. [ 1807.252517][T24417] netlink: 'syz.9.23120': attribute type 3 has an invalid length. [ 1807.494665][T24427] netlink: 'syz.9.23126': attribute type 8 has an invalid length. [ 1807.494811][T24427] sch_fq: defrate 0 ignored. [ 1808.089769][ T198] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1808.274858][ T198] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1808.276906][ T198] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.282220][ T198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.282250][ T198] usb 10-1: Product: syz [ 1808.282268][ T198] usb 10-1: Manufacturer: syz [ 1808.282285][ T198] usb 10-1: SerialNumber: syz [ 1808.339596][ T198] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1808.339984][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 87 [ 1808.340063][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 1808.342930][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1808.343092][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 82 [ 1808.343183][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1808.343270][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1808.343491][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 85 [ 1808.343584][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 5 [ 1808.346822][ T198] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1808.418496][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83 [ 1808.441018][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1808.441120][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3 [ 1808.441210][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 4 [ 1808.441299][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 86 [ 1808.441389][ T198] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1808.490366][ T198] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1808.980896][T23743] usb 10-1: USB disconnect, device number 29 [ 1809.086039][T23743] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1809.126723][T23743] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1809.144254][T23743] keyspan 10-1:1.0: device disconnected [ 1809.166112][T24460] device-mapper: table: 248:2: crypt: Error decoding and setting key (-EINVAL) [ 1809.166137][T24460] device-mapper: ioctl: error adding target to table [ 1810.487254][T24491] netlink: 48 bytes leftover after parsing attributes in process `syz.9.23153'. [ 1810.889199][T24503] netlink: 48 bytes leftover after parsing attributes in process `syz.5.23159'. [ 1810.889272][T24503] netlink: 'syz.5.23159': attribute type 8 has an invalid length. [ 1811.256471][T24514] scsi_strcpy_devinfo: vendor string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كXPwe$XPK5'R X7R.]O\kekөopґ 0[{q6?Uq9mߣ7``0I3ŵ' is too long [ 1811.781266][T24533] loop5: detected capacity change from 0 to 1213 [ 1812.130134][T24542] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1812.130173][T24542] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1812.130187][T24542] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 1812.708437][ T35] audit: type=1400 audit(2000001071.750:1038): lsm=SMACK fn=smack_inode_removexattr action=denied subject="_" object="l" requested=w pid=24550 comm="syz.2.23179" name="file1" dev="tmpfs" ino=23837 [ 1812.994098][ T35] audit: type=1400 audit(2000001072.101:1039): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=24556 comm="syz.2.23182" dest=20002 [ 1814.759697][T24522] Process accounting resumed [ 1815.455949][ T5702] hid-generic 0008:046D:C082.005C: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1815.687502][ T198] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1815.715508][T24607] fido_id[24607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1815.882280][ T198] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1815.885668][ T198] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.885703][ T198] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1815.885732][ T198] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1815.885769][ T198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.962772][ T198] usb 6-1: config 0 descriptor?? [ 1816.438797][ T198] sony 0003:054C:0268.005D: unknown main item tag 0x0 [ 1816.438854][ T198] sony 0003:054C:0268.005D: unknown main item tag 0x0 [ 1816.440139][ T198] sony 0003:054C:0268.005D: unbalanced collection at end of report description [ 1816.441062][ T198] sony 0003:054C:0268.005D: parse failed [ 1816.441172][ T198] sony 0003:054C:0268.005D: probe with driver sony failed with error -22 [ 1816.598284][T24625] netlink: 76 bytes leftover after parsing attributes in process `syz.2.23212'. [ 1816.834959][T23743] usb 6-1: USB disconnect, device number 33 [ 1817.877252][ T198] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1818.040662][ T198] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.00 [ 1818.042988][ T198] usb 6-1: config index 0 descriptor too short (expected 46, got 32) [ 1818.043016][ T198] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.043066][ T198] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1818.043119][ T198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.739252][ T198] usb 6-1: cannot create comm data receiver. [ 1818.762179][ T198] snd-usb-6fire 6-1:1.0: probe with driver snd-usb-6fire failed with error -2 [ 1818.794727][ T198] usb 6-1: USB disconnect, device number 34 [ 1818.967317][ T35] audit: type=1807 audit(2000001077.591:1040): action=appraise func=F res=0 [ 1818.980320][ T10] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1818.999961][ T35] audit: type=1802 audit(2000001077.637:1041): pid=24665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.4.23230" res=0 errno=0 [ 1819.020385][T24664] ima: policy update failed [ 1819.020633][ T35] audit: type=1802 audit(2000001077.656:1042): pid=24664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.23230" res=0 errno=0 [ 1819.142855][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1819.143748][ T10] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1819.170555][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.170584][ T10] usb 10-1: Product: syz [ 1819.170603][ T10] usb 10-1: Manufacturer: syz [ 1819.170621][ T10] usb 10-1: SerialNumber: syz [ 1819.202230][ T10] usb 10-1: config 0 descriptor?? [ 1819.207286][ T10] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1820.108231][ T10] ssu100 10-1:0.0: probe with driver ssu100 failed with error -71 [ 1820.128213][ T10] usb 10-1: USB disconnect, device number 30 [ 1820.291230][ T67] tipc: Subscription rejected, illegal request [ 1820.559597][ T35] audit: type=1807 audit(2000001079.049:1043): func=FILE_CHECK res=0 [ 1820.559993][ T35] audit: type=1802 audit(2000001079.077:1044): pid=24694 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.5.23242" res=0 errno=0 [ 1820.561115][T24691] ima: policy update failed [ 1820.561324][ T35] audit: type=1802 audit(2000001079.077:1045): pid=24691 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.23242" res=0 errno=0 [ 1821.504542][T24723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23256'. [ 1822.065261][T24742] netlink: 25 bytes leftover after parsing attributes in process `syz.4.23263'. [ 1822.092529][T24742] eql: entered promiscuous mode [ 1822.092558][T24742] eql: left allmulticast mode [ 1822.100270][T24742] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.23263'. [ 1822.239164][T24742] 0XD: renamed from eql [ 1822.293035][T24742] 0XD: remember to turn off Van-Jacobson compression on your slave devices [ 1822.293084][T24742] 0XD: left promiscuous mode [ 1822.293106][T24742] 0XD: entered allmulticast mode [ 1823.373644][T24784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1823.492550][T24782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23279'. [ 1824.255006][ T35] audit: type=1807 audit(2000001082.481:1046): action=measure uid>+L'f&vdKu\|R>(/:}Ɣ~A\po%kECgId1w@GGyP0EeG9C]4ֲM\AlpGb res=0 [ 1824.255308][ T35] audit: type=1802 audit(2000001082.491:1047): pid=24806 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.5.23287" res=0 errno=0 [ 1824.256200][T24803] ima: policy update failed [ 1824.256776][ T35] audit: type=1802 audit(2000001082.491:1048): pid=24803 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.23287" res=0 errno=0 [ 1829.241012][T24897] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23319'. [ 1829.265291][T24898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23320'. [ 1830.978563][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1831.141320][ T10] usb 3-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 1831.142924][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.142959][ T10] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1831.142989][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1831.143036][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.215124][ T10] usb 3-1: config 0 descriptor?? [ 1831.717985][ T10] hid-penmount 0003:14E1:6000.005E: hidraw0: USB HID v0.00 Device [HID 14e1:6000] on usb-dummy_hcd.2-1/input0 [ 1831.908266][ T5936] usb 3-1: USB disconnect, device number 79 [ 1832.139940][T24936] fido_id[24936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1832.219880][T24941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23336'. [ 1833.154457][T24960] netlink: 71 bytes leftover after parsing attributes in process `syz.5.23344'. [ 1833.210895][ T5854] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1833.384969][ T5854] usb 10-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1833.389917][ T5854] usb 10-1: config 0 has an invalid interface number: 5 but max is 3 [ 1833.389942][ T5854] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1833.389963][ T5854] usb 10-1: config 0 has no interface number 0 [ 1833.390007][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.423769][ T5854] usb 10-1: config 0 descriptor?? [ 1833.476193][ T5854] ums-realtek 10-1:0.5: USB Mass Storage device detected [ 1833.993932][ T5854] usb 10-1: USB disconnect, device number 31 [ 1834.467173][ T35] audit: type=1326 audit(2000001091.911:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.475828][ T35] audit: type=1326 audit(2000001091.921:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.535583][ T35] audit: type=1326 audit(2000001091.976:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.535893][ T35] audit: type=1326 audit(2000001091.976:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.537837][ T35] audit: type=1326 audit(2000001091.976:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.539967][ T35] audit: type=1326 audit(2000001091.976:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.644954][ T35] audit: type=1326 audit(2000001091.976:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.647844][ T35] audit: type=1326 audit(2000001092.078:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.648164][ T35] audit: type=1326 audit(2000001092.078:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1834.649020][ T35] audit: type=1326 audit(2000001092.078:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24974 comm="syz.4.23349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1835.026019][T24966] vcan0 speed is unknown, defaulting to 1000 [ 1835.189873][T24984] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1835.924073][T24966] wg0 speed is unknown, defaulting to 1000 [ 1836.556564][T25011] block2mtd: illegal erase size [ 1841.240230][T25076] #! ./dev/kmsg [ 1841.380469][T25082] netlink: 68 bytes leftover after parsing attributes in process `syz.7.23394'. [ 1841.599436][ T5936] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1841.772233][ T5936] usb 6-1: Using ep0 maxpacket: 32 [ 1841.773366][ T5936] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 1841.776680][T25089] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1841.777909][ T5936] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.777933][ T5936] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1841.922430][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.922464][ T5936] usb 6-1: Product: syz [ 1841.922482][ T5936] usb 6-1: Manufacturer: syz [ 1841.922500][ T5936] usb 6-1: SerialNumber: syz [ 1842.169409][T25092] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1842.277413][ T5936] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1842.299100][ T5936] usb 6-1: USB disconnect, device number 35 [ 1843.223586][T25119] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1843.625235][T12074] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1843.788212][ T5936] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1843.790416][T12074] usb 6-1: Using ep0 maxpacket: 16 [ 1843.794055][T12074] usb 6-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 1843.798900][T12074] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.798937][T12074] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.798963][T12074] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1843.798993][T12074] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1843.799117][T12074] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.882238][T12074] usb 6-1: config 0 descriptor?? [ 1843.950913][ T5936] usb 10-1: Using ep0 maxpacket: 8 [ 1843.952473][ T5936] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1843.955722][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.955782][ T5936] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.000114][ T5936] usb 10-1: config 0 descriptor?? [ 1844.016189][ T5936] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1844.023263][T25135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23417'. [ 1844.060064][T25138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23417'. [ 1844.443108][T12074] wacom 0003:056A:5200.005F: unknown main item tag 0x0 [ 1844.443150][T12074] wacom 0003:056A:5200.005F: unknown main item tag 0x6 [ 1844.447852][T12074] wacom 0003:056A:5200.005F: unknown main item tag 0x0 [ 1844.449247][T12074] wacom 0003:056A:5200.005F: item fetching failed at offset 39/40 [ 1844.453444][T12074] wacom 0003:056A:5200.005F: parse failed [ 1844.453597][T12074] wacom 0003:056A:5200.005F: probe with driver wacom failed with error -22 [ 1844.707293][T12074] usb 6-1: USB disconnect, device number 36 [ 1844.979974][ T5936] gspca_vc032x: reg_w err -71 [ 1844.980072][ T5936] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 1845.006186][ T5936] usb 10-1: USB disconnect, device number 32 [ 