last executing test programs: 2m58.671636249s ago: executing program 3 (id=2226): mmap(&(0x7f0000e1e000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb17", 0x52}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2m58.670884569s ago: executing program 3 (id=2227): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10041, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 2m53.919850591s ago: executing program 3 (id=2246): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0xc000) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, 0x0, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x12, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m51.662198675s ago: executing program 3 (id=2251): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) close(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) fspick(r0, 0x0, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r4, 0x0, 0x40c4) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2m48.663230051s ago: executing program 3 (id=2258): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x73f90401a4ce04d2, 0x0}, 0x0, 0x8, &(0x7f0000000200)) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) statfs(&(0x7f0000001140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 2m47.261833102s ago: executing program 3 (id=2263): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8018045) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16], 0x0) 2m31.343988443s ago: executing program 32 (id=2263): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8018045) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16], 0x0) 17.607792292s ago: executing program 2 (id=2594): ptrace$getregset(0x4204, 0x0, 0x204, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000880)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee\x7fb\x16X$\x8c\xb6p\t\xc9\x8aV\xac\x82\xe3\x1aQ\xedc\xdbW\x89\xbf\xfe\xc11\xcc\x98g\xd3\xda\xaff\xa5\xcd\xfb\xbb\xd8\xac\x1fG\x94=O\xcb\xe2W\xa3\xa4r\xa4\xe7Gw\x96\xce\x96?\'\"\x90A\xa3\xad\x8fQm\xc5e\x1bqgi\x16\xbeo\xfco\xef\'\x884Cs=&=z\xe6\x80\xc3AC\x17\xf8O\x1e\x97^\xcd\xfd\xb5\x12\xf0\x82\xb8M\x03o;P\xd84\xe3\x18\xec(\xc8um\xef9\xa8R8\xeb', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x1, 0xf0, 0x1}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000340)=0xf) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000002700)=0x23, 0x1c) 17.392879366s ago: executing program 5 (id=2596): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000c463f9156e2d4fb805000000b977b200c00f01d9"], 0x2de}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000000000054000000000000000f01f80f20e035080000000f22"], 0x54}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000007e0000000000000065f30f0948b8a2"], 0x7d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x6, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0xb, 0x0, 0x45, 0x0, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 16.608564317s ago: executing program 2 (id=2598): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x73f90401a4ce04d2, 0x0}, 0x0, 0x8, &(0x7f0000000200)) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) statfs(&(0x7f0000001140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 16.44080029s ago: executing program 5 (id=2599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x87}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000014000/0x1000)=nil, &(0x7f0000352000/0x3000)=nil, &(0x7f00007f9000/0x1000)=nil, &(0x7f0000104000/0x2000)=nil, &(0x7f000044e000/0x1000)=nil, &(0x7f0000230000/0x2000)=nil, &(0x7f00002c5000/0x3000)=nil, &(0x7f0000abd000/0x3000)=nil, &(0x7f0000118000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000300), 0x2, 0x400480) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d00200700", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff04080002"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) 14.728878036s ago: executing program 4 (id=2604): r0 = socket(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) writev(r2, 0x0, 0x0) connect$unix(r0, &(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x4) 13.594191273s ago: executing program 4 (id=2608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r0}, 0x18) r1 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x28040) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000380)=ANY=[@ANYBLOB='nonumtail=0,uni_xlate=1,iocharset=chortname=win95,codepage=949,rodir,showexec,shortname=mixed,utf8=1,check=strict,iocharset=iso8859-7,utf8=0,\x00\x00\x00\x00\x00\x00\x00'], 0x25, 0x34c, &(0x7f0000001740)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) lseek(r3, 0x0, 0x4) capset(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x100, 0x2001, 0x0, 0x0}], 0x1}) socket$nl_route(0x10, 0x3, 0x0) 11.499636085s ago: executing program 4 (id=2613): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x7e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 10.543931769s ago: executing program 5 (id=2614): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000f00)=""/259, 0x103}, {&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000d00)=""/252, 0xfc}, {&(0x7f0000002140)=""/4073, 0xfe9}, {&(0x7f0000000c00)=""/215, 0xd7}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000001140)=""/4084, 0xff4}, {&(0x7f0000000500)=""/247, 0xf7}, {&(0x7f0000000940)=""/248, 0xf8}, {&(0x7f0000000000)=""/75, 0x4b}], 0xb}, 0x14000) 10.49700107s ago: executing program 4 (id=2615): socket$kcm(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0xd000000) 10.303796503s ago: executing program 4 (id=2617): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000"], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) inotify_init() r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) setresuid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) 10.142150976s ago: executing program 5 (id=2618): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) 10.080928927s ago: executing program 0 (id=2619): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3810f16a, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x5, 0xfffffeb7) 9.974815068s ago: executing program 5 (id=2620): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000c463f9156e2d4fb805000000b977b200c00f01d9"], 0x2de}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000000000054000000000000000f01f80f20e035080000000f22"], 0x54}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000007e0000000000000065f30f0948b8a2"], 0x7d}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x6, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0xb, 0x0, 0x45, 0x0, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 9.89287122s ago: executing program 2 (id=2621): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x800000000000001, 0x84) socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 9.641489933s ago: executing program 5 (id=2622): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.468995606s ago: executing program 0 (id=2623): syz_clone(0x80002000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)) 9.289925209s ago: executing program 0 (id=2625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) getpriority(0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) listen(r2, 0x0) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b280, 0x3a0}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9.223180649s ago: executing program 4 (id=2626): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0xc000) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x12, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8.838290785s ago: executing program 2 (id=2627): socket$nl_route(0x10, 0x3, 0x0) getpid() r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/20], 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="8c4f388cc3ff6fa6c5538344e486e675aff358d64b2973e9d5033a94f2c1a7867168a9c9295740b7598d9d078cef5607699533abb6981a225a837fa582c9c4694d7d7321129efa459efea13953cccbc99bfdcd3caea291210d2f1424261fadb7fc892b39c1120b7f39bc5fb09f967b76a6b2a6eb63c24bf52dc98bfe20d592367b4f9258d5d95326e70504b2a95e5148f10304b571b589394dc4a8e8167f6f00c81a7cc00c42981840504d87f1abc29fd7f7989b942f70941a1dc71385eef8bec360271cd1463e38007038522b660048c44e595e501f14d8d41c3d6a1824a4020ab97c99f5b955e5666f99d660ea137373d2c563169f7cbccd2e72c43d132e95") 8.086039527s ago: executing program 1 (id=2628): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x8000) 7.1968414s ago: executing program 0 (id=2629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x87}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000014000/0x1000)=nil, &(0x7f0000352000/0x3000)=nil, &(0x7f00007f9000/0x1000)=nil, &(0x7f0000104000/0x2000)=nil, &(0x7f000044e000/0x1000)=nil, &(0x7f0000230000/0x2000)=nil, &(0x7f00002c5000/0x3000)=nil, &(0x7f0000abd000/0x3000)=nil, &(0x7f0000118000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000300), 0x2, 0x400480) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d00200700", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff04080002"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) 7.086416692s ago: executing program 1 (id=2630): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) socket(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000100)) 5.85298488s ago: executing program 1 (id=2631): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x73f90401a4ce04d2, 0x0}, 0x0, 0x8, &(0x7f0000000200)) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) statfs(&(0x7f0000001140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 4.985754404s ago: executing program 2 (id=2632): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x800, 0x11) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 4.613197189s ago: executing program 0 (id=2633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9859, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) connect$netrom(r2, &(0x7f0000000300)={{0x6, @default}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_ifreq(r1, 0x8990, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0xc41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0x1, 0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.834285471s ago: executing program 2 (id=2634): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d0009"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x3, 0x38) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4}) 3.337268999s ago: executing program 1 (id=2635): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3810f16a, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000200)=0x5, 0xfffffeb7) 2.970396654s ago: executing program 1 (id=2636): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000"], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) inotify_init() r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) setresuid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) 506.926102ms ago: executing