last executing test programs: 13m38.440223996s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) creat(&(0x7f0000002440)='./file0/file3\x00', 0x9) syz_fuse_handle_req(r0, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002280)={&(0x7f0000004200)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x9, 0x40903144, 0xa, 0x4008, 0x8, 0x8001, 0x0, 0x0, 0x10, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0xb, {0x3, 0x2, 0x1ac00000, 0x400000000000001, 0x44e, 0xc, {0x0, 0x4023, 0x5, 0x1, 0xf, 0x4, 0x9, 0x7fffffff, 0x7, 0x6000, 0x0, 0x0, 0x0, 0x20000006, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m36.712275918s ago: executing program 1 (id=31): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4a6, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x109) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x146) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)='5', 0x1}], 0x1, 0x7ffffe, 0x0, 0x0) fallocate(r0, 0x3, 0x800000, 0x8000c62) 13m34.968114439s ago: executing program 1 (id=35): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m33.551051692s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@errors_continue}, {@data_err_ignore}, {@nodiscard}]}, 0xff, 0x460, &(0x7f0000001300)="$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") 13m32.064902257s ago: executing program 1 (id=42): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000000100)="96", 0x1}], 0x1, &(0x7f0000000840)=ANY=[], 0xd0}}], 0x1, 0x448c0) 13m30.782654094s ago: executing program 1 (id=46): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x1, 0x7ff, 0x4, 0x0, 0xe92, 0x2}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xe0ae, 0x10) 13m27.971277217s ago: executing program 32 (id=46): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x1, 0x7ff, 0x4, 0x0, 0xe92, 0x2}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xe0ae, 0x10) 13m13.268795656s ago: executing program 4 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) getdents64(r0, &(0x7f0000001600)=""/98, 0x62) 13m12.44927573s ago: executing program 4 (id=85): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000089035471210c94a2999c87d7186892cb2e47d4d7a999a147ee35d18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x40, 0xc, 0x4c, "dc0d5e6eab22a6bd35e9a8fb247ddcbddf70e3fc33836d0d5a68464eda7d40e94754b744f51f7d18f40b25a8d71a14dbc018ccad0e7e84914de774541cbe939693d68c6f97ef12b6c5cdedc2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m8.493916904s ago: executing program 4 (id=93): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYBLOB="43aba9911ba3d9bd9c2d341ba78391f3fd42251c28fa8791c674ecf2c666503c694dd8b576471ff008053eda3e0545d1e2a99f341297507e1038477a4f7c13ac0c9e96f1a9e280287791afe9e4417c02760fdfffb67798fa8fbf85698869e38d191ec5d1f9c0f116fbaead79cc672ecf6156a63c06dcbedae392d46e9fbf094f6d63ea0d8def073e77b2c537b4a4b94ad004aecc87a0327f6851869732e29e3719ba52c6495fce628d5f3e", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB], 0x1, 0x30e, &(0x7f0000000f00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, 0x0, 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) 13m5.817405551s ago: executing program 4 (id=96): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x4000000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 13m3.531604131s ago: executing program 4 (id=101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3c0200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 13m2.252742657s ago: executing program 4 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x1000, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='=', 0x1}], 0x1}}], 0x1, 0x48819) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) 12m59.083270863s ago: executing program 33 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x1000, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)='=', 0x1}], 0x1}}], 0x1, 0x48819) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) 6m9.029201465s ago: executing program 6 (id=1196): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x82) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x80086601, 0x0) 6m7.643755682s ago: executing program 6 (id=1199): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x481) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m4.848210795s ago: executing program 6 (id=1205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) 6m3.341726958s ago: executing program 6 (id=1207): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$eJzs3Au4TtX2MPAx5pyLTdKb5D7HHIs3bUyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnf45zO1zmn8//39f/3fZ7vv8fvedbzzvGud8w15h5773ettZ93f9NhSOW6VSrUZmb4b8G/PXQHgBQA6A8A1wFABAAlspTIcmV/Bo3d/3sHEX+uh6Zf7QrE1ST9T9uk/2mb9D9tk/6nbdL/tE36n7ZJ/9M26b8Qadn2GTmvly3tbnL/Py2T9///QY4WHvvFxsI3dvwDKdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0P22T/guRlv3X7x3L3w7+J2xX+/tPCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTacCH8ygDA38dXuy4hhBBCCCGEEEL8eUL6q12BEEIIIYQQQggh/u9DUKDBQATpID2kQAbICNdAJrgWMsN1kIDrIQvcAFnhRsgG2SEH5IRckBvygAUCBwwx5IV8kISbID/cDKlQAApCIfBQGIpAUSgGt0BxuBVKwG1QEm6HUlAaykBZuAPKwZ1QHu6CCnA3VIRKUBmqwD1QFe6FanAfVIf7oQY8ADXhQagFf4Ha8BDUgYehLjwC9eBRqA8NoCE0gsb/pfwXoAu8CF2hG3SHHtATekFv6AN9oR/0h5dgALwMA+EVGASDYQi8CkPhNRgGr8NwGAEj4Q0YBaNhDIyFcTAeJsCbMBHegknwNkyGKTAVpsF0mAEz4R2YBbNhDrwLc+E9mAfzYQEshEXwPiyGJbAUPoBl8CEshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHj2AH7IRdsBv2wF7YBx/DfvgEDsCncBA++4P55/8lvyMCAipUaNBgOkyHKZiCGTEjZsJMmBkzYwITmAWzYFbMitkwG+bAHJgLc2EezIOEhIyMeTEvJjGJ+TE/pmIqFsSC6NFjESyCxfAWLI7FsQSWwJJYEkthaSyNZbEslsNyWB7LYwWsgBWxIlbGyngP3oP3YjWshtWxOtbAGlgTa2ItrIW1sTbWwTpYF+tiPayH9bE+NsSG2BgbYxNsgk2xKTbH5tgCW2ArbIWtsTW2wTbYFttiO2yH7bE9dsAO2BE7YSd8AV/AF/FF7IYVVQ/siT2xN/bGvtgP++FLOABfxpfxFRyEg3EIvoqv4ms4DM/hcByBI3EkllOjcQyORVbjcQJOwIk4ESfhJJyMU3AKTsPpOANn4kychbNxNr6Lc/E9fA/n43xciItwES7GJbgUl+IyPI/LcQWuxFW4GtfgalyH63EdbsRNuBG34BbchtvwI/wId+JO3I27cS8aAPwYP8FPcBAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7Ek3gKT+MZPI1n8Syew/N4AS/gRbyIl/C5XF/V2VtgwyBQVxhlVDqVTqWoFJVRZVSZVCaVWWVWCZVQWVQWlVVlVdlUNpVD5VC5VC6VR+VRpEixilVelVclVVLlV/lVqkpVBVVB5ZVXRVQRVUwVU8VVcVVC3aZKqttVKVVaNfNlVVlVTjX35dVdqoKqoCqqSqqyqqKqqKqqqqqmqqnqqrqqoWqomupBVUv1wL74kLrSmbpqMNZTQ7C+aqAaqkbqNXxMNVHDsKlqppqrJ9QIHI6tVBPfWj2l2qgx2FY9o8bis6q9Go8d1POqo+qkOqsXVBfV1HdV3dRk7KF6qmnYW/VRfVU/NQsrqSsdq6xeUYPUYDVEvaoW4mtqmHpdDVcj1Ej1hhqlRqsxaqwap8arCepNNVG9pSapt9VkNUVNVdPUdDVDzVTvqFlqtpqj3lVz1XtqnpqvFqiFapF6Xy1WS9RS9YFapj5Uy9UKtVKtUqvVGrVWrVPr1Qa1UW1Sm9UWtVVtU9vVR2qH2ql2qd1qj9qr9qmP1X71iTqgPlUH1WfqkPpcHVZfqCPqS3VUfaWOqa/VcfWNOqG+VSfVd+qUOq3OqO/VWfWDOqfOqwvqR3VR/aQuqZ/VZRUUaNRKa210pNPp9DpFZ9AZ9TU6k75WZ9bX6YS+XmfRN+is+kadTWfXOXROnUvn1nm01aSdZh3rvDqfTuqbdH59s07VBXRBXUh7XVgX0UV1MX2LLq5v1SX0bbqkvl2X0qV1GV1W36HL6Tt1eX2XrqDv1hV1JV1ZV9H36Kr6Xl1N36er6/t1Df2Arqkf1LX0X3Rt/ZCuox/WdfUjup5+VNfXDXRD3Ug31o/pJvpx3VQ30831E7qFbqlb6Sd1a/2UbqOf1m31M7qdfla318/pDvp53VF30p31z/qyDrqr7qa76x66p+6le+s+uq/up/vrl/QA/bIeqF/Rg/RgPUS/qofq1/Qw/boerkfokfoNPUqP1mP0WD1Oj9cT9Jt6on5LT9Jv68l6ip6qp+npeobu+8tMc/4P8t/6N/kD/3r0bXq7/kjv0Dv1Lr1b79F79T69T+/X+/UBfUAf1Af1IX1IH9aH9RF9RB/VR/UxfUwf18f1CX1Cn9Qn9Sl9Wv+ov9dn9Q/6nD6vz+sf9UV9UV/65WsABo0y2hgTmXQmvUkxGUxGc43JZK41mc11JmGuN1nMDSarudFkM9lNDpPT5DK5TR5jDRln2MQmr8lnkuYm/OWEwhQ0hYw3hU0RU/SP5Jv85maTagr8U/7v1dfYNDZNTBPT1DQ1zU1z08K0MK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1X0910Nz1NL9Pb9DF9TT/T37xkBpgBZqAZaAaZQWaIGWKGmqFmmBlmhpvhZqQZaUaZUWaMGWPGmXFmgplgJpqJZpKZZCabyWaqmWqmm+lmpplpZplZZo6ZY+aauWaemWcWmAVmkVlkFpvFZqlZapaZZWa5WWFWmFVmlVlj1ph1Zp3ZYDaYTWaT2WK2mOVmu9ludpgdZpfZZfaYPWaf2Wf2m/3mgDlgDpqD5pA5ZA6bw+aIOWKOmqPmmDlmjpvj5oQ5YU6ak+aUOWXOmDPmrDlrzplz5oK5YC6ai+aSuWQum8tXTvsiFanIRCZKF6WLUqKUKGOUMcoUZYoyR5mjRJSIskRZoqzRjVG2KHuUI8oZ5YpyR3kiG1HkIo7iKG+UL0pGN0X5o5uj1KhAVDAqFPmocFQkKhoVi26Jike3RiWi26KS0e1Rqah0VCYqG90RlYvujMpHd0UVorujilGlqHJUJbonqhrdG1WL7ouqR/dHNaIHoprRg1Gt6C9R7eihqE70cFQ3eiSqFz0a1Y8aRA2jRlHjP3X+EM5lf9x3td1sd9vD9rS9bG/bx/a1/Wx/+5IdYF+2A+0rdpAdbIfYV+1Q+5odZl+3w+0IO9K+YUfZ0XaMHWvH2fF2gn3TTrRv2Un2bTvZTrFT7TQ73c6wM+07dpadbefYd+1c+56dZ+fbBXahXWTft4vtErvUfmCX2Q/tcrvCrrSr7Gq7xq616+x6u8FutJvsZrvFbrXb7Hb7kd1hd9pddrfdY/faffZju99+Yg/YT+1B+5k9ZD+3h+0X9oj90h61X9lj9mt73H5jT9hv7Un7nT1lT9sz9nt71v5gz9nz9oL90V60P9lL9md72YYrJ/dX3t7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoC2WhrJSVslE2ykE5KBflojyUh65gYspLeSlJScpP+SmVUqkgFSRPnopQESpGxag4FacSVIJKUkkqRaWoDJWhO+gOupPupLvoLrqb7qZKVImqUBWqSlWpGlWj6lSdalANqkk1qRbVotpUm+pQHapLdake1aP6VJ8aUkNqTI2pCTWhptSUmlNzakEtqBW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJX6k7dqSf1pN7Um/pSX+pP/WkADaCBNJAG0SAaQkNoKA2lYTSMhtMIGklv0CgaTWNoLI2j8TSBJtBEmkiTaBJNpsk0labSdJpOM2kmzaJZNIfm0FyaS/NoHi2gBbSIFtFiWkxLaSkto2W0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSdttMO2kG7aBftoT20j/bRftpPB+gAHaSDdIgOBQSgI3SEjtJROkbH6DgdpxN0gk7SSTpFp+gMnaGzdJbO0Tm6QBfoIv1El+hnukyBUlwGl9Fd4zK5a11md5371ziHy+lyudwuj7Mum8v+TzE551JdAVfw75eYrqhLTbnyWMh5V9gVcUVdKVfalXFl3R2unLvTlf9NXNXd66q5+1x1d7+r4u75p7iGe8DVdI+4Wu5RV9s1cHVcI1fXPeLquUddfdfANXSNXAvX0rVyT7rW7inXxj39m3ixW+LWuw1uo9vk9rtP3AX3ozvuvnEX3U+uq+vm+ruX3AD3shvoXnGD3ODfxCPdG26UG+3GuLFunBv/m3iqm+amuxlupnvHzXKzfxMvcu+7uW6pm+fmuwVu4V/jKzUtdR+4Ze5Dt9ytcCvdKrfarXFr3br/Xesqt8VtddvcPvex2+F2ul1ut9vj9v41vrKOA+5Td9B95o65r91h94U74k64o+6rv8ZX1nfCfetOuu/cKXfanXHfu7PuB3fOnb+y/nBl7d+7n91lFxwwsmLNhiNOx+k5hTNwRr6GM/G1nJmv4wRfz1n4Bs7KN3I2zs45OCfn4tychy0TO2aOOS/n4yTfxPn5Zk7lAlyQC7HnwlyEi3IxvoWL861cgm/jknw7l+LSXIbL8h1cju/k8nwXV+C7uSJX4spche/hqnwvV+P7uDrfzzX4Aa7JD3It/gvX5oe4Dj/MdfkRrsePcn1uwA25ETfmx7gJP85NuRk35ye4BbfkVvwkt+anuA0/zW35GW7Hz3J7fo478PPckTtxZ36Bu/CL3JW7cXfuwT25F/fmPtyX+3F/fokH8Ms8kF/hQTyYh/CrPJRf42H8Og/nETyS3+BRPJrH8Fgex+N5Ar/JE/ktnsRv82SewlN5Gk/nGTyT3+FZPJvn8Ls8l9/jeTyfF/BCXsTv82Jewkv5A17GH/JyXsEreRWv5jW8ltfxet7AG3kTb+YtvJW38Xb+iHfwTt7Fu3kP7+V9/DHv5wy//MB9xof4cz7MX/AR/pKP8ld8jL/m4/wNn+Bv+SR/x6f4NJ/h7/ks/8Dn+Dxf4B/5Iv/El/hnvsyBIcZYxTo2cRSni9PHKXGGOGN8TZwpvjbOHF8XJ+Lr4yzxDXHW+MY4W5w9zhHnjHPFueM8sY0pdjHHcZw3zhcn45vi/PHNcWpcIC4YF4p9XDguEheNi8W3xMXjW+MS8W1xyfj2uFRcOn7k/rLxHXG5+M64fHxXXCG+O64YV4orx1Xie+Kq8b1xtfi+uHp8f1w8fiCuGT8Ywy+fV6kTPxzXjR+J68WPxvXjBnHDuFHcOH4sbhI/HjeNm8XN4yfiFnHLuFX8ZNw6fipuEz/9u/u7xz3innGvuFccwn16QXJhclHy/eTi5JLk0uQHyWXJD5PLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSW5PbkiFUSQ8evfLaGx/5dD69T/EZfEZ/jc/kr/WZ/XU+4a/3WfwNPqu/0Wfz2X0On9Pn8rl9Hm89eefZxz6vz+eT/iaf39/sU30BX9AX8t4X9kV8I9/YN/ZN/OO+qW/mm/sn/BO+pW/pn/RP+qd8G/+0b+uf8e38s769f84/55/3HX0n39m/4Lv4F31X38139919T9/T9/a9fV/f1/f3/f0AP8AP9AP9ID/ID/FD/FA/1A/zw/xwP9yP9CP9KD/Kj/Fj/Dg/zk/wE/xEP9FP8pN8BABT/VQ/3U/3M/1MP8vP8nP8HD83da6f5+f5BX6BX+QX+cV+sV/ql/plfplf7pf7lX6lX+1X+7V+rV/v1/uNfqPf7Df7rX6r3+63+x1+h9/ld/k9fo/f5/f5/X6/P+AP+IP+oD/kD/nD/rA/4r/0R/1X/pj/2h/33/gT/lt/0n/nT/nT/oz/3p/1P/hz/ry/4H/0F/1P/pL/2V/2wU9IvJmYmHgrMSnxdmJyYkpiamJaYnpiRmJm4p3ErMTsxJzEu4m5ifcS8xLzEwsSCxOLEu8nFieWJJYmPkgsS3yYWJ5YkViZWJVYnVhjIOTeEYe8IV9IhptC/nBzSA0FQsFQKPhQOBQJRUOxcEsoHm4NJcJtoWS4PZQKpUOZ8GioHxqEhqFRaBweC03C46FpaBaahydCi9AytApPhtbhqdAmPB3ahmdCu/BsaB+eCx3C86Fj6BQ6hxdCl/Bi6Bq6he6hR+gZeoXeoU/oG/qF/uGlMCC8HAaGV8KgMDgMCa+GoeG1MCy8HoaHEWFkeCOMCqPDmDA2jAvjw4TwZpgY3gqTwtthcpgSpoZpYXqYEWaGd8KsMDvMCe+GueG9MC/MDwvCwrAovB8WhyVhafggLAsfhuVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gatoXt4aOwI+wMu8LusCfsDfvCx2F/+CQcCJ+Gg+GzcCh8Hg6HL8KR8GU4Gr4Kx8LX4Xj4JpwI34aT4btwKpwOZ8L34Wz4IZwL58OF8GO4GH4Kl8LP4fIf/MxapT/zFroQQgghxP9Hev3O/h7/5jkDAOqX8U8hhGt35jz6j/s1AGzO9rdxH5WrRQIAnurW4aG/bxUrdu/e/ZfXLtcQ5ZsPAIl/OcAv8QpoDi2hNTSDYv+2vj6q00X+nfmTtwFk/IecFPg1/nX+z/+D+R97YuTikvGFLP/J/PMBUvP9mnPlKvzv8QpofmU10AyK/wfzZ2/yO/Vn+GICQNN/yMkEAE0z/Gv9ReBxeBpa/9MrhRBCCCGEEEKIv+mjyrT7vevnK9fnucyvOenh1/j3rs+FEEIIIYQQQghx9T3bqfOTj7Vu3aydDGQggzQ2aPmfvOZq/2YSQgghhBBC/Nl+Pen/9bkMV7MgIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAiDfp/8Z/GrvYahRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiKvtfwUAAP//D5g3fQ==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m1.328326315s ago: executing program 6 (id=1211): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 5m57.123066612s ago: executing program 6 (id=1223): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x3}, 0x8}}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 5m53.881228464s ago: executing program 34 (id=1223): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x3}, 0x8}}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 3m37.278030545s ago: executing program 7 (id=1575): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 3m35.899910408s ago: executing program 7 (id=1580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) recvfrom$inet(r0, &(0x7f0000000000)=""/12, 0xc, 0xc9100120, 0x0, 0x0) 3m34.100495097s ago: executing program 7 (id=1586): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x6b, 0x20, 0xc, 0x3, "d8dbfb79570ec20a00957f00003d00000020020661e624d2b32c4645db2300"}) 3m29.945974504s ago: executing program 7 (id=1603): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m29.267897656s ago: executing program 7 (id=1605): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ca6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbd}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) 3m28.130980214s ago: executing program 7 (id=1609): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x3, 0x4009, 0x2, 0x8002, 0xfffd, 0x800, 0x3903, 0xfffc, 0x8, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x22, 0x2, {0x2, 0x2}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3m25.817024924s ago: executing program 35 (id=1609): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x3, 0x4009, 0x2, 0x8002, 0xfffd, 0x800, 0x3903, 0xfffc, 0x8, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x22, 0x2, {0x2, 0x2}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m44.628217458s ago: executing program 0 (id=1873): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/77, 0x4d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0xfc}, 0x2) 1m38.032561412s ago: executing program 0 (id=1886): sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f0000005600)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x1c0}}], 0x1, 0x20004014) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.698356535s ago: executing program 0 (id=1890): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000700)={0x40, 0x12, 0x2, "60f3"}, 0x0, 0x0, 0x0, 0x0}) 1m31.981706927s ago: executing program 0 (id=1899): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") sync() creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m30.046781204s ago: executing program 0 (id=1905): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000742000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ac6000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180feff00000c00", 0x33fe0}], 0x1}, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m16.074765665s ago: executing program 0 (id=1930): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f00000011c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eacab940ab5c96cb5d81dac1ad2243d878ddea08b78f666b96206bafe0ab1bd5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4dec1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb751d21b2", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000001780)=""/4097, 0x1001, 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 1m13.390302322s ago: executing program 36 (id=1930): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f00000011c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eacab940ab5c96cb5d81dac1ad2243d878ddea08b78f666b96206bafe0ab1bd5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4dec1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb751d21b2", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000001780)=""/4097, 0x1001, 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 10.131606944s ago: executing program 5 (id=2064): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x3e, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xffff, 0x8000, 0x4, 0x7, 0x3, 0xf, 0xe95e, 0x200, 0x0, 0xaff5, 0xfffe, 0x3}}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.568039174s ago: executing program 5 (id=2066): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r1, 0x20, 0x0, 0x8000) write$UHID_CREATE2(r0, &(0x7f00000014c0)=ANY=[], 0x1118) 6.695301921s ago: executing program 5 (id=2070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 6.089828551s ago: executing program 2 (id=2071): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 5.118558653s ago: executing program 2 (id=2072): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 5.001169398s ago: executing program 3 (id=2073): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) recvfrom$inet6(r0, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) 4.700025375s ago: executing