1845.659444][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23430'. [ 1845.659473][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23430'. [ 1846.392172][T25180] rnbd_client L610: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 1847.403777][T25190] netlink: 165 bytes leftover after parsing attributes in process `syz.2.23439'. [ 1848.455766][T25188] Process accounting paused [ 1848.471271][T16077] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 1848.808053][T25180] rtrs_client L2646: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 1849.385722][T25214] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1849.385751][T25214] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 1850.288532][T25248] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23464'. [ 1850.418103][ T35] audit: type=1400 audit(2000001106.629:1059): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=25250 comm="syz.5.23466" dest=16385 [ 1851.840534][ T5936] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1852.007659][ T5936] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 1852.011320][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.011356][ T5936] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.055165][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.055204][ T5936] usb 6-1: Product: syz [ 1852.055222][ T5936] usb 6-1: Manufacturer: syz [ 1852.055240][ T5936] usb 6-1: SerialNumber: syz [ 1852.099013][ T5936] symbolserial 6-1:1.0: symbol converter detected [ 1852.128442][ T5936] usb 6-1: symbol converter now attached to ttyUSB0 [ 1852.352514][T25285] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 1852.359003][ T5936] usb 6-1: USB disconnect, device number 37 [ 1852.434881][ T5936] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 1852.448355][ T5936] symbolserial 6-1:1.0: device disconnected [ 1853.208928][T25306] loop6: detected capacity change from 0 to 1 [ 1853.435319][T25306] Dev loop6: unable to read RDB block 1 [ 1853.435378][T25306] loop6: unable to read partition table [ 1853.435591][T25306] loop6: partition table beyond EOD, truncated [ 1853.435628][T25306] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 1853.487453][ T5936] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1853.651212][ T5936] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1853.653920][ T5936] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1853.653955][ T5936] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1853.658568][ T5936] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1853.658603][ T5936] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1853.716625][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.716655][ T5936] usb 3-1: Product: syz [ 1853.716672][ T5936] usb 3-1: Manufacturer: syz [ 1853.716689][ T5936] usb 3-1: SerialNumber: syz [ 1853.794082][ T5936] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 1853.801480][ T5936] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1853.827253][ T5936] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1854.074816][T25309] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 1854.138533][T12074] usb 3-1: USB disconnect, device number 80 [ 1854.194452][T25326] netlink: 60 bytes leftover after parsing attributes in process `syz.9.23496'. [ 1854.195838][T25326] netlink: 60 bytes leftover after parsing attributes in process `syz.9.23496'. [ 1854.244398][T12074] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1854.303627][T12074] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1854.304747][T12074] ti_usb_3410_5052 3-1:2.0: device disconnected [ 1855.446901][ T35] audit: type=1400 audit(2000001111.270:1060): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=25353 comm="syz.2.23506" daddr=::ffff:0.0.0.0 dest=20002 [ 1855.833727][T25362] blktrace: Concurrent blktraces are not allowed on loop4 [ 1856.063469][T25370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23513'. [ 1861.178605][T25457] veth0_to_bond: entered promiscuous mode [ 1861.235015][T25457] macsec2: entered promiscuous mode [ 1861.235990][T25457] macsec2: entered allmulticast mode [ 1861.236016][T25457] veth0_to_bond: entered allmulticast mode [ 1863.928270][ T771] kworker/u8:8 (771) used greatest stack depth: 16592 bytes left [ 1864.965678][T12074] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 1865.142739][T12074] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1865.145524][T12074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1865.145560][T12074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1865.145600][T12074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.196703][T12074] usb 3-1: config 0 descriptor?? [ 1865.816374][T12074] aquacomputer_d5next 0003:0C70:F0B6.0060: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 1866.063847][T12074] usb 3-1: USB disconnect, device number 81 [ 1866.274982][T25498] fido_id[25498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1867.140614][T25520] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 1868.793901][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.915680][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.915881][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.916055][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.922622][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.923164][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.924214][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.924397][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.926893][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1868.927788][T25551] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1869.574341][ T35] audit: type=1400 audit(2000001124.307:1061): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=25566 comm="syz.4.23596" dest=20004 [ 1873.192168][T25651] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1873.414697][T25658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23636'. [ 1874.331314][T25692] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 1876.567940][ T35] audit: type=1400 audit(2000001130.757:1062): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=25732 comm="syz.4.23670" daddr=::ffff:172.20.20.29 dest=20003 [ 1877.010117][T25743] MTRR 1 not used [ 1878.007554][ T35] audit: type=1400 audit(2000001132.086:1063): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=25760 comm="syz.4.23683" daddr=::ffff:0.0.0.0 dest=20001 [ 1878.056080][T25765] net_ratelimit: 247 callbacks suppressed [ 1878.056100][T25765] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1878.056126][T25765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1878.379249][T25771] netlink: 24 bytes leftover after parsing attributes in process `syz.9.23688'. [ 1879.195530][ T5854] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1879.358742][ T5854] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1879.363377][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.363407][ T5854] usb 3-1: Product: syz [ 1879.363425][ T5854] usb 3-1: Manufacturer: syz [ 1879.363442][ T5854] usb 3-1: SerialNumber: syz [ 1879.402361][ T5854] usb 3-1: config 0 descriptor?? [ 1879.456840][ T35] audit: type=1400 audit(2000001133.433:1064): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=25797 comm="syz.4.23700" daddr=::ffff:100.1.1.2 dest=19998 [ 1879.637147][T25803] tap0: tun_chr_ioctl cmd 1074025677 [ 1879.637293][T25803] tap0: linktype set to 768 [ 1879.886164][ T5854] usb 3-1: Firmware: major: 0, minor: 65, hardware type: ATUSB (0) [ 1880.081898][T25810] sch_fq: defrate 4294967291 ignored. [ 1880.111956][ T5854] usb 3-1: failed to fetch extended address, random address set [ 1880.591265][ T5854] usb 3-1: USB disconnect, device number 82 [ 1881.407510][T25826] Process accounting resumed [ 1881.850485][T25851] CacheFiles: Failed to register: -95 [ 1882.777420][T25870] [ 1883.052506][T25872] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1883.105686][T25872] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1883.173766][T25874] msr: Write to unrecognized MSR 0x0 by syz.5.23731 (pid: 25874), tainting CPU_OUT_OF_SPEC. [ 1883.173793][T25874] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 1883.609593][T25890] 9p: Could not find request transport: f [ 1883.682162][ T5702] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1883.821972][T25895] dyndbg: expected <4096 bytes into control [ 1883.845532][ T5702] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1883.847098][ T5702] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.847156][ T5702] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1883.847185][ T5702] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1883.847213][ T5702] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1883.850368][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.850395][ T5702] usb 10-1: Product: syz [ 1883.850413][ T5702] usb 10-1: Manufacturer: syz [ 1883.850431][ T5702] usb 10-1: SerialNumber: syz [ 1883.934023][T25885] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1883.935602][T25885] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1883.958197][ T5702] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1883.958700][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 87 [ 1883.958779][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 1883.961022][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1883.961116][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1883.961203][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 85 [ 1883.961309][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 5 [ 1884.021070][ T5702] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1884.037540][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83 [ 1884.037643][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1884.037732][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3 [ 1884.037832][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 4 [ 1884.037918][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 86 [ 1884.038005][ T5702] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1884.095908][ T5702] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1884.354388][ T35] audit: type=1400 audit(2000001137.945:1065): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=25902 comm="syz.2.23744" dest=16385 [ 1884.479289][ T5702] usb 10-1: USB disconnect, device number 33 [ 1884.500158][T25908] program syz.4.23746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1884.533859][ T5702] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1884.570893][ T5702] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1884.574002][ T5702] keyspan 10-1:1.0: device disconnected [ 1884.921955][T25918] netlink: 27 bytes leftover after parsing attributes in process `syz.4.23750'. [ 1884.929759][T25917] loop8: detected capacity change from 0 to 524288000 [ 1885.431755][T16082] rpcbind: server 127.0.0.1 not responding, timed out [ 1885.844567][T25927] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 1885.844604][T25927] flags: 0x100000000002000(reserved|node=0|zone=2) [ 1885.844636][T25927] raw: 0100000000002000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 1885.844658][T25927] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1885.844679][T25927] page dumped because: unmovable page [ 1885.844734][T25927] page_owner info is not present (never set?) [ 1886.344831][ T35] audit: type=1326 audit(2000001139.781:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.350305][ T35] audit: type=1326 audit(2000001139.781:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.350610][ T35] audit: type=1326 audit(2000001139.790:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.356870][ T35] audit: type=1326 audit(2000001139.790:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.358027][ T35] audit: type=1326 audit(2000001139.790:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.379641][ T35] audit: type=1326 audit(2000001139.809:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.387175][ T35] audit: type=1326 audit(2000001139.818:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.424118][ T35] audit: type=1326 audit(2000001139.827:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.426971][ T35] audit: type=1326 audit(2000001139.855:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25947 comm="syz.9.23765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x7ffc0000 [ 1886.929259][T25951] netlink: 24 bytes leftover after parsing attributes in process `syz.7.23766'. [ 1887.576594][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.654500][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.654674][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.658567][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.659277][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.659439][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.659571][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.659700][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.660186][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1887.660524][T25967] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1889.168375][T25986] kAFS: bad VL server IP address [ 1889.599707][T25991] rnbd_client L610: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 1890.034107][T25960] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 1890.953606][T25991] rtrs_client L2646: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 1892.714448][T26037] netlink: 88 bytes leftover after parsing attributes in process `syz.9.23803'. [ 1892.990759][T26041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.991589][T26041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.585222][T16073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.585367][T16073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1893.604580][T16077] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1893.632212][T26052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23809'. [ 1894.615864][T26065] sg_write: data in/out 388876/136 bytes for SCSI command 0x0-- guessing data in; [ 1894.615864][T26065] program syz.2.23815 not setting count and/or reply_len properly [ 1894.889177][T26073] program syz.4.23819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1895.565343][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23827'. [ 1895.565382][T26088] netlink: 12 bytes leftover after parsing