program 1 (id=2637): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x800000000000001, 0x84) socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=2638): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0108000000000000000000000000000018000000e50200000000007250fc0f0095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 8 (level 2) [ 662.568355][T10532] EXT4-fs (loop4): Remounting filesystem read-only [ 662.581120][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 662.587214][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 662.596927][T10532] EXT4-fs (loop4): 1 truncate cleaned up [ 662.603124][T10532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 662.655515][T10521] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 662.872289][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 662.884380][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 662.991408][T10544] capability: warning: `syz.4.1839' uses deprecated v2 capabilities in a way that may be insecure [ 663.342964][T10537] ceph: No mds server is up or the cluster is laggy [ 663.396248][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 664.065799][T10554] loop4: detected capacity change from 0 to 4096 [ 664.083933][T10556] loop3: detected capacity change from 0 to 512 [ 664.097971][T10554] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 664.204270][T10556] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 664.212484][ T4364] usb 2-1: USB disconnect, device number 25 [ 664.247518][T10556] UDF-fs: Scanning with blocksize 512 failed [ 664.287691][T10556] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 664.298995][T10539] loop0: detected capacity change from 0 to 32768 [ 664.333413][T10556] UDF-fs: Scanning with blocksize 1024 failed [ 664.386524][T10556] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 664.402578][T10554] ntfs: volume version 3.1. [ 664.409586][T10556] UDF-fs: Scanning with blocksize 2048 failed [ 664.437782][T10556] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 664.455162][T10556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 664.546140][T10556] UDF-fs: error (device loop3): udf_read_inode: (ino 30) failed !bh [ 664.577848][T10554] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 664.591778][T10556] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=2, partition=0 [ 664.620892][T10539] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 664.712407][T10554] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 664.820163][T10554] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 664.903524][T10554] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 664.982123][T10559] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 665.040197][T10554] ntfs: (device loop4): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 665.064466][T10566] loop3: detected capacity change from 0 to 1024 [ 665.095213][T10559] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 665.170512][T10559] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 665.213343][T10554] ntfs: (device loop4): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 665.266049][ T4256] ocfs2: Unmounting device (7,0) on (node local) [ 665.370604][ T4546] hfsplus: b-tree write err: -5, ino 4 [ 667.407847][T10578] loop4: detected capacity change from 0 to 4096 [ 667.822950][T10593] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 667.900375][T10489] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 668.156105][T10489] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 668.222797][T10597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1859'. [ 668.271371][T10489] usb 3-1: config 0 interface 0 has no altsetting 0 [ 668.406331][T10489] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 668.541513][T10489] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 668.625538][T10489] usb 3-1: Product: syz [ 668.629797][T10489] usb 3-1: Manufacturer: syz [ 668.668613][T10489] usb 3-1: SerialNumber: syz [ 668.688802][T10489] usb 3-1: config 0 descriptor?? [ 669.066708][T10489] usb 3-1: selecting invalid altsetting 0 [ 671.396901][T10608] loop4: detected capacity change from 0 to 8192 [ 671.570633][T10608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 671.612816][T10608] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 673.138410][T10641] loop0: detected capacity change from 0 to 128 [ 673.164092][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 673.227305][T10641] qnx6: invalid mount options. [ 674.587531][T10653] loop4: detected capacity change from 0 to 512 [ 674.626876][ T22] usb 3-1: USB disconnect, device number 15 [ 675.155885][T10653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 675.386252][T10653] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 676.155754][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 676.519995][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 678.454867][T10705] loop0: detected capacity change from 0 to 16 [ 678.584084][T10705] erofs: (device loop0): mounted with root inode @ nid 36. [ 678.610280][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 680.772199][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 684.893979][T10763] delete_channel: no stack [ 685.876734][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 685.892706][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.899246][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.075381][T10783] batman_adv: batadv0: Adding interface: ip6gretap1 [ 686.199021][T10783] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.231952][T10783] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 686.312625][T10785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.363545][T10785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.429123][T10785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.478643][T10785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.535973][T10785] batman_adv: batadv0: Removing interface: ip6gretap1 [ 687.064773][T10794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1918'. [ 689.546189][T10822] loop0: detected capacity change from 0 to 512 [ 689.629598][T10822] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 689.670164][T10822] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 689.931408][T10826] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 689.966084][T10822] EXT4-fs (loop0): 1 truncate cleaned up [ 689.980248][T10822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 690.038776][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 690.119278][T10821] loop2: detected capacity change from 0 to 8192 [ 690.221802][T10821] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 690.295185][T10821] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 690.922748][T10821] REISERFS (device loop2): using ordered data mode [ 690.982439][T10821] reiserfs: using flush barriers [ 691.080180][T10821] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 691.317969][T10821] REISERFS (device loop2): checking transaction log (loop2) [ 691.351923][T10845] loop1: detected capacity change from 0 to 256 [ 691.356639][T10821] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.6* [0 0 0x0 SD], item_len 0, item_location 4052, free_space(entry_count) 11 [ 691.390499][T10821] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 691.436659][T10846] Can't find a SQUASHFS superblock on nullb0 [ 691.839363][T10821] REISERFS (device loop2): Remounting filesystem read-only [ 692.013731][T10821] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 692.046901][T10845] FAT-fs (loop1): Directory bread(block 64) failed [ 692.081024][T10845] FAT-fs (loop1): Directory bread(block 65) failed [ 692.127425][T10845] FAT-fs (loop1): Directory bread(block 66) failed [ 692.134350][T10845] FAT-fs (loop1): Directory bread(block 67) failed [ 692.142045][T10845] FAT-fs (loop1): Directory bread(block 68) failed [ 692.178973][T10845] FAT-fs (loop1): Directory bread(block 69) failed [ 692.200309][T10845] FAT-fs (loop1): Directory bread(block 70) failed [ 692.206913][T10845] FAT-fs (loop1): Directory bread(block 71) failed [ 692.234421][T10845] FAT-fs (loop1): Directory bread(block 72) failed [ 692.251555][T10845] FAT-fs (loop1): Directory bread(block 73) failed [ 692.365937][T10830] loop3: detected capacity change from 0 to 32768 [ 692.472303][T10830] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1929 (10830) [ 692.677396][T10830] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 692.716650][T10830] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 692.778460][T10830] BTRFS info (device loop3): use zlib compression, level 3 [ 692.830134][T10830] BTRFS info (device loop3): using free space tree [ 693.084146][T10830] BTRFS error (device loop3): open_ctree failed: -12 [ 693.138317][ T5611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5611) [ 695.478184][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'. [ 697.341260][T10911] Can't find a SQUASHFS superblock on nullb0 [ 699.060670][ T4364] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 700.914134][T10929] bridge0: port 2(ipvlan2) entered blocking state [ 701.010409][T10929] bridge0: port 2(ipvlan2) entered disabled state [ 701.130128][ T4364] usb 4-1: Using ep0 maxpacket: 16 [ 701.136093][ T4364] usb 4-1: no configurations [ 701.140902][ T4364] usb 4-1: can't read configurations, error -22 [ 701.322418][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 701.916573][T10940] loop1: detected capacity change from 0 to 64 [ 701.950089][ T4364] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 703.702455][T10964] loop0: detected capacity change from 0 to 40427 [ 703.727484][T10964] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 703.737912][T10964] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 704.345429][T10964] F2FS-fs (loop0): invalid crc value [ 704.348287][T10946] loop4: detected capacity change from 0 to 512 [ 704.373488][T10964] F2FS-fs (loop0): Found nat_bits in checkpoint [ 704.411949][T10964] F2FS-fs (loop0): Start checkpoint disabled! [ 704.439341][T10964] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 704.655659][T10946] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1958: casefold flag without casefold feature [ 704.725965][T10946] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1958: couldn't read orphan inode 15 (err -117) [ 705.209518][T10946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 705.441092][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 705.468506][ T4413] kworker/u4:16: attempt to access beyond end of device [ 705.468506][ T4413] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 705.883292][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1968'. [ 706.583868][T10992] Can't find a SQUASHFS superblock on nullb0 [ 706.901586][T10997] loop4: detected capacity