program 5 (id=2074): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 4.274069057s ago: executing program 2 (id=2075): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 4.216020624s ago: executing program 3 (id=2076): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r1, 0xfffffe4d}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 3.593525155s ago: executing program 5 (id=2077): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001a4000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x403, 0x0, 0x0, 0x8, 0x9a}) 3.334749543s ago: executing program 3 (id=2078): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.283003014s ago: executing program 2 (id=2079): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x5bb2, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 2.282676145s ago: executing program 2 (id=2080): r0 = socket$can_j1939(0x1d, 0x2, 0x7) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @private=0xa010101, @empty}, {0x4e22, 0x880b, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "b7d2879fed3b856162da9ec434fdaab5c494f1c4e726f95dabb36763d5c353f8", "1000273f716ae909ce00", {"e6b31614bcd2f09095e8a23c966d40fe", "3b0a52f8e75b268188a04a46eb84ebc4"}}}}}}}}, 0x8a) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r2, 0x2, {0x2, 0x0, 0x4}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can={0x1d, 0x0, 0x33}, 0x80, 0x0}}], 0x1, 0x48010) 2.076122598s ago: executing program 3 (id=2081): unshare(0x2a020480) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 1.103639425s ago: executing program 3 (id=2082): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0xc002, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x325, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 627.217626ms ago: executing program 2 (id=2083): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x20001080) 406.811342ms ago: executing program 5 (id=2084): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000185}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000000)={0x2a, 0x3ff, 0x8}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=2085): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"}) r1 = syz_open_pts(r0, 0x8182) landlock_restrict_self(0xffffffffffffffff, 0xa) r2 = dup3(r1, r0, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): abling free space tree [ 810.164059][T11271] BTRFS info (device loop3): force clearing of disk cache [ 810.171523][T11271] BTRFS info (device loop3): enabling auto defrag [ 810.178174][T11271] BTRFS info (device loop3): use zlib compression, level 3 [ 810.299839][ T29] audit: type=1800 audit(1780275542.180:171): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1476" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 810.791968][T11291] loop2: detected capacity change from 0 to 128 [ 810.922000][T11291] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 811.020709][T11291] hpfs: filesystem error: improperly stopped [ 811.061979][T11291] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 811.116637][T11291] hpfs: You really don't want any checks? You are crazy... [ 811.165366][T11291] hpfs: hpfs_map_sector(): read error [ 811.202717][T11291] hpfs: code page support is disabled [ 811.235480][T11291] hpfs: hpfs_map_4sectors(): unaligned read [ 811.255682][ T5583] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 811.290827][T11291] hpfs: hpfs_map_4sectors(): unaligned read [ 811.339383][T11291] hpfs: filesystem error: unable to find root dir [ 811.664574][T11295] loop0: detected capacity change from 0 to 2048 [ 811.870081][T11295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.597636][T10108] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 812.687546][T10108] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 812.713058][T10108] EXT4-fs (loop0): This should not happen!! Data will be lost [ 812.713058][T10108] [ 812.750096][T10108] EXT4-fs (loop0): Total free blocks count 0 [ 812.769056][T11306] loop2: detected capacity change from 0 to 1024 [ 812.776323][T10108] EXT4-fs (loop0): Free/Dirty block details [ 812.803062][T10108] EXT4-fs (loop0): free_blocks=2415919104 [ 812.826692][T10108] EXT4-fs (loop0): dirty_blocks=48 [ 812.839003][T11306] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 812.882234][T10108] EXT4-fs (loop0): Block reservation details [ 812.897182][T10108] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 812.955273][T11306] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 812.972874][T11306] EXT4-fs (loop2): orphan cleanup on readonly fs [ 812.992066][T11306] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1483: Freeing blocks not in datazone - block = 0, count = 4096 [ 813.031326][T11306] loop2: lost filesystem error report for type 5 error -117 [ 813.032498][T11306] EXT4-fs (loop2): 1 orphan inode deleted [ 813.046077][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 813.046175][ C1] EXT4-fs (loop2): initial error at time 1780275544: ext4_free_blocks:6718 [ 813.046306][ C1] EXT4-fs (loop2): last error at time 1780275544: ext4_free_blocks:6718 [ 813.072895][T11306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 813.084986][ T5576] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 813.240183][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.665899][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.863643][ T29] audit: type=1326 audit(1780275545.730:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 814.042840][ T29] audit: type=1326 audit(1780275545.740:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 814.200563][ T29] audit: type=1326 audit(1780275545.800:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 814.371688][ T29] audit: type=1326 audit(1780275545.810:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 814.558407][ T29] audit: type=1326 audit(1780275545.810:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 814.727903][ T29] audit: type=1326 audit(1780275545.820:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 814.929352][ T29] audit: type=1326 audit(1780275545.820:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 815.074564][ T29] audit: type=1326 audit(1780275545.820:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 815.189521][ T29] audit: type=1326 audit(1780275545.820:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 815.257622][ T29] audit: type=1326 audit(1780275545.820:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.0.1484" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0159ce59 code=0x7ffc0000 [ 816.506595][T11344] loop0: detected capacity change from 0 to 128 [ 816.595380][T11344] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 816.745410][T11348] loop7: detected capacity change from 0 to 1024 [ 816.775683][T11348] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 816.881787][ T9600] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 816.896135][T11348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.129364][ T9600] usb 4-1: Using ep0 maxpacket: 8 [ 817.212820][ T9600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.290248][ T9600] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 817.368207][ T9600] usb 4-1: config 1 has no interface number 0 [ 817.421418][ T9600] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 817.499389][ T9600] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 817.582601][ T9600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.659665][ T9600] usb 4-1: Product: syz [ 817.699562][ T9600] usb 4-1: Manufacturer: syz [ 817.757324][ T9600] usb 4-1: SerialNumber: syz [ 817.797689][T10778] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.435722][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.442676][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.262479][ T9600] usb 4-1: USB disconnect, device number 21 [ 820.172872][T11369] loop7: detected capacity change from 0 to 32768 [ 820.186495][T11369] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1509 (11369) [ 820.223899][T11369] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 820.234459][T11369] BTRFS info (device loop7): using sha256 checksum algorithm [ 820.384896][T11369] BTRFS info (device loop7): enabling ssd optimizations [ 820.392258][T11369] BTRFS info (device loop7): turning on async discard [ 820.399232][T11369] BTRFS info (device loop7): enabling free space tree [ 820.503575][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 820.503659][ T29] audit: type=1800 audit(1780275552.380:199): pid=11369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1509" name="file2" dev="loop7" ino=261 res=0 errno=0 [ 821.146704][T11053] udevd[11053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.776730][T10778] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 822.647561][T11406] loop2: detected capacity change from 0 to 1024 [ 822.707583][T11406] EXT4-fs: Ignoring removed bh option [ 822.843311][T11406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.420537][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.759954][T11422] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1524'. [ 823.818353][T11422] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1524'. [ 824.166006][T11425] loop2: detected capacity change from 0 to 512 [ 824.232943][T11425] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 824.335632][T11425] EXT4-fs (loop2): orphan file too big: 8388608 [ 824.389901][T11425] EXT4-fs (loop2): mount failed [ 824.845122][T11432] loop5: detected capacity change from 0 to 512 [ 824.893915][T11432] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 824.929414][T11432] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 824.987047][T11432] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 825.112462][T11432] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1528'. [ 826.044250][T11446] loop5: detected capacity change from 0 to 512 [ 826.137260][T11446] EXT4-fs (loop5): Test dummy encryption mode enabled [ 826.148792][ T5682] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 826.238418][T11446] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1534: inode has both inline data and extents flags [ 826.266725][T11446] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 826.267884][T11446] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1534: couldn't read orphan inode 15 (err -117) [ 826.277732][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 826.277920][ C1] EXT4-fs (loop5): initial error at time 1780275558: ext4_orphan_get:1397: inode 15 [ 826.278086][ C1] EXT4-fs (loop5): last error at time 1780275558: ext4_orphan_get:1397: inode 15 [ 826.322135][T11446] loop5: lost filesystem error report for type 5 error -117 [ 826.354920][T11446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.373373][ T5682] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 826.476330][T11449] loop7: detected capacity change from 0 to 1024 [ 826.526358][T11449] ext4: Bad value for 'resgid' [ 826.546288][T11449] ext4: Bad value for 'resgid' [ 826.821431][ T5682] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 827.051877][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 827.059373][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.126885][ T5682] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 827.188842][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.360207][ T5682] usb 4-1: config 0 descriptor?? [ 827.487911][ T5682] gspca_main: sunplus-2.14.0 probing 041e:400b [ 828.784290][T11458] fido_id[11458]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 828.868778][ T5682] gspca_sunplus: reg_w_riv err -71 [ 828.912109][ T5682] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 829.002010][ T5682] usb 4-1: USB disconnect, device number 22 [ 829.021246][T11470] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1544'. [ 829.283333][T11472] loop0: detected capacity change from 0 to 512 [ 829.447135][T11472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.509614][T11472] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.641471][ T29] audit: type=1800 audit(1780275561.520:200): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1545" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 830.216335][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.533652][T11522] loop5: detected capacity change from 0 to 128 [ 832.589342][T11522] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 832.861827][T11525] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 832.949351][T11522] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 833.361949][ T9600] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 833.606403][ T9600] usb 4-1: Using ep0 maxpacket: 32 [ 833.663300][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.756761][ T9600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.849592][ T9600] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 833.904791][ T9600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.993422][ T9600] usb 4-1: config 0 descriptor?? [ 834.080546][ T9600] hub 4-1:0.0: USB hub found [ 834.340843][ T9600] hub 4-1:0.0: 1 port detected [ 834.767728][T11535] loop5: detected capacity change from 0 to 4096 [ 834.864239][T11535] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 834.983714][ T9600] hub 4-1:0.0: activate --> -90 [ 835.193906][ T24] usb 4-1: USB disconnect, device number 23 [ 835.568929][T11549] syz_tun: entered allmulticast mode [ 835.716713][T11549] pimreg: entered allmulticast mode [ 835.762602][T11552] pimreg: left allmulticast mode [ 836.033119][T11547] syz_tun: left allmulticast mode [ 837.028700][T11571] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 837.272301][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 837.481336][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 837.492112][T11576] netlink: 'syz.3.1584': attribute type 18 has an invalid length. [ 837.535685][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.550680][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 837.569931][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.605096][ T24] usb 3-1: string descriptor 0 read error: -22 [ 837.620163][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 837.667482][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.726521][T11576] netlink: 'syz.3.1584': attribute type 18 has an invalid length. [ 837.737843][T10108] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.752640][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 837.769914][ T56] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.815024][ T56] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.864517][ T56] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.109924][T11580] loop0: detected capacity change from 0 to 512 [ 838.988021][ T9600] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 839.137306][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 839.233325][ T24] usb 3-1: USB disconnect, device number 25 [ 839.252458][ T9600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.310534][ T9600] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.354252][ T9600] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 839.392888][ T9600] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.499155][ T9600] usb 8-1: config 0 descriptor?? [ 840.074795][ T9600] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 840.194760][ T9600] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.001B/input/input20 [ 840.549836][ T9600] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 841.542971][ T5680] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 842.380745][T11622] loop5: detected capacity change from 0 to 128 [ 842.387834][ T9600] usb 8-1: USB disconnect, device number 3 [ 842.441330][T11622] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 842.476604][T11622] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.522403][T11615] fido_id[11615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.001B/report_descriptor': No such file or directory [ 842.951879][ T5682] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 843.174650][ T5682] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 843.246401][ T5682] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 843.319258][ T5682] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 843.385806][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.455232][ T5682] usb 1-1: Product: syz [ 843.465192][ T5580] Bluetooth: hci3: command 0x1003 tx timeout [ 843.471649][ T48] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 843.512135][ T5682] usb 1-1: Manufacturer: syz [ 