last executing test programs: 11m56.913418745s ago: executing program 0 (id=35): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020751ff", @ANYRES32=r3, @ANYBLOB="080002007f00000108000400e0000002080008008902"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 11m55.95607023s ago: executing program 0 (id=40): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000300)='S', 0x1}], 0x1}, 0x40001) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 11m54.627877009s ago: executing program 0 (id=46): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x4, "650000006e0000000100", 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) 11m53.886788913s ago: executing program 0 (id=48): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 11m53.239623355s ago: executing program 0 (id=50): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 11m52.534793689s ago: executing program 0 (id=52): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11m50.304132098s ago: executing program 32 (id=52): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11m35.478363355s ago: executing program 4 (id=113): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x900, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000018}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) epoll_pwait(r1, &(0x7f0000000440)=[{}], 0x1, 0x40, 0x0, 0x0) 11m34.418185088s ago: executing program 4 (id=118): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x18b}, 0x8) 11m33.650367566s ago: executing program 4 (id=120): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="577608000014687bc66800", 0x10) listen(r0, 0x27c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) shutdown(r0, 0x0) 11m32.845844082s ago: executing program 4 (id=125): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,dmask=00000000000000000000004,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,fmask=00000000000003000000001,iocharset=cp861,fmask=00000000000000000000005,iocharset=cp852,namecase=1,namecase=1,\x00'], 0x1, 0x1530, &(0x7f0000006800)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 11m31.221383295s ago: executing program 4 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) 11m30.396479881s ago: executing program 4 (id=132): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) r3 = socket$inet(0x2, 0x80001, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 11m27.71964228s ago: executing program 33 (id=132): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) r3 = socket$inet(0x2, 0x80001, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 11m2.666371318s ago: executing program 5 (id=54): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000700)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000340)) 11m1.599192378s ago: executing program 5 (id=198): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = epoll_create1(0x80000) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2004}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000c00, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11m1.009805192s ago: executing program 5 (id=201): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 10m58.915089912s ago: executing program 34 (id=201): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 8m39.102068928s ago: executing program 1 (id=610): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 8m38.09254154s ago: executing program 1 (id=612): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) 8m37.218411782s ago: executing program 1 (id=615): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e1800, 0x56) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 8m35.941656244s ago: executing program 1 (id=619): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m34.085666742s ago: executing program 1 (id=625): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 8m33.152779932s ago: executing program 1 (id=630): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r1, 0x20, &(0x7f0000001140)={&(0x7f0000000000)=""/44, 0x2c, 0x0, &(0x7f00000010c0)=""/122, 0x7a}}, 0x7) 8m30.015150415s ago: executing program 35 (id=630): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r1, 0x20, &(0x7f0000001140)={&(0x7f0000000000)=""/44, 0x2c, 0x0, &(0x7f00000010c0)=""/122, 0x7a}}, 0x7) 8.165788462s ago: executing program 2 (id=3048): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b40)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x81, 0x7ffffffffffffffd, 0x407ffffffffffe, 0x8001}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d3, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x34ff, 0x0, 0x3, 0x6, 0x2, 0x97}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x48, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x1}, 0x80, 0x0}, 0x4) 5.593051135s ago: executing program 2 (id=3056): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 4.566604094s ago: executing program 3 (id=3059): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r1, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 4.103571289s ago: executing program 7 (id=3062): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) 3.937675812s ago: executing program 6 (id=3063): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf195", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}}], 0x2, 0x4000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 3.689592149s ago: executing program 8 (id=3064): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d36cf7333ea9dc98af537780ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec7ed089e8af35d15f2713e70ce55b3f60b9c002496e110c3a68e4c01faf901df4e39d007bf99f3a2d2e33c58b92b961937060a92ab6347995c09eb6a363092e3a45b68bd5e734d43b0bc98070d66c8d03490897a7d05e894da6d92c46cb1d961d11a7d1cd9d3c437c07e9f090690d2b344a93fdc5d7276b74231f1ad050024359e7a73ee913e9a7eba72f23482de94c572d07491328ca363762c44ddcdb1623ec6d639b368d407ffafbb265de19bd5e52ec86c12167dfe2a3de629af1d66612c3f313e07a301d8378fc6eb551196b51680d1194d682ff6cdbb0f811608d6321b41664108ef6dd1dfcc7df602901b0c0d549fb8d0c1aa9b542b99d76b6b8c360c9bcb01ed819a57441948465279d0b2652be1058065929bffae3e9c8923ba01c954f3c49298db8ffad96b73684daf2e608046be2ffb0de70237e044d4be3e6ccc1984ebd2f6e0f57e99fcb0ec30598f121bd93a4003e0ba0815e5ddbeba9f3f8600ef86258a5423fb1f30da5be531e573bf5322a5842eeb23107f02021dc332e0e687bd1f4f0ac09293c3638603279484dd552d534089e0b5b903c4ceeedef410662ec12e17e9b616950874e24d313d770e84b488544a8b829039d06637269367c108dc37712d46ef6601ef4e937a120c607e570446d6216366a72ced5d543ba92a929cef7c4fb03307e88174ad88381b16de1c3f9985f483ff75e9b40fc0e001d037dda41df9a583009baa3b246c19ab5a20cb4e62acc", 0x3a5) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 3.620650377s ago: executing program 7 (id=3065): r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$afs(0x0, &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x2004, 0x0) 3.530397848s ago: executing program 3 (id=3066): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x8044821}, 0x0) 3.336818602s ago: executing program 6 (id=3067): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3.066641419s ago: executing program 8 (id=3068): socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x400000, 0x1, 0x10}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000054c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x100000000, 0x3a, 'uid>', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x4f, 0x43, 0x46]}, 0x3d) 2.937639148s ago: executing program 3 (id=3069): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000004140)=ANY=[], 0xfdef) close(r1) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/4080, 0xff0}], 0x1}, 0x10021) 2.695793341s ago: executing program 6 (id=3070): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) membarrier(0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRESDEC=0x0, @ANYRESDEC], 0x25, 0x34f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 2.588297522s ago: executing program 8 (id=3071): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 2.512463477s ago: executing program 7 (id=3072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}], 0x1, 0x40000c0) shutdown(r0, 0x1) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r2, 0x3}, &(0x7f0000000340)=0x8) 2.236950745s ago: executing program 3 (id=3073): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.888399686s ago: executing program 7 (id=3074): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.785740225s ago: executing program 8 (id=3075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) 1.757408178s ago: executing program 2 (id=3076): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x20) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)=ANY=[]) 1.490203544s ago: executing program 3 (id=3077): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf195", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}}], 0x2, 0x4000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 1.313150612s ago: executing program 6 (id=3078): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.226052907s ago: executing program 2 (id=3079): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0xffff, {0x4, 0x2}}, 0x14) shutdown(r0, 0x1) 1.130800149s ago: executing program 7 (id=3080): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r0) 912.77885ms ago: executing program 3 (id=3081): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x4080040}, 0x5) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 706.593349ms ago: executing program 8 (id=3082): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f00000005c0)=""/147, 0x18) 653.066467ms ago: executing program 6 (id=3083): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}}, 0x20}}, 0x8000) 603.829562ms ago: executing program 2 (id=3084): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) r2 = io_uring_setup(0x289f, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000009b00)=[{r2}], 0x20, 0x72) close_range(r1, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 290.106991ms ago: executing program 8 (id=3085): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 224.772403ms ago: executing program 7 (id=3086): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 202.157559ms ago: executing program 6 (id=3087): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000140)={0x2a, 0x1}, 0xc) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 0s ago: executing program 2 (id=3088): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f0000000400)={0x812, 0x9, 0x9}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r2, &(0x7f000000a4c0)={0x2020}, 0xa5) kernel console output (not intermixed with test programs): [ 572.059168][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.083663][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.120987][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.177197][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.221844][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.267134][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.298191][T10120] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 572.302268][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.327770][T10120] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 572.344198][T10117] ldm_validate_partition_table(): Disk read failed. [ 572.363364][T10120] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 572.369751][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.429127][T10117] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.442790][T10120] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 572.469284][T10117] Dev loop6: unable to read RDB block 0 [ 572.544372][T10120] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 572.596544][T10117] loop6: unable to read partition table [ 572.618234][T10117] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 572.672351][T10120] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 572.745288][T10120] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 572.809333][T10120] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 573.421445][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.430287][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.486495][T10139] loop3: detected capacity change from 0 to 256 [ 573.537293][T10139] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 574.266552][T10144] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1221'. [ 574.629887][T10149] netlink: 'syz.6.1225': attribute type 4 has an invalid length. [ 575.152214][ T3098] hid_parser_main: 6 callbacks suppressed [ 575.152302][ T3098] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 575.258129][ T3098] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 575.359541][T10161] loop2: detected capacity change from 0 to 1024 [ 575.425353][T10161] EXT4-fs: Ignoring removed orlov option [ 575.539606][T10161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 575.615695][T10161] System zones: 0-1, 3-12 [ 575.629311][T10161] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.062440][T10163] fido_id[10163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 576.201168][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 576.690209][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1233'. [ 576.726298][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1234'. [ 576.751225][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1233'. [ 576.768921][T10180] veth0_macvtap: left promiscuous mode [ 576.803443][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1233'. [ 582.601462][T10257] binder: 10256:10257 ioctl c0306201 80000640 returned -22 [ 582.853450][T10259] loop2: detected capacity change from 0 to 256 [ 584.790058][ T29] audit: type=1326 audit(1781285330.072:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10283 comm="syz.8.1286" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x0 [ 584.870640][T10287] loop6: detected capacity change from 0 to 512 [ 584.905923][T10287] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.950838][T10287] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 585.025991][T10287] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 585.076522][T10287] EXT4-fs (loop6): orphan cleanup on readonly fs [ 585.135741][T10287] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1275: Invalid block bitmap block 0 in block_group 0 [ 585.153226][T10287] loop6: lost filesystem error report for type 5 error -117 [ 585.158436][T10287] EXT4-fs (loop6): Remounting filesystem read-only [ 585.172813][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 585.172903][ C1] EXT4-fs (loop6): last error at time 1781285330: ext4_read_block_bitmap_nowait:483 [ 585.200337][T10287] Quota error (device loop6): write_blk: dquota write failed [ 585.232673][T10287] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 585.282529][T10287] EXT4-fs (loop6): 1 orphan inode deleted [ 585.324762][T10287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 585.815619][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.260950][T10305] loop6: detected capacity change from 0 to 128 [ 586.332238][T10305] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 586.388474][T10305] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.256266][T10311] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 587.361100][T10312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.469390][T10312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.555916][T10312] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 587.618198][T10312] bond0 (unregistering): Released