attributes in process `syz.9.23827'. [ 1898.171672][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1898.534897][T26149] program syz.4.23853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1899.827705][ T35] kauditd_printk_skb: 27 callbacks suppressed [ 1899.827727][ T35] audit: type=1326 audit(2000001152.219:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26181 comm="syz.7.23866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1899.827873][ T35] audit: type=1326 audit(2000001152.219:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26181 comm="syz.7.23866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1899.870500][ T35] audit: type=1326 audit(2000001152.256:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26181 comm="syz.7.23866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1899.892950][ T35] audit: type=1326 audit(2000001152.265:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26181 comm="syz.7.23866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1899.916969][ T35] audit: type=1326 audit(2000001152.284:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26181 comm="syz.7.23866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1899.917027][ T35] audit: type=1326 audit(2000001152.311:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26181 comm="syz.7.23866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1899.917074][ T35] audit: type=1326 audit(2000001152.311:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26181 comm="syz.7.23866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1899.917120][ T35] audit: type=1326 audit(2000001152.311:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26181 comm="syz.7.23866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1900.909641][T26199] binder: 26198:26199 ioctl c018620c 200000000140 returned -1 [ 1901.080904][ T35] audit: type=1326 audit(2000001153.382:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26202 comm="syz.5.23875" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90904cf559 code=0x0 [ 1904.172267][T26244] netlink: 'syz.4.23889': attribute type 9 has an invalid length. [ 1904.718186][ T5702] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1904.892463][ T5702] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 1904.894077][ T5702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1904.894113][ T5702] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1904.894158][ T5702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.946565][ T5702] usb 10-1: config 0 descriptor?? [ 1905.126146][T26256] netlink: 'syz.5.23896': attribute type 10 has an invalid length. [ 1905.331524][T26256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1905.344444][T26256] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1905.439613][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439656][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439688][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439720][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439750][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439780][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439811][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439842][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439871][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.439899][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unknown main item tag 0x0 [ 1905.524228][ T5702] corsair-psu 0003:1B1C:1C0B.0061: unbalanced collection at end of report description [ 1905.526846][ T5702] corsair-psu 0003:1B1C:1C0B.0061: probe with driver corsair-psu failed with error -22 [ 1905.639462][ T5702] usb 10-1: USB disconnect, device number 34 [ 1906.546881][ T35] audit: type=1400 audit(2000001158.420:1111): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=26275 comm="syz.9.23907" [ 1908.318559][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1909.989740][T26336] net_ratelimit: 887 callbacks suppressed [ 1909.989765][T26336] openvswitch: netlink: VLAN attribute unexpected. [ 1910.458465][ T35] audit: type=1326 audit(2000001162.027:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.462465][ T35] audit: type=1326 audit(2000001162.027:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.468038][ T35] audit: type=1326 audit(2000001162.037:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.469285][ T35] audit: type=1326 audit(2000001162.037:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.470678][ T35] audit: type=1326 audit(2000001162.037:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.471536][ T35] audit: type=1326 audit(2000001162.037:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.472389][ T35] audit: type=1326 audit(2000001162.037:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.475652][ T35] audit: type=1326 audit(2000001162.046:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.476402][ T35] audit: type=1326 audit(2000001162.046:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26347 comm="syz.5.23938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f90904cf559 code=0x7ffc0000 [ 1910.551028][ T4963] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1910.906441][ T4963] usb 3-1: Using ep0 maxpacket: 16 [ 1910.908352][ T4963] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1910.949791][ T4963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.949826][ T4963] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1910.949874][ T4963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.038674][ T4963] usb 3-1: config 0 descriptor?? [ 1911.768658][ T4963] elan 0003:04F3:0755.0062: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1911.834509][ T4963] usb 3-1: USB disconnect, device number 83 [ 1912.377598][T26363] fido_id[26363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1913.211571][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23959'. [ 1913.212771][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23959'. [ 1914.092597][T26411] Process accounting paused [ 1914.462555][T23743] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1914.634593][T23743] usb 3-1: Using ep0 maxpacket: 16 [ 1914.639387][T23743] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1914.641007][T23743] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1914.647194][T23743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.647222][T23743] usb 3-1: Product: syz [ 1914.647239][T23743] usb 3-1: Manufacturer: syz [ 1914.647257][T23743] usb 3-1: SerialNumber: syz [ 1914.700176][T23743] usb 3-1: config 0 descriptor?? [ 1914.725838][T23743] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1914.749635][T23743] usb 3-1: Detected FT232R [ 1914.967667][T23743] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1915.206041][T23743] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1915.450421][T12074] usb 3-1: USB disconnect, device number 84 [ 1915.786505][T12074] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1915.787329][T12074] ftdi_sio 3-1:0.0: device disconnected [ 1916.341278][T26455] input: syz0 as /devices/virtual/input/input134 [ 1917.825870][T26505] phram: illegal start address [ 1918.068757][T26516] program syz.7.24011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1918.219797][T26522] scsi_strcpy_devinfo: vendor string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كXPwe$XPK5'R X7R.]O\kekөopґ 0[{L;ȧ0GIq6?Uq9mߣ7``0I3ŵ' is too long [ 1918.219829][T26522] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1918.936646][T23743] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1919.002467][T12074] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1919.099216][T23743] usb 6-1: Using ep0 maxpacket: 32 [ 1919.100317][T23743] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1919.102213][T23743] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1919.102241][T23743] usb 6-1: config 0 has no interface number 0 [ 1919.109442][T23743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.109471][T23743] usb 6-1: Product: syz [ 1919.109574][T23743] usb 6-1: Manufacturer: syz [ 1919.109693][T23743] usb 6-1: SerialNumber: syz [ 1919.174454][T23743] usb 6-1: config 0 descriptor?? [ 1919.175926][T12074] usb 3-1: Using ep0 maxpacket: 32 [ 1919.176798][T12074] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1919.194470][T12074] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1919.194499][T12074] usb 3-1: config 0 has no interface number 0 [ 1919.223342][T23743] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1919.224325][T12074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.224354][T12074] usb 3-1: Product: syz [ 1919.224371][T12074] usb 3-1: Manufacturer: syz [ 1919.224388][T12074] usb 3-1: SerialNumber: syz [ 1919.253177][T12074] usb 3-1: config 0 descriptor?? [ 1919.288733][T12074] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1919.288757][T12074] usb 3-1: selecting invalid altsetting 1 [ 1919.288770][T12074] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1919.359089][T12074] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1919.360113][T12074] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1919.360237][T12074] usb 3-1: media controller created [ 1919.405273][T12074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1919.472658][T23743] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1919.493498][T23743] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1919.902604][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1919.904155][T23743] usb 6-1: USB disconnect, device number 38 [ 1919.940145][T23743] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1919.970074][T23743] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1919.973400][T23743] quatech2 6-1:0.51: device disconnected [ 1920.663045][T12074] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1920.663125][T12074] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1920.663161][T26543] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 1920.773529][T12074] usb 3-1: USB disconnect, device number 85 [ 1921.400566][T26558] tipc: Enabling of bearer rejected, failed to enable media [ 1921.788767][T23743] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1921.951622][T23743] usb 6-1: Using ep0 maxpacket: 8 [ 1921.967219][T23743] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1921.969603][T23743] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1921.969632][T23743] usb 6-1: config 16 has an invalid interface number: 128 but max is 0 [ 1921.969655][T23743] usb 6-1: config 16 has no interface number 0 [ 1921.969715][T23743] usb 6-1: config 16 interface 128 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1921.969741][T23743] usb 6-1: config 16 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1921.969769][T23743] usb 6-1: config 16 interface 128 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1921.969796][T23743] usb 6-1: config 16 interface 128 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1921.969841][T23743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.325070][T23743] usb 6-1: GET_CAPABILITIES returned 0 [ 1922.325117][T23743] usbtmc 6-1:16.128: can't read capabilities [ 1922.566590][T23743] usb 6-1: USB disconnect, device number 39 [ 1922.661655][T26575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24031'. [ 1923.507067][ T153] bond0: (slave bond_slave_0): interface is now down [ 1923.507160][ T153] bond0: (slave bridge0): interface is now down [ 1923.623406][T26603] loop7: detected capacity change from 0 to 7 [ 1923.741047][ T153] bond0: now running without any active interface! [ 1924.707982][T26603] Dev loop7: unable to read RDB block 7 [ 1924.708043][T26603] loop7: unable to read partition table [ 1924.708287][T26603] loop7: partition table beyond EOD, truncated [ 1924.708337][T26603] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1925.102512][T26622] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1925.673499][T26633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24060'. [ 1925.673525][T26633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24060'. [ 1926.643934][T12074] kernel write not supported for file /snd/seq (pid: 12074 comm: kworker/1:4) [ 1926.878992][T26663] bond9 (unregistering): Released all slaves [ 1927.210130][T12074] kernel write not supported for file /sg0 (pid: 12074 comm: kworker/1:4) [ 1928.397742][ T35] kauditd_printk_skb: 2 callbacks suppressed [ 1928.397765][ T35] audit: type=1326 audit(2000001178.581:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.397817][ T35] audit: type=1326 audit(2000001178.581:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.403155][ T35] audit: type=1326 audit(2000001178.590:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.407534][ T35] audit: type=1326 audit(2000001178.590:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.407639][ T35] audit: type=1326 audit(2000001178.590:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.471688][ T35] audit: type=1326 audit(2000001178.590:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.471874][ T35] audit: type=1326 audit(2000001178.599:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.472022][ T35] audit: type=1326 audit(2000001178.618:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.472156][ T35] audit: type=1326 audit(2000001178.627:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1928.472301][ T35] audit: type=1326 audit(2000001178.627:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26699 comm="syz.4.24090" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe3cdf7f559 code=0x7ffc0000 [ 1930.111234][ T5702] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1930.285853][ T5702] usb 6-1: not running at top speed; connect to a high speed hub [ 1930.285894][ T5702] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1930.287108][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.287131][ T5702] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1930.288230][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 1930.288253][ T5702] usb 6-1: Product: syz [ 1930.591339][ T5702] usb 6-1: USB disconnect, device number 40 [ 1931.075238][T26749] tun0: tun_chr_ioctl cmd 1074025681 [ 1931.385001][T26755] IPv6: NLM_F_CREATE should be specified when creating new route [ 1931.385120][T26755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1931.385134][T26755] IPv6: NLM_F_CREATE should be set when creating new route [ 