change from 0 to 512 [ 707.062353][T10997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 707.100210][T10997] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 707.447439][T11004] loop2: detected capacity change from 0 to 256 [ 707.996864][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 708.267053][T11016] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 708.620293][ T4364] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 708.690636][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 709.043662][ T4364] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 709.070420][ T4364] usb 1-1: config 0 interface 0 has no altsetting 0 [ 709.083019][ T4364] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 709.083500][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1980'. [ 709.100133][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 709.109571][ T4364] usb 1-1: Product: syz [ 709.360153][ T4364] usb 1-1: Manufacturer: syz [ 709.367540][ T4364] usb 1-1: SerialNumber: syz [ 709.503535][ T4364] usb 1-1: config 0 descriptor?? [ 709.560927][ T4364] usb 1-1: selecting invalid altsetting 0 [ 709.582627][T11034] loop1: detected capacity change from 0 to 64 [ 711.158542][T11044] loop4: detected capacity change from 0 to 512 [ 711.235404][T11044] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 712.036358][ T128] usb 1-1: USB disconnect, device number 19 [ 712.694774][T11044] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 714.202991][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 715.230428][T11093] Can't find a SQUASHFS superblock on nullb0 [ 715.600311][ T7322] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 715.913785][ T7322] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 715.956003][ T7322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 716.017026][ T7322] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 716.051761][T11098] loop2: detected capacity change from 0 to 256 [ 716.055746][ T7322] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 716.168550][T11098] FAT-fs (loop2): Directory bread(block 64) failed [ 716.216206][T11098] FAT-fs (loop2): Directory bread(block 65) failed [ 716.246903][ T7322] usb 4-1: Product: syz [ 716.251216][ T7322] usb 4-1: Manufacturer: syz [ 716.255848][ T7322] usb 4-1: SerialNumber: syz [ 716.262601][T11098] FAT-fs (loop2): Directory bread(block 66) failed [ 716.269177][T11098] FAT-fs (loop2): Directory bread(block 67) failed [ 716.281009][ T7322] usb 4-1: config 0 descriptor?? [ 716.287099][T11098] FAT-fs (loop2): Directory bread(block 68) failed [ 716.307209][ T7322] usb 4-1: selecting invalid altsetting 0 [ 716.320167][T11098] FAT-fs (loop2): Directory bread(block 69) failed [ 716.364298][T11098] FAT-fs (loop2): Directory bread(block 70) failed [ 716.412576][T11098] FAT-fs (loop2): Directory bread(block 71) failed [ 716.419793][T11098] FAT-fs (loop2): Directory bread(block 72) failed [ 716.426480][T11098] FAT-fs (loop2): Directory bread(block 73) failed [ 716.912495][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 717.373930][T11113] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock [ 717.386194][ T4413] kworker/u4:16: attempt to access beyond end of device [ 717.386194][ T4413] loop2: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 717.434555][ T4413] kworker/u4:16: attempt to access beyond end of device [ 717.434555][ T4413] loop2: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 717.468663][ T4413] kworker/u4:16: attempt to access beyond end of device [ 717.468663][ T4413] loop2: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 717.502315][ T4413] kworker/u4:16: attempt to access beyond end of device [ 717.502315][ T4413] loop2: rw=1, sector=1960, nr_sectors = 1896 limit=256 [ 719.833050][ T4335] usb 4-1: USB disconnect, device number 14 [ 719.985234][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2016'. [ 720.049533][T11143] loop4: detected capacity change from 0 to 256 [ 720.073893][T11145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2016'. [ 720.090255][T11126] loop2: detected capacity change from 0 to 32768 [ 720.105320][T11141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2016'. [ 720.202194][T11143] FAT-fs (loop4): Directory bread(block 64) failed [ 720.208817][T11143] FAT-fs (loop4): Directory bread(block 65) failed [ 720.240266][T11143] FAT-fs (loop4): Directory bread(block 66) failed [ 720.252927][T11143] FAT-fs (loop4): Directory bread(block 67) failed [ 720.282351][T11143] FAT-fs (loop4): Directory bread(block 68) failed [ 720.303172][T11143] FAT-fs (loop4): Directory bread(block 69) failed [ 720.312085][T11143] FAT-fs (loop4): Directory bread(block 70) failed [ 720.321799][T11143] FAT-fs (loop4): Directory bread(block 71) failed [ 720.341455][T11143] FAT-fs (loop4): Directory bread(block 72) failed [ 720.359886][T11143] FAT-fs (loop4): Directory bread(block 73) failed [ 720.445236][T11132] loop0: detected capacity change from 0 to 32768 [ 720.513689][T11132] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 720.561805][T11132] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 721.007449][T11132] BTRFS info (device loop0): setting nodatacow, compression disabled [ 721.040405][T11132] BTRFS info (device loop0): disabling tree log [ 721.046852][T11132] BTRFS info (device loop0): turning on sync discard [ 721.060647][T11132] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 721.133074][T11132] BTRFS info (device loop0): force zstd compression, level 3 [ 721.222357][T11132] BTRFS info (device loop0): using free space tree [ 722.546555][T11132] BTRFS error (device loop0): open_ctree failed: -12 [ 722.654051][ T4363] kworker/u4:9: attempt to access beyond end of device [ 722.654051][ T4363] loop4: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 722.701046][ T4363] kworker/u4:9: attempt to access beyond end of device [ 722.701046][ T4363] loop4: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 722.744956][ T4363] kworker/u4:9: attempt to access beyond end of device [ 722.744956][ T4363] loop4: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 722.770883][ T4261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4261) [ 722.784214][ T4363] kworker/u4:9: attempt to access beyond end of device [ 722.784214][ T4363] loop4: rw=1, sector=1960, nr_sectors = 2880 limit=256 [ 723.142111][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 723.303746][T11177] libceph: connect (1)[c::]:6789 error -101 [ 723.322419][T11177] libceph: mon0 (1)[c::]:6789 connect error [ 723.350117][ T7322] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 723.382122][T11177] libceph: connect (1)[c::]:6789 error -101 [ 723.414012][T11177] libceph: mon0 (1)[c::]:6789 connect error [ 723.552300][ T7322] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 723.563640][ T7322] usb 2-1: config 0 interface 0 has no altsetting 0 [ 723.575923][ T7322] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 723.606584][T11204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2029'. [ 723.617289][ T7322] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 723.640091][ T7322] usb 2-1: Product: syz [ 723.656249][ T7322] usb 2-1: Manufacturer: syz [ 723.663816][ T7322] usb 2-1: SerialNumber: syz [ 723.699535][ T7322] usb 2-1: config 0 descriptor?? [ 723.710495][ T4335] libceph: connect (1)[c::]:6789 error -101 [ 723.721179][ T4335] libceph: mon0 (1)[c::]:6789 connect error [ 723.746304][ T7322] usb 2-1: selecting invalid altsetting 0 [ 723.817441][T11205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2029'. [ 723.890609][T11206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2029'. [ 724.275700][ T4335] libceph: connect (1)[c::]:6789 error -101 [ 724.472118][ T4335] libceph: mon0 (1)[c::]:6789 connect error [ 724.896134][T11197] ceph: No mds server is up or the cluster is laggy [ 726.151722][ T4335] usb 2-1: USB disconnect, device number 26 [ 726.208190][T11220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2035'. [ 727.271717][T11231] loop1: detected capacity change from 0 to 256 [ 727.399384][T11231] FAT-fs (loop1): Directory bread(block 64) failed [ 727.437372][T11231] FAT-fs (loop1): Directory bread(block 65) failed [ 727.476224][T11231] FAT-fs (loop1): Directory bread(block 66) failed [ 727.513501][T11231] FAT-fs (loop1): Directory bread(block 67) failed [ 727.561163][T11231] FAT-fs (loop1): Directory bread(block 68) failed [ 727.590203][T11231] FAT-fs (loop1): Directory bread(block 69) failed [ 727.596971][T11231] FAT-fs (loop1): Directory bread(block 70) failed [ 727.643007][T11231] FAT-fs (loop1): Directory bread(block 71) failed [ 727.711745][T11231] FAT-fs (loop1): Directory bread(block 72) failed [ 727.718351][T11231] FAT-fs (loop1): Directory bread(block 73) failed [ 729.866739][ T4413] kworker/u4:16: attempt to access beyond end of device [ 729.866739][ T4413] loop1: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 729.932065][ T4413] kworker/u4:16: attempt to access beyond end of device [ 729.932065][ T4413] loop1: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 730.159559][T11257] loop2: detected capacity change from 0 to 524287999 [ 730.372443][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 730.381884][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 730.407066][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 730.416340][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 730.425795][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 730.435012][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 730.444043][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 730.453235][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 730.461348][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 730.463257][ T4413] kworker/u4:16: attempt to access beyond end of device [ 730.463257][ T4413] loop1: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 730.470568][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 730.507395][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 730.516644][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 730.610342][ T4413] kworker/u4:16: attempt to access beyond end of device [ 730.610342][ T4413] loop1: rw=1, sector=1960, nr_sectors = 2200 limit=256 [ 730.647045][ C0] I/O error, dev loop2, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 730.656443][ C0] Buffer I/O error on dev loop2, logical block 3, async page read [ 730.665052][T11257] loop2: unable to read partition table [ 730.671595][T11257] loop_reread_partitions: partition scan of loop2 (3Ÿ ¾‚³˜) failed (rc=-5) [ 730.882917][ T34] loop: Write error at byte offset 1, length 4096. [ 730.909385][ T34] loop: Write error at byte offset 1, length 4096. [ 730.918168][T11261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2046'. [ 730.923789][ C0] I/O