all slaves [ 587.909720][ T6273] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 589.859661][T10337] loop6: detected capacity change from 0 to 2640 [ 589.880917][T10337] buffer_io_error: 6 callbacks suppressed [ 589.882957][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.952804][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.000374][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.021412][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.034512][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.055206][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.105341][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.245889][T10338] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 590.274960][T10338] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 590.324000][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.353013][T10337] ldm_validate_partition_table(): Disk read failed. [ 590.379001][T10338] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 590.408917][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.427534][T10338] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 590.440409][T10337] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.487483][T10337] Dev loop6: unable to read RDB block 0 [ 590.509896][T10338] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 590.525666][T10337] loop6: unable to read partition table [ 590.551418][T10338] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 590.588768][T10337] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 590.630645][T10338] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 590.709102][T10338] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 590.723945][T10349] netlink: 'syz.7.1297': attribute type 4 has an invalid length. [ 591.511296][T10359] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 591.644936][T10362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.760376][T10362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.832487][T10362] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 591.902925][T10362] bond0 (unregistering): Released all slaves [ 592.370987][T10375] bridge0: entered allmulticast mode [ 592.408112][T10375] pim6reg: entered allmulticast mode [ 593.422491][T10391] overlayfs: failed to clone upperpath [ 593.544455][T10396] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.1317'. [ 593.609879][ T3098] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 593.787294][ T3098] usb 4-1: Using ep0 maxpacket: 16 [ 593.821945][ T3098] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.922164][ T3098] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.952982][ T3098] usb 4-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 593.992531][ T3098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.028227][ T3098] usb 4-1: config 0 descriptor?? [ 594.403811][T10400] loop6: detected capacity change from 0 to 4096 [ 594.527358][ T3098] logitech-hidpp-device 0003:046D:0A87.0011: unknown main item tag 0x7 [ 594.571178][ T3098] logitech-hidpp-device 0003:046D:0A87.0011: unknown main item tag 0x0 [ 594.600526][ T3098] logitech-hidpp-device 0003:046D:0A87.0011: unknown main item tag 0x1 [ 594.642868][ T3098] logitech-hidpp-device 0003:046D:0A87.0011: reserved main item tag 0xd [ 594.716546][ T3098] logitech-hidpp-device 0003:046D:0A87.0011: hidraw0: USB HID v0.77 Device [HID 046d:0a87] on usb-dummy_hcd.3-1/input0 [ 594.796172][ T3098] usb 4-1: USB disconnect, device number 13 [ 594.904225][T10400] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 595.080958][T10400] ntfs3(loop6): failed to convert "0080" to koi8-ru [ 595.315174][T10410] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 595.412427][T10403] fido_id[10403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 595.562862][T10411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.725803][T10411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.848657][T10411] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 595.951561][T10411] bond0 (unregistering): Released all slaves [ 596.439563][T10423] netlink: 'syz.2.1327': attribute type 63 has an invalid length. [ 597.451160][T10436] overlayfs: failed to clone upperpath [ 599.057297][T10466] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 599.200419][T10469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.283923][T10469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.365154][T10469] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 599.425342][T10469] bond0 (unregistering): Released all slaves [ 600.877112][ T29] audit: type=1804 audit(1781285346.152:100): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1357" name="/newroot/230/file1" dev="tmpfs" ino=1242 res=1 errno=0 [ 602.764028][T10525] loop2: detected capacity change from 0 to 1024 [ 602.794350][T10525] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.842981][T10525] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 602.842981][T10525] [ 603.328892][T10532] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1369'. [ 603.383485][T10533] loop3: detected capacity change from 0 to 256 [ 603.599517][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 603.642222][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 603.650367][T10535] ceph: No mds server is up or the cluster is laggy [ 605.151741][ T29] audit: type=1326 audit(1781285350.432:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.6.1377" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x0 [ 605.765906][T10564] ip6erspan0: entered allmulticast mode [ 609.069168][ T5691] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 609.257407][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 609.274399][ T5691] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 609.313976][ T5691] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 609.339779][ T5691] usb 3-1: config 0 interface 0 has no altsetting 0 [ 609.353408][ T5691] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 609.367052][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.387616][ T5691] usb 3-1: config 0 descriptor?? [ 609.752483][ T5691] usbhid 3-1:0.0: can't add hid device: -71 [ 609.773613][ T5691] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 609.811196][ T5691] usb 3-1: USB disconnect, device number 11 [ 610.701528][T10629] fuse: fd is not a fuse device [ 611.258675][ T5691] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 611.437585][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 611.473085][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.509584][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 611.562857][ T5691] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 611.610053][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.664903][ T5691] usb 4-1: config 0 descriptor?? [ 611.927416][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.949447][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.028582][ T5691] usbhid 4-1:0.0: can't add hid device: -71 [ 612.083085][ T5691] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 612.127992][ T5691] usb 4-1: USB disconnect, device number 14 [ 613.434742][T10669] Bluetooth: hci0: invalid length 4, exp 2 for type 2 [ 615.064793][T10679] loop3: detected capacity change from 0 to 128 [ 615.190921][T10679] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 615.242655][T10679] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 615.484368][T10686] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1427'. [ 615.784559][ T6285] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.471384][ T5691] libceph: connect (1)[c::]:6789 error -101 [ 616.479596][ T5691] libceph: mon0 (1)[c::]:6789 connect error [ 616.553705][T10692] ceph: No mds server is up or the cluster is laggy [ 617.388688][T10706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 617.920991][T10713] loop3: detected capacity change from 0 to 1024 [ 617.968478][T10713] EXT4-fs: Ignoring removed bh option [ 618.036786][T10713] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 618.125680][T10715] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1438'. [ 618.187239][T10713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.490007][T10722] loop2: detected capacity change from 0 to 512 [ 618.547723][T10722] EXT4-fs: Ignoring removed bh option [ 618.652789][T10722] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1440: corrupted in-inode xattr: e_value size too large [ 618.690577][T10722] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 618.696778][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 618.712883][ C1] EXT4-fs (loop2): initial error at time 1781285363: ext4_iget_extra_inode:5128: inode 15 [ 618.723237][ C1] EXT4-fs (loop2): last error at time 1781285363: ext4_iget_extra_inode:5128: inode 15 [ 618.723400][T10722] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1440: couldn't read orphan inode 15 (err -117) [ 618.846018][T10722] loop2: lost filesystem error report for type 5 error -117 [ 618.854857][T10722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.051320][T10722] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1440: Unrecognised inode hash code 4 [ 619.108277][T10722] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1440: Corrupt directory, running e2fsck is recommended [ 619.168809][T10722] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1440: Unrecognised inode hash code 4 [ 619.220871][ T6285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.268452][T10722] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1440: Corrupt directory, running e2fsck is recommended [ 619.355099][T10732] ceph: No mds server is up or the cluster is laggy [ 619.647240][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.972507][T10743] loop3: detected capacity change from 0 to 2048 [ 620.026328][T10743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.755254][T10757] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1449'. [ 621.344088][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1452'. [ 621.706233][T10767] vxlan0: entered promiscuous mode [ 621.751189][ T14] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.781071][ T14] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.823612][ T14] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.865915][ T14] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.183282][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1456'. [ 622.244481][T10774] netlink: 876 bytes leftover after parsing attributes in process `syz.7.1456'. [ 622.435936][T10776] loop2: detected capacity change from 0 to 128 [ 622.619556][T10776] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.718198][T10776] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 623.075422][ T5594] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 623.461125][T10790] loop6: detected capacity change from 0 to 512 [ 623.546898][T10790] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1465: inode has both inline data and extents flags [ 623.604246][T10790] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 623.606132][T10790] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1465: couldn't read orphan inode 15 (err -117) [ 623.615770][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 623.615857][ C1] EXT4-fs (loop6): initial error at time 1781285368: ext4_orphan_get:1397: inode 15 [ 623.616105][ C1] EXT4-fs (loop6): last error at time 1781285368: ext4_orphan_get:1397: inode 15 [ 623.655582][T10790] loop6: lost filesystem error report for type 5 error -117 [ 623.666332][T10790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.727165][T10793] pimreg: entered allmulticast mode [ 623.768063][T10797] syz_tun: entered allmulticast mode [ 623.833272][T10793] syz_tun: left allmulticast mode [ 623.863172][T10791] pimreg: left allmulticast mode [ 624.144349][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.023580][T10817] netlink: 'syz.3.1473': attribute type 4 has an invalid length. [ 625.215775][T10818] loop3: detected capacity change from 0 to 256 [ 625.260498][T10818] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 625.312449][T10818] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 625.404519][T10818] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 625.466373][T10818] exFAT-fs (loop3): failed to load alloc-bitmap [ 625.496544][T10818] exFAT-fs (loop3): failed to recognize exfat type [ 626.275566][T10833] loop3: detected capacity change from 0 to 512 [ 626.359700][T10833] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.1481: invalid block [ 626.450871][T10833] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 626.455145][T10833] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1481: couldn't read orphan inode 11 (err -117) [ 626.464751][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 626.464841][ C1] EXT4-fs (loop3): initial error at time 1781285371: __ext4_iget:5481: inode 11: block 1 [ 626.465026][ C1] EXT4-fs (loop3): last error at time 1781285371: __ext4_iget:5481: inode 11: block 1 [ 626.507057][T10833] loop3: lost filesystem error report for type 5 error -117 [ 626.538871][T10833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.815884][ T6285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.532923][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1486'. [ 628.257409][ T5691] libceph: connect (1)[c::]:6789 error -101 [ 628.267227][ T5691] libceph: mon0 (1)[c::]:6789 connect error [ 628.337264][T10860] ceph: No mds server is up or the cluster is laggy [ 629.287850][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 629.347108][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 629.406829][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 629.617134][ T5691] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 629.830190][ T5691] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 629.855114][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.903968][ T5691] usb 7-1: Product: syz [ 629.916477][ T5691] usb 7-1: Manufacturer: syz [ 629.932667][ T5691] usb 7-1: SerialNumber: syz [ 630.204803][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1501'. [ 630.256530][T10883] unsupported nla_type 16384 [ 630.345863][ T5691] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 630.409521][ T5691] usb 7-1: USB disconnect, device number 16 [ 630.465646][ T5691] usblp0: removed [ 632.826216][T10921] ceph: No mds server is up or the cluster is laggy [ 634.859944][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.870628][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.465379][T10966] loop6: detected capacity change from 0 to 512 [ 635.513037][T10966] EXT4-fs: inline encryption not supported [ 635.645326][T10966] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1533: bad orphan inode 15 [ 635.725883][T10966] loop6: lost filesystem error report for type 5 error -117 [ 635.726890][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 635.741031][ C0] EXT4-fs (loop6): initial error at time 1781285381: ext4_orphan_get:1423 [ 635.749899][ C0] EXT4-fs (loop6): last error at time 1781285381: ext4_orphan_get:1423 [ 635.767903][T10966] ext4_test_bit(bit=14, block=5) = 0 [ 635.784557][T10966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.822096][T10971] netlink: 'syz.8.1535': attribute type 4 has an invalid length. [ 636.120838][T10966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.064201][T10994] batadv_slave_1: entered promiscuous