843.519711][ T5682] usb 1-1: SerialNumber: syz [ 843.564328][ T5682] usb 1-1: config 0 descriptor?? [ 843.594277][T11626] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.639972][T11626] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.789909][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1606'. [ 843.975416][T11626] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 844.000117][T11626] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 844.011258][ T6514] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 844.098208][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1606'. [ 844.381005][T10108] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.500362][ T5682] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 844.617601][T11637] binder: 11636:11637 ioctl c0306201 2000000001c0 returned -14 [ 844.710021][ T5682] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 844.733625][T10108] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.841396][ T5682] usb 1-1: USB disconnect, device number 13 [ 845.020824][T10108] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.263685][T10108] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.631672][T10108] bond0 (unregistering): Released all slaves [ 847.117014][T11649] loop3: detected capacity change from 0 to 1024 [ 847.240306][T11649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 847.289049][T11649] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 847.410452][T11649] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1615: Freeing blocks not in datazone - block = 0, count = 16 [ 847.578743][T11645] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 847.814750][ T5583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 847.894897][ T5580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 847.907963][ T5580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 847.919721][ T5580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 847.939643][ T5580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 847.959583][ T5580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 848.625717][T11665] netlink: 'syz.5.1619': attribute type 5 has an invalid length. [ 848.730622][T10108] hsr_slave_0: left promiscuous mode [ 848.761747][T10108] hsr_slave_1: left promiscuous mode [ 848.879136][T10108] veth1_macvtap: left promiscuous mode [ 848.906493][T10108] veth0_macvtap: left promiscuous mode [ 848.925009][T10108] veth1_vlan: left promiscuous mode [ 848.951866][T10108] veth0_vlan: left promiscuous mode [ 850.031777][ T5580] Bluetooth: hci3: command tx timeout [ 850.961754][ T5680] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 851.144382][ T5680] usb 3-1: Using ep0 maxpacket: 32 [ 851.201631][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.236706][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.313676][ T5680] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 851.350628][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.415867][ T5680] usb 3-1: config 0 descriptor?? [ 852.032706][ T5680] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 852.048340][T11704] loop0: detected capacity change from 0 to 128 [ 852.101725][ T5580] Bluetooth: hci3: command tx timeout [ 852.247882][ T5680] usb 3-1: USB disconnect, device number 26 [ 852.288748][T11665] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 852.341804][T11665] ip6erspan0: entered promiscuous mode [ 853.019777][ T5231] 8021q: adding VLAN 0 to HW filter on device eth13 [ 853.040657][T11705] fido_id[11705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 853.892251][ T5680] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 854.130553][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 854.185327][ T5580] Bluetooth: hci3: command tx timeout [ 854.192571][ T5680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 854.255621][ T5680] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 854.319824][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.395025][ T5680] usb 3-1: config 0 descriptor?? [ 854.953879][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 854.961917][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 855.002482][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 855.010005][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 855.048105][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 855.075917][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 855.103130][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 855.122112][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 855.165695][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 855.246018][ T5682] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 855.456992][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 855.498276][ T5682] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 855.529138][ T5682] usb 4-1: config 179 has no interface number 0 [ 855.579691][ T5682] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 855.642044][ T5682] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 855.698696][ T5682] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 855.756481][ T5682] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 855.817000][ T5682] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 855.875232][ T5682] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 855.927643][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.067594][T11735] loop5: detected capacity change from 0 to 32768 [ 856.079767][T11735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1639 (11735) [ 856.103245][ T5680] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x0 [ 856.120854][T11733] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 856.144462][T11735] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 856.154948][T11735] BTRFS info (device loop5): using sha256 checksum algorithm [ 856.278683][ T5580] Bluetooth: hci3: command tx timeout [ 856.347507][T11735] BTRFS info (device loop5): rebuilding free space tree [ 856.386370][T11735] BTRFS info (device loop5): enabling ssd optimizations [ 856.394092][T11735] BTRFS info (device loop5): turning on async discard [ 856.401383][T11735] BTRFS info (device loop5): enabling free space tree [ 856.408359][T11735] BTRFS info (device loop5): force clearing of disk cache [ 856.416001][T11735] BTRFS info (device loop5): enabling auto defrag [ 856.423063][T11735] BTRFS info (device loop5): use zlib compression, level 3 [ 856.479615][ T5680] kovaplus 0003:1E7D:2D50.001D: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 856.570196][ T29] audit: type=1800 audit(1780275588.440:201): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1639" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 856.938318][T11730] loop0: detected capacity change from 0 to 8192 [ 857.034829][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.065885][T10467] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input21 [ 857.168629][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.335833][T11730] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 857.690927][ T5682] usb 4-1: USB disconnect, device number 24 [ 857.691290][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 857.691540][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 857.814983][ T5680] kovaplus 0003:1E7D:2D50.001D: couldn't init struct kovaplus_device [ 857.834628][ T5680] kovaplus 0003:1E7D:2D50.001D: couldn't install mouse [ 857.961049][ T5680] kovaplus 0003:1E7D:2D50.001D: probe with driver kovaplus failed with error -71 [ 858.018779][ T6514] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 858.196171][ T5680] usb 3-1: USB disconnect, device number 27 [ 858.760392][T11757] fido_id[11757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 859.286283][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 859.873084][T11782] loop2: detected capacity change from 0 to 128 [ 860.078886][T11782] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 860.193023][T11782] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.304221][ T5577] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 862.337531][T11800] loop0: detected capacity change from 0 to 32768 [ 862.355456][T11800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1649 (11800) [ 862.381359][T11800] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 862.392964][T11800] BTRFS info (device loop0): using sha256 checksum algorithm [ 862.654246][T11800] BTRFS info (device loop0): rebuilding free space tree [ 862.703056][T11800] BTRFS info (device loop0): enabling ssd optimizations [ 862.710245][T11800] BTRFS info (device loop0): turning on async discard [ 862.717454][T11800] BTRFS info (device loop0): enabling free space tree [ 862.724558][T11800] BTRFS info (device loop0): force clearing of disk cache [ 862.732001][T11800] BTRFS info (device loop0): enabling auto defrag [ 862.738649][T11800] BTRFS info (device loop0): use zlib compression, level 3 [ 862.803169][ T29] audit: type=1326 audit(1780275594.680:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.5.1652" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58e0d9ce59 code=0x0 [ 863.111916][ T29] audit: type=1800 audit(1780275594.720:203): pid=11800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1649" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 863.600495][ T5576] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 863.761041][ T5231] 8021q: adding VLAN 0 to HW filter on device eth14 [ 864.681864][ T5680] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 864.722063][ T9600] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 864.758449][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.799626][T11659] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.829906][T11659] bridge_slave_0: entered allmulticast mode [ 864.882080][ T5680] usb 3-1: Using ep0 maxpacket: 16 [ 864.898044][T11659] bridge_slave_0: entered promiscuous mode [ 864.930676][ T5680] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.949093][ T9600] usb 4-1: Using ep0 maxpacket: 32 [ 864.982618][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.019577][ T5680] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.025991][T11659] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.035945][ T9600] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 865.068229][ T9600] usb 4-1: config 0 has no interface number 0 [ 865.079076][ T5680] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 865.093082][T11659] bridge_slave_1: entered allmulticast mode [ 865.106242][ T9600] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 865.132362][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.154822][T11659] bridge_slave_1: entered promiscuous mode [ 865.180366][ T9600] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 865.228590][ T9600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.265121][ T9600] usb 4-1: Product: syz [ 865.288841][ T9600] usb 4-1: Manufacturer: syz [ 865.318777][ T9600] usb 4-1: SerialNumber: syz [ 865.412376][ T9600] usb 4-1: config 0 descriptor?? [ 865.606665][ T9600] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 865.675624][ T9600] em28xx 4-1:0.132: Video interface 132 found: [ 865.767969][ T5680] mcp2221 0003:04D8:00DD.001E: item fetching failed at offset 1/5 [ 865.823479][ T5680] mcp2221 0003:04D8:00DD.001E: can't parse reports [ 865.875958][T11659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.889521][ T5680] mcp2221 0003:04D8:00DD.001E: probe with driver mcp2221 failed with error -22 [ 865.971411][ T9600] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 866.010789][ T5680] usb 3-1: USB disconnect, device number 28 [ 866.062015][T11659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.650605][ T9600] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 866.689970][ T9600] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 866.716988][ T9600] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 866.821610][ T9600] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 866.854738][ T9600] em28xx 4-1:0.132: analog set to bulk mode. [ 866.907651][ T5680] em28xx 4-1:0.132: Registering V4L2 extension [ 867.010290][ T9600] usb 4-1: USB disconnect, device number 25 [ 867.074235][ T9600] em28xx 4-1:0.132: Disconnecting em28xx [ 868.382515][ T5680] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 868.420071][ T5680] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 868.464976][ T5680] em28xx 4-1:0.132: No AC97 audio processor [ 868.495558][ T5680] usb 4-1: Decoder not found [ 868.518142][ T5680] em28xx 4-1:0.132: failed to create media graph [ 868.557393][ T5680] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 868.626650][ T5680] em28xx 4-1:0.132: Remote control support is not available for this card. [ 868.669935][ T9600] em28xx 4-1:0.132: Closing input extension [ 868.735987][ T9600] em28xx 4-1:0.132: Freeing device [ 870.199529][T11659] team0: Port device team_slave_0 added [ 870.236526][T10093] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.286612][T10093] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 870.407969][T11659] team0: Port device team_slave_1 added [ 870.450009][T10110] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.472176][T10110] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 870.510990][T10110] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.576036][T10110] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 870.806436][T10110] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.869859][T10110] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 871.161033][T11659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.189721][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.345159][T11659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.445903][T11659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.460113][T11901] loop2: detected capacity change from 0 to 512 [ 871.489887][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.613804][T11901] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1675: inode has both inline data and extents flags [ 871.651294][T11901] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 871.653503][T11901] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1675: couldn't read orphan inode 15 (err -117) [ 871.659942][T11659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.663265][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 871.663380][ C0] EXT4-fs (loop2): initial error at time 1780275603: ext4_orphan_get:1397: inode 15 [ 871.702330][ C0] EXT4-fs (loop2): last error at time 1780275603: ext4_orphan_get:1397: inode 15 [ 871.726106][T11901] loop2: lost filesystem error report for type 5 error -117 [ 871.730147][T11901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.784212][T11901] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 871.836282][ T5231] 8021q: adding VLAN 0 to HW filter on device eth15 [ 872.284880][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.668235][T11659] hsr_slave_0: entered promiscuous mode [ 872.715386][T11659] hsr_slave_1: entered promiscuous mode [ 872.779535][T11659] debugfs: 'hsr0' already exists in 'hsr' [ 872.816228][T11659] Cannot create hsr debugfs directory [ 873.160562][T11923] loop5: detected capacity change from 0 to 512 [ 873.239856][T11923] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 873.359749][T11923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.499911][T11923] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.1682: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 873.654275][T11923] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 12: comm syz.5.1682: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 873.781968][T11923] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.1682: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 874.289218][ T6514] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 874.400500][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.572727][T11937] loop0: detected capacity change from 0 to 512 [ 874.688957][T11937] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 874.712512][T11937] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1688: corrupted in-inode xattr: e_value size too large [ 874.748683][T11937] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 874.751213][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 874.767203][ C0] EXT4-fs (loop0): initial error at time 1780275606: ext4_iget_extra_inode:5128: inode 15 [ 874.777741][ C0] EXT4-fs (loop0): last error at time 1780275606: ext4_iget_extra_inode:5128: inode 15 [ 874.788794][T11937] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1688: couldn't read orphan inode 15 (err -117) [ 874.811603][T11937] loop0: lost filesystem error report for type 5 error -117 [ 874.826140][T11937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.359453][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.633918][ T5680] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 875.814835][T11659] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 875.844449][ T5680] usb 3-1: Using ep0 maxpacket: 8 [ 875.887047][ T5680] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.925508][ T5680] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.929843][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 875.960388][ T5680] usb 3-1: config 1 has no interface number 0 [ 875.983781][ T5680] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 876.014985][T10467] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 876.033439][T11659] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 876.074373][ T5680] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 876.144620][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.174794][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 876.196967][ T5680] usb 3-1: Product: syz [ 876.226433][ T5680] usb 3-1: Manufacturer: syz [ 876.240412][T11659] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 876.252172][T10467] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.287607][ T5680] usb 3-1: SerialNumber: syz [ 876.328349][T10467] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.370475][T10467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.381656][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 876.400261][T10467] usb 4-1: Product: syz [ 876.420016][T11659] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 876.434953][T10467] usb 4-1: Manufacturer: syz [ 876.470097][T10467] usb 4-1: SerialNumber: syz [ 876.552075][T10467] cdc_ncm 4-1:1.0: skipping garbage [ 876.571290][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 877.722714][ T5680] usb 3-1: USB disconnect, device number 29 [ 877.854406][T10467] cdc_ncm 4-1:1.0: bind() failure [ 878.083117][T10467] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 878.161631][T10467] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 878.175098][T10943] udevd[10943]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.246352][T10467] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 878.357269][T10467] usb 4-1: USB disconnect, device number 26 [ 878.720337][T11659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.093258][T11659] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.263857][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.271499][T10091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.475382][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.483141][T10106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.875976][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.882981][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.016794][ T5231] 8021q: adding VLAN 0 to HW filter on device eth16 [ 882.943827][T12021] loop2: detected capacity change from 0 to 4096 [ 883.278886][T12032] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 883.514220][ T29] audit: type=1800 audit(1780275615.330:204): pid=12021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1714" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 884.596111][T12041] loop5: detected capacity change from 0 to 7 [ 884.689333][T12041] Dev loop5: unable to read RDB block 7 [ 884.771705][T12041] loop5: AHDI p1 p2 p3 [ 884.826054][T12041] loop5: partition table partially beyond EOD, truncated [ 884.940927][T12041] loop5: p1 start 926365495 is beyond EOD, truncated [ 885.043173][T12041] loop5: p2 start 1702059890 is beyond EOD, truncated [ 885.217510][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053207000: rx timeout, send abort [ 885.229417][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053207000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 887.686857][T12053] loop2: detected capacity change from 0 to 32768 [ 887.696912][T12053] btrfs: Deprecated parameter 'usebackuproot' [ 887.703364][T12053] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 887.747384][T12053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1725 (12053) [ 888.645322][T12053] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 888.656052][T12053] BTRFS info (device loop2): using crc32c checksum algorithm [ 889.511416][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 889.512581][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 889.522955][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 889.533997][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 889.544147][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 889.554000][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 889.564022][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 889.574371][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 889.584155][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 889.594657][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 889.605302][T12053] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 889.616453][T12053] BTRFS error (device loop2): open_ctree failed: -12 [ 891.253373][T12095] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1731'. [ 891.327331][T11659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.548396][ T5680] hid_parser_main: 222 callbacks suppressed [ 892.548587][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.627684][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.677508][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.716751][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.761705][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.801541][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.837519][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.880403][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.931536][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 892.971761][ T5680] hid-generic 0006:0004:0009.001F: unknown main item tag 0x0 [ 893.069018][ T5680] hid-generic 0006:0004:0009.001F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 893.857102][T12125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1741'. [ 894.148509][T12119] fido_id[12119]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 895.730208][T11659] veth0_vlan: entered promiscuous mode [ 895.992721][T11659] veth1_vlan: entered promiscuous mode [ 896.661643][T12143] loop0: detected capacity change from 0 to 32768 [ 896.671857][T12143] btrfs: Deprecated parameter 'usebackuproot' [ 896.678218][T12143] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 896.689600][T12143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1746 (12143) [ 896.722495][T12143] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 896.733016][T12143] BTRFS info (device loop0): using crc32c checksum algorithm [ 896.850899][T10098] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 896.882887][T12143] BTRFS error (device loop0): failed to load root extent [ 896.890402][T12143] BTRFS warning (device loop0): try to load backup roots slot 1 [ 896.900868][T10098] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 896.918422][T12143] BTRFS warning (device loop0): couldn't read tree root [ 896.926242][T12143] BTRFS warning (device loop0): try to load backup roots slot 2 [ 896.952993][T10112] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 896.997694][T12143] BTRFS warning (device loop0): couldn't read tree root [ 897.005297][T12143] BTRFS warning (device loop0): try to load backup roots slot 3 [ 897.058267][T12143] BTRFS info (device loop0): rebuilding free space tree [ 897.098822][T12143] BTRFS info (device loop0): checking UUID tree [ 897.109295][T12143] BTRFS info (device loop0): enabling ssd optimizations [ 897.116618][T12143] BTRFS info (device loop0): turning on async discard [ 897.123704][T12143] BTRFS info (device loop0): enabling free space tree [ 897.130669][T12143] BTRFS info (device loop0): force clearing of disk cache [ 897.138238][T12143] BTRFS info (device loop0): enabling auto defrag [ 897.145224][T12143] BTRFS info (device loop0): trying to use backup root at mount time [ 897.153607][T12143] BTRFS info (device loop0): use zstd compression, level 3 [ 897.206231][T11659] veth0_macvtap: entered promiscuous mode [ 897.353959][T12143] BTRFS critical (device loop0 state E): emergency shutdown [ 897.375488][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 897.378879][T11659] veth1_macvtap: entered promiscuous mode [ 897.443224][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 897.697224][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 897.754677][T10093] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 897.768687][T10091] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 897.797500][ T5576] BTRFS info (device loop0 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 897.816944][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 897.886312][T10091] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 897.895876][T10466] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 897.944446][T10108] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 898.103116][T10466] usb 6-1: Using ep0 maxpacket: 16 [ 898.203070][T10466] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 898.296712][T11659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.301805][T10466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 898.471645][T10466] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 898.510467][T10466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.572459][T11659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.596543][T10466] usb 6-1: Product: syz [ 898.627018][T10466] usb 6-1: Manufacturer: syz [ 898.665698][T10466] usb 6-1: SerialNumber: syz [ 898.716588][T10466] usb 6-1: config 0 descriptor?? [ 898.851423][T10106] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.868759][T10466] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 898.906863][T10106] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.920427][T10466] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 898.985112][T10106] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.025528][T12179] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1753'. [ 899.053484][T10106] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.098297][T12181] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1753'. [ 899.527681][T10466] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 899.578457][T10466] em28xx 6-1:0.0: Config register raw data: 0xa7 [ 899.616043][T10466] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 899.658028][T10466] em28xx 6-1:0.0: No AC97 audio processor [ 900.079300][T10466] usb 6-1: USB disconnect, device number 14 [ 900.192098][ T9601] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 900.326021][T12191] loop3: detected capacity change from 0 to 1024 [ 900.401920][T12191] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 900.432087][ T9601] usb 1-1: Using ep0 maxpacket: 16 [ 900.466963][T12191] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 900.498083][ T9601] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 900.522615][ T9601] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.538345][T12191] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 900.595901][ T9601] usb 1-1: config 0 has no interface number 0 [ 900.605249][T12191] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.1757: inode #63: comm syz.3.1757: iget: illegal inode # [ 900.663412][ T9601] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 900.710576][T12191] loop3: lost filesystem error report for type 5 error -117 [ 900.711206][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 900.725467][ C0] EXT4-fs (loop3): initial error at time 1780275632: ext4_get_journal_inode:5896 [ 900.734940][ C0] EXT4-fs (loop3): last error at time 1780275632: ext4_get_journal_inode:5896 [ 900.736307][ T9601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.762885][T12191] EXT4-fs (loop3): no journal found [ 900.796039][T12191] EXT4-fs (loop3): can't get journal size [ 900.842986][T12191] EXT4-fs (loop3): failed to initialize system zone (-22) [ 900.857624][ T9601] usb 1-1: Product: syz [ 900.890198][ T9601] usb 1-1: Manufacturer: syz [ 900.894531][T12191] EXT4-fs (loop3): mount failed [ 900.956936][ T9601] usb 1-1: SerialNumber: syz [ 901.019203][ T9601] usb 1-1: config 0 descriptor?? [ 901.319263][ T9601] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 901.374735][ T9601] uvcvideo 1-1:0.105: No valid video chain found. [ 901.638684][ T9600] usb 1-1: USB disconnect, device number 14 [ 901.984102][T12196] loop2: detected capacity change from 0 to 4096 [ 902.220529][T12207] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 902.386294][T12208] block nbd3: NBD_DISCONNECT [ 902.411015][T12208] block nbd3: Send disconnect failed -32 [ 902.455910][T12208] block nbd3: Disconnected due to user request. [ 902.483118][T12208] block nbd3: shutting down sockets [ 904.755020][T12237] loop0: detected capacity change from 0 to 128 [ 904.832922][T12237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 904.879683][T12237] System zones: 1-3, 19-19, 35-36 [ 904.909478][T12237] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 904.944809][T12237] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 905.186129][T12237] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups) [ 905.683109][ T5576] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 905.981858][T12254] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1771'. [ 906.042951][T12257] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1771'. [ 906.722122][T10467] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 906.965909][T10467] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 907.009504][T10467] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 907.060540][T10467] usb 4-1: config 150 has no interface number 0 [ 907.111810][T10467] usb 4-1: config 150 interface 204 has no altsetting 0 [ 907.180005][T10467] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 907.193428][T10467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.223561][T10467] usb 4-1: Product: syz [ 907.264506][T10467] usb 4-1: Manufacturer: syz [ 907.298290][T10467] usb 4-1: SerialNumber: syz [ 907.729383][T10467] xr_serial 4-1:150.204: skipping garbage [ 907.781467][T10467] xr_serial 4-1:150.204: xr_serial converter detected [ 907.961838][T12277] loop2: detected capacity change from 0 to 64 [ 908.314942][ T29] audit: type=1800 audit(1780275640.190:205): pid=12277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1776" name="file1" dev="loop2" ino=24 res=0 errno=0 [ 908.655297][T10467] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 908.833808][ T9601] usb 4-1: USB disconnect, device number 27 [ 908.882557][T12283] loop0: detected capacity change from 0 to 1024 [ 908.913402][ T9601] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 909.002725][ T9601] xr_serial 4-1:150.204: device disconnected [ 909.289361][ T29] audit: type=1326 audit(1780275641.170:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.5.1780" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58e0d9ce59 code=0x0 [ 909.508712][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 909.531635][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 909.553434][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 909.584994][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 909.618836][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 911.153710][T12305] loop5: detected capacity change from 0 to 256 [ 911.205491][T12312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.432607][T12313] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 911.706499][ T5580] Bluetooth: hci4: command tx timeout [ 912.924752][T10098] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.295257][T10098] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.776089][T10098] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.787938][ T5580] Bluetooth: hci4: command tx timeout [ 914.194209][T10098] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.379509][T10098] bridge_slave_1: left allmulticast mode [ 915.428096][T10098] bridge_slave_1: left promiscuous mode [ 915.452798][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.579889][T10098] bridge_slave_0: left allmulticast mode [ 915.628483][T10098] bridge_slave_0: left promiscuous mode [ 915.662625][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.742737][ T9601] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 915.861755][ T5580] Bluetooth: hci4: command tx timeout [ 915.943545][ T9601] usb 4-1: config 0 has no interfaces? [ 915.971563][ T9601] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 916.001551][ T9601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.053582][ T9601] usb 4-1: config 0 descriptor?? [ 916.244368][T12352] loop2: detected capacity change from 0 to 2048 [ 916.334481][T12352] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 916.378541][T12350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.428949][T12350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.460393][T12352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.508752][ T9601] usb 4-1: USB disconnect, device number 28 [ 917.063580][ T9601] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 917.298274][ T9601] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 917.338903][ T9601] usb 4-1: config 0 has no interface number 0 [ 917.373523][ T9601] usb 4-1: config 0 interface 8 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.429155][ T9601] usb 4-1: config 0 interface 8 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.489612][ T9601] usb 4-1: config 0 interface 8 has no altsetting 0 [ 917.524068][ T9601] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 917.565345][ T9601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.648608][ T9601] usb 4-1: config 0 descriptor?? [ 917.726239][T10098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.857821][T10098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.941933][ T5580] Bluetooth: hci4: command tx timeout [ 917.965298][T10098] bond0 (unregistering): Released all slaves [ 918.150602][ T9601] hid_parser_main: 7 callbacks suppressed [ 918.164568][ T9601] logitech-djreceiver 0003:046D:C534.0020: unknown main item tag 0x0 [ 918.255385][ T9601] logitech-djreceiver 0003:046D:C534.0020: hidraw0: USB HID v0.05 Device [HID 046d:c534] on usb-dummy_hcd.3-1/input8 [ 918.430083][ T9601] usb 4-1: USB disconnect, device number 29 [ 918.815291][T10098] hsr_slave_0: left promiscuous mode [ 918.875614][T10098] hsr_slave_1: left promiscuous mode [ 918.937624][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.992738][T10098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.036737][T12368] loop0: detected capacity change from 0 to 64 [ 919.084223][T10098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.152642][T10098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.389844][T10098] veth1_macvtap: left promiscuous mode [ 919.426596][T12363] fido_id[12363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 919.433193][T10098] veth0_macvtap: left promiscuous mode [ 919.525272][T10098] veth1_vlan: left promiscuous mode [ 919.565618][T10098] veth0_vlan: left promiscuous mode [ 922.360464][T10098] team0 (unregistering): Port device team_slave_1 removed [ 922.479011][T10098] team0 (unregistering): Port device team_slave_0 removed [ 923.876584][T12395] loop2: detected capacity change from 0 to 256 [ 924.050254][T12395] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 924.143903][T12397] loop0: detected capacity change from 0 to 1024 [ 924.185862][T12397] EXT4-fs: Ignoring removed orlov option [ 924.298754][T12397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.405665][T12395] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 924.974868][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.568704][T12431] netlink: 'syz.0.1819': attribute type 19 has an invalid length. [ 926.614047][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 926.833110][T12431] netlink: 'syz.0.1819': attribute type 19 has an invalid length. [ 926.841714][T10093] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.876450][T10093] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.887408][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 926.919280][T10093] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.971965][T10093] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 927.065920][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 927.477765][ T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 927.713571][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 927.763376][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.840364][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 927.879432][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.255879][ T24] usb 3-1: usb_control_msg returned -32 [ 928.303913][ T24] usbtmc 3-1:16.0: can't read capabilities [ 928.551926][T12292] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.578933][T12292] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.599814][T12292] bridge_slave_0: entered allmulticast mode [ 928.641759][T12292] bridge_slave_0: entered promiscuous mode [ 928.759561][T12292] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.808871][T12292] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.866036][T12292] bridge_slave_1: entered allmulticast mode [ 928.918457][T12292] bridge_slave_1: entered promiscuous mode [ 929.041764][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 929.274316][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 929.309562][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 929.358821][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 929.448986][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 929.477669][T12292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.494924][ T3097] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 929.509376][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.551435][ T24] usb 1-1: Product: syz [ 929.568196][ T24] usb 1-1: Manufacturer: syz [ 929.586812][ T24] usb 1-1: SerialNumber: syz [ 929.613810][T12292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.660614][ T24] usb 1-1: config 0 descriptor?? [ 929.693012][ T3097] usb 6-1: Using ep0 maxpacket: 8 [ 929.748635][ T3097] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 929.790308][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 929.811415][ T3097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.833057][ T3097] usb 6-1: Product: syz [ 929.837598][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 929.856890][ T3097] usb 6-1: Manufacturer: syz [ 929.878128][ T3097] usb 6-1: SerialNumber: syz [ 930.007251][ T3097] usb 6-1: config 0 descriptor?? [ 930.141422][T12292] team0: Port device team_slave_0 added [ 930.235308][T12292] team0: Port device team_slave_1 added [ 930.306506][ T3097] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 930.445435][ T9] usb 3-1: USB disconnect, device number 30 [ 930.456603][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 930.478204][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 930.712859][ T24] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 930.742869][T12292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.763148][ T24] em28xx 1-1:0.0: No AC97 audio processor [ 930.778141][T12292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.921636][ T24] usb 1-1: USB disconnect, device number 15 [ 930.927792][T12292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.004143][T12292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.031596][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.053466][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.060740][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.068026][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.075318][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.082624][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.089845][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.097130][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.099540][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 931.104375][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.117205][T12464] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.183555][ T3097] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 931.325335][ T24] em28xx 1-1:0.0: Freeing device [ 931.455196][ T3097] usb 6-1: USB disconnect, device number 15 [ 931.680234][T11059] udevd[11059]: setting mode of /dev/bus/usb/006/015 to 020664 failed: No such file or directory [ 931.785830][T11059] udevd[11059]: setting owner of /dev/bus/usb/006/015 to uid=0, gid=0 failed: No such file or directory [ 931.990610][T12292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.524309][T12292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.641809][T12468] loop3: detected capacity change from 0 to 512 [ 932.850965][T12468] EXT4-fs (loop3): 1 truncate cleaned up [ 932.882062][T12468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 933.514238][ T5583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.676127][T12292] hsr_slave_0: entered promiscuous mode [ 933.755036][T12292] hsr_slave_1: entered promiscuous mode [ 933.813413][T12292] debugfs: 'hsr0' already exists in 'hsr' [ 933.846754][T12292] Cannot create hsr debugfs directory [ 933.917261][T12479] loop0: detected capacity change from 0 to 2048 [ 934.043331][T12485] loop3: detected capacity change from 0 to 256 [ 934.063604][T12479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.282606][T12485] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 934.316871][T12479] EXT4-fs (loop0): shut down requested (1) [ 934.364479][T12485] exFAT-fs (loop3): failed to load alloc-bitmap [ 934.403567][T12485] exFAT-fs (loop3): failed to recognize exfat type [ 934.765550][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.837424][T12491] binder: 12490:12491 ioctl c0306201 200000000140 returned -22 [ 935.953717][T12503] loop2: detected capacity change from 0 to 512 [ 936.087469][T12503] EXT4-fs (loop2): orphan cleanup on readonly fs [ 936.130129][T12503] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.1843: ea_inode file size=4 entry size=6 [ 936.155930][T12503] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 936.171965][T12503] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.1843: corrupted inode contents [ 936.185644][T12503] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 936.191130][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 936.207364][ C0] EXT4-fs (loop2): initial error at time 1780275668: ext4_do_update_inode:5690: inode 15 [ 936.217607][ C0] EXT4-fs (loop2): last error at time 1780275668: ext4_do_update_inode:5690: inode 15 [ 936.228956][T12503] EXT4-fs (loop2): Remounting filesystem read-only [ 936.239458][T12503] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 936.252155][T12503] EXT4-fs (loop2): 1 orphan inode deleted [ 936.271882][T12503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 936.890381][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.782019][ T3097] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 938.801336][T12292] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 939.015612][T12292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.056146][ T3097] usb 3-1: Using ep0 maxpacket: 32 [ 939.089888][T12292] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 939.147324][ T3097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.202450][ T3097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.279804][ T3097] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 939.302082][T12292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 939.334212][ T3097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.355494][T12292] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 939.403340][ T3097] usb 3-1: config 0 descriptor?? [ 939.495634][T12292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 939.586284][T12292] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 939.775001][T12292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 940.094017][ T3097] savu 0003:1E7D:2D5A.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 940.253815][ T3097] usb 3-1: USB disconnect, device number 31 [ 940.761643][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 941.012069][ T9] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 941.066621][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.126935][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.175555][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 941.253635][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 941.315557][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.326490][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.361687][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.457140][ T9] usb 4-1: config 0 descriptor?? [ 941.619170][T12541] fido_id[12541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 942.042167][ T9] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 942.309139][T12292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.410472][ T9] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 942.532135][ T9] usb 4-1: USB disconnect, device number 30 [ 942.693754][T12292] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.886523][T10093] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.894304][T10093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.216887][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.224572][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.761873][T12567] loop2: detected capacity change from 0 to 256 [ 943.874730][T12562] fido_id[12562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 943.909170][ T3097] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 943.976758][T12567] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 944.147165][ T3097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.237363][ T3097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.298207][ T3097] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 944.349597][ T3097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.435690][ T3097] usb 4-1: config 0 descriptor?? [ 945.129262][ T3097] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 945.260215][ T3097] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 945.423181][ T3097] cp2112 0003:10C4:EA90.0023: Part Number: 0x82 Device Version: 0xFE [ 946.052638][ T3097] cp2112 0003:10C4:EA90.0023: error reading lock byte: -71 [ 946.154318][ T3097] usb 4-1: USB disconnect, device number 31 [ 947.647465][T12591] fido_id[12591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 948.544940][ T9] psmouse serio5: Failed to reset mouse on : -5 [ 948.772167][T12609] loop3: detected capacity change from 0 to 1024 [ 948.990356][T12609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 949.042147][T12609] System zones: 0-1, 3-8 [ 949.102166][T12609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 949.177405][T12609] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.298301][ T29] audit: type=1800 audit(1780275681.180:207): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1874" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 949.394755][T12609] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1874: Freeing blocks not in datazone - block = 0, count = 16 [ 949.485884][T12609] EXT4-fs (loop3): Remounting filesystem read-only [ 949.946817][ T5583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 951.376735][T12292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.398145][ T5682] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 951.608732][ T5682] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 951.649671][ T5682] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.679310][T12640] loop2: detected capacity change from 0 to 256 [ 951.702307][ T5682] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.742223][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.063133][ T5682] usb 4-1: usb_control_msg returned -32 [ 952.089708][ T5682] usbtmc 4-1:16.0: can't read capabilities [ 952.371441][ T9] misc userio: Buffer overflowed, userio client isn't keeping up [ 952.817530][T12649] loop5: detected capacity change from 0 to 64 [ 953.039337][T12649] hfs: request for non-existent node 237 in B*Tree [ 953.067147][T12649] hfs: request for non-existent node 237 in B*Tree [ 953.124339][T12650] hfs: request for non-existent node 237 in B*Tree [ 953.160351][T12650] hfs: request for non-existent node 237 in B*Tree [ 953.205795][T12650] hfs: request for non-existent node 237 in B*Tree [ 953.244554][T12650] hfs: request for non-existent