error, dev loop2, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 730.937506][ T34] loop: Write error at byte offset 1, length 4096. [ 730.947830][ C1] I/O error, dev loop2, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 730.957782][ C1] Buffer I/O error on dev loop2, logical block 65535968, async page read [ 731.028332][ C0] I/O error, dev loop2, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 731.038447][ C0] Buffer I/O error on dev loop2, logical block 65535968, async page read [ 731.243221][ T34] loop: Write error at byte offset 1, length 4096. [ 731.250228][ T34] loop: Write error at byte offset 1, length 4096. [ 732.016848][ T34] loop: Write error at byte offset 1, length 4096. [ 732.031008][ T4335] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 732.078352][ T34] loop: Write error at byte offset 1, length 4096. [ 732.085380][ T34] loop: Write error at byte offset 1, length 4096. [ 732.092362][ T34] loop: Write error at byte offset 1, length 4096. [ 732.099030][ T34] loop: Write error at byte offset 1, length 4096. [ 732.106841][ C1] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 732.237654][ T4335] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 732.574665][ T4335] usb 2-1: config 0 interface 0 has no altsetting 0 [ 732.776800][ T4335] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 732.810062][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 732.870066][ T4335] usb 2-1: Product: syz [ 732.874321][ T4335] usb 2-1: Manufacturer: syz [ 732.899394][ T4335] usb 2-1: SerialNumber: syz [ 733.293491][ T4335] usb 2-1: config 0 descriptor?? [ 733.591671][ T4335] usb 2-1: selecting invalid altsetting 0 [ 733.991328][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 735.730954][T11286] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 735.786820][ T4335] usb 2-1: USB disconnect, device number 27 [ 735.894706][ T14] libceph: connect (1)[c::]:6789 error -101 [ 735.901733][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 735.921690][ T14] libceph: connect (1)[c::]:6789 error -101 [ 735.927764][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 735.937948][T11309] loop0: detected capacity change from 0 to 256 [ 735.938238][T11307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2058'. [ 736.087078][T11309] FAT-fs (loop0): Directory bread(block 64) failed [ 736.112059][T11309] FAT-fs (loop0): Directory bread(block 65) failed [ 736.149178][T11309] FAT-fs (loop0): Directory bread(block 66) failed [ 736.172076][T11312] loop1: detected capacity change from 0 to 8 [ 736.187498][T11309] FAT-fs (loop0): Directory bread(block 67) failed [ 736.194785][ T4335] libceph: connect (1)[c::]:6789 error -101 [ 736.205590][ T4335] libceph: mon0 (1)[c::]:6789 connect error [ 736.229017][T11309] FAT-fs (loop0): Directory bread(block 68) failed [ 736.249490][T11309] FAT-fs (loop0): Directory bread(block 69) failed [ 736.274874][T11309] FAT-fs (loop0): Directory bread(block 70) failed [ 736.298165][T11309] FAT-fs (loop0): Directory bread(block 71) failed [ 736.320545][T11309] FAT-fs (loop0): Directory bread(block 72) failed [ 736.364129][T11309] FAT-fs (loop0): Directory bread(block 73) failed [ 736.407314][T11312] SQUASHFS error: Failed to read block 0x4e8: -5 [ 736.431576][T11312] SQUASHFS error: Failed to read block 0x4de: -5 [ 736.458527][T11312] SQUASHFS error: Failed to read block 0x4de: -5 [ 736.483641][T11312] SQUASHFS error: Failed to read block 0x4de: -5 [ 736.730479][ T14] libceph: connect (1)[c::]:6789 error -101 [ 736.736569][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 736.951014][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 736.951029][ T26] audit: type=1800 audit(2000000536.310:50): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2060" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 736.977811][T11302] ceph: No mds server is up or the cluster is laggy [ 737.071190][ T34] kworker/u4:2: attempt to access beyond end of device [ 737.071190][ T34] loop0: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 737.139415][ T34] kworker/u4:2: attempt to access beyond end of device [ 737.139415][ T34] loop0: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 737.233687][ T34] kworker/u4:2: attempt to access beyond end of device [ 737.233687][ T34] loop0: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 737.307392][ T34] kworker/u4:2: attempt to access beyond end of device [ 737.307392][ T34] loop0: rw=1, sector=1960, nr_sectors = 2776 limit=256 [ 737.585855][T11324] loop1: detected capacity change from 0 to 512 [ 737.663971][T11324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 737.687771][T11324] System zones: 1-12 [ 737.719783][T11324] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.2065: invalid block [ 737.754832][T11324] EXT4-fs (loop1): Remounting filesystem read-only [ 737.801928][T11324] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2065: invalid indirect mapped block 8 (level 2) [ 737.824493][T11324] EXT4-fs (loop1): Remounting filesystem read-only [ 737.845255][T11324] EXT4-fs (loop1): 1 truncate cleaned up [ 737.902724][T11324] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 738.039228][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'. [ 738.184997][T11332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2066'. [ 738.427969][T11334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2066'. [ 739.141468][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 739.610244][ T7] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 739.677691][T11349] loop2: detected capacity change from 0 to 64 [ 739.689269][T11322] loop3: detected capacity change from 0 to 32768 [ 739.987002][ T7] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 740.551920][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 740.571711][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 740.590180][ T7] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 740.599670][ T7] usb 2-1: Product: syz [ 740.617342][T11355] loop0: detected capacity change from 0 to 256 [ 740.623941][ T7] usb 2-1: Manufacturer: syz [ 740.628786][ T7] usb 2-1: SerialNumber: syz [ 740.649701][ T7] usb 2-1: config 0 descriptor?? [ 740.651791][T11322] (syz.3.2064,11322,1):ocfs2_initialize_super:2286 ERROR: status = -12 [ 740.686792][ T7] usb 2-1: selecting invalid altsetting 0 [ 740.696908][T11322] (syz.3.2064,11322,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 740.812262][T11355] FAT-fs (loop0): Directory bread(block 64) failed [ 740.839106][T11355] FAT-fs (loop0): Directory bread(block 65) failed [ 740.927520][T11355] FAT-fs (loop0): Directory bread(block 66) failed [ 741.026138][T11355] FAT-fs (loop0): Directory bread(block 67) failed [ 741.190387][T11355] FAT-fs (loop0): Directory bread(block 68) failed [ 741.197084][T11355] FAT-fs (loop0): Directory bread(block 69) failed [ 741.716432][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 741.889901][T11368] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 742.170460][T11355] FAT-fs (loop0): Directory bread(block 70) failed [ 742.282238][T11355] FAT-fs (loop0): Directory bread(block 71) failed [ 742.318463][T11355] FAT-fs (loop0): Directory bread(block 72) failed [ 742.330307][T11355] FAT-fs (loop0): Directory bread(block 73) failed [ 742.978464][ T7322] usb 2-1: USB disconnect, device number 28 [ 743.161896][ T4546] kworker/u4:18: attempt to access beyond end of device [ 743.161896][ T4546] loop0: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 743.235502][ T4546] kworker/u4:18: attempt to access beyond end of device [ 743.235502][ T4546] loop0: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 743.324270][ T4546] kworker/u4:18: attempt to access beyond end of device [ 743.324270][ T4546] loop0: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 743.384397][ T4546] kworker/u4:18: attempt to access beyond end of device [ 743.384397][ T4546] loop0: rw=1, sector=1960, nr_sectors = 2320 limit=256 [ 743.529897][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2079'. [ 743.619367][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 743.700731][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 744.831386][T11405] loop0: detected capacity change from 0 to 64 [ 745.743916][T11412] loop3: detected capacity change from 0 to 256 [ 745.750761][T10872] libceph: connect (1)[c::]:6789 error -101 [ 745.756813][T10872] libceph: mon0 (1)[c::]:6789 connect error [ 745.796129][T11412] FAT-fs (loop3): Directory bread(block 64) failed [ 745.808639][T11412] FAT-fs (loop3): Directory bread(block 65) failed [ 745.822509][T11412] FAT-fs (loop3): Directory bread(block 66) failed [ 745.834866][T11412] FAT-fs (loop3): Directory bread(block 67) failed [ 745.951420][T11419] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 745.974548][T11402] ceph: No mds server is up or the cluster is laggy [ 745.984428][T11412] FAT-fs (loop3): Directory bread(block 68) failed [ 746.003592][T11412] FAT-fs (loop3): Directory bread(block 69) failed [ 746.027407][T11412] FAT-fs (loop3): Directory bread(block 70) failed [ 746.041776][ T22] libceph: connect (1)[c::]:6789 error -101 [ 746.120117][T10872] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 746.300381][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 746.435096][T11412] FAT-fs (loop3): Directory bread(block 71) failed [ 746.470863][T11412] FAT-fs (loop3): Directory bread(block 72) failed [ 746.504809][T11412] FAT-fs (loop3): Directory bread(block 73) failed [ 746.544362][T10872] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 746.880159][T10872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 746.906224][T10872] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 746.918035][T10872] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 746.926575][T10872] usb 2-1: Product: syz [ 746.931057][T10872] usb 2-1: Manufacturer: syz [ 746.935692][T10872] usb 2-1: SerialNumber: syz [ 746.962132][T10872] usb 2-1: config 0 descriptor?? [ 746.974027][T10872] usb 2-1: selecting invalid altsetting 0 [ 747.072898][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.079273][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.390903][ T56] kworker/u4:4: attempt to access beyond end of device [ 747.390903][ T56] loop3: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 747.718080][ T56] kworker/u4:4: attempt to access beyond end of device [ 747.718080][ T56] loop3: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 748.008938][ T56] kworker/u4:4: attempt to access beyond end of device [ 748.008938][ T56] loop3: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 748.040482][ T56] kworker/u4:4: attempt to access beyond end of device [ 748.040482][ T56] loop3: rw=1, sector=1960, nr_sectors = 1960 limit=256 [ 748.529439][T11444] Can't find a SQUASHFS superblock on nullb0 [ 