1931.385190][T26755] IPv6: NLM_F_CREATE should be set when creating new route [ 1931.385287][T26755] IPv6: NLM_F_CREATE should be set when creating new route [ 1931.440281][T26755] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.24111'. [ 1932.150218][T26765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24115'. [ 1932.973606][T26790] loop8: detected capacity change from 0 to 1 [ 1932.981343][T26790] Dev loop8: unable to read RDB block 1 [ 1932.981400][T26790] loop8: unable to read partition table [ 1932.981631][T26790] loop8: partition table beyond EOD, truncated [ 1932.981672][T26790] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1934.061912][T26814] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1937.982108][T26864] lo: left allmulticast mode [ 1937.982835][T26864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1939.723805][T26899] input: syz0 as /devices/virtual/input/input135 [ 1941.106590][T26929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1941.106613][T26929] IPv6: NLM_F_CREATE should be set when creating new route [ 1941.106674][T26929] IPv6: NLM_F_CREATE should be set when creating new route [ 1941.106707][T26929] IPv6: NLM_F_CREATE should be set when creating new route [ 1941.519203][T26939] pim6reg: tun_chr_ioctl cmd 1074025673 [ 1941.592967][ T35] kauditd_printk_skb: 14 callbacks suppressed [ 1941.592990][ T35] audit: type=1400 audit(2000001190.760:1147): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=26941 comm="syz.9.24182" daddr=::ffff:0.0.0.0 dest=20002 [ 1941.956821][ T4963] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1942.120704][ T4963] usb 3-1: not running at top speed; connect to a high speed hub [ 1942.120752][ T4963] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1942.123419][ T4963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.186470][ T4963] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1942.186503][ T4963] usb 3-1: Product: syz [ 1942.186520][ T4963] usb 3-1: Manufacturer: syz [ 1942.352408][ T4963] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1942.352485][ T4963] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 1942.620690][T23743] usb 3-1: USB disconnect, device number 86 [ 1942.926554][T26969] netlink: 76 bytes leftover after parsing attributes in process `syz.7.24193'. [ 1943.008251][T26969] netlink: 76 bytes leftover after parsing attributes in process `syz.7.24193'. [ 1944.054255][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24203'. [ 1944.054325][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24203'. [ 1944.057093][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24203'. [ 1944.061193][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24203'. [ 1944.061312][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24203'. [ 1946.083381][T27054] netlink: 16 bytes leftover after parsing attributes in process `syz.9.24232'. [ 1947.426973][T27066] Process accounting resumed [ 1947.947052][T27097] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24251'. [ 1948.111403][T27099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24252'. [ 1949.406090][T27121] netlink: 28 bytes leftover after parsing attributes in process `syz.5.24261'. [ 1949.406122][T27121] netlink: 28 bytes leftover after parsing attributes in process `syz.5.24261'. [ 1950.423603][T27145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24271'. [ 1950.590152][T27150] netlink: 232 bytes leftover after parsing attributes in process `syz.9.24275'. [ 1950.590196][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24275'. [ 1951.865611][T27186] vivid-000: disconnect [ 1951.866220][T27185] vivid-000: reconnect [ 1952.119963][T27193] Attempt to restore checkpoint with obsolete wellknown handles [ 1954.968257][T27261] netlink: 104 bytes leftover after parsing attributes in process `syz.9.24323'. [ 1955.923881][T27286] openvswitch: netlink: IP tunnel dst address not specified [ 1955.923919][T27286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1956.970751][T27311] phram: illegal device length [ 1958.074358][T27336] xt_hashlimit: size too large, truncated to 1048576 [ 1958.074382][T27336] xt_hashlimit: max too large, truncated to 1048576 [ 1958.358605][T27344] netlink: 'syz.9.24357': attribute type 12 has an invalid length. [ 1958.358633][T27344] netlink: 'syz.9.24357': attribute type 29 has an invalid length. [ 1958.358650][T27344] netlink: 148 bytes leftover after parsing attributes in process `syz.9.24357'. [ 1958.358673][T27344] netlink: 'syz.9.24357': attribute type 1 has an invalid length. [ 1958.358690][T27344] netlink: 'syz.9.24357': attribute type 2 has an invalid length. [ 1959.184402][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24367'. [ 1959.184442][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24367'. [ 1959.184542][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24367'. [ 1960.595400][T27402] netlink: 'syz.9.24385': attribute type 83 has an invalid length. [ 1961.509511][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24394'. [ 1961.733835][ T35] audit: type=1400 audit(2000001209.334:1148): lsm=SMACK fn=smack_inode_link action=denied subject="_" object="lowerdir" requested=w pid=27427 comm="syz.2.24397" name="file1" dev="tmpfs" ino=25020 [ 1962.233512][T23743] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1962.396007][T23743] usb 10-1: Using ep0 maxpacket: 32 [ 1962.397025][T23743] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1962.401624][T23743] usb 10-1: config 32 has an invalid interface number: 85 but max is 0 [ 1962.401653][T23743] usb 10-1: config 32 has no interface number 0 [ 1962.401718][T23743] usb 10-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1962.401750][T23743] usb 10-1: config 32 interface 85 has no altsetting 0 [ 1962.417939][T23743] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.417966][T23743] usb 10-1: Product: syz [ 1962.417983][T23743] usb 10-1: Manufacturer: syz [ 1962.418000][T23743] usb 10-1: SerialNumber: syz [ 1962.511248][T27449] cramfs: checking physical address 0x0000000145ac0000 for linear cramfs image [ 1962.511284][T27449] cramfs: wrong magic [ 1962.560660][T27449] cramfs: wrong magic [ 1963.203828][T23743] appletouch 10-1:32.85: Geyser mode initialized. [ 1963.236077][T23743] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:32.85/input/input137 [ 1963.458241][T23743] usb 10-1: USB disconnect, device number 35 [ 1963.458342][ C0] appletouch 10-1:32.85: atp_complete: usb_submit_urb failed with result -19 [ 1963.582072][T23743] appletouch 10-1:32.85: input: appletouch disconnected [ 1964.582448][ T35] audit: type=1326 audit(2000001211.964:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1964.582514][ T35] audit: type=1326 audit(2000001211.964:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1964.646067][ T35] audit: type=1326 audit(2000001212.029:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1964.646119][ T35] audit: type=1326 audit(2000001212.029:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1964.655116][ T35] audit: type=1326 audit(2000001212.038:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1964.660179][ T35] audit: type=1326 audit(2000001212.038:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1964.689682][ T35] audit: type=1326 audit(2000001212.038:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1964.689836][ T35] audit: type=1326 audit(2000001212.065:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1964.689963][ T35] audit: type=1326 audit(2000001212.065:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27486 comm="syz.7.24420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 1965.821242][ T5936] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1965.984901][ T5936] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1965.991183][ T5936] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.991242][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.085038][ T5936] as10x_usb: device has been detected [ 1966.115951][ T5936] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1966.202639][ T5936] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1966.416525][T27515] binder: 27514:27515 ioctl c0306201 200000000080 returned -14 [ 1966.579731][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1966.837828][T27520] netlink: 88 bytes leftover after parsing attributes in process `syz.2.24435'. [ 1966.935904][ T5936] as10x_usb: error during firmware upload part1 [ 1966.961926][ T5936] Registered device Abilis Systems DVB-Titan [ 1967.004571][ T5936] usb 6-1: USB disconnect, device number 41 [ 1968.339279][ T5936] Unregistered device Abilis Systems DVB-Titan [ 1968.360975][ T5936] as10x_usb: device has been disconnected [ 1970.310940][T27562] netlink: 104 bytes leftover after parsing attributes in process `syz.5.24453'. [ 1970.538575][T27566] bq24190-charger 0-0006: No support for SMBUS_BYTE_DATA [ 1970.729413][T27566] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 1971.000072][ T35] kauditd_printk_skb: 10 callbacks suppressed [ 1971.000092][ T35] audit: type=1400 audit(2000001217.878:1168): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=27572 comm="syz.5.24458" name="raw-gadget" dev="devtmpfs" ino=814 [ 1972.279662][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24463'. [ 1973.187623][T27602] g5ǟ: renamed from vlan0 (while UP) [ 1973.471123][T27606] input: syz0 as /devices/virtual/input/input138 [ 1974.308260][T27626] siw: device registration error -23 [ 1974.329310][T27622] kvm: user requested TSC rate below hardware speed [ 1974.783020][T27638] netlink: Only one type of NAT may be specified [ 1974.783058][T27638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1975.158720][ T4963] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1975.380718][ T4963] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1975.383681][ T4963] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.383740][ T4963] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1975.383766][ T4963] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1975.383793][ T4963] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1975.383840][ T4963] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.602127][ T35] audit: type=1400 audit(2000001222.141:1169): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=27659 comm="syz.4.24495" daddr=::ffff:127.0.0.1 dest=20004 [ 1975.980794][ T4963] gud 10-1:1.0: probe with driver gud failed with error -121 [ 1976.206483][ T5702] usb 10-1: USB disconnect, device number 36 [ 1976.727973][T27686] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1977.124678][T27692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24509'. [ 1977.734311][T27709] autofs4:pid:27709:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189374) [ 1977.734349][T27709] autofs4:pid:27709:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1978.477352][T27728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24522'. [ 1979.057028][T27743] kvm_intel: kvm [27741]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 1981.102175][ T5936] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1981.276617][ T5936] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=4f.8b [ 1981.277978][ T5936] usb 3-1: config 3 has an invalid interface number: 239 but max is 0 [ 1981.278005][ T5936] usb 3-1: config 3 has no interface number 0 [ 1981.278051][ T5936] usb 3-1: config 3 interface 239 altsetting 128 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1981.278081][ T5936] usb 3-1: config 3 interface 239 has no altsetting 0 [ 1981.284063][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.284090][ T5936] usb 3-1: Product: syz [ 1981.284108][ T5936] usb 3-1: Manufacturer: syz [ 1981.284126][ T5936] usb 3-1: SerialNumber: syz [ 1981.374062][T27802] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1981.413279][T27716] Process accounting paused [ 1981.501894][T27813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24561'. [ 1981.659299][ T5936] sierra 3-1:3.239: Sierra USB modem converter detected [ 1981.684973][ T5936] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1981.707490][ T5936] usb 3-1: USB disconnect, device number 87 [ 1981.759888][ T5936] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1981.773343][ T5936] sierra 3-1:3.239: device disconnected [ 1981.933763][T27824] netlink: 19 bytes leftover after parsing attributes in process `syz.5.24567'. [ 1982.930172][T27851] netdevsim netdevsim9: Firmware load for './file0/../file0/../file0' refused, path contains '..' component [ 1983.129224][T27854] Bluetooth: hci0: unsupported parameter 5135 [ 1983.129250][T27854] Bluetooth: hci0: unsupported parameter 8192 [ 1983.129265][T27854] Bluetooth: hci0: unsupported parameter 5135 [ 1983.129280][T27854] Bluetooth: hci0: unsupported parameter 8192 [ 1983.248449][ T35] audit: type=1326 audit(2000001229.191:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.248515][ T35] audit: type=1326 audit(2000001229.191:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.284001][ T35] audit: type=1326 audit(2000001229.218:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.291673][ T35] audit: type=1326 audit(2000001229.237:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.304777][ T35] audit: type=1326 audit(2000001229.246:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.328043][ T35] audit: type=1326 audit(2000001229.246:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.363487][ T35] audit: type=1326 audit(2000001229.274:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.369171][ T35] audit: type=1326 audit(2000001229.302:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.372286][ T35] audit: type=1326 audit(2000001229.311:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1983.386744][ T35] audit: type=1326 audit(2000001229.320:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27857 comm="syz.2.24582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fafc2eef559 code=0x7ffc0000 [ 1986.618111][ T4963] kernel write not supported for file bpf-map (pid: 4963 comm: kworker/0:3) [ 1987.841698][T27952] block2mtd: parameter too long [ 1988.456493][T27960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24622'. [ 1990.259982][ T4963] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1990.424385][ T4963] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 1990.426276][ T4963] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1990.426306][ T4963] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1990.432386][ T4963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1990.432413][ T4963] usb 3-1: Product: syz [ 1990.432431][ T4963] usb 3-1: Manufacturer: syz [ 1990.531823][ T4963] iuu_phoenix 3-1:1.0: iuu_phoenix converter detected [ 1990.554394][ T4963] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 1990.828996][ T35] kauditd_printk_skb: 9 callbacks suppressed [ 1990.829019][ T35] audit: type=1400 audit(2000001236.074:1189): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=28009 comm="syz.7.24643" name="/" dev="mqueue" ino=135662 [ 1991.952740][T27995] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 1991.972800][ T4963] usb 3-1: USB disconnect, device number 88 [ 1992.021343][ T4963] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1992.022474][ T4963] iuu_phoenix 3-1:1.0: device disconnected [ 1992.495101][T28037] netlink: 'syz.7.24654': attribute type 10 has an invalid length. [ 1992.495126][T28037] netlink: 32 bytes leftover after parsing attributes in process `syz.7.24654'. [ 1992.502262][T28037] gretap0: Device is already in use. [ 1993.283042][T28058] netlink: 100 bytes leftover after parsing attributes in process `syz.9.24664'. [ 1993.678702][ T35] audit: type=1326 audit(2000001238.815:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28067 comm="syz.9.24668" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef0091f559 code=0x0 [ 1994.431325][T28086] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 1994.855157][ T4963] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1995.030414][ T4963] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1995.032191][ T4963] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 1995.032221][ T4963] usb 6-1: config 127 has no interface number 0 [ 1995.032267][ T4963] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1995.035337][ T4963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.035363][ T4963] usb 6-1: Product: syz [ 1995.035379][ T4963] usb 6-1: Manufacturer: syz [ 1995.035395][ T4963] usb 6-1: SerialNumber: syz [ 1995.116567][T28090] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1995.585537][T28090] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1996.036996][ T4963] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1996.037031][ T4963] asix 6-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1996.037322][ T4963] asix 6-1:127.57: probe with driver asix failed with error -71 [ 1996.045216][T28108] macvlan2: entered promiscuous mode [ 1996.045240][T28108] bridge0: entered promiscuous mode [ 1996.141831][ T4963] usb 6-1: USB disconnect, device number 42 [ 1996.629379][ T35] audit: type=1807 audit(2000001241.537:1191): action=appraise func=FIRMWARE_CHECK res=1 [ 1996.629740][T28120] ima: policy update completed [ 1996.629887][ T35] audit: type=1802 audit(2000001241.537:1192): pid=28120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.4.24691" res=1 errno=0 [ 1997.076891][ T4963] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1997.239397][ T4963] usb 10-1: Using ep0 maxpacket: 32 [ 1997.240385][ T4963] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1997.242074][ T4963] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1997.242102][ T4963] usb 10-1: config 0 has no interface number 0 [ 1997.242151][ T4963] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1997.245469][ T4963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.245496][ T4963] usb 10-1: Product: syz [ 1997.245514][ T4963] usb 10-1: Manufacturer: syz [ 1997.245531][ T4963] usb 10-1: SerialNumber: syz [ 1997.324845][ T4963] usb 10-1: config 0 descriptor?? [ 1997.333312][T28130] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1997.571018][T28130] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1998.463698][ T4963] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1998.475114][ T4963] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1998.512510][ T4963] usb 10-1: USB disconnect, device number 37 [ 1999.168996][T28173] netlink: 24 bytes leftover after parsing attributes in process `syz.9.24714'. [ 1999.252713][T28177] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1999.253029][T28177] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1999.253052][T28177] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1999.253072][T28177] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1999.253678][T28177] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1999.253701][T28177] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1999.253722][T28177] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1999.460942][T28177] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1999.460975][T28177] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 2000.805801][ T5702] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2000.855149][T28219] block nbd4: server does not support multiple connections per device. [ 2000.855554][T28219] block nbd4: shutting down sockets [ 2000.991256][ T5702] usb 6-1: Using ep0 maxpacket: 16 [ 2000.991965][ T5702] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2000.999248][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.999274][ T5702] usb 6-1: Product: syz [ 2000.999290][ T5702] usb 6-1: Manufacturer: syz [ 2000.999310][ T5702] usb 6-1: SerialNumber: syz [ 2001.116778][T28224] binder: 28223:28224 ioctl 400c620e 200000000100 returned -22 [ 2001.286530][ T5702] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2001.306202][ T5702] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2001.306648][ T5702] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2001.306702][ T5702] usb 6-1: media controller created [ 2001.364212][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2001.546971][T28232] netlink: 'syz.9.24740': attribute type 12 has an invalid length. [ 2001.546997][T28232] netlink: 'syz.9.24740': attribute type 29 has an invalid length. [ 2001.547014][T28232] netlink: 148 bytes leftover after parsing attributes in process `syz.9.24740'. [ 2001.547037][T28232] netlink: 'syz.9.24740': attribute type 3 has an invalid length. [ 2001.547052][T28232] netlink: 'syz.9.24740': attribute type 2 has an invalid length. [ 2001.547067][T28232] netlink: 35 bytes leftover after parsing attributes in process `syz.9.24740'. [ 2001.851459][T28238] netlink: 79 bytes leftover after parsing attributes in process `syz.7.24744'. [ 2002.123706][ T5702] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2002.246068][ T5702] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2002.270098][ T5702] usb 6-1: USB disconnect, device number 43 [ 2008.067082][ T4963] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 2008.232319][ T4963] usb 3-1: not running at top speed; connect to a high speed hub [ 2008.232365][ T4963] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 2008.238362][ T4963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2008.238437][ T4963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.332906][ T4963] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 2008.799850][ T4963] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 2009.069477][ T4963] videodev: could not get a free minor [ 2009.069499][ T4963] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23). [ 2009.132046][ T4963] usb 3-1: USB disconnect, device number 89 [ 2009.424897][T28380] fuse: Bad value for 'fd' [ 2010.719323][ T35] audit: type=1326 audit(2000001254.537:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28404 comm="syz.2.24812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafc2eef559 code=0x0 [ 2011.079379][ T35] audit: type=1400 audit(2000001254.870:1194): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=28409 comm="syz.9.24813" daddr=::ac14:140c [ 2011.206131][ T35] audit: type=1326 audit(2000001254.989:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28398 comm="syz.5.24810" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90904cf559 code=0x7fc00000 [ 2011.411980][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24815'. [ 2012.098401][T28435] bonding: .s;p>Da* is being created... [ 2012.376644][T28442] bpf: Bad value for 'gid' [ 2013.758477][T28480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24840'. [ 2013.758514][T28480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24840'. [ 2013.810558][T28481] netlink: 80 bytes leftover after parsing attributes in process `syz.5.24841'. [ 2014.062280][T28484] Process accounting resumed [ 2014.239229][T28494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24847'. [ 2014.595765][ T35] audit: type=1400 audit(2000001258.117:1196): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=28508 comm="syz.2.24855" daddr=::ffff:172.20.20.187 dest=16385 [ 2014.708412][T28512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 2014.708633][T28512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 2014.708655][T28512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 2014.708675][T28512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 2014.760834][T28512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 2014.760912][T28512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 2014.760936][T28512] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 2014.901835][T28512] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 2014.901849][T28512] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 2014.977475][T28514] overlayfs: overlapping lowerdir path [ 2015.430087][T28532] sd 0:0:1:0: PR command failed: 1026 [ 2015.430144][T28532] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2015.430193][T28532] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2016.053817][ T4963] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2016.219924][ T4963] usb 3-1: Using ep0 maxpacket: 16 [ 2016.222535][ T4963] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 2016.255370][ T4963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.255402][ T4963] usb 3-1: Product: syz [ 2016.255420][ T4963] usb 3-1: Manufacturer: syz [ 2016.255437][ T4963] usb 3-1: SerialNumber: syz [ 2016.275369][T12074] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 2016.322151][ T4963] usb 3-1: config 0 descriptor?? [ 2016.356085][ T4963] gspca_main: spca508-2.14.0 probing 041e:4018 [ 2016.469510][T12074] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2016.487853][T12074] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2016.487893][T12074] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2016.487924][T12074] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2016.502351][T12074] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.502382][T12074] usb 10-1: Product: syz [ 2016.502399][T12074] usb 10-1: Manufacturer: syz [ 2016.502432][T12074] usb 10-1: SerialNumber: syz [ 2016.566411][T12074] usb 10-1: config 0 descriptor?? [ 2016.568971][T28550] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2016.628728][ T4963] gspca_spca508: reg_read err -32 [ 2016.635310][ T4963] gspca_spca508: reg_read err -32 [ 2016.769798][T12074] rc_core: IR keymap rc-streamzap not found [ 2016.769822][T12074] Registered IR keymap rc-empty [ 2016.771572][T12074] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 2016.875018][ T4963] gspca_spca508: reg_read err -71 [ 2016.875450][ T4963] gspca_spca508: reg_read err -71 [ 2016.875872][ T4963] gspca_spca508: reg write: error -71 [ 2016.875963][ T4963] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 2016.876573][T12074] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input139 [ 2016.925929][ T4963] usb 3-1: USB disconnect, device number 90 [ 2017.086900][T12074] usb 10-1: USB disconnect, device number 38 [ 2017.306636][T28569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24878'. [ 2017.420991][T28573] netlink: 104 bytes leftover after parsing attributes in process `syz.7.24880'. [ 2018.393724][ T35] audit: type=1400 audit(2000001261.614:1197): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=28607 comm="syz.9.24898" daddr=::ffff:172.20.20.170 [ 2018.482072][T12074] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2018.656403][T12074] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2018.658748][T12074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2018.658782][T12074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2018.662359][T12074] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2018.662387][T12074] usb 3-1: Manufacturer: syz [ 2018.714852][T12074] usb 3-1: config 0 descriptor?? [ 2018.735310][ T35] audit: type=1400 audit(2000001261.937:1198): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=28617 comm="syz.5.24904" daddr=::ffff:224.0.0.2 dest=20000 [ 2019.848686][T12074] uclogic 0003:256C:006D.0063: failed retrieving string descriptor #200: -71 [ 2019.848755][T12074] uclogic 0003:256C:006D.0063: failed retrieving pen parameters: -71 [ 2019.848776][T12074] uclogic 0003:256C:006D.0063: failed probing pen v2 parameters: -71 [ 2019.848834][T12074] uclogic 0003:256C:006D.0063: failed probing parameters: -71 [ 2019.848954][T12074] uclogic 0003:256C:006D.0063: probe with driver uclogic failed with error -71 [ 2019.915598][T12074] usb 3-1: USB disconnect, device number 91 [ 2020.274681][T28651] netlink: 136 bytes leftover after parsing attributes in process `syz.5.24917'. [ 2020.468254][T28655] program syz.7.24918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2021.225962][ T35] audit: type=1326 audit(2000001264.235:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.7.24930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 2021.229106][ T35] audit: type=1326 audit(2000001264.235:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.7.24930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 2021.306055][ T35] audit: type=1326 audit(2000001264.309:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.7.24930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 2021.306414][ T35] audit: type=1326 audit(2000001264.309:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.7.24930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 2021.306816][ T35] audit: type=1326 audit(2000001264.309:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.7.24930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 2021.445273][ T35] audit: type=1326 audit(2000001264.438:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.7.24930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 