node 237 in B*Tree [ 953.290572][T12650] hfs: request for non-existent node 237 in B*Tree [ 953.323079][T12650] hfs: request for non-existent node 237 in B*Tree [ 953.458981][ T9] input: PS/2 Generic Mouse as /devices/serio5/input/input23 [ 953.499432][T12653] loop2: detected capacity change from 0 to 256 [ 953.792461][ T9] psmouse serio5: Failed to enable mouse on [ 954.428854][ T9] usb 4-1: USB disconnect, device number 32 [ 955.045188][T12292] veth0_vlan: entered promiscuous mode [ 955.298750][T12292] veth1_vlan: entered promiscuous mode [ 955.345920][T12658] loop2: detected capacity change from 0 to 32768 [ 955.481582][T12658] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 955.912952][T12669] loop3: detected capacity change from 0 to 1024 [ 955.952128][T12658] XFS (loop2): Ending clean mount [ 956.052183][T12669] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 956.082946][T12673] bond0 (unregistering): Released all slaves [ 956.353591][T12669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.570578][T12292] veth0_macvtap: entered promiscuous mode [ 956.576189][T12669] EXT4-fs (loop3): shut down requested (1) [ 956.660778][T12292] veth1_macvtap: entered promiscuous mode [ 957.189737][ T5583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.207121][T12292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.412391][T10466] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 957.424093][T12292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.664856][T10466] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 957.710302][T10466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.732221][T10093] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.799220][T10093] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.814797][T10466] usb 1-1: config 0 descriptor?? [ 957.839448][ T5577] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 957.903420][T10093] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.987428][T10093] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.276750][T10466] usb 1-1: Cannot set autoneg [ 959.303469][T10466] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 959.454015][T10466] usb 1-1: USB disconnect, device number 16 [ 960.646376][T12709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1898'. [ 960.893268][T12710] loop0: detected capacity change from 0 to 1024 [ 961.034215][T12710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.186312][T12724] veth1_to_bond: entered promiscuous mode [ 962.242725][ T5576] EXT4-fs error (device loop0): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /427/file0/lost+found: bad entry in directory: directory entry overrun - offset=792, inode=0, rec_len=1024, size=1024 fake=0 [ 962.298698][T12725] veth1_to_bond: left promiscuous mode [ 962.432050][ T5576] VFS: Lookup of '.' in ext4 loop0 would have caused loop [ 962.510451][ T5576] VFS: Lookup of '.' in ext4 loop0 would have caused loop [ 962.799725][T12728] loop5: detected capacity change from 0 to 256 [ 964.262806][T12738] loop3: detected capacity change from 0 to 512 [ 964.309095][T12324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.320887][T12738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 964.412649][T12738] EXT4-fs (loop3): 1 truncate cleaned up [ 964.480697][T12738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.584585][ T3097] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 964.776739][T10098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.864707][ T3097] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 964.915740][ T3097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 964.984282][ T3097] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 965.039660][T10098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.081619][ T3097] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 965.111608][ T3097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.187892][ T5583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.217627][ T3097] usb 3-1: config 0 descriptor?? [ 965.270097][T12741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 965.331578][T10098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.580925][T10098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.680980][T12751] syz_tun: entered allmulticast mode [ 965.850099][ T3097] elecom 0003:056E:00E6.0024: unknown main item tag 0x2 [ 965.900241][ T3097] elecom 0003:056E:00E6.0024: unexpected long global item [ 965.947996][ T3097] elecom 0003:056E:00E6.0024: probe with driver elecom failed with error -22 [ 966.082384][ T3097] usb 3-1: USB disconnect, device number 32 [ 967.261930][T12755] loop3: detected capacity change from 0 to 32768 [ 967.272159][T12755] btrfs: Deprecated parameter 'usebackuproot' [ 967.278564][T12755] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 967.320241][T12755] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1912 (12755) [ 967.392608][T12755] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 967.403328][T12755] BTRFS info (device loop3): using crc32c checksum algorithm [ 967.411254][T12755] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 967.577538][T12755] BTRFS info (device loop3): rebuilding free space tree [ 967.654498][T12755] BTRFS info (device loop3): disabling free space tree [ 967.662815][T12755] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 967.672900][T12755] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 967.702370][T12755] BTRFS info (device loop3): allowing degraded mounts [ 967.709400][T12755] BTRFS info (device loop3): enabling ssd optimizations [ 967.716989][T12755] BTRFS info (device loop3): turning on async discard [ 967.724266][T12755] BTRFS info (device loop3): enabling disk space caching [ 967.731640][T12755] BTRFS info (device loop3): force clearing of disk cache [ 967.739015][T12755] BTRFS info (device loop3): trying to use backup root at mount time [ 967.747464][T12755] BTRFS info (device loop3): force zlib compression, level 3 [ 968.446496][ T5583] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 968.564518][T10098] bond0 (unregistering): Released all slaves [ 970.082141][T10098] hsr_slave_0: left promiscuous mode [ 970.148860][T10098] hsr_slave_1: left promiscuous mode [ 970.600856][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 970.621443][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 970.639489][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 970.670299][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 970.725030][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 971.438312][T12792] loop5: detected capacity change from 0 to 2048 [ 971.625330][T12792] hpfs: hpfs_map_sector(): read error [ 972.823653][ T5580] Bluetooth: hci0: command tx timeout [ 972.920545][T12807] loop5: detected capacity change from 0 to 512 [ 973.664948][T12808] loop3: detected capacity change from 0 to 32768 [ 973.680087][T12808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1923 (12808) [ 973.817924][T12808] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 973.838869][T12808] BTRFS info (device loop3): using crc32c checksum algorithm [ 974.047261][T12808] BTRFS info (device loop3): enabling ssd optimizations [ 974.054698][T12808] BTRFS info (device loop3): turning on flush-on-commit [ 974.062117][T12808] BTRFS info (device loop3): enabling free space tree [ 974.069094][T12808] BTRFS info (device loop3): force zlib compression, level 3 [ 974.076894][T12808] BTRFS info (device loop3): max_inline set to 4096 [ 974.599503][ T5583] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 974.901909][ T5580] Bluetooth: hci0: command tx timeout [ 976.585179][T10087] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.879889][T10087] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.982723][ T5580] Bluetooth: hci0: command tx timeout [ 977.262479][T10087] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.490741][T10087] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.184919][ T5231] 8021q: adding VLAN 0 to HW filter on device eth17 [ 978.297490][T10087] bridge_slave_1: left allmulticast mode [ 978.318267][T10087] bridge_slave_1: left promiscuous mode [ 978.339017][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.344721][ T3097] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 978.383456][T10087] bridge_slave_0: left allmulticast mode [ 978.397578][T10087] bridge_slave_0: left promiscuous mode [ 978.415588][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.576158][ T3097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.614131][ T3097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.637597][ T3097] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 978.673246][ T3097] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 978.693455][ T3097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.732524][ T3097] usb 4-1: config 0 descriptor?? [ 979.061418][ T5580] Bluetooth: hci0: command tx timeout [ 979.269270][ T3097] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 979.286083][T10087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.337525][T12856] loop5: detected capacity change from 0 to 128 [ 979.368849][T10087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.407701][T12856] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 979.440742][T10087] bond0 (unregistering): Released all slaves [ 979.507645][T10466] usb 4-1: USB disconnect, device number 33 [ 979.999444][T10108] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 980.049227][T10087] hsr_slave_0: left promiscuous mode [ 980.089647][T10087] hsr_slave_1: left promiscuous mode [ 980.140587][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.174602][T10087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.226319][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.267234][T12858] fido_id[12858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 980.282684][T10087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.398889][T10087] veth1_macvtap: left promiscuous mode [ 980.419765][T10087] veth0_macvtap: left promiscuous mode [ 980.442004][T10087] veth1_vlan: left promiscuous mode [ 980.463262][T10087] veth0_vlan: left promiscuous mode [ 981.648903][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 981.659893][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 981.704744][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 981.783691][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 981.822559][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 981.833347][T12866] loop3: detected capacity change from 0 to 40427 [ 981.899521][T12866] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 981.908766][T12866] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 981.928862][T12866] F2FS-fs (loop3): invalid crc value [ 982.293102][T12866] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 982.351253][T12866] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 982.361853][T12866] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 982.480650][ T29] audit: type=1800 audit(1780275714.360:208): pid=12866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1937" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 983.592058][T10087] team0 (unregistering): Port device team_slave_1 removed [ 983.789223][T10087] team0 (unregistering): Port device team_slave_0 removed [ 983.942207][ T48] Bluetooth: hci3: command tx timeout [ 984.744909][ T3097] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 984.775077][ T3097] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 984.855564][ T3097] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz0 [ 985.950494][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'. [ 986.022184][ T48] Bluetooth: hci3: command tx timeout [ 986.066293][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1946'. [ 986.192174][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'. [ 986.282418][T12893] loop2: detected capacity change from 0 to 40427 [ 986.293514][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1946'. [ 986.341338][T12893] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 986.349321][T12893] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 986.691727][T12893] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 986.724706][T12893] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 986.732555][T12893] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 986.848476][T12893] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 986.958266][T12894] fido_id[12894]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 987.400332][ T1020] kworker/u8:7 (1020) used greatest stack depth: 2952 bytes left [ 987.475954][ T80] kworker/u8:5 (80) used greatest stack depth: 2944 bytes left [ 987.533449][ T7177] kworker/u8:12 (7177) used greatest stack depth: 2328 bytes left [ 988.102860][ T48] Bluetooth: hci3: command tx timeout [ 988.621601][T10466] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 988.654333][T12922] loop5: detected capacity change from 0 to 256 [ 988.698922][T12922] exfat: Deprecated parameter 'namecase' [ 988.716817][T12922] exfat: Deprecated parameter 'namecase' [ 988.785896][T12922] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 988.821820][T10466] usb 4-1: Using ep0 maxpacket: 8 [ 988.876509][T10466] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.928412][T10466] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 988.997187][T10466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 989.064935][T10466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 989.114592][T10466] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 989.232265][T10466] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 989.280718][T10466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 989.325936][T10466] usb 4-1: Product: syz [ 989.339798][T10466] usb 4-1: Manufacturer: syz [ 989.389913][T10466] usb 4-1: SerialNumber: syz [ 989.426227][T10466] usb 4-1: config 0 descriptor?? [ 989.743532][T10466] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 989.773781][T10466] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 989.803148][T12929] input: syz0 as /devices/virtual/input/input26 [ 989.962611][T10466] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 989.995247][T10466] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 990.065425][T10466] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 990.165923][T10466] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 990.182414][ T48] Bluetooth: hci3: command tx timeout [ 990.598126][T12791] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.622196][T12791] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.652702][T12791] bridge_slave_0: entered allmulticast mode [ 990.695489][T12791] bridge_slave_0: entered promiscuous mode [ 990.749467][T12791] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.798862][T10466] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 990.800396][T12791] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.839029][T10466] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 990.874901][T12791] bridge_slave_1: entered allmulticast mode [ 990.910990][T12791] bridge_slave_1: entered promiscuous mode [ 990.924378][T10466] usb 4-1: USB disconnect, device number 34 [ 991.649104][T12791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.699653][T12791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.219617][ T5231] 8021q: adding VLAN 0 to HW filter on device eth18 [ 992.319580][T12791] team0: Port device team_slave_0 added [ 992.561515][T12791] team0: Port device team_slave_1 added [ 993.324333][T12962] loop3: detected capacity change from 0 to 256 [ 993.345702][T12962] exfat: Deprecated parameter 'utf8' [ 993.365405][T12791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.400151][T12791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.449672][T12791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.480460][T12962] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 993.779752][T12791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.830845][T12791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.949056][T12791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.699245][T12970] loop5: detected capacity change from 0 to 1024 [ 994.819705][T12791] hsr_slave_0: entered promiscuous mode [ 994.884074][T12973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1963'. [ 994.894163][T12791] hsr_slave_1: entered promiscuous mode [ 994.917059][T12791] debugfs: 'hsr0' already exists in 'hsr' [ 994.942707][T12791] Cannot create