748.910346][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 749.131708][T10872] usb 2-1: USB disconnect, device number 29 [ 749.477076][T11448] loop2: detected capacity change from 0 to 512 [ 749.623812][T11448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 749.643787][T11448] System zones: 1-12 [ 749.664442][T11448] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.2096: invalid block [ 749.801202][T11448] EXT4-fs (loop2): Remounting filesystem read-only [ 749.814382][T11448] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2096: invalid indirect mapped block 8 (level 2) [ 750.019290][T11448] EXT4-fs (loop2): Remounting filesystem read-only [ 750.026375][T11448] EXT4-fs (loop2): 1 truncate cleaned up [ 750.032695][T11448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 750.826354][T11470] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 751.128235][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 751.196044][T11474] loop1: detected capacity change from 0 to 256 [ 751.407276][T11474] FAT-fs (loop1): Directory bread(block 64) failed [ 751.425685][T11474] FAT-fs (loop1): Directory bread(block 65) failed [ 751.447095][T11474] FAT-fs (loop1): Directory bread(block 66) failed [ 751.511722][T11474] FAT-fs (loop1): Directory bread(block 67) failed [ 751.518851][T11474] FAT-fs (loop1): Directory bread(block 68) failed [ 751.552742][T11474] FAT-fs (loop1): Directory bread(block 69) failed [ 751.594330][T11474] FAT-fs (loop1): Directory bread(block 70) failed [ 751.615030][T11474] FAT-fs (loop1): Directory bread(block 71) failed [ 751.624687][T11474] FAT-fs (loop1): Directory bread(block 72) failed [ 751.658049][T11474] FAT-fs (loop1): Directory bread(block 73) failed [ 751.839044][T11493] Can't find a SQUASHFS superblock on nullb0 [ 752.486041][ T4335] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 752.865006][ T4376] kworker/u4:11: attempt to access beyond end of device [ 752.865006][ T4376] loop1: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 753.016968][ T4335] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 753.057118][ T4376] kworker/u4:11: attempt to access beyond end of device [ 753.057118][ T4376] loop1: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 753.092525][ T4335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 753.199299][ T4335] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 753.276287][ T4376] kworker/u4:11: attempt to access beyond end of device [ 753.276287][ T4376] loop1: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 753.328928][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 753.406190][ T4335] usb 1-1: Product: syz [ 753.444109][ T4335] usb 1-1: Manufacturer: syz [ 753.471181][ T4376] kworker/u4:11: attempt to access beyond end of device [ 753.471181][ T4376] loop1: rw=1, sector=1960, nr_sectors = 1584 limit=256 [ 753.494959][ T4335] usb 1-1: SerialNumber: syz [ 753.601230][ T4335] usb 1-1: config 0 descriptor?? [ 753.735270][ T4335] usb 1-1: selecting invalid altsetting 0 [ 754.507178][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'. [ 754.740222][ T4335] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 754.933207][ T4335] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 754.981236][ T4335] usb 4-1: config 0 interface 0 has no altsetting 0 [ 755.003218][ T4335] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 755.029645][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 755.049791][ T4335] usb 4-1: Product: syz [ 755.055486][ T4335] usb 4-1: Manufacturer: syz [ 755.067400][ T4335] usb 4-1: SerialNumber: syz [ 755.167335][ T4335] usb 4-1: config 0 descriptor?? [ 755.224024][ T4335] usb 4-1: selecting invalid altsetting 0 [ 755.800497][ T4335] usb 1-1: USB disconnect, device number 20 [ 756.649214][T11526] loop0: detected capacity change from 0 to 512 [ 756.703310][T11526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 756.770409][T11526] System zones: 1-12 [ 756.804902][T11526] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2115: invalid indirect mapped block 8 (level 2) [ 756.902617][T11526] EXT4-fs (loop0): Remounting filesystem read-only [ 756.922959][T11531] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 757.030815][T11526] EXT4-fs (loop0): 1 truncate cleaned up [ 757.062535][T11526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 757.744474][ T7324] usb 4-1: USB disconnect, device number 15 [ 758.805808][T11545] Can't find a SQUASHFS superblock on nullb0 [ 759.769122][T11550] loop1: detected capacity change from 0 to 512 [ 759.987969][T11550] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 760.105041][T11550] System zones: 1-12 [ 760.239432][T11550] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2120: invalid indirect mapped block 8 (level 2) [ 760.360148][T11528] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 760.445536][T11550] EXT4-fs (loop1): Remounting filesystem read-only [ 760.597951][T11550] EXT4-fs (loop1): 1 truncate cleaned up [ 760.604575][T11550] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 760.628977][T11528] EXT4-fs (loop0): Remounting filesystem read-only [ 761.221171][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 761.310377][T11560] loop4: detected capacity change from 0 to 65536 [ 761.439882][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 761.753084][T11560] XFS (loop4): Mounting V5 Filesystem [ 761.840111][T11560] XFS (loop4): Ending clean mount [ 763.268186][ T4335] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 763.328540][ T4335] XFS (loop4): Unmount and run xfs_repair [ 763.350464][ T4335] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 763.497736][ T4335] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 763.552641][ T4335] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 763.562118][ T4335] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 763.576424][ T4335] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 763.588183][ T4335] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 763.588245][ T4335] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 763.588273][ T4335] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 763.588289][ T4335] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 763.588580][T11587] XFS (loop4): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 763.609087][T11587] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 763.609135][T11587] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 763.863605][ T4255] XFS (loop4): Unmounting Filesystem [ 763.944770][T11597] loop2: detected capacity change from 0 to 64 [ 764.272382][T11603] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 764.870620][T11605] loop1: detected capacity change from 0 to 512 [ 764.970409][T11605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 765.020213][T11610] loop2: detected capacity change from 0 to 512 [ 765.032342][T11605] System zones: 1-12 [ 765.117962][T11605] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.2136: invalid block [ 765.130432][T11610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 765.138695][T11610] System zones: 1-12 [ 765.250368][T11605] EXT4-fs (loop1): Remounting filesystem read-only [ 765.257109][T11605] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2136: invalid indirect mapped block 8 (level 2) [ 765.282736][T11610] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.2135: invalid block [ 765.360359][T11610] EXT4-fs (loop2): Remounting filesystem read-only [ 765.369480][T11605] EXT4-fs (loop1): Remounting filesystem read-only [ 765.370393][T11610] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2135: invalid indirect mapped block 8 (level 2) [ 765.382434][T11605] EXT4-fs (loop1): 1 truncate cleaned up [ 765.395514][T11605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 765.422509][T11610] EXT4-fs (loop2): Remounting filesystem read-only [ 765.439693][T11610] EXT4-fs (loop2): 1 truncate cleaned up [ 765.445513][T11610] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 766.172254][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 768.156550][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 768.274740][T11644] Can't find a SQUASHFS superblock on nullb0 [ 768.703376][T11657] loop2: detected capacity change from 0 to 64 [ 772.656947][T11682] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 772.899406][ T9030] libceph: connect (1)[c::]:6789 error -101 [ 772.909645][ T9030] libceph: mon0 (1)[c::]:6789 connect error [ 772.919788][ T9030] libceph: connect (1)[c::]:6789 error -101 [ 772.929210][ T9030] libceph: mon0 (1)[c::]:6789 connect error [ 772.982135][T11689] loop0: detected capacity change from 0 to 512 [ 773.086281][T11689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 773.120224][T11689] System zones: 1-12 [ 773.242920][ T9030] libceph: connect (1)[c::]:6789 error -101 [ 773.249393][ T9030] libceph: mon0 (1)[c::]:6789 connect error [ 773.281966][T11689] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.2154: invalid block [ 773.914616][ T9030] libceph: connect (1)[c::]:6789 error -101 [ 773.993285][ T9030] libceph: mon0 (1)[c::]:6789 connect error [ 774.008559][T11683] ceph: No mds server is up or the cluster is laggy [ 774.028713][T11689] EXT4-fs (loop0): Remounting filesystem read-only [ 774.160176][T11689] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2154: invalid indirect mapped block 8 (level 2) [ 774.265939][T11689] EXT4-fs (loop0): Remounting filesystem read-only [ 774.295104][T11689] EXT4-fs (loop0): 1 truncate cleaned up [ 774.335822][T11689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 774.590170][T11692] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 775.115010][T11692] EXT4-fs (loop0): Remounting filesystem read-only [ 775.146504][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 775.336752][T11710] loop4: detected capacity change from 0 to 256 [ 775.374116][T11707] loop3: detected capacity change from 0 to 64 [ 775.424652][T11710] FAT-fs (loop4): Directory bread(block 64) failed [ 775.580151][ T7322] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 775.710126][T11710] FAT-fs (loop4): Directory bread(block 65) failed [ 775.749911][T11710] FAT-fs (loop4): Directory bread(block 66) failed [ 775.805317][T11710] FAT-fs (loop4): Directory bread(block 67) failed [ 775.841765][ T7322] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 775.887495][T11710] FAT-fs (loop4): Directory bread(block 68) failed [ 775.893819][ T7322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 775.913122][ T7322] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 775.933592][T11713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'. [ 775.960052][ T7322] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 775.970250][T11710] FAT-fs (loop4): Directory bread(block 69) failed [ 775.978601][ T7322] usb 1-1: Product: syz [ 775.989745][T11710] FAT-fs (loop4): Directory bread(block 70) failed [ 775.998838][ T7322] usb 1-1: Manufacturer: syz [ 776.025629][T11710] FAT-fs (loop4): Directory bread(block 71) failed [ 776.032482][ T7322] usb 1-1: SerialNumber: syz [ 776.041016][ T7322] usb 1-1: config 0 descriptor?? [ 776.048249][T11710] FAT-fs (loop4): Directory bread(block 72) failed [ 776.077244][T11710] FAT-fs (loop4): Directory bread(block 73) failed [ 776.079123][ T7322] usb 1-1: selecting invalid altsetting 0 [ 779.351242][ T7322] usb 1-1: USB disconnect, device number 21 [ 779.486284][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2163'. [ 779.525450][T11750] loop1: detected capacity change from 0 to 512 [ 779.608078][T11750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 779.640248][T11750] System zones: 1-12 [ 779.745273][T11755] ALSA: mixer_oss: invalid OSS volume 'LIN' [ 779.785510][T11750] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2169: invalid indirect mapped block 8 (level 2) [ 780.063161][T11750] EXT4-fs (loop1): Remounting filesystem read-only [ 780.229306][T11750] EXT4-fs (loop1): 1 truncate cleaned up [ 780.329168][T11750] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 782.165105][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 782.649248][T11780] loop4: detected capacity change from 0 to 256 [ 782.733537][T11780] FAT-fs (loop4): Directory bread(block 64) failed [ 782.766024][T11780] FAT-fs (loop4): Directory bread(block 65) failed [ 782.781514][T11780] FAT-fs (loop4): Directory bread(block 66) failed [ 782.805390][T11780] FAT-fs (loop4): Directory bread(block 67) failed [ 782.840602][T11780] FAT-fs (loop4): Directory bread(block 68) failed [ 782.877950][T11780] FAT-fs (loop4): Directory bread(block 69) failed [ 782.894515][T11780] FAT-fs (loop4): Directory bread(block 70) failed [ 782.903574][T11780] FAT-fs (loop4): Directory bread(block 71) failed [ 782.920210][T11780] FAT-fs (loop4): Directory bread(block 72) failed [ 782.945031][T11780] FAT-fs (loop4): Directory bread(block 73) failed [ 788.885805][T11827] devpts: called with bogus options [ 789.006365][T11829] loop3: detected capacity change from 0 to 256 [ 789.069622][T11829] FAT-fs (loop3): Directory bread(block 64) failed [ 789.097575][T11829] FAT-fs (loop3): Directory bread(block 65) failed [ 789.108757][T11829] FAT-fs (loop3): Directory bread(block 66) failed [ 789.125356][T11829] FAT-fs (loop3): Directory bread(block 67) failed [ 789.204626][T11829] FAT-fs (loop3): Directory bread(block 68) failed [ 789.250422][T11829] FAT-fs (loop3): Directory bread(block 69) failed [ 789.287305][T11829] FAT-fs (loop3): Directory bread(block 70) failed [ 789.308413][T11835] Can't find a SQUASHFS superblock on nullb0 [ 789.325139][T11829] FAT-fs (loop3): Directory bread(block 71) failed [ 789.370492][T11829] FAT-fs (loop3): Directory bread(block 72) failed [ 789.425731][T11829] FAT-fs (loop3): Directory bread(block 73) failed [ 789.447210][T11832] loop1: detected capacity change from 0 to 40427 [ 789.466937][T11832] F2FS-fs (loop1): invalid crc value [ 789.520996][T11832] F2FS-fs (loop1): Found nat_bits in checkpoint [ 789.567560][T11832] F2FS-fs (loop1): Start checkpoint disabled! [ 789.853585][T11832] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 791.329421][ T4401] kworker/u4:15: attempt to access beyond end of device [ 791.329421][ T4401] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 793.544802][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 793.660272][ T4364] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 793.865931][ T4364] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 793.898451][ T4364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.931635][ T4364] usb 2-1: Product: syz [ 793.956229][ T4364] usb 2-1: Manufacturer: syz [ 793.965764][ T4364] usb 2-1: SerialNumber: syz [ 794.083666][ T4364] r8152-cfgselector 2-1: config 0 descriptor?? [ 794.119109][T11877] loop0: detected capacity change from 0 to 256 [ 794.411076][T11877] FAT-fs (loop0): Directory bread(block 64) failed [ 794.417714][T11877] FAT-fs (loop0): Directory bread(block 65) failed [ 794.581826][ T4364] r8152-cfgselector 2-1: Unknown version 0x0000 [ 795.241031][ T4364] r8152-cfgselector 2-1: USB disconnect, device number 30 [ 795.468694][T11877] FAT-fs (loop0): Directory bread(block 66) failed [ 795.589351][T11877] FAT-fs (loop0): Directory bread(block 67) failed [ 795.734706][T11877] FAT-fs (loop0): Directory bread(block 68) failed [ 795.848428][T11877] FAT-fs (loop0): Directory bread(block 69) failed [ 796.013403][T11877] FAT-fs (loop0): Directory bread(block 70) failed [ 796.167016][T11877] FAT-fs (loop0): Directory bread(block 71) failed [ 796.307480][T11877] FAT-fs (loop0): Directory bread(block 72) failed [ 796.452355][T11877] FAT-fs (loop0): Directory bread(block 73) failed [ 796.670646][ T9030] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 797.880869][ T9030] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 798.698755][ T9030] usb 3-1: config 7 has no interface number 0 [ 798.705323][ T9030] usb 3-1: config 7 interface 192 has no altsetting 0 [ 799.977233][ T9030] usb 3-1: string descriptor 0 read error: -71 [ 799.986252][ T9030] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 799.995771][ T9030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.014887][ T9030] usb 3-1: can't set config #7, error -71 [ 800.022640][ T9030] usb 3-1: USB disconnect, device number 16 [ 800.053371][T11897] loop0: detected capacity change from 0 to 512 [ 800.123251][T11897] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 800.152825][T11897] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 800.197706][T11897] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 800.419807][T11897] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 800.549849][T11897] System zones: 0-2, 18-18, 34-34 [ 800.869518][T11897] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 801.188005][T11897] EXT4-fs (loop0): 1 truncate cleaned up [ 801.196967][T11897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 801.492609][T11913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2214'. [ 802.293533][T11925] loop4: detected capacity change from 0 to 512 [ 802.294936][T11921] loop1: detected capacity change from 0 to 64 [ 802.446979][T11925] EXT4-fs: Ignoring removed i_version option [ 802.534133][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 802.585674][T11925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 802.672467][T11925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 803.166996][T11925] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.274990][T11934] loop0: detected capacity change from 0 to 256 [ 803.387836][T11925] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.2215: corrupted inode contents [ 803.405131][T11934] FAT-fs (loop0): Directory bread(block 64) failed [ 803.441666][T11934] FAT-fs (loop0): Directory bread(block 65) failed [ 803.499262][T11934] FAT-fs (loop0): Directory bread(block 66) failed [ 803.520297][T11934] FAT-fs (loop0): Directory bread(block 67) failed [ 804.366509][T11934] FAT-fs (loop0): Directory bread(block 68) failed [ 804.373393][T11925] EXT4-fs (loop4): Remounting filesystem read-only [ 804.380125][T11925] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #2: comm syz.4.2215: mark_inode_dirty error [ 804.391551][T11934] FAT-fs (loop0): Directory bread(block 69) failed [ 804.398198][T11934] FAT-fs (loop0): Directory bread(block 70) failed [ 804.405221][T11934] FAT-fs (loop0): Directory bread(block 71) failed [ 804.411960][T11934] FAT-fs (loop0): Directory bread(block 72) failed [ 804.418665][T11934] FAT-fs (loop0): Directory bread(block 73) failed [ 804.425530][T11925] EXT4-fs (loop4): Remounting filesystem read-only [ 804.707581][T11925] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.2215: corrupted inode contents [ 804.951277][T11925] EXT4-fs (loop4): Remounting filesystem read-only [ 804.962303][T11947] loop3: detected capacity change from 0 to 64 [ 804.974457][T11937] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.2215: corrupted inode contents [ 805.019044][T11937] EXT4-fs (loop4): Remounting filesystem read-only [ 805.029168][T11937] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #2: comm syz.4.2215: mark_inode_dirty error [ 805.050149][ T4363] kworker/u4:9: attempt to access beyond end of device [ 805.050149][ T4363] loop0: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 805.079507][ T4363] kworker/u4:9: attempt to access beyond end of device [ 805.079507][ T4363] loop0: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 805.090036][T11937] EXT4-fs (loop4): Remounting filesystem read-only [ 805.094487][ T4363] kworker/u4:9: attempt to access beyond end of device [ 805.094487][ T4363] loop0: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 805.117122][ T4363] kworker/u4:9: attempt to access beyond end of device [ 805.117122][ T4363] loop0: rw=1, sector=1960, nr_sectors = 2328 limit=256 [ 805.210748][T11937] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.2215: corrupted inode contents [ 805.257003][T11937] EXT4-fs (loop4): Remounting filesystem read-only [ 805.305455][T11937] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2215: mark_inode_dirty error [ 805.905219][T11937] EXT4-fs (loop4): Remounting filesystem read-only [ 805.924849][T11937] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.2215: corrupted inode contents [ 806.036942][T11937] EXT4-fs (loop4): Remounting filesystem read-only [ 806.054070][T11937] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #2: comm syz.4.2215: mark_inode_dirty error [ 806.090669][T11937] EXT4-fs (loop4): Remounting filesystem read-only [ 806.310137][ T7322] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 806.510193][ T22] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 806.584727][T11177] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 806.607001][T11968] loop1: detected capacity change from 0 to 1024 [ 806.647937][T11177] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 806.669380][T11968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 806.697855][T11968] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 806.728312][ T7322] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 806.750088][ T7322] usb 3-1: config 0 interface 0 has no altsetting 0 [ 806.780192][T11968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 807.182511][ T7322] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 807.188579][T11968] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 807.192100][ T7322] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 807.209563][ T7322] usb 3-1: Product: syz [ 807.219655][ T7322] usb 3-1: Manufacturer: syz [ 807.232104][ T7322] usb 3-1: SerialNumber: syz [ 