2021.445346][ T35] audit: type=1326 audit(2000001264.438:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28681 comm="syz.7.24930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6e9d7fd8e code=0x7ffc0000 [ 2021.445654][ T35] audit: type=1326 audit(2000001264.438:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28676 comm="syz.7.24930" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e9dbf559 code=0x7ffc0000 [ 2021.747205][T28685] Invalid ELF header len 16 [ 2021.884905][T28689] netlink: 36 bytes leftover after parsing attributes in process `syz.7.24936'. [ 2021.884933][T28689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24936'. [ 2021.982158][ T5936] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2022.144800][ T5936] usb 10-1: Using ep0 maxpacket: 32 [ 2022.145703][ T5936] usb 10-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2022.145767][ T5936] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 2022.152672][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.152698][ T5936] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2022.154371][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.154400][ T5936] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2022.185384][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.185415][ T5936] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2022.207750][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.207779][ T5936] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2022.242639][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.242668][ T5936] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2022.274657][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.274686][ T5936] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2022.308322][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.308351][ T5936] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2022.309893][ T5936] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.309920][ T5936] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2022.322361][ T5936] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.322389][ T5936] usb 10-1: Product: syz [ 2022.322407][ T5936] usb 10-1: Manufacturer: syz [ 2022.322423][ T5936] usb 10-1: SerialNumber: syz [ 2022.394415][ T5936] usb 10-1: config 0 descriptor?? [ 2022.666304][ T5702] usb 10-1: USB disconnect, device number 39 [ 2024.352978][T28743] ima: rule for LSM 'u' is undefined [ 2024.353412][T28742] ima: policy update completed [ 2024.390470][ T35] kauditd_printk_skb: 15 callbacks suppressed [ 2024.390491][ T35] audit: type=1807 audit(2000001267.123:1222): action=measure func=FILE_CHECK obj_type=u res=1 [ 2024.390535][ T35] audit: type=1802 audit(2000001267.123:1223): pid=28742 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.9.24957" res=1 errno=0 [ 2024.888890][T28756] input: syz1 as /devices/virtual/input/input141 [ 2025.504284][ T5936] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2025.666861][ T5936] usb 10-1: Using ep0 maxpacket: 8 [ 2025.667868][ T5936] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2025.672997][ T5936] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.673026][ T5936] usb 10-1: Product: syz [ 2025.673044][ T5936] usb 10-1: Manufacturer: syz [ 2025.673062][ T5936] usb 10-1: SerialNumber: syz [ 2025.701649][ T5936] usb 10-1: config 0 descriptor?? [ 2025.775477][ T5936] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2026.427420][ T5936] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 2026.428012][ T5936] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2026.456115][ T5936] usb 10-1: USB disconnect, device number 40 [ 2027.308729][T28822] netlink: 14 bytes leftover after parsing attributes in process `syz.2.24988'. [ 2027.524879][ T35] audit: type=1400 audit(2000001270.048:1224): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=28825 comm="syz.9.24994" daddr=::ffff:224.0.0.1 dest=20000 [ 2027.906511][T28832] netlink: 104 bytes leftover after parsing attributes in process `syz.4.24997'. [ 2028.362308][T28841] loop8: detected capacity change from 0 to 1 [ 2028.380981][T28840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25000'. [ 2028.586577][T28843] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2028.586917][T28843] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2028.681836][T28841] Dev loop8: unable to read RDB block 1 [ 2028.681910][T28841] loop8: unable to read partition table [ 2028.682147][T28841] loop8: partition table beyond EOD, truncated [ 2028.684081][T28841] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2028.720001][T28847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25004'. [ 2028.754487][T28847] CIFS: Attempting to mount //127.0.0.1/share [ 2028.755326][T16077] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 2028.755372][T16077] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 2028.782328][T28847] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:5445 failed: -ENODEV [ 2028.981979][T16077] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 2028.982011][T16077] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 2028.982437][T28847] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:445 failed: -ENODEV [ 2028.984139][T28847] CIFS: VFS: cifs_mount failed w/return code = -2 [ 2029.630162][T28868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 2029.630394][T28868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 2029.630416][T28868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 2029.630436][T28868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 2029.630887][T28868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 2029.630908][T28868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 2029.630930][T28868] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 2029.801918][T28868] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 2029.801940][T28868] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 2030.205817][T28879] netlink: 32 bytes leftover after parsing attributes in process `syz.5.25019'. [ 2042.879748][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2187.149562][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2196.862056][ T38] INFO: task kworker/u8:6:153 blocked in I/O wait for more than 143 seconds. [ 2196.862091][ T38] Tainted: G L syzkaller #0 [ 2196.862105][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.862117][ T38] task:kworker/u8:6 state:D stack:18856 pid:153 tgid:153 ppid:2 task_flags:0x4248160 flags:0x00080000 [ 2196.862182][ T38] Workqueue: writeback wb_workfn (flush-8:0) [ 2196.862255][ T38] Call Trace: [ 2196.862265][ T38] [ 2196.862283][ T38] __schedule+0x171d/0x56e0 [ 2196.862336][ T38] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 2196.862377][ T38] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 2196.862456][ T38] ? __blk_flush_plug+0x416/0x4d0 [ 2196.862486][ T38] ? __pfx___schedule+0x10/0x10 [ 2196.862529][ T38] ? schedule+0x90/0x2b0 [ 2196.862568][ T38] schedule+0x164/0x2b0 [ 2196.862605][ T38] io_schedule+0x80/0xe0 [ 2196.862641][ T38] rq_qos_wait+0x269/0x360 [ 2196.862688][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2196.862727][ T38] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 2196.862756][ ** replaying previous printk message ** [ 2196.862756][ T38] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 2196.862787][ T38] ? __pfx_rq_qos_wait+0x10/0x10 [ 2196.862819][ T38] ? reacquire_held_locks+0x117/0x1a0 [ 2196.862856][ T38] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 2196.862892][ T38] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 2196.862926][ T38] ? rt_spin_unlock+0x159/0x200 [ 2196.862963][ T38] wbt_wait+0x326/0x550 [ 2196.862994][ T38] ? __pfx_wbt_wait+0x10/0x10 [ 2196.863029][ T38] ? __pfx_dd_bio_merge+0x10/0x10 [ 2196.863071][ T38] ? __pfx_wbt_wait+0x10/0x10 [ 2196.863095][ T38] __rq_qos_throttle+0x6b/0xb0 [ 2196.863131][ T38] blk_mq_submit_bio+0x16ac/0x2c60 [ 2196.863169][ T38] ? blk_mq_submit_bio+0x307/0x2c60 [ 2196.863204][ T38] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 2196.863252][ T38] ? __submit_bio+0x7e/0x340 [ 2196.863287][ T38] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 2196.863324][ T38] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 2196.863374][ T38] ? submit_bio_noacct+0x1087/0x1c00 [ 2196.863419][ T38] ext4_bio_write_folio+0x101a/0x18c0 [ 2196.863483][ T38] mpage_process_page_bufs+0x6bd/0x8a0 [ 2196.863532][ T38] mpage_prepare_extent_to_map+0xf8d/0x1880 [ 2196.863981][ T38] ? wb_writeback+0x42f/0xad0 [ 2196.864040][ T38] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 2196.864106][ T38] ? kmem_cache_alloc_noprof+0x3c1/0x680 [ 2196.864138][ T38] ? ext4_init_io_end+0x29/0x130 [ 2196.864164][ T38] ? ext4_init_io_end+0x29/0x130 [ 2196.864205][ T38] ext4_do_writepages+0xb8d/0x4770 [ 2196.864240][ T38] ? ret_from_fork_asm+0x1a/0x30 [ 2196.864285][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 2196.864342][ T38] ? __pfx_ext4_do_writepages+0x10/0x10 [ 2196.864369][ T38] ? __lock_acquire+0x747/0x2de0 [ 2196.864410][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 2196.864455][ T38] ? lock_acquire+0x115/0x350 [ 2196.864506][ T38] ext4_writepages+0x1fe/0x4e0 [ 2196.864544][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 2196.864598][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2196.864633][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 2196.864670][ T38] do_writepages+0x338/0x560 [ 2196.864707][ T38] ? reacquire_held_locks+0x117/0x1a0 [ 2196.864741][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2196.864781][ T38] __writeback_single_inode+0x136/0x1230 [ 2196.864813][ T38] ? rt_spin_unlock+0x165/0x200 [ 2196.864847][ T38] writeback_sb_inodes+0x9db/0x1aa0 [ 2196.864902][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 2196.864968][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 2196.865044][ T38] __writeback_inodes_wb+0x114/0x240 [ 2196.865080][ T38] wb_writeback+0x42f/0xad0 [ 2196.865109][ T38] ? queue_io+0x231/0x450 [ 2196.865140][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 2196.865185][ T38] wb_workfn+0xc98/0x10f0 [ 2196.865239][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 2196.865280][ T38] ? trace_hrtimer_start+0x82/0x200 [ 2196.865314][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.865350][ T38] ? lock_acquire+0x115/0x350 [ 2196.865386][ T38] ? rcu_is_watching+0x16/0xb0 [ 2196.865431][ T38] ? process_scheduled_works+0x97a/0x1630 [ 2196.865462][ T38] process_scheduled_works+0xc3d/0x1630 [ 2196.865566][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 2196.865606][ T38] ? assign_work+0x3cf/0x5d0 [ 2196.865642][ T38] worker_thread+0xa47/0xfb0 [ 2196.865705][ T38] kthread+0x38b/0x470 [ 2196.865740][ T38] ? __pfx_worker_thread+0x10/0x10 [ 2196.865768][ T38] ? __pfx_kthread+0x10/0x10 [ 2196.865804][ T38] ret_from_fork+0x514/0xb70 [ 2196.865842][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2196.865868][ T38] ? __switch_to+0xc78/0x1410 [ 2196.865908][ T38] ? __pfx_kthread+0x10/0x10 [ 2196.865944][ T38] ret_from_fork_asm+0x1a/0x30 [ 2196.865987][ T38] [ 2196.866090][ T38] INFO: task jbd2/sda1-8:4910 blocked in I/O wait for more than 143 seconds. [ 2196.866113][ T38] Tainted: G L syzkaller #0 [ 2196.866127][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.866138][ T38] task:jbd2/sda1-8 state:D stack:25120 pid:4910 tgid:4910 ppid:2 task_flags:0x240040 flags:0x00080000 [ 2196.866207][ T38] Call Trace: [ 2196.866216][ T38] [ 2196.866231][ T38] __schedule+0x171d/0x56e0 [ 2196.866276][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.866318][ T38] ? __pfx___schedule+0x10/0x10 [ 2196.866361][ T38] ? schedule+0x90/0x2b0 [ 2196.866399][ T38] schedule+0x164/0x2b0 [ 2196.866434][ T38] io_schedule+0x80/0xe0 [ 2196.866472][ T38] bit_wait_io+0x13/0x110 [ 2196.866510][ T38] __wait_on_bit+0xac/0x2f0 [ 2196.866544][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.866581][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 2196.866621][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.866656][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2196.866696][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 2196.866739][ T38] ? __wait_on_buffer+0xe/0x80 [ 2196.866779][ T38] jbd2_journal_commit_transaction+0x2f77/0x5cb0 [ 2196.866860][ T38] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 2196.866907][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2196.866959][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2196.867000][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2196.867044][ T38] ? __timer_delete_sync+0x552/0x620 [ 2196.867080][ T38] kjournald2+0x3bc/0x740 [ 2196.867125][ T38] ? __pfx_kjournald2+0x10/0x10 [ 2196.867152][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2196.867191][ T38] ? __kthread_parkme+0x71/0x1f0 [ 2196.867224][ T38] ? __kthread_parkme+0x199/0x1f0 [ 2196.867263][ T38] kthread+0x38b/0x470 [ 2196.867299][ T38] ? __pfx_kjournald2+0x10/0x10 [ 2196.867322][ T38] ? __pfx_kthread+0x10/0x10 [ 2196.867359][ T38] ret_from_fork+0x514/0xb70 [ 2196.867387][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2196.867906][ T38] ? __switch_to+0xc78/0x1410 [ 2196.867949][ T38] ? __pfx_kthread+0x10/0x10 [ 2196.867988][ T38] ret_from_fork_asm+0x1a/0x30 [ 2196.868040][ T38] [ 2196.868062][ T38] INFO: task syz-executor:5568 blocked in I/O wait for more than 143 seconds. [ 2196.868084][ T38] Tainted: G L syzkaller #0 [ 2196.868099][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.868110][ T38] task:syz-executor state:D stack:22080 pid:5568 tgid:5568 ppid:5567 task_flags:0x440100 flags:0x00080000 [ 2196.868174][ T38] Call Trace: [ 2196.868183][ T38] [ 2196.868199][ T38] __schedule+0x171d/0x56e0 [ 2196.868244][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.868286][ T38] ? __pfx___schedule+0x10/0x10 [ 2196.868329][ T38] ? schedule+0x90/0x2b0 [ 2196.868366][ T38] schedule+0x164/0x2b0 [ 2196.868402][ T38] io_schedule+0x80/0xe0 [ 2196.868437][ T38] bit_wait_io+0x13/0x110 [ 2196.868476][ T38] __wait_on_bit+0xac/0x2f0 [ 2196.868510][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.868549][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 2196.868588][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.868623][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2196.868662][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 