hsr debugfs directory [ 995.746002][T12981] 9pnet: p9_errstr2errno: server reported unknown error  [ 995.931421][T10466] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 996.158998][T10466] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 996.212735][T10466] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 996.258208][T10466] usb 6-1: config 0 interface 0 has no altsetting 0 [ 996.288593][T10466] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 996.338999][T10466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.441882][T10466] usb 6-1: config 0 descriptor?? [ 996.549493][T12865] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.605134][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.666181][T12865] bridge_slave_0: entered allmulticast mode [ 996.766398][T12865] bridge_slave_0: entered promiscuous mode [ 997.011653][T12865] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.049735][T10466] lenovo 0003:17EF:60A3.0027: unknown main item tag 0x0 [ 997.069851][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.096270][T10466] lenovo 0003:17EF:60A3.0027: unknown main item tag 0x0 [ 997.114618][T12865] bridge_slave_1: entered allmulticast mode [ 997.132344][T10466] lenovo 0003:17EF:60A3.0027: unknown main item tag 0x0 [ 997.153097][T12865] bridge_slave_1: entered promiscuous mode [ 997.160590][T10466] lenovo 0003:17EF:60A3.0027: unknown main item tag 0x0 [ 997.193796][T10466] lenovo 0003:17EF:60A3.0027: unknown main item tag 0x0 [ 997.253751][T10466] lenovo 0003:17EF:60A3.0027: unknown main item tag 0x0 [ 997.292263][T10466] lenovo 0003:17EF:60A3.0027: unknown main item tag 0x0 [ 997.350219][T10466] lenovo 0003:17EF:60A3.0027: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.5-1/input0 [ 997.474044][T10466] usb 6-1: USB disconnect, device number 16 [ 997.581566][T12989] loop2: detected capacity change from 0 to 40427 [ 997.621223][T12989] F2FS-fs (loop2): invalid crc value [ 997.996146][T12989] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 998.013078][T12989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 998.498525][ T5577] syz-executor: attempt to access beyond end of device [ 998.498525][ T5577] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 998.526051][T12865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.603547][ T5577] CPU: 0 UID: 0 PID: 5577 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(lazy) [ 998.603731][ T5577] Tainted: [L]=SOFTLOCKUP [ 998.603782][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 998.603878][ T5577] Call Trace: [ 998.603930][ T5577] [ 998.603982][ T5577] __dump_stack+0x26/0x30 [ 998.604154][ T5577] dump_stack_lvl+0x14c/0x1c0 [ 998.604322][ T5577] dump_stack+0x1e/0x25 [ 998.604508][ T5577] f2fs_stop_checkpoint+0xac3/0xc70 [ 998.604726][ T5577] f2fs_write_end_io+0x1207/0x2200 [ 998.604964][ T5577] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 998.605138][ T5577] bio_endio+0xfcc/0x1120 [ 998.605369][ T5577] submit_bio_noacct+0x533/0x2920 [ 998.605624][ T5577] submit_bio+0x57a/0x620 [ 998.605825][ T5577] f2fs_submit_write_bio+0x115/0x310 [ 998.606063][ T5577] __submit_merged_bio+0x16b/0x700 [ 998.606271][ T5577] ? kmsan_get_metadata+0xf1/0x160 [ 998.606491][ T5577] __submit_merged_write_cond+0x4ba/0xae0 [ 998.606740][ T5577] f2fs_write_data_pages+0x4f4d/0x5c60 [ 998.607052][ T5577] ? seccomp_attach_filter+0x200/0x18a0 [ 998.607228][ T5577] ? kmsan_get_metadata+0xf1/0x160 [ 998.607427][ T5577] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 998.607647][ T5577] ? folios_put_refs+0x61/0xb10 [ 998.607864][ T5577] ? filter_irq_stacks+0x49/0x190 [ 998.608042][ T5577] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 998.608240][ T5577] ? kmsan_get_metadata+0xf1/0x160 [ 998.608445][ T5577] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 998.608657][ T5577] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 998.608822][ T5577] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 998.608987][ T5577] do_writepages+0x3f2/0x860 [ 998.609136][ T5577] ? _raw_spin_unlock+0x30/0x50 [ 998.609309][ T5577] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 998.609525][ T5577] filemap_fdatawrite+0x207/0x260 [ 998.609781][ T5577] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 998.610003][ T5577] f2fs_write_checkpoint+0x10e1/0x3c50 [ 998.610331][ T5577] kill_f2fs_super+0x320/0x990 [ 998.610549][ T5577] ? __pfx_kill_f2fs_super+0x10/0x10 [ 998.610720][ T5577] deactivate_locked_super+0xcb/0x3c0 [ 998.610919][ T5577] deactivate_super+0x12f/0x140 [ 998.611093][ T5577] cleanup_mnt+0x7eb/0x870 [ 998.611264][ T5577] ? __pfx___cleanup_mnt+0x10/0x10 [ 998.611427][ T5577] __cleanup_mnt+0x22/0x30 [ 998.611573][ T5577] task_work_run+0x208/0x2b0 [ 998.611716][ T5577] exit_to_user_mode_loop+0x505/0x2420 [ 998.611892][ T5577] ? user_path_at+0x1fc/0x330 [ 998.612077][ T5577] ? __x64_sys_umount+0x1dc/0x250 [ 998.612284][ T5577] do_syscall_64+0x261/0x3c0 [ 998.612494][ T5577] ? clear_bhb_loop+0x50/0xa0 [ 998.612664][ T5577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.612820][ T5577] RIP: 0033:0x7fcc7c99e097 [ 998.612979][ T5577] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 998.613105][ T5577] RSP: 002b:00007ffdd5616178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 998.613421][ T5577] RAX: 0000000000000000 RBX: 00007fcc7ca321ca RCX: 00007fcc7c99e097 [ 998.613646][ T5577] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd5616230 [ 998.613920][ T5577] RBP: 00007ffdd5616230 R08: 00007ffdd5617230 R09: 00000000ffffffff [ 998.614149][ T5577] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd56172c0 [ 998.614369][ T5577] R13: 00007fcc7ca321ca R14: 00000000000f3aa4 R15: 00007ffdd5617300 [ 998.614722][ T5577] [ 998.643570][ T5577] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 998.828687][T12990] fido_id[12990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 998.947153][T12865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.729345][T13005] loop5: detected capacity change from 0 to 1024 [ 999.769430][T12865] team0: Port device team_slave_0 added [ 999.978867][T12865] team0: Port device team_slave_1 added [ 1000.694201][T12865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.694281][T12865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.694442][T12865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.751161][T12865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.751259][T12865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.751421][T12865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.695822][T12865] hsr_slave_0: entered promiscuous mode [ 1001.731603][T12865] hsr_slave_1: entered promiscuous mode [ 1001.763000][T12865] debugfs: 'hsr0' already exists in 'hsr' [ 1001.779768][T12865] Cannot create hsr debugfs directory [ 1002.124108][T13020] loop3: detected capacity change from 0 to 1024 [ 1002.195238][T13020] hfsplus: failed to load extents file [ 1002.725412][T13023] netlink: 'syz.5.1976': attribute type 22 has an invalid length. [ 1002.755085][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.766203][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.800597][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1976'. [ 1002.981848][T13023] netlink: 'syz.5.1976': attribute type 22 has an invalid length. [ 1003.039493][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1976'. [ 1003.212475][T12791] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1003.314186][T12791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.380562][ T5231] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1003.533428][T12791] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1003.685811][T12791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.848116][T12791] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1003.984420][T12791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.157705][T13033] loop5: detected capacity change from 0 to 1024 [ 1004.177505][ T3097] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1004.195043][T12791] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1004.293957][T13035] loop3: detected capacity change from 0 to 2048 [ 1004.343215][T12791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.402059][ T3097] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1004.453337][T13035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.483549][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.557650][ T3097] usb 3-1: Product: syz [ 1004.571076][T13035] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.594163][ T3097] usb 3-1: Manufacturer: syz [ 1004.603413][ T3097] usb 3-1: SerialNumber: syz [ 1005.202444][ T3097] net_ratelimit: 2103 callbacks suppressed [ 1005.202569][ T3097] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1005.256576][ T3097] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1005.331849][ T5583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.884710][ T3097] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1005.959782][ T3097] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1006.004333][ T3097] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1006.118964][T13045] snd_dummy snd_dummy.0: control 1:9:195::53367 is already present [ 1006.141481][ T3097] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1006.207033][T12865] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1006.272303][ T3097] usb 3-1: USB disconnect, device number 33 [ 1006.372191][T12865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1006.446581][T12865] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1006.583158][T12865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1006.738233][T12865] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1006.900393][T12865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1006.981348][T12865] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1007.142931][T12865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.212620][T12791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.775017][T12791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.939503][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1009.116375][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.124254][T10106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.139412][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1009.215736][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.267488][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.324748][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1009.362444][T10093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.370196][T10093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.403606][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1009.433691][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.513505][ T24] usb 4-1: config 0 descriptor?? [ 1010.054621][T13079] loop2: detected capacity change from 0 to 512 [ 1010.142506][T13079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1010.200467][T13079] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1992: invalid block [ 1010.299151][T13079] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1010.303566][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1010.319637][ C0] EXT4-fs (loop2): initial error at time 1780275748: ext4_get_branch:178: inode 11: block 4294967295 [ 1010.330998][ C0] EXT4-fs (loop2): last error at time 1780275748: ext4_get_branch:178: inode 11: block 4294967295 [ 1010.354829][T13079] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1992: invalid indirect mapped block 4294967295 (level 1) [ 1010.391316][T13069] loop3: detected capacity change from 0 to 512 [ 1010.400774][T13079] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1010.409624][T13079] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1992: invalid indirect mapped block 4294967295 (level 1) [ 1010.501271][T13069] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 1010.510229][T13079] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1010.510650][T13069] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 1010.531683][T13079] EXT4-fs (loop2): 2 truncates cleaned up [ 1010.541338][T13079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.566977][T13069] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.1989: iget: bad i_size value: 12154757448730 [ 1010.652496][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0028/input/input27 [ 1010.684873][T13069] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1010.692047][T13069] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1989: couldn't read orphan inode 13 (err -117) [ 1010.701975][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1010.702082][ C1] EXT4-fs (loop3): initial error at time 1780275748: ext4_orphan_get:1397: inode 13 [ 1010.702258][ C1] EXT4-fs (loop3): last error at time 1780275748: ext4_orphan_get:1397: inode 13 [ 1010.812977][ T29] audit: type=1800 audit(1780275748.706:209): pid=13079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1992" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1010.845309][ T24] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1010.880854][T13079] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1992: bg 0: block 5: invalid block bitmap [ 1011.026363][T13069] loop3: lost filesystem error report for type 5 error -117 [ 1011.045088][T13069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.394667][T10466] usb 4-1: USB disconnect, device number 35 [ 1011.597733][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.628661][T13092] Bluetooth: MGMT ver 1.23 [ 1011.667057][T12865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.686784][T13092] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 1012.464813][T13089] fido_id[13089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1012.481479][T12865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.520043][ T5583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.722338][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.729936][T10100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.074985][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.083656][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.661706][ T5231] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1015.149747][T13121] loop3: detected capacity change from 0 to 1024 [ 1015.364959][ T29] audit: type=1800 audit(1780275753.248:210): pid=13121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2003" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 1017.443637][T13132] loop5: detected capacity change from 0 to 40427 [ 1017.498790][T13132] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1017.508925][T13132] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1017.872265][T13132] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1017.899220][T13132] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1017.906629][T13132] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1020.027069][T12791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.010814][T13177] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2013'. [ 1022.275444][T12865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.896571][T13190] loop3: detected capacity change from 0 to 1764 [ 1024.481969][T12791] veth0_vlan: entered promiscuous mode [ 1025.798420][T13208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2019'. [ 1025.886365][T13208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2019'. [ 1025.971894][T12791] veth1_vlan: entered promiscuous mode [ 1026.954872][T12791] veth0_macvtap: entered promiscuous mode [ 1027.110966][T12865] veth0_vlan: entered promiscuous mode [ 1027.254077][T12791] veth1_macvtap: entered promiscuous mode [ 1027.432902][T12865] veth1_vlan: entered promiscuous mode [ 1027.943457][T12791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.114976][T12791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.433925][T10095] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.500615][T10095] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.585178][T10095] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.640390][T10095] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.766058][T12865] veth0_macvtap: entered promiscuous mode [ 1029.011990][T12865] veth1_macvtap: entered promiscuous mode [ 1029.653707][T12865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.846960][T12865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.153173][T13125] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.219484][T13125] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.317243][T13243] loop5: detected capacity change from 0 to 2048 [ 1030.337293][T13125] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.420936][T13125] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.446066][T13243] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1030.611309][T13243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1031.052179][ T29] audit: type=1800 audit(1780275768.956:211): pid=13243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2030" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 1031.118749][T13254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1031.149105][T13254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1031.194389][T13254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1031.219681][T13254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1031.239253][T13254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1033.282413][T13254] Bluetooth: hci4: command tx timeout [ 1035.362459][T13254] Bluetooth: hci4: command tx timeout [ 1035.442371][T13125] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.730257][T13125] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.086059][T13125] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.453862][T13125] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.440350][T13254] Bluetooth: hci4: command tx timeout [ 1037.816648][T13125] bridge_slave_1: left allmulticast mode [ 1037.855748][T13125] bridge_slave_1: left promiscuous mode [ 1037.901891][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.010814][T13125] bridge_slave_0: left allmulticast mode [ 1038.039042][T13125] bridge_slave_0: left promiscuous mode [ 1038.054464][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.345113][T13329] loop5: detected capacity change from 0 to 256 [ 1038.406027][T13329] exfat: Deprecated parameter 'utf8' [ 1038.446898][T13329] exfat: Deprecated parameter 'namecase' [ 1038.475752][T13329] exfat: Deprecated parameter 'utf8' [ 1038.600215][T13329] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1038.697106][T13329] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 1038.865157][T13335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2054'. [ 1039.519855][T13254] Bluetooth: hci4: command tx timeout [ 1039.811778][T13125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.883205][T13125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.907398][T13125] bond0 (unregistering): Released all slaves [ 1040.407400][T13345] overlayfs: maximum fs stacking depth exceeded [ 1040.603038][T13125] hsr_slave_0: left promiscuous mode [ 1040.648177][T13125] hsr_slave_1: left promiscuous mode [ 1040.708142][T13125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.761426][T13125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.818044][T13125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.885857][T13125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.115044][T13125] veth1_macvtap: left promiscuous mode [ 1041.163727][T13125] veth0_macvtap: left promiscuous mode [ 1041.195858][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1041.207248][T13125] veth1_vlan: left promiscuous mode [ 1041.217161][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1041.232435][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1041.257541][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1041.259213][T13125] veth0_vlan: left promiscuous mode [ 1041.301892][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.663652][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2060'. [ 1041.772587][T13358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2060'. [ 1043.358730][T13254] Bluetooth: hci0: command tx timeout [ 1044.384775][T13379] loop5: detected capacity change from 0 to 1024 [ 1044.457695][ T9601] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1044.471978][T13379] EXT4-fs: Ignoring removed bh option [ 1044.631039][T13379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.666487][ T9601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.706491][ T9601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.737984][ T9601] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1044.781850][ T9601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.854511][ T9601] usb 4-1: config 0 descriptor?? [ 1044.942970][T13379] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1045.323209][T13125] team0 (unregistering): Port device team_slave_1 removed [ 1045.438443][T13254] Bluetooth: hci0: command tx timeout [ 1045.531222][ T9601] hid-steam 0003:28DE:1142.0029: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1045.592992][T13125] team0 (unregistering): Port device team_slave_0 removed [ 1045.632425][ T6514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.648971][ T9601] hid-steam 0003:28DE:1142.0029: Steam wireless receiver connected [ 1045.814457][ T9601] hid-steam 0003:28DE:1142.002A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1046.320384][ T9601] usb 4-1: USB disconnect, device number 36 [ 1046.501540][ T9601] hid-steam 0003:28DE:1142.0029: Steam wireless receiver disconnected [ 1046.933934][T13393] fido_id[13393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1047.515966][T13254] Bluetooth: hci0: command tx timeout [ 1048.439211][T13125] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.028006][T13125] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.413531][T13125] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.595280][T13254] Bluetooth: hci0: command tx timeout [ 1049.617987][T13427] input: syz1 as /devices/virtual/input/input28 [ 1049.888052][T13125] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.368802][T13125] bridge_slave_1: left allmulticast mode [ 1051.415477][T13125] bridge_slave_1: left promiscuous mode [ 1051.469090][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.587961][T13125] bridge_slave_0: left allmulticast mode [ 1051.623751][T13125] bridge_slave_0: left promiscuous mode [ 1051.679475][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.836934][T13445] loop3: detected capacity change from 0 to 128 [ 1052.448195][T11055] ===================================================== [ 1052.455911][T11055] BUG: KMSAN: uninit-value in copy_from_kernel_nofault+0x15f/0x570 [ 1052.464355][T11055] copy_from_kernel_nofault+0x15f/0x570 [ 1052.470189][T11055] prepend_path+0x64e/0x1090 [ 1052.475291][T11055] d_absolute_path+0x11b/0x240 [ 1052.480392][T11055] tomoyo_realpath_from_path+0x4bd/0x9f0 [ 1052.486505][T11055] tomoyo_check_open_permission+0x1ff/0xc60 [ 1052.492800][T11055] tomoyo_file_open+0x290/0x310 [ 1052.497925][T11055] security_file_open+0x116/0x4d0 [ 1052.503489][T11055] do_dentry_open+0x5e3/0x1df0 [ 1052.509521][T11055] vfs_open+0x52/0x5f0 [ 1052.514344][T11055] path_openat+0x5733/0x64c0 [ 1052.519239][T11055] do_file_open+0x2aa/0x680 [ 1052.524130][T11055] do_sys_openat2+0x163/0x370 [ 1052.529041][T11055] __x64_sys_openat+0x240/0x300 [ 1052.534354][T11055] x64_sys_call+0x2445/0x3ea0 [ 1052.539276][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.544469][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.550664][T11055] [ 1052.554936][T11055] [ 1052.554936][T11055] [ 1052.564189][T11055] Uninit was stored to memory at: [ 1052.569585][T11055] __d_move+0xf72/0x2aa0 [ 1052.574224][T11055] d_move+0x71/0xf0 [ 1052.578316][T11055] vfs_rename+0x2510/0x2650 [ 1052.583184][T11055] filename_renameat2+0xb7f/0x1260 [ 1052.588526][T11055] __se_sys_rename+0xc5/0x5d0 [ 1052.593577][T11055] __x64_sys_rename+0x78/0xb0 [ 1052.598474][T11055] x64_sys_call+0x329/0x3ea0 [ 1052.604347][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.609325][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.615583][T11055] [ 1052.618023][T11055] Uninit was stored to memory at: [ 1052.623609][T11055] __d_move+0xf72/0x2aa0 [ 1052.628090][T11055] d_move+0x71/0xf0 [ 1052.632142][T11055] vfs_rename+0x2510/0x2650 [ 1052.637081][T11055] filename_renameat2+0xb7f/0x1260 [ 1052.642617][T11055] __se_sys_rename+0xc5/0x5d0 [ 1052.647522][T11055] __x64_sys_rename+0x78/0xb0 [ 1052.652572][T11055] x64_sys_call+0x329/0x3ea0 [ 1052.657464][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.662501][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.668631][T11055] [ 1052.671064][T11055] Uninit was stored to memory at: [ 1052.676959][T11055] __d_move+0xf72/0x2aa0 [ 1052.681455][T11055] d_move+0x71/0xf0 [ 1052.685668][T11055] vfs_rename+0x2510/0x2650 [ 1052.690377][T11055] filename_renameat2+0xb7f/0x1260 [ 1052.695921][T11055] __se_sys_rename+0xc5/0x5d0 [ 1052.700831][T11055] __x64_sys_rename+0x78/0xb0 [ 1052.705888][T11055] x64_sys_call+0x329/0x3ea0 [ 1052.710735][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.715779][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.721902][T11055] [ 1052.724565][T11055] Uninit was stored to memory at: [ 1052.729960][T11055] __d_move+0xf72/0x2aa0 [ 1052.734582][T11055] d_move+0x71/0xf0 [ 1052.738638][T11055] vfs_rename+0x2510/0x2650 [ 1052.743476][T11055] filename_renameat2+0xb7f/0x1260 [ 1052.748795][T11055] __se_sys_rename+0xc5/0x5d0 [ 1052.754450][T11055] __x64_sys_rename+0x78/0xb0 [ 1052.759435][T11055] x64_sys_call+0x329/0x3ea0 [ 1052.764434][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.769303][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.775574][T11055] [ 1052.778024][T11055] Uninit was stored to memory at: [ 1052.783656][T11055] __d_move+0xf72/0x2aa0 [ 1052.788162][T11055] d_move+0x71/0xf0 [ 1052.792350][T11055] vfs_rename+0x2510/0x2650 [ 1052.797066][T11055] filename_renameat2+0xb7f/0x1260 [ 1052.802592][T11055] __se_sys_rename+0xc5/0x5d0 [ 1052.807485][T11055] __x64_sys_rename+0x78/0xb0 [ 1052.812604][T11055] x64_sys_call+0x329/0x3ea0 [ 1052.817530][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.822515][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.828641][T11055] [ 1052.831113][T11055] Uninit was stored to memory at: [ 1052.836665][T11055] __d_move+0xf72/0x2aa0 [ 1052.841166][T11055] d_move+0x71/0xf0 [ 1052.845425][T11055] vfs_rename+0x2510/0x2650 [ 1052.850123][T11055] filename_renameat2+0xb7f/0x1260 [ 1052.855597][T11055] __se_sys_rename+0xc5/0x5d0 [ 1052.860496][T11055] __x64_sys_rename+0x78/0xb0 [ 1052.865759][T11055] x64_sys_call+0x329/0x3ea0 [ 1052.870598][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.875698][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.881830][T11055] [ 1052.884423][T11055] Uninit was stored to memory at: [ 1052.889804][T11055] __d_move+0xf72/0x2aa0 [ 1052.894441][T11055] d_move+0x71/0xf0 [ 1052.898517][T11055] vfs_rename+0x2510/0x2650 [ 1052.903462][T11055] filename_renameat2+0xb7f/0x1260 [ 1052.908792][T11055] __se_sys_rename+0xc5/0x5d0 [ 1052.913994][T11055] __x64_sys_rename+0x78/0xb0 [ 1052.918976][T11055] x64_sys_call+0x329/0x3ea0 [ 1052.923956][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.928828][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.935095][T11055] [ 1052.937531][T11055] Uninit was created at: [ 1052.942310][T11055] kmem_cache_alloc_lru_noprof+0x37a/0x1260 [ 1052.948499][T11055] __d_alloc+0x55/0xa00 [ 1052.953018][T11055] d_alloc+0x57/0x300 [ 1052.957246][T11055] lookup_one_qstr_excl+0x19d/0x7b0 [ 1052.962903][T11055] __start_renaming+0x38e/0x870 [ 1052.968018][T11055] filename_renameat2+0x735/0x1260 [ 1052.973528][T11055] __se_sys_rename+0xc5/0x5d0 [ 1052.978430][T11055] __x64_sys_rename+0x78/0xb0 [ 1052.983488][T11055] x64_sys_call+0x329/0x3ea0 [ 1052.988415][T11055] do_syscall_64+0x15d/0x3c0 [ 1052.993453][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1052.999673][T11055] [ 1053.002228][T11055] Bytes 5-7 of 8 are uninitialized [ 1053.007485][T11055] Memory access of size 8 starts at ffff8881247e4cf8 [ 1053.014630][T11055] [ 1053.017114][T11055] CPU: 1 UID: 0 PID: 11055 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1053.028328][T11055] Tainted: [L]=SOFTLOCKUP [ 1053.035804][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.046883][T11055] ===================================================== [ 1053.054166][T11055] Disabling lock debugging due to kernel taint [ 1053.324499][T11055] Kernel panic - not syncing: kmsan.panic set ... [ 1053.331122][T11055] CPU: 1 UID: 0 PID: 11055 Comm: udevd Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 1053.341848][T11055] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1053.347514][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.357728][T11055] Call Trace: [ 1053.361130][T11055] [ 1053.364174][T11055] __dump_stack+0x26/0x30 [ 1053.368715][T11055] dump_stack_lvl+0x50/0x1c0 [ 1053.373509][T11055] ? dump_stack+0x12/0x25 [ 1053.378052][T11055] dump_stack+0x1e/0x25 [ 1053.382418][T11055] vpanic+0x7b4/0x1430 [ 1053.386744][T11055] panic+0x15d/0x160 [ 1053.390905][T11055] kmsan_report+0x31a/0x320 [ 1053.395663][T11055] ? kmsan_internal_check_memory+0x1e8/0x240 [ 1053.401877][T11055] ? kmsan_check_memory+0x1a/0x30 [ 1053.407139][T11055] ? copy_from_kernel_nofault+0x15f/0x570 [ 1053.413105][T11055] ? prepend_path+0x64e/0x1090 [ 1053.418168][T11055] ? d_absolute_path+0x11b/0x240 [ 1053.423325][T11055] ? tomoyo_realpath_from_path+0x4bd/0x9f0 [ 1053.429395][T11055] ? tomoyo_check_open_permission+0x1ff/0xc60 [ 1053.435692][T11055] ? tomoyo_file_open+0x290/0x310 [ 1053.440968][T11055] ? security_file_open+0x116/0x4d0 [ 1053.446373][T11055] ? do_dentry_open+0x5e3/0x1df0 [ 1053.451511][T11055] ? vfs_open+0x52/0x5f0 [ 1053.455941][T11055] ? path_openat+0x5733/0x64c0 [ 1053.460927][T11055] ? do_file_open+0x2aa/0x680 [ 1053.465829][T11055] ? do_sys_openat2+0x163/0x370 [ 1053.470873][T11055] ? __x64_sys_openat+0x240/0x300 [ 1053.476090][T11055] ? x64_sys_call+0x2445/0x3ea0 [ 1053.481165][T11055] ? do_syscall_64+0x15d/0x3c0 [ 1053.486267][T11055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.492560][T11055] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 1053.498655][T11055] ? kmsan_get_metadata+0xf1/0x160 [ 1053.504033][T11055] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1053.510113][T11055] ? copy_from_kernel_nofault+0x11/0x570 [ 1053.516006][T11055] ? filter_irq_stacks+0x49/0x190 [ 1053.521228][T11055] ? do_dentry_open+0x5e3/0x1df0 [ 1053.526367][T11055] ? stack_depot_save_flags+0x35/0x790 [ 1053.532073][T11055] ? kmsan_get_metadata+0xf1/0x160 [ 1053.537438][T11055] kmsan_internal_check_memory+0x1e8/0x240 [ 1053.543520][T11055] kmsan_check_memory+0x1a/0x30 [ 1053.548634][T11055] copy_from_kernel_nofault+0x15f/0x570 [ 1053.554446][T11055] prepend_path+0x64e/0x1090 [ 1053.559315][T11055] d_absolute_path+0x11b/0x240 [ 1053.564316][T11055] tomoyo_realpath_from_path+0x4bd/0x9f0 [ 1053.570260][T11055] tomoyo_check_open_permission+0x1ff/0xc60 [ 1053.576471][T11055] tomoyo_file_open+0x290/0x310 [ 1053.581606][T11055] security_file_open+0x116/0x4d0 [ 1053.586892][T11055] do_dentry_open+0x5e3/0x1df0 [ 1053.591851][T11055] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1053.598372][T11055] vfs_open+0x52/0x5f0 [ 1053.602643][T11055] ? kmsan_get_metadata+0xf1/0x160 [ 1053.608005][T11055] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1053.614082][T11055] path_openat+0x5733/0x64c0 [ 1053.618919][T11055] ? kmsan_get_metadata+0xf1/0x160 [ 1053.624295][T11055] ? kernel_tmpfile_open+0x141/0x190 [ 1053.629849][T11055] ? stack_depot_save_flags+0x35/0x790 [ 1053.635774][T11055] ? kmsan_get_metadata+0xf1/0x160 [ 1053.641143][T11055] ? kmsan_get_metadata+0xf1/0x160 [ 1053.646534][T11055] do_file_open+0x2aa/0x680 [ 1053.651331][T11055] do_sys_openat2+0x163/0x370 [ 1053.656232][T11055] __x64_sys_openat+0x240/0x300 [ 1053.661313][T11055] x64_sys_call+0x2445/0x3ea0 [ 1053.666220][T11055] do_syscall_64+0x15d/0x3c0 [ 1053.671059][T11055] ? clear_bhb_loop+0x50/0xa0 [ 1053.675945][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.682022][T11055] RIP: 0033:0x7f2ce2ca7407 [ 1053.686593][T11055] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1053.706376][T11055] RSP: 002b:00007ffffa8503c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1053.715056][T11055] RAX: ffffffffffffffda RBX: 00007f2ce33f5880 RCX: 00007f2ce2ca7407 [ 1053.723174][T11055] RDX: 0000000000080241 RSI: 00007ffffa850920 RDI: ffffffffffffff9c [ 1053.731284][T11055] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1053.739381][T11055] R10: 00000000000001b6 R11: 0000000000000202 R12: 0000561cd512adfc [ 1053.747495][T11055] R13: 0000561cd512adfc R14: 0000000000000001 R15: 0000561cd5145140 [ 1053.755647][T11055] [ 1053.759457][T11055] Kernel Offset: disabled [ 1053.763865][T11055] Rebooting in 86400 seconds..