mode [ 638.222762][T10998] 9p: Bad value for 'wfdno' [ 638.243867][T10993] batadv_slave_1: left promiscuous mode [ 639.077392][ T5591] Bluetooth: hci3: unexpected event for opcode 0x080d [ 639.302168][T11019] netlink: 'syz.6.1550': attribute type 4 has an invalid length. [ 639.400370][T11020] loop6: detected capacity change from 0 to 256 [ 639.432754][T11020] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 639.463249][T11020] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 639.527877][T11020] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 639.563462][T11020] exFAT-fs (loop6): failed to load alloc-bitmap [ 639.575147][T11020] exFAT-fs (loop6): failed to recognize exfat type [ 640.710071][T11038] ceph: No mds server is up or the cluster is laggy [ 641.034094][T11045] loop2: detected capacity change from 0 to 1024 [ 641.234049][ T29] audit: type=1800 audit(1781285386.512:102): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1560" name="file1" dev="loop2" ino=26 res=0 errno=0 [ 641.248407][T11045] hfsplus: request for non-existent node 33423360 in B*Tree [ 641.313994][T11045] hfsplus: request for non-existent node 33423360 in B*Tree [ 641.404131][T11045] hfsplus: request for non-existent node 33423360 in B*Tree [ 641.438220][T11045] hfsplus: request for non-existent node 33423360 in B*Tree [ 641.497519][T11045] hfsplus: request for non-existent node 33423360 in B*Tree [ 641.533749][T11045] hfsplus: request for non-existent node 33423360 in B*Tree [ 641.587267][T11053] hfsplus: request for non-existent node 33423360 in B*Tree [ 641.624113][T11053] hfsplus: request for non-existent node 33423360 in B*Tree [ 643.480652][ T5691] libceph: connect (1)[c::]:6789 error -101 [ 643.488927][ T5691] libceph: mon0 (1)[c::]:6789 connect error [ 643.534846][T11079] ceph: No mds server is up or the cluster is laggy [ 643.615449][ T29] audit: type=1326 audit(1781285388.882:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.7.1576" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709f01c code=0x0 [ 644.141823][T11093] loop6: detected capacity change from 0 to 1024 [ 644.321585][ T29] audit: type=1800 audit(1781285389.592:104): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1579" name="file1" dev="loop6" ino=26 res=0 errno=0 [ 644.356481][T11093] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.391166][T11093] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.455131][T11093] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.485910][T11093] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.564204][T11096] loop2: detected capacity change from 0 to 512 [ 644.576220][T11093] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.601318][T11093] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.637533][T11096] EXT4-fs error (device loop2): __ext4_iget:5481: inode #11: block 1: comm syz.2.1581: invalid block [ 644.668489][T11096] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 644.670822][T11096] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1581: couldn't read orphan inode 11 (err -117) [ 644.676435][T11102] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.680556][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 644.697113][T11102] hfsplus: request for non-existent node 33423360 in B*Tree [ 644.699991][ C1] EXT4-fs (loop2): initial error at time 1781285389: __ext4_iget:5481: inode 11: block 1 [ 644.723913][ C1] EXT4-fs (loop2): last error at time 1781285389: __ext4_iget:5481: inode 11: block 1 [ 644.762060][T11096] loop2: lost filesystem error report for type 5 error -117 [ 644.781638][T11096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.272059][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.336827][T11107] netlink: 'syz.8.1583': attribute type 1 has an invalid length. [ 645.794663][T11107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.073473][T11109] bond0: (slave geneve2): making interface the new active one [ 646.095071][T11109] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 651.371622][T11194] fuse: fd is not a fuse device [ 652.619922][ T5591] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 652.630526][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 652.630703][ T5591] Tainted: [L]=SOFTLOCKUP [ 652.630755][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 652.630881][ T5591] Workqueue: hci3 hci_rx_work [ 652.631151][ T5591] Call Trace: [ 652.631198][ T5591] [ 652.631248][ T5591] __dump_stack+0x26/0x30 [ 652.631463][ T5591] dump_stack_lvl+0x14c/0x1c0 [ 652.631625][ T5591] dump_stack+0x1e/0x25 [ 652.631759][ T5591] sysfs_create_dir_ns+0x46c/0x540 [ 652.631942][ T5591] kobject_add_internal+0x1084/0x19b0 [ 652.632214][ T5591] kobject_add+0x2c1/0x410 [ 652.632392][ T5591] ? kmsan_get_metadata+0xf1/0x160 [ 652.632594][ T5591] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 652.632780][ T5591] device_add+0xa70/0x1c90 [ 652.633036][ T5591] hci_conn_add_sysfs+0x159/0x2e0 [ 652.633274][ T5591] le_conn_complete_evt+0x1de1/0x2330 [ 652.633528][ T5591] hci_le_conn_complete_evt+0x157/0x260 [ 652.633718][ T5591] hci_le_meta_evt+0x6eb/0x960 [ 652.633895][ T5591] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 652.634080][ T5591] hci_event_packet+0xb8c/0x1820 [ 652.634209][ T5591] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 652.634398][ T5591] hci_rx_work+0x8c3/0xfc0 [ 652.634537][ T5591] ? kmsan_get_metadata+0xf1/0x160 [ 652.634727][ T5591] ? __pfx_hci_rx_work+0x10/0x10 [ 652.634863][ T5591] process_scheduled_works+0xb65/0x1e40 [ 652.635115][ T5591] worker_thread+0xee4/0x1590 [ 652.635307][ T5591] kthread+0x53a/0x5f0 [ 652.635483][ T5591] ? __pfx_worker_thread+0x10/0x10 [ 652.635653][ T5591] ? __pfx_kthread+0x10/0x10 [ 652.635820][ T5591] ret_from_fork+0x20f/0x8d0 [ 652.635976][ T5591] ? __switch_to+0x573/0x7a0 [ 652.636150][ T5591] ? __pfx_kthread+0x10/0x10 [ 652.636323][ T5591] ret_from_fork_asm+0x1a/0x30 [ 652.636512][ T5591] [ 652.844167][ T5591] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 652.858535][ T5591] Bluetooth: hci3: failed to register connection device [ 656.918514][T11275] loop6: detected capacity change from 0 to 512 [ 656.993503][T11275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 657.038002][T11275] System zones: 1-12 [ 657.050592][T11275] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.1644: Directory hole found for htree index block 0 [ 657.064117][T11275] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 657.067482][T11275] EXT4-fs (loop6): Remounting filesystem read-only [ 657.077042][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 657.077131][ C1] EXT4-fs (loop6): initial error at time 1781285402: dx_probe:791: inode 2 [ 657.077285][ C1] EXT4-fs (loop6): last error at time 1781285402: dx_probe:791: inode 2 [ 657.108670][T11275] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 657.117500][T11275] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 657.130336][T11275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.457016][ T5691] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 657.630193][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1650'. [ 657.658026][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 106, changing to 10 [ 657.684442][T11285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 657.729125][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25203, setting to 1024 [ 657.766285][ T5691] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 657.800959][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.856986][ T5691] usb 7-1: config 0 descriptor?? [ 658.345371][ T5691] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 658.430469][ T5691] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0012/input/input15 [ 658.543527][ C1] usb 7-1: input irq status -75 received [ 658.683727][T11296] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1655'. [ 658.711343][ T5691] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 658.811132][ T5691] usb 7-1: USB disconnect, device number 17 [ 659.412590][T11297] fido_id[11297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 659.690036][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.568528][ T5699] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 660.775489][ T5699] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 660.793239][T11325] loop6: detected capacity change from 0 to 512 [ 660.811875][ T5699] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 660.837643][T11325] EXT4-fs: Ignoring removed mblk_io_submit option [ 660.871634][ T5699] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.889836][T11325] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 660.929908][ T5699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 660.943586][T11325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840e02c, mo2=0002] [ 660.998940][ T5699] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 661.030259][T11325] EXT4-fs (loop6): orphan cleanup on readonly fs [ 661.062921][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.083613][T11325] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1667: bg 0: block 361: padding at end of block bitmap is not set [ 661.137171][T11325] loop6: lost filesystem error report for type 5 error -117 [ 661.144209][T11325] EXT4-fs (loop6): Remounting filesystem read-only [ 661.151891][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 661.151988][ C1] EXT4-fs (loop6): initial error at time 1781285406: ext4_validate_block_bitmap:441 [ 661.152103][ C1] EXT4-fs (loop6): last error at time 1781285406: ext4_validate_block_bitmap:441 [ 661.159324][ T5699] usb 3-1: config 0 descriptor?? [ 661.210072][T11325] EXT4-fs (loop6): 1 truncate cleaned up [ 661.230174][T11325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 661.244801][T11316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 661.509885][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 661.695464][ T5699] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 661.716951][ T5699] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 661.739602][ T5699] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 661.770104][ T5699] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 661.792661][ T5699] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 661.818499][ T5699] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 661.850099][ T5699] petalynx 0003:18B1:0037.0013: reserved main item tag 0xd [ 661.894202][ T5699] petalynx 0003:18B1:0037.0013: unknown global tag 0xc [ 661.930744][ T5699] petalynx 0003:18B1:0037.0013: item 0 1 1 12 parsing failed [ 661.988797][ T5699] petalynx 0003:18B1:0037.0013: parse failed [ 662.021276][ T5699] petalynx 0003:18B1:0037.0013: probe with driver petalynx failed with error -22 [ 662.084306][ T5699] usb 3-1: USB disconnect, device number 12 [ 663.098782][T11349] loop2: detected capacity change from 0 to 512 [ 663.136529][T11349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 663.294921][T11349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.388201][T11349] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 663.833993][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.053804][T11363] 9pnet: p9_errstr2errno: server reported unknown error 00 [ 665.004367][ T5691] libceph: connect (1)[c::]:6789 error -101 [ 665.039227][ T5691] libceph: mon0 (1)[c::]:6789 connect error [ 665.066329][T11375] ceph: No mds server is up or the cluster is laggy [ 665.322370][T11386] netlink: 'syz.8.1689': attribute type 10 has an invalid length. [ 665.357951][T11386] syz_tun: entered promiscuous mode [ 665.908672][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 665.955815][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 666.450216][T11403] Invalid ELF header len 12 [ 667.453838][T11414] loop6: detected capacity change from 0 to 4096 [ 667.591739][T11423] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 668.414824][T11435] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1707'. [ 669.900964][T11458] netlink: 'syz.8.1726': attribute type 1 has an invalid length. [ 669.909330][T11458] netlink: 15022 bytes leftover after parsing attributes in process `syz.8.1726'. [ 673.626305][ T48] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 675.425679][T11549] loop2: detected capacity change from 0 to 128 [ 675.474817][T11549] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 675.906425][ T6424] tipc: Subscription rejected, illegal request [ 676.528962][T11561] ceph: No mds server is up or the cluster is laggy [ 677.011108][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1761'. [ 677.991140][T11597] netlink: 'syz.7.1767': attribute type 10 has an invalid length. [ 678.024003][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1768'. [ 678.091161][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1768'. [ 678.141619][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1768'. [ 679.023859][T11616] ceph: No mds server is up or the cluster is laggy [ 680.110753][T11638] netlink: 'syz.2.1781': attribute type 10 has an invalid length. [ 680.166352][T11638] syz_tun: entered promiscuous mode [ 680.904936][ T5691] Process accounting resumed [ 681.004142][T11649] loop6: detected capacity change from 0 to 256 [ 681.286050][T11649] FAT-fs (loop6): Directory bread(block 64) failed [ 681.313264][T11649] FAT-fs (loop6): Directory bread(block 65) failed [ 681.360539][T11649] FAT-fs (loop6): Directory bread(block 66) failed [ 681.391528][T11649] FAT-fs (loop6): Directory bread(block 67) failed [ 681.425844][T11649] FAT-fs (loop6): Directory bread(block 68) failed [ 681.445695][T11649] FAT-fs (loop6): Directory bread(block 69) failed [ 681.464460][T11649] FAT-fs (loop6): Directory bread(block 70) failed [ 681.481730][T11649] FAT-fs (loop6): Directory bread(block 71) failed [ 681.513276][T11649] FAT-fs (loop6): Directory bread(block 72) failed [ 681.521647][T11649] FAT-fs (loop6): Directory bread(block 73) failed [ 681.987575][T11657] loop2: detected capacity change from 0 to 256 [ 682.266993][T11657] FAT-fs (loop2): Directory bread(block 64) failed [ 682.274238][T11657] FAT-fs (loop2): Directory bread(block 65) failed [ 682.291572][T11657] FAT-fs (loop2): Directory bread(block 66) failed [ 682.311675][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 682.333121][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 682.339481][T11657] FAT-fs (loop2): Directory bread(block 67) failed [ 682.383090][T11657] FAT-fs (loop2): Directory bread(block 68) failed [ 682.412220][T11664] ceph: No mds server is up or the cluster is laggy [ 682.419458][T11657] FAT-fs (loop2): Directory bread(block 69) failed [ 682.455973][T11657] FAT-fs (loop2): Directory bread(block 70) failed [ 682.493912][T11657] FAT-fs (loop2): Directory bread(block 71) failed [ 682.537861][T11657] FAT-fs (loop2): Directory bread(block 72) failed [ 682.568009][T11657] FAT-fs (loop2): Directory bread(block 73) failed [ 682.880677][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1794'. [ 682.931433][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1794'. [ 683.668119][ T3098] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 683.868173][ T3098] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 683.906991][ T3098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.929709][ T3098] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 683.949947][ T3098] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 683.977206][ T3098] usb 3-1: Manufacturer: syz [ 684.008422][ T3098] usb 3-1: config 0 descriptor?? [ 684.308388][ T3098] rc_core: IR keymap rc-hauppauge not found [ 684.335563][ T3098] Registered IR keymap rc-empty [ 684.364714][ T3098] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 684.422331][ T3098] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 684.612215][T11700] rc rc0: two consecutive events of type space [ 684.858457][ T3098] usb 3-1: USB disconnect, device number 13 [ 686.003150][T11722] netlink: 'syz.2.1808': attribute type 4 has an invalid length. [ 686.298439][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1809'. [ 686.347355][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1809'. [ 687.703834][T11749] loop6: detected capacity change from 0 to 512 [ 687.731522][T11749] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 687.817222][T11749] EXT4-fs (loop6): 1 truncate cleaned up [ 687.878600][T11749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.518326][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.054866][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 689.107020][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 689.438678][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 689.827115][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1831'. [ 690.144603][T11783] loop6: detected capacity change from 0 to 512 [ 690.216032][T11783] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 690.228766][T11783] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 690.240097][T11783] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1834: Corrupt directory, running e2fsck is recommended [ 690.258712][T11783] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 690.267607][T11783] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1834: corrupted in-inode xattr: e_name out of bounds [ 690.290240][T11783] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 690.299017][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 690.314985][ C0] EXT4-fs (loop6): initial error at time 1781285691: ext4_iget_extra_inode:5128: inode 15 [ 690.325280][ C0] EXT4-fs (loop6): last error at time 1781285691: ext4_iget_extra_inode:5128: inode 15 [ 690.373658][T11783] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1834: couldn't read orphan inode 15 (err -117) [ 690.416470][T11783] loop6: lost filesystem error report for type 5 error -117 [ 690.434057][T11783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.587374][T11783] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 690.654234][T11783] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 690.731880][T11783] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1834: Corrupt directory, running e2fsck is recommended [ 690.857755][T11789] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 690.892992][T11789] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 690.949712][T11789] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1834: Corrupt directory, running e2fsck is recommended [ 691.040483][T11793] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 691.061861][T11798] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 691.142654][T11793] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 691.149359][T11798] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 691.677212][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.050936][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 693.024408][T11827] loop2: detected capacity change from 0 to 128 [ 693.094153][T11827] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 693.144532][T11830] netlink: 'syz.7.1851': attribute type 21 has an invalid length. [ 693.162170][T11827] hpfs: filesystem error: improperly stopped [ 693.178935][T11830] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1851'. [ 693.199892][T11827] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 693.224909][T11827] hpfs: You really don't want any checks? You are crazy... [ 693.254507][T11827] hpfs: Code page index out of array [ 693.278953][T11830] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1851'. [ 693.295324][T11827] hpfs: code page support is disabled [ 693.314521][T11827] hpfs: hpfs_map_4sectors(): unaligned read [ 693.340301][T11827] hpfs: hpfs_map_4sectors(): unaligned read [ 693.368012][T11827] hpfs: filesystem error: unable to find root dir [ 694.386944][ T3098] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 694.598332][ T3098] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 694.631490][ T3098] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 694.661405][ T3098] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 694.684666][ T3098] usb 3-1: config 220 has no interface number 2 [ 694.700185][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1859'. [ 694.705568][ T3098] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 694.749203][ T3098] usb 3-1: config 220 interface 0 has no altsetting 0 [ 694.770066][ T3098] usb 3-1: config 220 interface 76 has no altsetting 0 [ 694.793604][ T3098] usb 3-1: config 220 interface 1 has no altsetting 0 [ 694.830124][ T3098] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 694.852872][ T3098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.883562][ T3098] usb 3-1: Product: syz [ 694.901826][ T3098] usb 3-1: Manufacturer: syz [ 694.924002][ T3098] usb 3-1: SerialNumber: syz [ 695.224694][ T3098] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 695.274708][ T3098] uvcvideo 3-1:220.0: No valid video chain found. [ 695.297924][ T3098] usb 3-1: selecting invalid altsetting 0 [ 695.407657][ T3098] usb 3-1: selecting invalid altsetting 0 [ 695.437492][ T3098] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 695.485427][ T3098] usb 3-1: USB disconnect, device number 14 [ 696.299017][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.305624][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.873867][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1879'. [ 698.179293][T11896] bond0: entered promiscuous mode [ 698.210758][T11896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.346370][T11898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.389238][T11898] bond0: (slave sit2): The slave device specified does not support setting the MAC address [ 698.413545][T11901] loop2: detected capacity change from 0 to 512 [ 698.456598][T11901] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 698.506147][T11898] bond0: (slave sit2): Error -95 calling set_mac_address [ 698.517513][T11901] EXT4-fs (loop2): 1 truncate cleaned up [ 698.545456][T11901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.652123][T11906] fuse: fd is not a fuse device [ 699.022431][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.472410][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1886'. [ 699.578014][T11917] loop2: detected capacity change from 0 to 512 [ 699.611319][T11917] EXT4-fs: Ignoring removed nobh option [ 699.644469][T11917] EXT4-fs (loop2): Test dummy encryption mode enabled [ 699.699040][T11917] EXT4-fs error (device loop2): __ext4_iget:5481: inode #11: block 1: comm syz.2.1885: invalid block [ 699.770305][T11917] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 699.775616][T11917] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1885: couldn't read orphan inode 11 (err -117) [ 699.785209][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 699.785302][ C1] EXT4-fs (loop2): initial error at time 1781285701: __ext4_iget:5481: inode 11: block 1 [ 699.785469][ C1] EXT4-fs (loop2): last error at time 1781285701: __ext4_iget:5481: inode 11: block 1 [ 699.859482][T11917] loop2: lost filesystem error report for type 5 error -117 [ 699.863579][T11917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.233303][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.079786][T11953] veth0: entered promiscuous mode [ 702.109414][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1901'. [ 703.634542][T11975] loop6: detected capacity change from 0 to 512 [ 703.746005][T11975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.829964][T11975] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.354854][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.831630][T11996] fuse: fd is not a fuse device [ 705.388925][T12000] fuse: fd is not a fuse device [ 706.580750][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1922'. [ 706.615125][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1922'. [ 707.530059][T12023] overlayfs: failed to clone upperpath [ 708.208555][T12030] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1928'. [ 709.177537][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 709.578080][T12047] loop2: detected capacity change from 0 to 512 [ 709.692482][T12047] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1939: bg 0: block 393: padding at end of block bitmap is not set [ 709.770129][T12047] loop2: lost filesystem error report for type 5 error -117 [ 709.776799][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 709.791050][ C0] EXT4-fs (loop2): initial error at time 1781285711: ext4_validate_block_bitmap:441 [ 709.800779][ C0] EXT4-fs (loop2): last error at time 1781285711: ext4_validate_block_bitmap:441 [ 709.812779][T12047] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 709.824445][T12047] loop2: lost filesystem error report for type 5 error -117 [ 709.827476][T12047] EXT4-fs (loop2): 2 truncates cleaned up [ 709.852436][T12047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.244365][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.203542][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'. [ 713.426514][T12098] bond0: entered promiscuous mode [ 713.450457][T12098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.680075][T12107] loop6: detected capacity change from 0 to 128 [ 713.768870][T12107] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 713.863360][T12107] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.973327][T12107] Invalid argument reading file caps for ./file0 [ 714.333826][ T6273] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 714.748129][ T29] audit: type=1326 audit(1781285716.026:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 714.774197][T12122] overlayfs: failed to clone upperpath [ 714.848146][ T29] audit: type=1326 audit(1781285716.026:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 714.946609][ T29] audit: type=1326 audit(1781285716.026:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 715.025010][ T29] audit: type=1326 audit(1781285716.056:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 715.104326][ T29] audit: type=1326 audit(1781285716.066:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12124 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71861ab code=0x7ffc0000 [ 715.216974][ T29] audit: type=1326 audit(1781285716.096:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 715.330865][ T29] audit: type=1326 audit(1781285716.096:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=78 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 715.435128][ T29] audit: type=1326 audit(1781285716.096:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 715.495972][ T29] audit: type=1326 audit(1781285716.116:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 715.580572][ T29] audit: type=1326 audit(1781285716.116:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.2.1966" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf704f01c code=0x7ffc0000 [ 717.072612][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 717.120912][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 717.695093][T12164] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1982'. [ 719.592730][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1992'. [ 719.630174][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1992'. [ 720.113585][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1995'. [ 720.324121][T12194] loop2: detected capacity change from 0 to 512 [ 720.393746][T12194] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 720.485252][T12194] EXT4-fs (loop2): 1 truncate cleaned up [ 720.502362][T12194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.992555][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.529209][T12215] sg_write: data in/out 438661/136 bytes for SCSI command 0x0-- guessing data in; [ 721.529209][T12215] program syz.2.2003 not setting count and/or reply_len properly [ 724.477188][T12250] overlayfs: failed to clone lowerpath [ 724.537796][T12251] overlayfs: failed to clone lowerpath [ 724.716092][T12255] netlink: 'syz.2.2019': attribute type 8 has an invalid length. [ 725.306891][T12267] binder: 12266:12267 ioctl c0306201 80000080 returned -14 [ 725.764560][T12273] netlink: 'syz.6.2026': attribute type 2 has an invalid length. [ 725.779515][T12274] fuse: fd is not a fuse device [ 725.792590][T12273] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2026'. [ 726.323028][T12276] loop2: detected capacity change from 0 to 4096 [ 726.381873][T12276] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 726.731867][T12276] ntfs3(loop2): ino=1a, mi_enum_attr [ 726.762493][T12276] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 726.811575][T12276] ntfs3(loop2): ino=1a, mi_enum_attr [ 726.832729][T12276] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 727.558748][T12290] netlink: 'syz.3.2033': attribute type 30 has an invalid length. [ 730.414607][T12333] loop2: detected capacity change from 0 to 8 [ 730.487006][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 730.539504][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 730.577381][T12333] SQUASHFS error: Failed to read block 0x657: -5 [ 730.592040][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 730.613667][T12333] SQUASHFS error: Unable to read metadata cache entry [655] [ 730.630871][T12333] SQUASHFS error: Unable to read directory block [260685:0] [ 731.313990][T12346] netlink: 'syz.8.2057': attribute type 8 has an invalid length. [ 731.351632][ T5691] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 731.535865][ T5691] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 731.550047][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.561717][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.591251][ T5691] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 731.625387][ T5691] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 731.635840][ T5691] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 731.644616][ T5691] usb 7-1: Manufacturer: syz [ 731.678940][ T5691] usb 7-1: config 0 descriptor?? [ 732.239167][ T5691] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 732.344083][ T5691] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 732.467302][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2073'. [ 733.364857][T12369] overlayfs: failed to clone upperpath [ 734.018171][T12379] netlink: 'syz.3.2070': attribute type 8 has an invalid length. [ 734.092810][T12382] netlink: 'syz.8.2072': attribute type 7 has an invalid length. [ 734.237512][ T5699] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 734.320914][ T5691] usb 7-1: USB disconnect, device number 18 [ 734.449537][ T5699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.512497][ T5699] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 734.571050][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 734.613429][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 734.645854][ T5699] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 734.690056][ T5699] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 734.728216][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 734.771342][ T5699] usb 3-1: Product: syz [ 734.786766][ T5699] usb 3-1: Manufacturer: syz [ 734.796578][ T5699] usb 3-1: SerialNumber: syz [ 734.828352][ T5699] usb 3-1: config 0 descriptor?? [ 735.089785][ T5699] radio-si470x 3-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 735.296342][ T5699] radio-si470x 3-1:0.0: software version 100, hardware version 101 [ 735.508065][ T5699] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 736.125104][ T5699] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 736.147483][ T5699] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 736.201376][ T5699] usb 3-1: USB disconnect, device number 15 [ 737.008678][T12406] overlayfs: failed to clone upperpath [ 737.485355][T12417] loop6: detected capacity change from 0 to 16 [ 737.535165][T12417] erofs (device loop6): mounted with root inode @ nid 36. [ 737.604515][T12417] syz.6.2086: attempt to access beyond end of device [ 737.604515][T12417] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 737.685065][T12417] syz.6.2086: attempt to access beyond end of device [ 737.685065][T12417] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 737.728380][T12419] overlayfs: failed to clone upperpath [ 737.754820][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 737.754890][ T29] audit: type=1800 audit(1781285739.026:118): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2086" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 738.678064][T12431] overlayfs: failed to clone upperpath [ 738.717361][T12431] overlayfs: failed to clone lowerpath [ 739.071076][T12436] loop2: detected capacity change from 0 to 16 [ 739.119741][T12436] erofs (device loop2): mounted with root inode @ nid 36. [ 740.877950][T12459] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 742.977275][ T5691] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 743.194521][ T5691] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 743.235422][ T5691] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.282900][ T5691] usb 3-1: config 0 interface 0 has no altsetting 0 [ 743.311629][ T5691] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 743.342085][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.382645][ T5691] usb 3-1: config 0 descriptor?? [ 743.416403][T12496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 743.638504][ T5699] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 743.818466][ T5699] usb 7-1: config 0 has no interfaces? [ 743.849676][ T5699] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 743.884627][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.918315][ T5699] usb 7-1: Product: syz [ 743.925406][ T5691] kye 0003:0458:0087.0015: unknown main item tag 0x7 [ 743.938799][ T5699] usb 7-1: Manufacturer: syz [ 743.956177][ T5699] usb 7-1: SerialNumber: syz [ 743.960115][ T5691] kye 0003:0458:0087.0015: hidraw0: USB HID v9.0d Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0 [ 743.984313][ T5699] usb 7-1: config 0 descriptor?? [ 744.140205][ T5699] usb 3-1: USB disconnect, device number 16 [ 744.499544][T12511] fido_id[12511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 744.506184][ T5691] usb 7-1: USB disconnect, device number 19 [ 746.842754][ T5699] libceph: connect (1)[c::]:6789 error -101 [ 746.868577][ T5699] libceph: mon0 (1)[c::]:6789 connect error [ 746.874060][ T5680] libceph: connect (1)[c::]:6789 error -101 [ 746.899009][ T5680] libceph: mon0 (1)[c::]:6789 connect error [ 746.930447][T12550] ceph: No mds server is up or the cluster is laggy [ 746.936056][ T5680] libceph: connect (1)[c::]:6789 error -101 [ 746.962060][T12564] vxcan1: tx drop: invalid da for name 0x00000000000000c7 [ 746.974156][ T5680] libceph: mon0 (1)[c::]:6789 connect error [ 747.179542][ T5680] libceph: connect (1)[c::]:6789 error -101 [ 747.189152][ T5680] libceph: mon0 (1)[c::]:6789 connect error [ 747.229667][ T5680] libceph: connect (1)[c::]:6789 error -101 [ 747.238674][ T5680] libceph: mon0 (1)[c::]:6789 connect error [ 747.642190][T12552] ceph: No mds server is up or the cluster is laggy [ 747.655828][T12559] ceph: No mds server is up or the cluster is laggy [ 747.708338][ T5680] libceph: connect (1)[c::]:6789 error -101 [ 747.717263][ T5680] libceph: mon0 (1)[c::]:6789 connect error [ 747.795397][ T29] audit: type=1326 audit(1781285749.066:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.7.2140" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x0 [ 749.287178][ T5699] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 749.502517][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.537199][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.564385][ T5699] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 749.610891][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.643924][ T5699] usb 3-1: config 0 descriptor?? [ 750.118568][ T5699] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 750.155512][T12609] overlayfs: failed to clone upperpath [ 750.174022][ T5699] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 750.196910][ T5699] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 750.217900][ T5699] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 750.235847][ T5699] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 750.255357][ T5699] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 750.280945][ T5699] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 750.356193][ T5699] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 750.459536][ T5699] cp2112 0003:10C4:EA90.0016: Part Number: 0x00 Device Version: 0x00 [ 751.073944][ T5699] cp2112 0003:10C4:EA90.0016: error reading lock byte: -71 [ 751.151582][ T5699] usb 3-1: USB disconnect, device number 17 [ 751.240900][T12625] overlayfs: failed to clone lowerpath [ 753.022589][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2167'. [ 753.066106][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2167'. [ 753.728635][T12655] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2170'. [ 753.865605][T12657] fuse: fd is not a fuse device [ 753.922403][T12659] fuse: fd is not a fuse device [ 753.961348][T12659] overlayfs: failed to clone upperpath [ 755.307370][T12677] loop2: detected capacity change from 0 to 2048 [ 755.434152][T12677] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 756.381269][ T5691] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 756.583824][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.614158][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.626187][ T5691] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 756.645763][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.671525][ T5691] usb 3-1: config 0 descriptor?? [ 757.140207][ T5691] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 757.168803][ T5691] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 757.206004][ T5691] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 757.225865][ T5691] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 757.254363][ T5691] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 757.298279][ T5691] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 757.452694][T12704] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2190'. [ 757.453391][ T5691] playstation 0003:054C:0DF2.0017: Invalid byte count transferred, expected 20 got 0 [ 757.496303][T12704] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2190'. [ 757.547650][ T5691] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -22 [ 757.573293][ T5691] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 757.603641][ T5691] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 757.669702][ T5691] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -22 [ 757.751340][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.759824][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.801486][ T5691] usb 3-1: USB disconnect, device number 18 [ 757.920380][T12707] loop6: detected capacity change from 0 to 16 [ 757.937537][T12703] fido_id[12703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 757.984039][T12707] erofs (device loop6): mounted with root inode @ nid 36. [ 759.236581][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2199'. [ 759.838370][T12737] fuse: fd is not a fuse device [ 759.957678][T12740] nbd2: detected capacity change from 0 to 63 [ 760.016204][T12745] block nbd2: NBD_DISCONNECT [ 760.022124][T12745] block nbd2: Disconnected due to user request. [ 760.035457][T12745] block nbd2: shutting down sockets [ 760.049755][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.059335][ C0] buffer_io_error: 6 callbacks suppressed [ 760.059403][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 760.073265][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.082588][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 760.090594][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.099898][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 760.107898][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.117336][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 760.165587][ T6803] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.208182][ T6803] Buffer I/O error on dev nbd2, logical block 0, async page read [ 760.216418][ T6803] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.249395][ T6803] Buffer I/O error on dev nbd2, logical block 1, async page read [ 760.281205][ T6803] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.298183][ T6803] Buffer I/O error on dev nbd2, logical block 2, async page read [ 760.306223][ T6803] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.332055][ T6803] Buffer I/O error on dev nbd2, logical block 3, async page read [ 760.348585][ T6803] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.363871][ T6803] Buffer I/O error on dev nbd2, logical block 0, async page read [ 760.374155][ T6803] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.384574][ T6803] Buffer I/O error on dev nbd2, logical block 1, async page read [ 760.404229][ T6803] ldm_validate_partition_table(): Disk read failed. [ 760.414585][ T6803] Dev nbd2: unable to read RDB block 0 [ 760.423803][ T6803] nbd2: unable to read partition table [ 760.481023][ T6803] ldm_validate_partition_table(): Disk read failed. [ 760.515446][ T6803] Dev nbd2: unable to read RDB block 0 [ 760.544789][ T6803] nbd2: unable to read partition table [ 761.975774][ T29] audit: type=1326 audit(1781285763.246:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12761 comm="syz.2.2214" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x0 [ 762.081925][T12771] overlayfs: failed to clone lowerpath [ 762.127553][T12771] overlayfs: failed to clone lowerpath [ 764.408507][T12798] loop2: detected capacity change from 0 to 8 [ 764.492509][T12798] squashfs image failed sanity check [ 764.600616][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 764.689807][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 766.334109][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2241'. [ 766.404793][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2241'. [ 766.478566][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2241'. [ 767.128225][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2247'. [ 767.523726][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2250'. [ 767.888346][ T5691] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 768.071724][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 768.101865][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 768.143798][ T5691] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 768.184754][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.248935][ T5691] usb 3-1: config 0 descriptor?? [ 768.460548][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 768.471441][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 768.514522][ T5691] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 768.895466][ T29] audit: type=1800 audit(1781285770.166:121): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2259" name="nullb0" dev="tmpfs" ino=895 res=0 errno=0 [ 769.045892][ T3098] usb 3-1: USB disconnect, device number 19 [ 769.938113][T12885] netlink: 'syz.3.2265': attribute type 34 has an invalid length. [ 770.409968][T12894] tls_set_device_offload: netdev not found [ 770.664623][T12898] loop2: detected capacity change from 0 to 256 [ 771.491049][T12906] loop2: detected capacity change from 0 to 1024 [ 771.568789][T12906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 771.686238][T12906] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.901157][T12917] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2274: Freeing blocks not in datazone - block = 0, count = 16 [ 772.165211][ T6418] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 112: padding at end of block bitmap is not set [ 772.183451][ T6418] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 772.216076][ T6418] EXT4-fs (loop2): This should not happen!! Data will be lost [ 772.216076][ T6418] [ 772.228109][ T6418] EXT4-fs (loop2): Total free blocks count 0 [ 772.235008][ T6418] EXT4-fs (loop2): Free/Dirty block details [ 772.243354][ T6418] EXT4-fs (loop2): free_blocks=16 [ 772.249547][ T6418] EXT4-fs (loop2): dirty_blocks=80 [ 772.255496][ T6418] EXT4-fs (loop2): Block reservation details [ 772.263015][ T6418] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 772.273238][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 64 with error 28 [ 772.300331][ T5594] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 775.744390][T12971] input: syz0 as /devices/virtual/input/input17 [ 778.285734][T13010] overlayfs: failed to clone lowerpath [ 778.407075][ T5699] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 778.569943][T13012] netlink: 'syz.2.2317': attribute type 30 has an invalid length. [ 778.597730][ T5699] usb 7-1: Using ep0 maxpacket: 32 [ 778.633115][ T5699] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 778.656117][ T5699] usb 7-1: config 0 has no interface number 0 [ 778.683039][ T5699] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 119, changing to 10 [ 778.730272][ T5699] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 49336, setting to 1024 [ 778.794460][ T5699] usb 7-1: config 0 interface 85 has no altsetting 0 [ 778.844238][ T5699] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 778.881231][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.920462][ T5699] usb 7-1: Product: syz [ 778.938459][ T5699] usb 7-1: Manufacturer: syz [ 778.959049][ T5699] usb 7-1: SerialNumber: syz [ 778.999178][ T5699] usb 7-1: config 0 descriptor?? [ 780.021989][ T5699] appletouch 7-1:0.85: Geyser mode initialized. [ 780.054210][ T5699] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input18 [ 780.332122][ T5691] usb 7-1: USB disconnect, device number 20 [ 780.435808][ T5691] appletouch 7-1:0.85: input: appletouch disconnected [ 780.921568][T13045] overlayfs: failed to clone upperpath [ 781.427114][T13053] netlink: 'syz.6.2332': attribute type 30 has an invalid length. [ 781.914704][T13060] input: syz0 as /devices/virtual/input/input19 [ 782.352766][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2338'. [ 782.545535][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2339'. [ 782.705042][T13070] tipc: Started in network