2196.868711][ T38] do_get_write_access+0x667/0x10d0 [ 2196.868764][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 2196.868800][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 2196.868841][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2196.868874][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2196.868915][ T38] ext4_reserve_inode_write+0x294/0x360 [ 2196.868958][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 2196.868997][ T38] ext4_dirty_inode+0xd0/0x110 [ 2196.869039][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2196.869070][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 2196.869113][ T38] file_update_time_flags+0x39f/0x450 [ 2196.869151][ T38] ext4_page_mkwrite+0x220/0x12c0 [ 2196.869196][ T38] ? reacquire_held_locks+0x117/0x1a0 [ 2196.869232][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2196.869276][ T38] do_page_mkwrite+0x14a/0x310 [ 2196.869330][ T38] do_wp_page+0x209d/0x3d10 [ 2196.869380][ T38] ? preempt_count_add+0x6a/0x140 [ 2196.869410][ T38] ? __pfx_do_wp_page+0x10/0x10 [ 2196.869437][ T38] ? rt_spin_lock+0x2d0/0x400 [ 2196.869469][ T38] ? __pfx_rt_spin_lock+0x10/0x10 [ 2196.869505][ T38] ? pte_offset_map_rw_nolock+0xea/0x160 [ 2196.869537][ T38] handle_mm_fault+0xd69/0x28c0 [ 2196.869574][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 2196.869616][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 2196.869645][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 2196.869679][ T38] ? __pfx_set_user_sigmask+0x10/0x10 [ 2196.869736][ T38] do_user_addr_fault+0xb35/0x1480 [ 2196.869778][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 2196.869809][ T38] exc_page_fault+0x6a/0xc0 [ 2196.869846][ T38] asm_exc_page_fault+0x26/0x30 [ 2196.869872][ T38] RIP: 0033:0x7f0b538cdad6 [ 2196.869893][ T38] RSP: 002b:00007fff328060f0 EFLAGS: 00010246 [ 2196.869915][ T38] RAX: 00007f0b5189c000 RBX: 0000555580060660 RCX: 0000000000000000 [ 2196.869933][ T38] RDX: 0000000000000882 RSI: 0000555580067aa0 RDI: 0000000000000001 [ 2196.869950][ T38] RBP: 00007fff328065f0 R08: 0000555580067e08 R09: 000000000000009f [ 2196.869967][ T38] R10: 0000000010000000 R11: 0000000000000001 R12: 00007fff32806430 [ 2196.869983][ T38] R13: 00007fff32806220 R14: 585858582e7a7973 R15: 00007fff32806170 [ 2196.870029][ T38] [ 2196.870128][ T38] INFO: task syz.9.25006:28851 blocked in I/O wait for more than 143 seconds. [ 2196.870150][ T38] Tainted: G L syzkaller #0 [ 2196.870164][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.870175][ T38] task:syz.9.25006 state:D stack:24296 pid:28851 tgid:28851 ppid:15431 task_flags:0x440040 flags:0x00080002 [ 2196.870241][ T38] Call Trace: [ 2196.870249][ T38] [ 2196.870264][ T38] __schedule+0x171d/0x56e0 [ 2196.870324][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.870367][ T38] ? __pfx___schedule+0x10/0x10 [ 2196.870410][ T38] ? schedule+0x90/0x2b0 [ 2196.870448][ T38] schedule+0x164/0x2b0 [ 2196.870484][ T38] io_schedule+0x80/0xe0 [ 2196.870521][ T38] bit_wait_io+0x13/0x110 [ 2196.870558][ T38] __wait_on_bit+0xac/0x2f0 [ 2196.870592][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.870631][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 2196.872134][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.872248][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2196.872354][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 2196.872472][ T38] do_get_write_access+0x667/0x10d0 [ 2196.872582][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 2196.872675][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 2196.872772][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2196.872865][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2196.872961][ T38] ext4_reserve_inode_write+0x294/0x360 [ 2196.873059][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 2196.873103][ T38] ext4_dirty_inode+0xd0/0x110 [ 2196.873184][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2196.873274][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 2196.873380][ T38] file_update_time_flags+0x39f/0x450 [ 2196.873469][ T38] ext4_page_mkwrite+0x220/0x12c0 [ 2196.873602][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 2196.876424][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2196.876534][ T38] ? lock_acquire+0x115/0x350 [ 2196.876617][ T38] do_page_mkwrite+0x14a/0x310 [ 2196.876725][ T38] do_pte_missing+0x734/0x28f0 [ 2196.876832][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 2196.876917][ T38] handle_mm_fault+0xf64/0x28c0 [ 2196.877011][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 2196.877126][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 2196.877190][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 2196.877274][ T38] ? __pfx_do_futex+0x10/0x10 [ 2196.877436][ T38] do_user_addr_fault+0xb35/0x1480 [ 2196.877534][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 2196.877618][ T38] exc_page_fault+0x6a/0xc0 [ 2196.877708][ T38] asm_exc_page_fault+0x26/0x30 [ 2196.877786][ T38] RIP: 0033:0x7fef007f3ba9 [ 2196.877883][ T38] RSP: 002b:00007fff38a010d0 EFLAGS: 00010202 [ 2196.877919][ T38] RAX: 0000001b30b23000 RBX: ffffffff81b2f880 RCX: 0000001b30b22ff8 [ 2196.880649][ T38] RDX: 0000001b3052421c RSI: 0000000000000008 RDI: 00007fef016d5720 [ 2196.880710][ T38] RBP: 00000000000001eb R08: 00007fef00b90000 R09: 00007fef00b92000 [ 2196.880755][ T38] R10: 0000000081b2f884 R11: 0000000000000001 R12: 00007fef00ba6038 [ 2196.880797][ T38] R13: 000000000000070e R14: ffffffff81b2f576 R15: 00007fef016d5720 [ 2196.880848][ T38] ? __hrtimer_rearm_deferred+0x126/0x4d0 [ 2196.880923][ T38] ? __hrtimer_rearm_deferred+0x430/0x4d0 [ 2196.881038][ T38] [ 2196.881070][ T38] INFO: task syz.7.25017:28875 blocked in I/O wait for more than 143 seconds. [ 2196.881123][ T38] Tainted: G L syzkaller #0 [ 2196.881146][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.881157][ T38] task:syz.7.25017 state:D stack:25768 pid:28875 tgid:28875 ppid:11564 task_flags:0x440040 flags:0x00080002 [ 2196.881281][ T38] Call Trace: [ 2196.881310][ T38] [ 2196.881355][ T38] __schedule+0x171d/0x56e0 [ 2196.881508][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.883817][ T38] ? __pfx___schedule+0x10/0x10 [ 2196.883945][ T38] ? schedule+0x90/0x2b0 [ 2196.884049][ T38] schedule+0x164/0x2b0 [ 2196.884135][ T38] io_schedule+0x80/0xe0 [ 2196.886982][ T38] bit_wait_io+0x13/0x110 [ 2196.887083][ T38] __wait_on_bit+0xac/0x2f0 [ 2196.887170][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.887265][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 2196.887391][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.887484][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2196.887563][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 2196.887655][ T38] do_get_write_access+0x667/0x10d0 [ 2196.887760][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 2196.887851][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 2196.887950][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2196.888051][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2196.888147][ T38] ext4_reserve_inode_write+0x294/0x360 [ 2196.888262][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 2196.888345][ T38] ext4_dirty_inode+0xd0/0x110 [ 2196.888375][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2196.888490][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 2196.891062][ T38] file_update_time_flags+0x39f/0x450 [ 2196.891169][ T38] ext4_page_mkwrite+0x220/0x12c0 [ 2196.891282][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 2196.891337][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2196.891412][ T38] ? lock_acquire+0x115/0x350 [ 2196.891483][ T38] ? lock_acquire+0x115/0x350 [ 2196.891577][ T38] do_page_mkwrite+0x14a/0x310 [ 2196.891692][ T38] do_pte_missing+0x734/0x28f0 [ 2196.891832][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 2196.891920][ T38] handle_mm_fault+0xf64/0x28c0 [ 2196.892006][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 2196.892112][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 2196.892184][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 2196.892313][ T38] do_user_addr_fault+0xb35/0x1480 [ 2196.897958][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 2196.898061][ T38] exc_page_fault+0x6a/0xc0 [ 2196.898099][ T38] asm_exc_page_fault+0x26/0x30 [ 2196.898132][ T38] RIP: 0033:0x7fd6e9c93ba9 [ 2196.898196][ T38] RSP: 002b:00007ffc61435a10 EFLAGS: 00010202 [ 2196.898257][ T38] RAX: 0000001b2f51a000 RBX: ffffffff81fa4305 RCX: 0000001b2f519ff8 [ 2196.898310][ T38] RDX: 0000001b2ef2421c RSI: 0000000000000008 RDI: 00007fd6eab75720 [ 2196.898351][ T38] RBP: 0000000000000044 R08: 00007fd6ea030000 R09: 00007fd6ea032000 [ 2196.898395][ T38] R10: 0000000081fa4309 R11: 0000000000000003 R12: 00007fd6ea046038 [ 2196.898434][ T38] R13: 0000000000000052 R14: ffffffff81fa45cc R15: 00007fd6eab75720 [ 2196.898480][ T38] ? bpf_dispatcher_change_prog+0x62c/0xf20 [ 2196.898557][ T38] ? bpf_dispatcher_change_prog+0x365/0xf20 [ 2196.898674][ T38] [ 2196.898704][ T38] INFO: task syz.4.25020:28880 blocked in I/O wait for more than 143 seconds. [ 2196.898769][ T38] Tainted: G L syzkaller #0 [ 2196.898800][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.898829][ T38] task:syz.4.25020 state:D stack:26088 pid:28880 tgid:28880 ppid:5589 task_flags:0x440040 flags:0x00080002 [ 2196.899008][ T38] Call Trace: [ 2196.899029][ T38] [ 2196.899070][ T38] __schedule+0x171d/0x56e0 [ 2196.899179][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.899286][ T38] ? __pfx___schedule+0x10/0x10 [ 2196.899414][ T38] ? schedule+0x90/0x2b0 [ 2196.906901][ T38] schedule+0x164/0x2b0 [ 2196.907019][ T38] io_schedule+0x80/0xe0 [ 2196.907115][ T38] bit_wait_io+0x13/0x110 [ 2196.907216][ T38] __wait_on_bit+0xac/0x2f0 [ 2196.907303][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.907400][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 2196.907505][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.907614][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2196.907733][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 2196.907855][ T38] do_get_write_access+0x667/0x10d0 [ 2196.907969][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 2196.908058][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 2196.908156][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2196.908241][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2196.908333][ T38] ext4_reserve_inode_write+0x294/0x360 [ 2196.913172][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 2196.913255][ T38] ext4_dirty_inode+0xd0/0x110 [ 2196.913339][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2196.913415][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 2196.913517][ T38] file_update_time_flags+0x39f/0x450 [ 2196.913612][ T38] ext4_page_mkwrite+0x220/0x12c0 [ 2196.913718][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 2196.913793][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2196.913876][ T38] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 2196.913996][ T38] do_page_mkwrite+0x14a/0x310 [ 2196.915955][ T38] do_pte_missing+0x734/0x28f0 [ 2196.916110][ T38] ? rt_spin_unlock+0x165/0x200 [ 2196.916191][ T38] ? __pmd_alloc+0x41b/0x5e0 [ 2196.916279][ T38] handle_mm_fault+0xf64/0x28c0 [ 2196.916330][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 2196.919432][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 2196.919514][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 2196.919607][ T38] do_user_addr_fault+0xb35/0x1480 [ 2196.919729][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 2196.919812][ T38] exc_page_fault+0x6a/0xc0 [ 2196.919900][ T38] asm_exc_page_fault+0x26/0x30 [ 2196.919964][ T38] RIP: 0033:0x7fe3cde4cea3 [ 2196.920026][ T38] RSP: 002b:00007fffc0722190 EFLAGS: 00010246 [ 2196.920079][ T38] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b31b64000 [ 2196.920124][ T38] RDX: 0000001b31b24000 RSI: 0000000000400000 RDI: 00007fe3ce1c7708 [ 2196.920173][ T38] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2196.920208][ T38] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2196.920240][ T38] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffc0722420 [ 2196.920335][ T38] [ 2196.920366][ T38] INFO: task syz.2.25021:28881 blocked in I/O wait for more than 143 seconds. [ 2196.920421][ T38] Tainted: G L syzkaller #0 [ 2196.920453][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.920478][ T38] task:syz.2.25021 state:D stack:27160 pid:28881 tgid:28881 ppid:5590 task_flags:0x440040 flags:0x00080002 [ 2196.920645][ T38] Call Trace: [ 2196.920667][ T38] [ 2196.920702][ T38] __schedule+0x171d/0x56e0 [ 2196.920810][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.920950][ T38] ? __pfx___schedule+0x10/0x10 [ 2196.922638][ T38] ? schedule+0x90/0x2b0 [ 2196.922741][ T38] schedule+0x164/0x2b0 [ 2196.922798][ T38] io_schedule+0x80/0xe0 [ 2196.922895][ T38] bit_wait_io+0x13/0x110 [ 2196.922991][ T38] __wait_on_bit+0xac/0x2f0 [ 2196.928177][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.928269][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 2196.928309][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.928406][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2196.928497][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 2196.928626][ T38] do_get_write_access+0x667/0x10d0 [ 2196.928775][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 2196.928864][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 2196.928961][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2196.929047][ T38] ? jbd2__journal_start+0x145/0x5d0 [ 2196.929176][ T38] ext4_reserve_inode_write+0x294/0x360 [ 2196.932785][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 2196.932892][ T38] ext4_dirty_inode+0xd0/0x110 [ 2196.932969][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2196.933029][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 2196.933096][ T38] ? mnt_get_write_access+0x26a/0x2d0 [ 2196.933176][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 2196.933252][ T38] touch_atime+0x568/0x670 [ 2196.933326][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 2196.933411][ T38] ext4_file_mmap_prepare+0x286/0x460 [ 2196.933491][ T38] mmap_region+0xebb/0x25c0 [ 2196.933606][ T38] ? __pfx_mmap_region+0x10/0x10 [ 2196.933683][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 