807.269368][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 807.287064][ T7322] usb 3-1: config 0 descriptor?? [ 807.324469][ T7322] usb 3-1: selecting invalid altsetting 0 [ 807.602598][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 807.661447][ T4302] libceph: connect (1)[c::]:6789 error -101 [ 807.667546][ T4302] libceph: mon0 (1)[c::]:6789 connect error [ 807.723269][T11983] loop1: detected capacity change from 0 to 256 [ 807.793780][T11983] FAT-fs (loop1): Directory bread(block 64) failed [ 807.807994][T11983] FAT-fs (loop1): Directory bread(block 65) failed [ 807.815601][T11983] FAT-fs (loop1): Directory bread(block 66) failed [ 807.822502][T11983] FAT-fs (loop1): Directory bread(block 67) failed [ 807.829307][T11983] FAT-fs (loop1): Directory bread(block 68) failed [ 807.838045][T11983] FAT-fs (loop1): Directory bread(block 69) failed [ 807.846054][T11983] FAT-fs (loop1): Directory bread(block 70) failed [ 807.853424][T11983] FAT-fs (loop1): Directory bread(block 71) failed [ 807.860839][T11983] FAT-fs (loop1): Directory bread(block 72) failed [ 807.867536][T11983] FAT-fs (loop1): Directory bread(block 73) failed [ 807.951934][ T7322] libceph: connect (1)[c::]:6789 error -101 [ 808.512097][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.518533][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.655258][T11978] ceph: No mds server is up or the cluster is laggy [ 808.686263][ T7322] libceph: mon0 (1)[c::]:6789 connect error [ 809.317938][T11177] usb 3-1: USB disconnect, device number 17 [ 812.230937][ T7324] libceph: connect (1)[c::]:6789 error -101 [ 812.436514][ T7324] libceph: mon0 (1)[c::]:6789 connect error [ 812.680086][T12017] ceph: No mds server is up or the cluster is laggy [ 812.833898][T12031] loop2: detected capacity change from 0 to 256 [ 813.458439][T12031] FAT-fs (loop2): Directory bread(block 64) failed [ 813.727023][T12031] FAT-fs (loop2): Directory bread(block 65) failed [ 813.756906][T12031] FAT-fs (loop2): Directory bread(block 66) failed [ 814.696629][T12031] FAT-fs (loop2): Directory bread(block 67) failed [ 814.775058][T12031] FAT-fs (loop2): Directory bread(block 68) failed [ 814.812702][T12031] FAT-fs (loop2): Directory bread(block 69) failed [ 814.840685][T12031] FAT-fs (loop2): Directory bread(block 70) failed [ 814.847283][T12031] FAT-fs (loop2): Directory bread(block 71) failed [ 814.888098][T12031] FAT-fs (loop2): Directory bread(block 72) failed [ 814.980101][T12031] FAT-fs (loop2): Directory bread(block 73) failed [ 816.070428][ T4395] kworker/u4:14: attempt to access beyond end of device [ 816.070428][ T4395] loop2: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 817.017253][ T4395] kworker/u4:14: attempt to access beyond end of device [ 817.017253][ T4395] loop2: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 817.144715][ T4395] kworker/u4:14: attempt to access beyond end of device [ 817.144715][ T4395] loop2: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 817.201430][ T4395] kworker/u4:14: attempt to access beyond end of device [ 817.201430][ T4395] loop2: rw=1, sector=1960, nr_sectors = 2216 limit=256 [ 817.216730][T12071] loop0: detected capacity change from 0 to 512 [ 817.264110][T12071] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 817.336800][T12071] EXT4-fs (loop0): 1 truncate cleaned up [ 817.342914][T12071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 820.610762][ T128] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 822.714994][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 824.540203][ T4335] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 826.186708][ T4335] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 826.810270][ T7322] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 827.030286][ T7322] usb 5-1: config 7 has an invalid interface number: 192 but max is 0 [ 827.085610][ T7322] usb 5-1: config 7 has no interface number 0 [ 827.092287][ T7322] usb 5-1: config 7 interface 192 has no altsetting 0 [ 827.174113][ T7322] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 827.292337][ T7322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.395433][ T7322] usb 5-1: Product: syz [ 827.455790][ T7322] usb 5-1: Manufacturer: syz [ 827.525651][ T7322] usb 5-1: SerialNumber: syz [ 828.558107][ T4335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 828.569092][ T4335] usb 1-1: string descriptor 0 read error: -71 [ 828.576567][ T4335] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 828.585940][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 828.621032][ T4335] usb 1-1: config 0 descriptor?? [ 828.629146][ T4335] usb 1-1: can't set config #0, error -71 [ 828.636170][ T4335] usb 1-1: USB disconnect, device number 23 [ 828.699572][ T7322] usb 5-1: USB disconnect, device number 15 [ 829.632703][T11177] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 829.826149][T11177] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.016467][T11177] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 830.210798][T11177] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 830.230153][T11177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.239124][T11177] usb 2-1: Product: syz [ 830.248106][T11177] usb 2-1: Manufacturer: syz [ 830.253205][T11177] usb 2-1: SerialNumber: syz [ 831.103849][T11177] cdc_mbim 2-1:1.0: skipping garbage [ 831.319303][T12149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 833.255816][T12176] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 833.317420][T11177] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 833.497385][T11177] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 834.080233][T12198] loop0: detected capacity change from 0 to 1024 [ 835.219196][T11177] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, a6:5b:d6:00:3b:c2 [ 835.234358][T11177] usb 2-1: USB disconnect, device number 32 [ 835.249916][T11177] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 835.595412][ T9030] libceph: connect (1)[c::]:6789 error -101 [ 835.612757][ T9030] libceph: mon0 (1)[c::]:6789 connect error [ 835.666672][ T4395] hfsplus: b-tree write err: -5, ino 4 [ 835.876797][T12199] ceph: No mds server is up or the cluster is laggy [ 835.906839][ T4302] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 835.920427][ T9030] libceph: connect (1)[c::]:6789 error -101 [ 835.926495][ T9030] libceph: mon0 (1)[c::]:6789 connect error [ 835.965478][ T4302] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 835.977964][T12206] loop0: detected capacity change from 0 to 1024 [ 836.014375][T12206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 836.050376][T12206] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 836.111324][T12206] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 836.241767][T12212] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 836.259818][T12206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 837.067267][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 837.177179][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 837.188224][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 837.560783][T12227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 837.615010][T12227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 837.659930][T12227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 837.676771][T12227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 837.884442][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 837.950867][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 837.961296][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 837.969224][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 837.981630][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 837.989225][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 838.054887][T12233] loop4: detected capacity change from 0 to 512 [ 838.100157][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 838.119722][T12233] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 838.129259][T12233] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 838.134211][T12236] Can't find a SQUASHFS superblock on nullb0 [ 838.185500][T12233] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 838.296338][T12233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 838.315987][T12233] System zones: 0-2, 18-18, 34-34 [ 838.414515][T12223] lo speed is unknown, defaulting to 1000 [ 838.435471][T12233] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 838.718619][T12233] EXT4-fs (loop4): 1 truncate cleaned up [ 838.835335][T12233] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 839.437987][T12223] hsr0 speed is unknown, defaulting to 1000 [ 840.125671][ T4364] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 840.193484][T12227] Bluetooth: hci1: command 0x0409 tx timeout [ 840.321713][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 840.434055][ T4364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.685440][ T4364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.743418][ T4364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 840.790109][ T4364] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 840.799222][ T4364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.832001][ T4364] usb 2-1: config 0 descriptor?? [ 841.101961][T12223] chnl_net:caif_netlink_parms(): no params data found [ 841.314294][ T4364] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 841.639861][ T4364] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 841.792558][ T4302] usb 2-1: USB disconnect, device number 33 [ 841.887741][T12223] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.925676][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.955567][T12223] device bridge_slave_0 entered promiscuous mode [ 841.977467][T12223] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.001785][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.035093][T12223] device bridge_slave_1 entered promiscuous mode [ 842.083289][T12268] fido_id[12268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 842.122598][T12223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.158562][T12223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.280048][T12227] Bluetooth: hci1: command 0x041b tx timeout [ 842.314339][T12223] team0: Port device team_slave_0 added [ 842.341263][T12223] team0: Port device team_slave_1 added [ 842.382702][T12223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.448038][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 842.514199][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.030063][T12223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.107565][T12223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.210054][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.312392][T12223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.350093][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 