mode [ 782.722841][T13070] tipc: Node identity ac14140f, cluster identity 4711 [ 782.762202][T13070] tipc: Enabled bearer , priority 10 [ 783.867969][ T5699] tipc: Node number set to 2886997007 [ 785.124720][T13112] overlayfs: failed to clone upperpath [ 786.265382][ T29] audit: type=1800 audit(1781285787.536:122): pid=13129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2372" name="nullb0" dev="tmpfs" ino=2455 res=0 errno=0 [ 786.467755][T13137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2362'. [ 787.097554][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 788.685403][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 788.740033][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 789.117484][T13172] overlayfs: failed to clone lowerpath [ 789.175343][T13172] overlayfs: failed to clone lowerpath [ 789.231777][T13177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2380'. [ 789.603338][T13181] loop2: detected capacity change from 0 to 2048 [ 789.710249][T13181] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.006911][ T29] audit: type=1326 audit(1781285792.276:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.6.2387" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70af01c code=0x0 [ 791.391898][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2388'. [ 791.425273][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2388'. [ 791.598003][T13204] veth3: entered promiscuous mode [ 792.094778][T13215] loop6: detected capacity change from 0 to 64 [ 792.116029][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2391'. [ 792.154170][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2391'. [ 793.463698][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2400'. [ 793.638942][T13225] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.218697][T13225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.302537][T13225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.192590][T13225] ip6erspan0: left allmulticast mode [ 795.241933][T13225] vxlan0: left promiscuous mode [ 795.665312][ T6407] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.692625][ T6407] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.732620][ T6407] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.776373][ T6407] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.876487][ T6407] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.904406][ T6407] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.939030][ T6424] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.973256][ T6424] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.571886][T13263] overlayfs: failed to clone upperpath [ 796.853413][T13266] loop6: detected capacity change from 0 to 2048 [ 796.933859][T13266] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 797.856908][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 798.608556][ T29] audit: type=1800 audit(1781285799.886:124): pid=13286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2419" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2357 res=0 errno=0 [ 799.453014][ T5691] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 799.627737][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 799.655676][ T5691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.686990][ T5691] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.716071][ T5691] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.750981][ T5691] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.786341][ T5691] usb 3-1: config 1 interface 0 has no altsetting 0 [ 799.827450][ T5691] usb 3-1: string descriptor 0 read error: -22 [ 799.835382][ T5691] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 799.869291][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.217635][T13039] libceph: connect (1)[c::]:6789 error -101 [ 800.229590][T13039] libceph: mon0 (1)[c::]:6789 connect error [ 800.309066][T13317] ceph: No mds server is up or the cluster is laggy [ 800.361579][ T5691] apple 0003:05AC:0218.0018: collection stack underflow [ 800.371327][ T5691] apple 0003:05AC:0218.0018: item 0 0 0 12 parsing failed [ 800.385087][ T5691] apple 0003:05AC:0218.0018: parse failed [ 800.393670][ T5691] apple 0003:05AC:0218.0018: probe with driver apple failed with error -22 [ 800.581451][ T5691] usb 3-1: USB disconnect, device number 20 [ 801.335763][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2436'. [ 801.816188][T13334] loop6: detected capacity change from 0 to 4096 [ 802.442968][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 803.249316][T13348] nbd6: detected capacity change from 0 to 63 [ 803.284860][T13352] block nbd6: NBD_DISCONNECT [ 803.314634][T13352] block nbd6: Disconnected due to user request. [ 803.339962][T13352] block nbd6: shutting down sockets [ 803.383570][ C0] blk_print_req_error: 138 callbacks suppressed [ 803.383648][ C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.399597][ C0] buffer_io_error: 138 callbacks suppressed [ 803.399664][ C0] Buffer I/O error on dev nbd6, logical block 0, async page read [ 803.413607][ C0] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.422928][ C0] Buffer I/O error on dev nbd6, logical block 1, async page read [ 803.430945][ C0] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.440229][ C0] Buffer I/O error on dev nbd6, logical block 2, async page read [ 803.448238][ C0] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.457595][ C0] Buffer I/O error on dev nbd6, logical block 3, async page read [ 803.498634][ T6803] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.550218][ T6803] Buffer I/O error on dev nbd6, logical block 0, async page read [ 803.565716][ T6803] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.581734][ T6803] Buffer I/O error on dev nbd6, logical block 1, async page read [ 803.611092][ T6803] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.622807][ T6803] Buffer I/O error on dev nbd6, logical block 2, async page read [ 803.633598][ T6803] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.648896][T13354] ceph: No mds server is up or the cluster is laggy [ 803.661436][ T6803] Buffer I/O error on dev nbd6, logical block 3, async page read [ 803.731226][ T6803] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.762809][ T6803] Buffer I/O error on dev nbd6, logical block 0, async page read [ 803.819356][ T6803] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 803.871522][ T6803] Buffer I/O error on dev nbd6, logical block 1, async page read [ 803.909742][ T6803] ldm_validate_partition_table(): Disk read failed. [ 803.945192][ T6803] Dev nbd6: unable to read RDB block 0 [ 803.995385][ T6803] nbd6: unable to read partition table [ 804.074601][ T6803] ldm_validate_partition_table(): Disk read failed. [ 804.135576][ T6803] Dev nbd6: unable to read RDB block 0 [ 804.165286][ T6803] nbd6: unable to read partition table [ 804.639386][T13373] loop2: detected capacity change from 0 to 64 [ 804.727493][T13373] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 805.219522][T13376] overlayfs: failed to clone upperpath [ 805.713865][T13383] loop6: detected capacity change from 0 to 256 [ 806.463903][T13393] overlayfs: failed to clone upperpath [ 807.351803][T13414] overlayfs: failed to clone upperpath [ 807.384983][T13414] overlayfs: failed to clone lowerpath [ 807.549262][ T5699] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 807.732198][ T5699] usb 7-1: Using ep0 maxpacket: 32 [ 807.767218][ T5699] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 807.802343][ T5699] usb 7-1: config 0 interface 0 has no altsetting 0 [ 807.824396][ T5699] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 807.855878][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.899349][ T5699] usb 7-1: config 0 descriptor?? [ 808.793673][ T5699] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 808.839087][ T5699] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 808.871757][ T5699] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 808.893047][ T5699] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 808.902882][ T5699] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 808.966382][ T5699] corsair-cpro 0003:1B1C:0C10.0019: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 809.404724][T13437] sctp: [Deprecated]: syz.7.2470 (pid 13437) Use of int in max_burst socket option deprecated. [ 809.404724][T13437] Use struct sctp_assoc_value instead [ 809.410396][ T5699] corsair-cpro 0003:1B1C:0C10.0019: probe with driver corsair-cpro failed with error -110 [ 809.490001][ T5699] usb 7-1: USB disconnect, device number 21 [ 809.577432][ T5691] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 809.622956][T13431] fido_id[13431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 809.765323][ T5691] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.800475][ T5691] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 809.844330][ T5691] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=40.40 [ 809.874565][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.923506][ T5691] usb 3-1: Product: syz [ 809.938334][ T5691] usb 3-1: Manufacturer: syz [ 809.961220][ T5691] usb 3-1: SerialNumber: syz [ 810.054039][ T5691] usb 3-1: selecting invalid altsetting 1 [ 810.344212][T13445] loop6: detected capacity change from 0 to 512 [ 810.422126][T13445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 810.454632][ T5691] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 810.487847][ T5691] cdc_ncm 3-1:1.0: bind() failure [ 810.559350][T13445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.576158][ T5691] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 810.583964][ T5691] cdc_ncm 3-1:1.1: bind() failure [ 810.604768][ T5691] usb 3-1: USB disconnect, device number 21 [ 810.624828][T13445] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.940473][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.623747][T13514] loop2: detected capacity change from 0 to 512 [ 815.665465][T13517] input: syz0 as /devices/virtual/input/input20 [ 815.687228][T13514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 815.745903][T13514] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 815.818014][T13514] EXT4-fs (loop2): 1 truncate cleaned up [ 815.858905][T13514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.282816][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.289160][ T29] audit: type=1800 audit(1781285825.560:125): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2515" name="file2" dev="tmpfs" ino=1847 res=0 errno=0 [ 816.978146][ T5680] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 817.105081][T13541] loop6: detected capacity change from 0 to 16 [ 817.139314][T13541] erofs (device loop6): mounted with root inode @ nid 36. [ 817.166550][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.234484][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.281624][ T5680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 817.343898][ T5680] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 817.389393][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.437625][ T5680] usb 3-1: config 0 descriptor?? [ 817.457063][ T3098] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 817.670055][ T3098] usb 7-1: Using ep0 maxpacket: 16 [ 817.700059][ T3098] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.728712][ T3098] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.759487][ T3098] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 817.793849][ T3098] usb 7-1: config 0 interface 0 has no altsetting 0 [ 817.814394][ T3098] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 817.839953][ T3098] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.878903][ T3098] usb 7-1: config 0 descriptor?? [ 817.955072][ T5680] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 818.476131][ T3098] hid (null): invalid report_count 52999 [ 818.497850][ T3098] hid (null): unknown global tag 0xc [ 818.525523][ T3098] hid (null): unknown global tag 0xc [ 818.549628][ T3098] hid (null): global environment stack underflow [ 818.565557][ T3098] hid (null): unknown global tag 0xe [ 818.584301][ T3098] hid (null): bogus close delimiter [ 818.678763][ T3098] usb 7-1: USB disconnect, device number 22 [ 819.180452][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.187403][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.535815][T13558] overlayfs: failed to resolve './cgroup': -2 [ 819.882881][ T3098] usb 3-1: USB disconnect, device number 22 [ 821.267959][ T29] audit: type=1326 audit(1781285830.540:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.8.2526" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 821.345432][ T29] audit: type=1326 audit(1781285830.580:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.8.2526" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 821.440141][ T29] audit: type=1326 audit(1781285830.670:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13586 comm="syz.8.2526" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 822.736951][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2535'. [ 824.468075][T13638] bond1: (slave lo): Releasing backup interface [ 824.527571][T13638] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 824.635813][T13638] bridge_slave_0: left allmulticast mode [ 824.660008][T13638] bridge_slave_0: left promiscuous mode [ 824.678500][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.715668][T13638] bridge_slave_1: left allmulticast mode [ 824.733605][T13638] bridge_slave_1: left promiscuous mode [ 824.760297][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.814731][T13638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.857848][T13638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.907755][T13638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 825.201525][T13648] loop2: detected capacity change from 0 to 1024 [ 825.370410][ T29] audit: type=1800 audit(1781285834.650:129): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2551" name="file0" dev="loop2" ino=26 res=0 errno=0 [ 826.767707][T13665] overlayfs: failed to clone lowerpath [ 827.154582][T13673] fuse: fd is not a fuse device [ 827.162470][ T5699] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 827.371737][ T5699] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 827.392030][ T5699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.422531][ T5699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.452045][ T5699] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 827.481407][ T5699] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 827.521443][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.555051][ T5699] usb 7-1: config 0 descriptor?? [ 827.564997][T13681] netlink: 'syz.3.2565': attribute type 11 has an invalid length. [ 828.023592][ T5699] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 828.183390][ T5699] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 828.284021][ T5699] usb 7-1: USB disconnect, device number 23 [ 828.785150][T13689] fido_id[13689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 829.763055][T13706] loop6: detected capacity change from 0 to 512 [ 829.831601][T13706] EXT4-fs (loop6): Test dummy encryption mode enabled [ 829.859634][T13706] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 829.962656][T13706] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2576: bad orphan inode 131083 [ 829.982093][T13706] loop6: lost filesystem error report for