2196.933775][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.933866][ T38] ? __lock_acquire+0x747/0x2de0 [ 2196.934165][ T38] ? mt_find+0x186/0x630 [ 2196.934342][ T38] ? mt_find+0x5ff/0x630 [ 2196.939293][ T38] ? mt_find+0x186/0x630 [ 2196.939366][ T38] ? __pfx_mt_find+0x10/0x10 [ 2196.939462][ T38] ? bpf_lsm_mmap_addr+0x9/0x50 [ 2196.939559][ T38] ? security_mmap_addr+0x71/0x240 [ 2196.939702][ T38] ? shmem_mapping+0xd/0x50 [ 2196.939757][ T38] ? memfd_check_seals_mmap+0xcb/0x230 [ 2196.939832][ T38] do_mmap+0xe0e/0x1310 [ 2196.939931][ T38] ? __pfx_do_mmap+0x10/0x10 [ 2196.940028][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2196.940111][ T38] ? rwbase_write_lock+0x5ad/0x780 [ 2196.940190][ T38] vm_mmap_pgoff+0x275/0x4e0 [ 2196.940249][ T38] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2196.940344][ T38] ? __fget_files+0x2a/0x420 [ 2196.940419][ T38] ? __fget_files+0x3a8/0x420 [ 2196.940476][ T38] ? __fget_files+0x2a/0x420 [ 2196.940553][ T38] ksys_mmap_pgoff+0x4a6/0x720 [ 2196.940634][ T38] ? __x64_sys_mmap+0x7f/0x140 [ 2196.940711][ T38] do_syscall_64+0x166/0x520 [ 2196.940818][ T38] ? trace_irq_disable+0x3b/0x140 [ 2196.942707][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.942779][ T38] ? clear_bhb_loop+0x70/0xc0 [ 2196.942855][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.942918][ T38] RIP: 0033:0x7fafc2eef2c2 [ 2196.942971][ T38] RSP: 002b:00007ffe35ebeef8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2196.943016][ T38] RAX: ffffffffffffffda RBX: 0000001b31964000 RCX: 00007fafc2eef2c2 [ 2196.943060][ T38] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b31964000 [ 2196.943089][ T38] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 2196.943105][ T38] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000013cf [ 2196.943120][ T38] R13: 00000000000927c0 R14: 00000000001d078b R15: 00007ffe35ebf1d0 [ 2196.943155][ T38] [ 2196.943167][ T38] INFO: task syz.5.25022:28883 blocked in I/O wait for more than 143 seconds. [ 2196.943188][ T38] Tainted: G L syzkaller #0 [ 2196.943200][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.943210][ T38] task:syz.5.25022 state:D stack:26632 pid:28883 tgid:28883 ppid:8584 task_flags:0x440040 flags:0x00080002 [ 2196.943278][ T38] Call Trace: [ 2196.943287][ T38] [ 2196.943301][ T38] __schedule+0x171d/0x56e0 [ 2196.943345][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.943386][ T38] ? __pfx___schedule+0x10/0x10 [ 2196.943429][ T38] ? schedule+0x90/0x2b0 [ 2196.943466][ T38] schedule+0x164/0x2b0 [ 2196.943502][ T38] io_schedule+0x80/0xe0 [ 2196.943538][ T38] bit_wait_io+0x13/0x110 [ 2196.943574][ T38] __wait_on_bit+0xac/0x2f0 [ 2196.943610][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.943647][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 2196.943683][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 2196.943718][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2196.943757][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 2196.943803][ T38] do_get_write_access+0x667/0x10d0 [ 2196.943949][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 2196.943995][ T38] __ext4_journal_get_write_access+0xec/0x620 [ 2196.944034][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 2196.944065][ T38] ? jbd2__journal_start+0x145/0x5d0 [ 2196.944119][ T38] ext4_reserve_inode_write+0x294/0x360 [ 2196.952147][ T38] __ext4_mark_inode_dirty+0x141/0x7b0 [ 2196.952258][ T38] ext4_dirty_inode+0xd0/0x110 [ 2196.952343][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2196.952424][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 2196.952503][ T38] ? mnt_get_write_access+0x26a/0x2d0 [ 2196.952589][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 2196.952664][ T38] touch_atime+0x568/0x670 [ 2196.952736][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 2196.952821][ T38] ext4_file_mmap_prepare+0x286/0x460 [ 2196.952906][ T38] mmap_region+0xebb/0x25c0 [ 2196.952961][ T38] ? __pfx_mmap_region+0x10/0x10 [ 2196.953032][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 2196.953108][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2196.953200][ T38] ? __lock_acquire+0x747/0x2de0 [ 2196.953500][ T38] ? mt_find+0x186/0x630 [ 2196.953616][ T38] ? mt_find+0x5ff/0x630 [ 2196.959484][ T38] ? mt_find+0x186/0x630 [ 2196.959572][ T38] ? __pfx_mt_find+0x10/0x10 [ 2196.959657][ T38] ? bpf_lsm_mmap_addr+0x9/0x50 [ 2196.959719][ T38] ? security_mmap_addr+0x71/0x240 [ 2196.959823][ T38] ? shmem_mapping+0xd/0x50 [ 2196.959887][ T38] ? memfd_check_seals_mmap+0xcb/0x230 [ 2196.959960][ T38] do_mmap+0xe0e/0x1310 [ 2196.960043][ T38] ? __pfx_do_mmap+0x10/0x10 [ 2196.960138][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2196.960234][ T38] ? rwbase_write_lock+0x5ad/0x780 [ 2196.960294][ T38] vm_mmap_pgoff+0x275/0x4e0 [ 2196.960394][ T38] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2196.960481][ T38] ? __fget_files+0x2a/0x420 [ 2196.960545][ T38] ? __fget_files+0x3a8/0x420 [ 2196.960629][ T38] ? __fget_files+0x2a/0x420 [ 2196.960704][ T38] ksys_mmap_pgoff+0x4a6/0x720 [ 2196.960779][ T38] ? __x64_sys_mmap+0x7f/0x140 [ 2196.960856][ T38] do_syscall_64+0x166/0x520 [ 2196.960980][ T38] ? trace_irq_disable+0x3b/0x140 [ 2196.963770][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.963844][ T38] ? clear_bhb_loop+0x70/0xc0 [ 2196.963936][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.963992][ T38] RIP: 0033:0x7f90904cf2c2 [ 2196.964053][ T38] RSP: 002b:00007ffe63b6ee08 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2196.964117][ T38] RAX: ffffffffffffffda RBX: 0000001b34664000 RCX: 00007f90904cf2c2 [ 2196.964160][ T38] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b34664000 [ 2196.964203][ T38] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 2196.964238][ T38] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000761 [ 2196.964279][ T38] R13: 00000000000927c0 R14: 00000000001d07dd R15: 00007ffe63b6f0e0 [ 2196.964378][ T38] [ 2196.964422][ T38] [ 2196.964422][ T38] Showing all locks held in the system: [ 2196.964466][ T38] locks held by pr/ttyS0/37: 3, last CPU#1: [ 2196.964600][ T38] #0: ffffffff8f2997d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 2196.964788][ T38] #1: ffffffff9b0c02d8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x6ac/0x8d0 [ 2196.964956][ T38] #2: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 2196.965094][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 2196.965117][ T38] #0: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2196.965280][ T38] locks held by kworker/u8:6/153: 4, on CPU#0: [ 2196.965347][ T38] #0: ffff88801fe94138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2196.970243][ T38] #1: ffffc900041d7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2196.970401][ T38] #2: ffff8880363780e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 2196.970591][ T38] #3: ffff8880367a0d98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 2196.970845][ T38] locks held by syz-executor/5568: 3, on CPU#0: [ 2196.970896][ T38] #0: ffff88803042da88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 2196.971031][ T38] #1: ffff888036378688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 2196.971207][ T38] #2: ffff888036394bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2196.971378][ T38] locks held by kworker/1:7/5854: 1, last CPU#1: [ 2196.971402][ T38] #0: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 2196.971560][ T38] locks held by getty/19785: 2, on CPU#0: [ 2196.971604][ T38] #0: ffff8880369ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2196.974737][ T38] #1: ffffc900043162e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 2196.974880][ T38] locks held by syz.9.25006/28851: 3, on CPU#0: [ 2196.974923][ T38] #0: ffff88802b6fbbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 2196.975093][ T38] #1: ffff888036378688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 2196.975284][ T38] #2: ffff888036394bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2196.975455][ T38] locks held by syz.7.25017/28875: 3, on CPU#0: [ 2196.975499][ T38] #0: ffff888035aad308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 2196.975660][ T38] #1: ffff888036378688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 2196.975831][ T38] #2: ffff888036394bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2196.975929][ T38] locks held by syz.4.25020/28880: 3, on CPU#0: [ 2196.975985][ T38] #0: ffff888097849948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 2196.978935][ T38] #1: ffff888036378688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 2196.981162][ T38] #2: ffff888036394bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2196.981364][ T38] locks held by syz.2.25021/28881: 3, on CPU#0: [ 2196.981416][ T38] #0: ffff88803c1a5eb8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 2196.981564][ T38] #1: ffff888036378510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 2196.981711][ T38] #2: ffff888036394bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2196.981833][ T38] locks held by syz.5.25022/28883: 3, on CPU#0: [ 2196.981883][ T38] #0: ffff888034ebebb8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 2196.982032][ T38] #1: ffff888036378510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 2196.982202][ T38] #2: ffff888036394bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 2196.982357][ T38] [ 2196.982371][ T38] ============================================= [ 2196.982371][ T38] [ 2196.982433][ T38] NMI backtrace for cpu 0 [ 2196.982489][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2196.982568][ T38] Tainted: [L]=SOFTLOCKUP [ 2196.982593][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2196.982632][ T38] Call Trace: [ 2196.982655][ T38] [ 2196.982679][ T38] dump_stack_lvl+0xe8/0x150 [ 2196.982775][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2196.982859][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2196.982942][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2196.982994][ T38] sys_info+0x135/0x170 [ 2196.983042][ T38] watchdog+0xfd2/0x1030 [ 2196.983162][ T38] ? watchdog+0x1c7/0x1030 [ 2196.983220][ T38] kthread+0x38b/0x470 [ 2196.983283][ T38] ? __pfx_watchdog+0x10/0x10 [ 2196.983347][ T38] ? __pfx_kthread+0x10/0x10 [ 2196.983426][ T38] ret_from_fork+0x514/0xb70 [ 2196.983498][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2196.983562][ T38] ? __switch_to+0xc78/0x1410 [ 2196.983657][ T38] ? __pfx_kthread+0x10/0x10 [ 2196.983744][ T38] ret_from_fork_asm+0x1a/0x30 [ 2196.983843][ T38] [ 2196.983913][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2196.983971][ C1] NMI backtrace for cpu 1 [ 2196.983987][ C1] CPU: 1 UID: 0 PID: 37 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2196.984012][ C1] Tainted: [L]=SOFTLOCKUP [ 2196.984019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2196.984030][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 2196.984099][ C1] Code: e8 ee 19 62 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f f9 ce fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da a9 fb 05 cc 44 89 f9 80 e1 07 [ 2196.984115][ C1] RSP: 0018:ffffc90000ae78b8 EFLAGS: 00000202 [ 2196.984131][ C1] RAX: 1ffffffff3618000 RBX: 00000000000003fd RCX: 0000000000000000 [ 2196.984144][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 2196.984155][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2196.984167][ C1] R10: dffffc0000000000 R11: ffffffff8564a340 R12: dffffc0000000000 [ 2196.984182][ C1] R13: 0000000000000000 R14: ffffffff9b0c0300 R15: 0000000000000000 [ 2196.984194][ C1] FS: 0000000000000000(0000) GS:ffff8881248ad000(0000) knlGS:0000000000000000 [ 2196.984209][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2196.984222][ C1] CR2: 00007ffe63b6f048 CR3: 0000000039278000 CR4: 00000000003526f0 [ 2196.984239][ C1] Call Trace: [ 2196.984246][ C1] [ 2196.984256][ C1] wait_for_lsr+0x190/0x300 [ 2196.984279][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 2196.984309][ C1] serial8250_console_write+0xaa2/0x1220 [ 2196.984334][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 2196.984364][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 2196.984404][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 2196.984430][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 2196.984466][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 2196.984492][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 2196.984513][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 2196.984539][ C1] ? __kthread_parkme+0x71/0x1f0 [ 2196.984563][ C1] ? __kthread_parkme+0x199/0x1f0 [ 2196.984589][ C1] kthread+0x38b/0x470 [ 2196.984615][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 2196.984636][ C1] ? __pfx_kthread+0x10/0x10 [ 2196.984662][ C1] ret_from_fork+0x514/0xb70 [ 2196.984693][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2196.984711][ C1] ? __switch_to+0xc78/0x1410 [ 2196.984739][ C1] ? __pfx_kthread+0x10/0x10 [ 2196.984768][ C1] ret_from_fork_asm+0x1a/0x30 [ 2196.984795][ C1] [ 2196.990362][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2200.621789][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2200.634130][ T38] Tainted: [L]=SOFTLOCKUP [ 2200.638909][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2200.649989][ T38] Call Trace: [ 2200.653633][ T38] [ 2200.656911][ T38] vpanic+0x56d/0xa60 [ 2200.661328][ T38] ? __pfx___schedule+0x10/0x10 [ 2200.666701][ T38] ? __pfx_vpanic+0x10/0x10 [ 2200.671691][ T38] panic+0xc5/0xd0 [ 2200.675804][ T38] ? __pfx_panic+0x10/0x10 [ 2200.680721][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 2200.686765][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 2200.692750][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 2200.699565][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 2200.706370][ T38] watchdog+0x102b/0x1030 [ 2200.711175][ T38] ? watchdog+0x1c7/0x1030 [ 2200.716073][ T38] kthread+0x38b/0x470 [ 2200.720588][ T38] ? __pfx_watchdog+0x10/0x10 [ 2200.725767][ T38] ? __pfx_kthread+0x10/0x10 [ 2200.730859][ T38] ret_from_fork+0x514/0xb70 [ 2200.735943][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2200.741599][ T38] ? __switch_to+0xc78/0x1410 [ 2200.746795][ T38] ? __pfx_kthread+0x10/0x10 [ 2200.751895][ T38] ret_from_fork_asm+0x1a/0x30 [ 2200.757212][ T38] [ 2200.760558][ T38] Kernel Offset: disabled [ 2200.765351][ T38] Rebooting in 86400 seconds..