type 5 error -117 [ 829.986762][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 830.000987][ C1] EXT4-fs (loop6): initial error at time 1781286095: ext4_orphan_get:1423 [ 830.009808][ C1] EXT4-fs (loop6): last error at time 1781286095: ext4_orphan_get:1423 [ 830.028284][T13706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.108890][T13706] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 830.536545][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.691105][T13729] input: syz0 as /devices/virtual/input/input22 [ 833.969501][ T5699] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 833.978120][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 834.019047][ T5699] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 834.131444][T13771] loop6: detected capacity change from 0 to 512 [ 834.268693][ T48] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 834.276530][ T48] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 834.299534][T13771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.357784][T13771] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.950124][T13764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.052181][T13764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.105573][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2601'. [ 835.142146][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2601'. [ 835.853364][T13764] bond1: left allmulticast mode [ 836.056552][ T6424] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.072328][ T6424] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.175384][ T6424] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.240648][ T6424] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.271287][ T6424] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.315545][ T6424] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.361651][ T6424] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.409697][ T6424] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.477744][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.968887][ T5699] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 837.975977][ T5699] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 837.977612][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 838.288623][ T48] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 838.298185][ T48] Bluetooth: hci3: Injecting HCI hardware error event [ 838.305569][ T48] Bluetooth: hci3: hardware error 0x00 [ 838.874294][T13829] loop2: detected capacity change from 0 to 128 [ 838.939703][T13829] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 838.990427][T13829] hpfs: filesystem error: improperly stopped [ 839.025017][T13829] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 839.070237][T13829] hpfs: You really don't want any checks? You are crazy... [ 839.103475][T13829] hpfs: Code page index out of array [ 839.138395][T13829] hpfs: code page support is disabled [ 839.179237][T13829] hpfs: hpfs_map_4sectors(): unaligned read [ 839.212879][T13829] hpfs: hpfs_map_4sectors(): unaligned read [ 839.245544][T13829] hpfs: filesystem error: unable to find root dir [ 839.452538][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.461121][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.127022][T13490] Bluetooth: hci2: command 0x0406 tx timeout [ 840.139620][ T5699] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 840.167983][ T5699] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 840.447297][ T48] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 840.551367][T13832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.699153][T13832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.105181][T13860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2624'. [ 841.329597][T13867] syz.3.2625(13867): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 841.348103][T13867] devpts: Bad value for 'max' [ 841.901591][ T6401] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.935393][ T6401] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.972920][ T6401] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.006869][ T6401] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.038651][ T6401] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.081465][ T6401] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.135663][ T6401] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.195546][ T6401] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.367494][ T5699] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 842.368307][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 842.401028][ T5699] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 846.565232][T13948] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2651'. [ 847.232833][T13958] loop6: detected capacity change from 0 to 512 [ 847.350715][T13958] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2655: inode has both inline data and extents flags [ 847.378797][T13958] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 847.386805][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 847.402809][ C0] EXT4-fs (loop6): initial error at time 1781286112: ext4_orphan_get:1397: inode 15 [ 847.412560][ C0] EXT4-fs (loop6): last error at time 1781286112: ext4_orphan_get:1397: inode 15 [ 847.455581][T13958] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2655: couldn't read orphan inode 15 (err -117) [ 847.478720][T13958] loop6: lost filesystem error report for type 5 error -117 [ 847.486464][T13958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.914184][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.017102][T14039] netlink: 'syz.8.2683': attribute type 4 has an invalid length. [ 853.423245][T14061] netlink: 'syz.6.2690': attribute type 4 has an invalid length. [ 853.453480][T14061] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2690'. [ 855.496238][T14094] loop6: detected capacity change from 0 to 512 [ 855.584692][T14094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.619424][T14094] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.313506][T14106] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2705'. [ 856.327497][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2704'. [ 856.333035][T14106] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2705'. [ 856.635815][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.047043][T14186] overlayfs: failed to clone upperpath [ 859.940425][T14203] netlink: 'syz.3.2716': attribute type 4 has an invalid length. [ 860.456736][ T29] audit: type=1326 audit(1781286125.782:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.7.2721" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x0 [ 862.117826][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2731'. [ 862.160845][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2731'. [ 862.495253][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2734'. [ 862.512976][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2734'. [ 862.528035][T14249] netlink: 190 bytes leftover after parsing attributes in process `syz.6.2734'. [ 863.785608][T14257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.883237][T14272] netlink: 'syz.8.2745': attribute type 8 has an invalid length. [ 863.907119][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2745'. [ 864.169008][T14257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.188728][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 864.234087][T14257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.294459][T14257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 864.306710][T14257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 864.342788][T14257] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 864.397267][T14153] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.405125][T14153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.457875][T14153] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.465408][T14153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.740421][T14272] bond0: entered promiscuous mode [ 864.753291][T14272] geneve2: entered promiscuous mode [ 864.795014][T14272] gretap0: entered promiscuous mode [ 864.832299][T14272] hsr1: entered promiscuous mode [ 865.464932][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2753'. [ 865.485479][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2753'. [ 866.144183][T14302] fuse: fd is not a fuse device [ 866.257291][ T3098] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 866.443228][ T3098] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.495293][ T3098] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 866.523546][ T3098] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.558166][ T3098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.572242][ T3098] usb 3-1: Product: syz [ 866.603717][ T3098] usb 3-1: Manufacturer: syz [ 866.630316][ T3098] usb 3-1: SerialNumber: syz [ 866.699368][ T3098] cdc_mbim 3-1:1.0: skipping garbage [ 866.904007][T14296] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 867.181893][T14313] netlink: 'syz.8.2764': attribute type 11 has an invalid length. [ 867.218887][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2764'. [ 867.553851][T14296] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 867.569966][ T3098] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 867.602746][ T3098] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 867.636973][ T3098] wwan wwan0: port wwan0mbim0 attached [ 867.691785][ T3098] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, be:43:22:d7:88:74 [ 867.801086][T13039] usb 3-1: USB disconnect, device number 23 [ 867.845997][T13039] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 867.979713][T13039] wwan wwan0: port wwan0mbim0 disconnected [ 869.790509][T14357] loop6: detected capacity change from 0 to 4096 [ 869.801773][T14357] EXT4-fs: inline encryption not supported [ 869.814726][T14357] EXT4-fs (loop6): Test dummy encryption mode enabled [ 869.874522][T14357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.412063][T14357] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 870.425555][T14373] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2782'. [ 870.452188][T14363] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 870.485539][T14373] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2782'. [ 870.536250][T14363] overlayfs: upper fs does not support tmpfile. [ 870.555175][T14363] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 871.131167][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.834668][T14395] loop6: detected capacity change from 0 to 128 [ 871.893762][T14395] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 871.939537][T14395] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 872.068654][T14395] ext2 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.084826][T14403] netlink: 'syz.3.2796': attribute type 10 has an invalid length. [ 872.094177][T14403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2796'. [ 872.125688][T14403] A link change request failed with some changes committed already. Interface netdevsim2 may have been left with an inconsistent configuration, please check. [ 872.463232][ T6273] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 875.124761][ T29] audit: type=1326 audit(1781286140.442:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2817" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x0 [ 876.063260][T14472] fuse: fd is not a fuse device [ 877.518480][T14500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 879.441400][T14531] fuse: fd is not a fuse device [ 879.781653][T14536] netlink: 'syz.7.2850': attribute type 10 has an invalid length. [ 879.816932][T14536] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2850'. [ 880.546839][T14544] loop2: detected capacity change from 0 to 4096 [ 880.622522][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.632057][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.557952][T14566] fuse: fd is not a fuse device [ 881.734146][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2865'. [ 881.780044][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2865'. [ 881.805938][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2865'. [ 882.686093][T14588] loop6: detected capacity change from 0 to 256 [ 884.375512][T14615] Trying to write to read-only block-device nullb0 [ 884.854759][T14617] IPv6: A: Disabled Multicast RS [ 885.001616][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 885.566042][T14631] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 885.591674][T14631] overlayfs: missing 'lowerdir' [ 886.908686][T14653] overlayfs: failed to clone upperpath [ 887.380652][T14657] loop2: detected capacity change from 0 to 4096 [ 887.458610][T14657] EXT4-fs: inline encryption not supported [ 887.548294][T14657] EXT4-fs (loop2): Test dummy encryption mode enabled [ 887.620420][T14657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.977115][T14674] fuse: fd is not a fuse device [ 887.996737][T14657] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 888.038037][T14666] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 888.102946][T14666] overlayfs: upper fs does not support tmpfile. [ 888.155278][T14666] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 888.666013][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.330379][T14687] loop6: detected capacity change from 0 to 8192 [ 889.399799][T14687] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 889.512960][ T29] audit: type=1800 audit(1781286154.832:132): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2910" name="file1" dev="loop6" ino=1048698 res=0 errno=0 [ 891.321830][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2924'. [ 892.309134][T14745] fuse: fd is not a fuse device [ 894.023207][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2942'. [ 894.215292][T14778] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 896.910153][T14830] loop6: detected capacity change from 0 to 256 [ 897.931201][T14838] loop6: detected capacity change from 0 to 512 [ 898.030877][T14838] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2962: bad orphan inode 11862016 [ 898.091213][T14838] loop6: lost filesystem error report for type 5 error -117 [ 898.096493][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 898.110702][ C1] EXT4-fs (loop6): initial error at time 1781286163: ext4_orphan_get:1423 [ 898.119489][ C1] EXT4-fs (loop6): last error at time 1781286163: ext4_orphan_get:1423 [ 898.144008][T14838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 898.235642][T14838] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.202452][T14868] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2971'. [ 900.259471][T14868] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2971'. [ 900.304821][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2971'. [ 900.344276][T14868] netlink: 'syz.8.2971': attribute type 26 has an invalid length. [ 902.132802][ T6273] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 902.688142][T14893] loop6: detected capacity change from 0 to 256 [ 902.725986][T14893] FAT-fs (loop6): bogus logical sector size 128 [ 902.764107][T14893] FAT-fs (loop6): Can't find a valid FAT filesystem [ 904.522787][T14920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.537572][T14920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.792772][T14920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.848143][T14920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.109448][T14927] loop2: detected capacity change from 0 to 512 [ 905.222533][T14927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.319176][T14927] ext4 filesystem being mounted at /602/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 905.665686][T14935] fuse: root generation should be zero [ 905.756104][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.857629][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 906.784793][T14964] 9p: Bad value for 'rfdno' [ 910.609651][T15028] 9p: Bad value for 'rfdno' [ 911.083479][T15039] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 911.222713][ T29] audit: type=1326 audit(1781286432.602:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.344128][ T29] audit: type=1326 audit(1781286432.602:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.433674][ T29] audit: type=1326 audit(1781286432.612:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.490157][ T29] audit: type=1326 audit(1781286432.612:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.518108][T15041] bond1: (slave veth5): Enslaving as an active interface with a down link [ 911.542462][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 911.557353][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 911.563736][ T29] audit: type=1326 audit(1781286432.612:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.594279][T15046] overlayfs: failed to resolve './file0': -2 [ 911.611321][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 911.643612][ T29] audit: type=1326 audit(1781286432.612:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.686858][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 911.737527][ T29] audit: type=1326 audit(1781286432.622:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.839091][ T29] audit: type=1326 audit(1781286432.622:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.936246][ T29] audit: type=1326 audit(1781286432.622:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 911.977265][ T29] audit: type=1326 audit(1781286432.622:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.7.3039" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 912.702895][ T3098] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 912.734609][ T3098] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 913.095673][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'. [ 913.128415][T15064] loop6: detected capacity change from 0 to 4096 [ 913.184897][T15064] ext4: Unknown parameter 'seclabel' [ 913.504565][T15067] fido_id[15067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 917.486320][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 917.523484][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 917.563544][T15162] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3066'. [ 917.608579][T15162] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3066'. [ 918.451765][T15174] loop6: detected capacity change from 0 to 256 [ 918.577769][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 918.577842][ T29] audit: type=1326 audit(1781286439.952:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 918.721352][ T29] audit: type=1326 audit(1781286439.992:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 918.772684][T15174] FAT-fs (loop6): Directory bread(block 64) failed [ 918.799091][T15174] FAT-fs (loop6): Directory bread(block 65) failed [ 918.821157][ T29] audit: type=1326 audit(1781286440.022:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 918.832380][T15174] FAT-fs (loop6): Directory bread(block 66) failed [ 918.907695][T15174] FAT-fs (loop6): Directory bread(block 67) failed [ 918.921788][T15174] FAT-fs (loop6): Directory bread(block 68) failed [ 918.933118][ T29] audit: type=1326 audit(1781286440.022:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 918.978438][T15174] FAT-fs (loop6): Directory bread(block 69) failed [ 919.000445][T15174] FAT-fs (loop6): Directory bread(block 70) failed [ 919.019320][ T29] audit: type=1326 audit(1781286440.042:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 919.050118][T15174] FAT-fs (loop6): Directory bread(block 71) failed [ 919.074486][T15174] FAT-fs (loop6): Directory bread(block 72) failed [ 919.111540][T15174] FAT-fs (loop6): Directory bread(block 73) failed [ 919.122455][ T29] audit: type=1326 audit(1781286440.052:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 919.229751][ T29] audit: type=1326 audit(1781286440.052:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 919.331953][ T29] audit: type=1326 audit(1781286440.052:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 919.413678][ T29] audit: type=1326 audit(1781286440.062:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 919.494400][ T29] audit: type=1326 audit(1781286440.062:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15175 comm="syz.8.3071" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7ff801c code=0x7ffc0000 [ 920.861833][ C0] ===================================================== [ 920.869369][ C0] BUG: KMSAN: uninit-value in eth_type_trans+0x840/0xae0 [ 920.876695][ C0] eth_type_trans+0x840/0xae0 [ 920.881550][ C0] ip_tunnel_rcv+0x215f/0x29c0 [ 920.886636][ C0] gre_rcv+0x1c9f/0x20e0 [ 920.891087][ C0] gre_rcv+0x2af/0x3e0 [ 920.895272][ C0] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 920.901063][ C0] ip_local_deliver_finish+0x409/0x720 [ 920.906745][ C0] ip_local_deliver+0x228/0x4a0 [ 920.911726][ C0] ip_rcv_finish+0x4d7/0x560 [ 920.916615][ C0] ip_rcv+0xcb/0x370 [ 920.920631][ C0] process_backlog+0x8d7/0x1500 [ 920.925748][ C0] __napi_poll+0xdc/0x910 [ 920.930335][ C0] net_rx_action+0xa5b/0x1c70 [ 920.935157][ C0] handle_softirqs+0x171/0x7b0 [ 920.940232][ C0] __do_softirq+0x14/0x1b [ 920.944833][ C0] do_softirq+0x58/0x90 [ 920.949247][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 920.954440][ C0] __dev_queue_xmit+0x3c88/0x5a00 [ 920.959819][ C0] neigh_resolve_output+0x9c3/0xaf0 [ 920.965224][ C0] ip_finish_output2+0x1afd/0x1e00 [ 920.970593][ C0] ip_finish_output+0x288/0x860 [ 920.975605][ C0] ip_mc_output+0x58a/0x8c0 [ 920.980347][ C0] ip_send_skb+0x392/0x3d0 [ 920.984919][ C0] udp_send_skb+0xfb8/0x1480 [ 920.989770][ C0] udp_sendmsg+0x2635/0x30d0 [ 920.994506][ C0] inet_sendmsg+0x1ef/0x290 [ 920.999226][ C0] ____sys_sendmsg+0xd27/0xfd0 [ 921.004244][ C0] ___sys_sendmsg+0x271/0x3b0 [ 921.009190][ C0] __sys_sendmmsg+0x3bf/0x7c0 [ 921.014050][ C0] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 921.019929][ C0] ia32_sys_call+0x27d6/0x4360 [ 921.024909][ C0] __do_fast_syscall_32+0x195/0x470 [ 921.030394][ C0] do_fast_syscall_32+0x37/0x80 [ 921.035400][ C0] do_SYSENTER_32+0x1f/0x30 [ 921.040179][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.046766][ C0] [ 921.049150][ C0] Uninit was created at: [ 921.053617][ C0] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 921.059882][ C0] __alloc_skb+0x855/0x1190 [ 921.064623][ C0] alloc_skb_with_frags+0xc5/0x990 [ 921.070022][ C0] sock_alloc_send_pskb+0xacb/0xc60 [ 921.075417][ C0] __ip_append_data+0x4b1e/0x6d70 [ 921.080701][ C0] ip_make_skb+0x1de/0x5f0 [ 921.085275][ C0] udp_sendmsg+0x2577/0x30d0 [ 921.090098][ C0] inet_sendmsg+0x1ef/0x290 [ 921.094744][ C0] ____sys_sendmsg+0xd27/0xfd0 [ 921.099756][ C0] ___sys_sendmsg+0x271/0x3b0 [ 921.104608][ C0] __sys_sendmmsg+0x3bf/0x7c0 [ 921.109677][ C0] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 921.115460][ C0] ia32_sys_call+0x27d6/0x4360 [ 921.120507][ C0] __do_fast_syscall_32+0x195/0x470 [ 921.125852][ C0] do_fast_syscall_32+0x37/0x80 [ 921.130960][ C0] do_SYSENTER_32+0x1f/0x30 [ 921.135599][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.142187][ C0] [ 921.144611][ C0] CPU: 0 UID: 0 PID: 15212 Comm: syz.7.3086 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 921.155822][ C0] Tainted: [L]=SOFTLOCKUP [ 921.160341][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 921.170596][ C0] ===================================================== [ 921.177691][ C0] Disabling lock debugging due to kernel taint [ 921.183929][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 921.190454][ C0] CPU: 0 UID: 0 PID: 15212 Comm: syz.7.3086 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 921.201565][ C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 921.207182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 921.217345][ C0] Call Trace: [ 921.220687][ C0] [ 921.223597][ C0] __dump_stack+0x26/0x30 [ 921.228062][ C0] dump_stack_lvl+0x50/0x1c0 [ 921.232792][ C0] ? dump_stack+0x12/0x25 [ 921.237257][ C0] dump_stack+0x1e/0x25 [ 921.241538][ C0] vpanic+0x7b4/0x1430 [ 921.245779][ C0] panic+0x15d/0x160 [ 921.249861][ C0] kmsan_report+0x31a/0x320 [ 921.254533][ C0] ? __msan_warning+0x1b/0x30 [ 921.259355][ C0] ? eth_type_trans+0x840/0xae0 [ 921.264334][ C0] ? ip_tunnel_rcv+0x215f/0x29c0 [ 921.269411][ C0] ? gre_rcv+0x1c9f/0x20e0 [ 921.273959][ C0] ? gre_rcv+0x2af/0x3e0 [ 921.278315][ C0] ? ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 921.284162][ C0] ? ip_local_deliver_finish+0x409/0x720 [ 921.289925][ C0] ? ip_local_deliver+0x228/0x4a0 [ 921.295065][ C0] ? ip_rcv_finish+0x4d7/0x560 [ 921.299950][ C0] ? ip_rcv+0xcb/0x370 [ 921.304126][ C0] ? process_backlog+0x8d7/0x1500 [ 921.309280][ C0] ? __napi_poll+0xdc/0x910 [ 921.313891][ C0] ? net_rx_action+0xa5b/0x1c70 [ 921.318860][ C0] ? handle_softirqs+0x171/0x7b0 [ 921.323956][ C0] ? __do_softirq+0x14/0x1b [ 921.328614][ C0] ? do_softirq+0x58/0x90 [ 921.333089][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 921.338449][ C0] ? __dev_queue_xmit+0x3c88/0x5a00 [ 921.343808][ C0] ? neigh_resolve_output+0x9c3/0xaf0 [ 921.349309][ C0] ? ip_finish_output2+0x1afd/0x1e00 [ 921.354744][ C0] ? ip_finish_output+0x288/0x860 [ 921.359920][ C0] ? ip_mc_output+0x58a/0x8c0 [ 921.364744][ C0] ? ip_send_skb+0x392/0x3d0 [ 921.369474][ C0] ? udp_send_skb+0xfb8/0x1480 [ 921.374375][ C0] ? udp_sendmsg+0x2635/0x30d0 [ 921.379282][ C0] ? inet_sendmsg+0x1ef/0x290 [ 921.384073][ C0] ? ____sys_sendmsg+0xd27/0xfd0 [ 921.389175][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 921.394195][ C0] ? __sys_sendmmsg+0x3bf/0x7c0 [ 921.399207][ C0] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 921.405158][ C0] ? ia32_sys_call+0x27d6/0x4360 [ 921.410266][ C0] ? __do_fast_syscall_32+0x195/0x470 [ 921.415769][ C0] ? do_fast_syscall_32+0x37/0x80 [ 921.420915][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 921.425708][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.432372][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.437646][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 921.444130][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.449412][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 921.455895][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.461174][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.466459][ C0] __msan_warning+0x1b/0x30 [ 921.471105][ C0] eth_type_trans+0x840/0xae0 [ 921.475951][ C0] ip_tunnel_rcv+0x215f/0x29c0 [ 921.480895][ C0] gre_rcv+0x1c9f/0x20e0 [ 921.485280][ C0] ? __rcu_read_unlock+0x46/0xd0 [ 921.490370][ C0] ? raw_local_deliver+0x368/0x15b0 [ 921.495812][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.501815][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 921.506541][ C0] gre_rcv+0x2af/0x3e0 [ 921.510722][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 921.515429][ C0] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 921.521131][ C0] ip_local_deliver_finish+0x409/0x720 [ 921.526745][ C0] ip_local_deliver+0x228/0x4a0 [ 921.531720][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 921.537844][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 921.543348][ C0] ip_rcv_finish+0x4d7/0x560 [ 921.548069][ C0] ip_rcv+0xcb/0x370 [ 921.552077][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 921.557317][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 921.561933][ C0] process_backlog+0x8d7/0x1500 [ 921.566916][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.572901][ C0] ? filter_irq_stacks+0x49/0x190 [ 921.578066][ C0] ? __pfx_process_backlog+0x10/0x10 [ 921.583482][ C0] __napi_poll+0xdc/0x910 [ 921.587934][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.593940][ C0] net_rx_action+0xa5b/0x1c70 [ 921.598751][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.604738][ C0] ? sched_clock_cpu+0x59/0xa70 [ 921.609774][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 921.615018][ C0] handle_softirqs+0x171/0x7b0 [ 921.619976][ C0] __do_softirq+0x14/0x1b [ 921.624477][ C0] do_softirq+0x58/0x90 [ 921.628784][ C0] [ 921.631774][ C0] [ 921.634767][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 921.639953][ C0] __dev_queue_xmit+0x3c88/0x5a00 [ 921.645140][ C0] ? __local_bh_enable_ip+0x75/0xb0 [ 921.650523][ C0] ? _raw_spin_unlock_bh+0x2d/0x40 [ 921.655796][ C0] ? ___neigh_create+0x34d7/0x3b90 [ 921.661034][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.666325][ C0] ? __dev_queue_xmit+0x2d4/0x5a00 [ 921.671642][ C0] neigh_resolve_output+0x9c3/0xaf0 [ 921.676993][ C0] ? __pfx_neigh_resolve_output+0x10/0x10 [ 921.682851][ C0] ip_finish_output2+0x1afd/0x1e00 [ 921.688151][ C0] ip_finish_output+0x288/0x860 [ 921.693142][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.699146][ C0] ip_mc_output+0x58a/0x8c0 [ 921.703789][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 921.709326][ C0] ? __pfx_ip_mc_output+0x10/0x10 [ 921.714503][ C0] ip_send_skb+0x392/0x3d0 [ 921.719079][ C0] udp_send_skb+0xfb8/0x1480 [ 921.723862][ C0] udp_sendmsg+0x2635/0x30d0 [ 921.728621][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.733923][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.739927][ C0] ? __pfx_udp_sendmsg+0x10/0x10 [ 921.745002][ C0] inet_sendmsg+0x1ef/0x290 [ 921.749637][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 921.754794][ C0] ____sys_sendmsg+0xd27/0xfd0 [ 921.759764][ C0] ___sys_sendmsg+0x271/0x3b0 [ 921.764608][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.769897][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.775890][ C0] ? __rcu_read_unlock+0x6c/0xd0 [ 921.780941][ C0] ? __fget_files+0x3b4/0x4a0 [ 921.785778][ C0] ? __fget_files+0x3b9/0x4a0 [ 921.790592][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.795868][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.801850][ C0] __sys_sendmmsg+0x3bf/0x7c0 [ 921.806703][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 921.811990][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 921.818036][ C0] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 921.823829][ C0] ia32_sys_call+0x27d6/0x4360 [ 921.828767][ C0] __do_fast_syscall_32+0x195/0x470 [ 921.834122][ C0] do_fast_syscall_32+0x37/0x80 [ 921.839105][ C0] do_SYSENTER_32+0x1f/0x30 [ 921.843740][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.850244][ C0] RIP: 0023:0xf709f01c [ 921.854407][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 921.874148][ C0] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 921.882698][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004d00 [ 921.890768][ C0] RDX: 0000000000000284 RSI: 0000000000000f00 RDI: 0000000000000000 [ 921.898838][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.906899][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 921.914956][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.923058][ C0] [ 921.926434][ C0] Kernel Offset: disabled [ 921.930800][ C0] Rebooting in 86400 seconds..