845.391149][T12223] device hsr_slave_0 entered promiscuous mode [ 845.406926][T12223] device hsr_slave_1 entered promiscuous mode [ 845.423878][T12291] loop1: detected capacity change from 0 to 256 [ 845.431097][T12223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.468676][T12223] Cannot create hsr debugfs directory [ 845.483898][T12291] FAT-fs (loop1): Directory bread(block 64) failed [ 845.495100][T12293] loop4: detected capacity change from 0 to 512 [ 845.510111][T12291] FAT-fs (loop1): Directory bread(block 65) failed [ 845.530144][T12293] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 845.543130][T12291] FAT-fs (loop1): Directory bread(block 66) failed [ 845.560288][T12291] FAT-fs (loop1): Directory bread(block 67) failed [ 845.604310][T12291] FAT-fs (loop1): Directory bread(block 68) failed [ 845.613647][T12293] EXT4-fs (loop4): 1 truncate cleaned up [ 845.624650][T12293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 845.636447][T12291] FAT-fs (loop1): Directory bread(block 69) failed [ 845.643486][T12291] FAT-fs (loop1): Directory bread(block 70) failed [ 845.655119][T12291] FAT-fs (loop1): Directory bread(block 71) failed [ 845.663910][T12291] FAT-fs (loop1): Directory bread(block 72) failed [ 845.670890][T12291] FAT-fs (loop1): Directory bread(block 73) failed [ 846.881564][T12227] Bluetooth: hci1: command 0x0419 tx timeout [ 847.860292][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 848.042196][T12309] loop1: detected capacity change from 0 to 512 [ 848.242929][T12309] EXT4-fs: Ignoring removed i_version option [ 848.458197][T12309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 848.648573][T12309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 848.708881][T12223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 848.741339][T12309] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.890484][ T14] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 848.945943][T12223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 849.143129][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 849.433385][T12309] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.2321: corrupted inode contents [ 849.456933][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.545363][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.725413][T12309] EXT4-fs (loop1): Remounting filesystem read-only [ 849.749082][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 849.768664][T12309] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.2321: mark_inode_dirty error [ 849.793447][T12309] EXT4-fs (loop1): Remounting filesystem read-only [ 849.800563][T12309] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.2321: corrupted inode contents [ 849.813022][T12309] EXT4-fs (loop1): Remounting filesystem read-only [ 849.822702][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 849.826380][T12326] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.2321: corrupted inode contents [ 849.833236][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.851623][T12326] EXT4-fs (loop1): Remounting filesystem read-only [ 849.858686][T12326] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.2321: mark_inode_dirty error [ 849.865447][ T14] usb 3-1: config 0 descriptor?? [ 849.880310][T12326] EXT4-fs (loop1): Remounting filesystem read-only [ 849.882027][T12223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 849.887597][T12326] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.2321: corrupted inode contents [ 849.906657][T12326] EXT4-fs (loop1): Remounting filesystem read-only [ 849.915668][T12326] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2321: mark_inode_dirty error [ 849.923770][T12223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 849.938623][T12326] EXT4-fs (loop1): Remounting filesystem read-only [ 849.947593][T12326] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.2321: corrupted inode contents [ 849.970117][T12326] EXT4-fs (loop1): Remounting filesystem read-only [ 849.976857][T12326] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.2321: mark_inode_dirty error [ 849.994183][T12326] EXT4-fs (loop1): Remounting filesystem read-only [ 850.026173][T12309] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.2321: corrupted inode contents [ 850.047980][T12223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.066713][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.074909][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.092740][T12223] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.111582][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.145152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.164466][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.171701][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.226029][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 850.245229][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 850.266538][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.286971][ T14] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 850.299125][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.306521][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.324978][ T14] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 850.344009][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 850.447347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 850.456954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.468412][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.477181][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.491276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.500433][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 850.516526][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.525399][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.537628][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.544239][ T4364] usb 3-1: USB disconnect, device number 18 [ 850.583053][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 850.618603][T12223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.704973][T12333] fido_id[12333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 851.216862][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 851.230575][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 851.283789][T12223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.729568][T12375] loop4: detected capacity change from 0 to 512 [ 854.737456][T12375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 854.772832][T12375] EXT4-fs (loop4): 1 truncate cleaned up [ 854.778663][T12375] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 855.873950][T12387] IPv6: NLM_F_REPLACE set, but no existing node found! [ 855.943066][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 856.405331][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 856.486163][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 856.562208][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 856.582835][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 856.669592][T12223] device veth0_vlan entered promiscuous mode [ 856.704495][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 856.730894][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 856.769515][T12223] device veth1_vlan entered promiscuous mode [ 856.810077][ T4302] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 856.917458][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 856.937430][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 856.991592][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 857.058390][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 857.108153][T12223] device veth0_macvtap entered promiscuous mode [ 857.160630][T12223] device veth1_macvtap entered promiscuous mode [ 857.289808][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.350107][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.412002][T12407] loop0: detected capacity change from 0 to 512 [ 857.418621][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.479629][T12407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 857.492330][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.525522][T12407] System zones: 1-12 [ 857.543489][T12223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.554947][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 857.562673][T12407] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2342: invalid indirect mapped block 8 (level 2) [ 857.587199][T12407] EXT4-fs (loop0): Remounting filesystem read-only [ 857.595820][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 857.606641][T12407] EXT4-fs (loop0): 1 truncate cleaned up [ 857.612790][T12407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 857.623735][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 857.632812][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 857.645230][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.662866][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.673273][T12223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.683847][T12223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.705708][T12223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.726457][T12223] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.737367][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.756873][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.770342][T12223] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.795257][ T4302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 857.830901][T12223] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.860036][T12223] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.869054][ T4302] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 857.907925][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 857.916696][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.928196][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 857.946084][ T4302] usb 5-1: config 0 descriptor?? [ 858.488415][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 858.495299][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.528411][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.580865][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 858.629441][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.646378][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.705044][T11041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 858.938594][ T9030] libceph: connect (1)[c::]:6789 error -101 [ 858.975390][ T4302] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 859.011125][ T4302] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 859.013587][ T9030] libceph: mon0 (1)[c::]:6789 connect error [ 859.405909][ T9030] libceph: connect (1)[c::]:6789 error -101 [ 859.439200][ T9030] libceph: mon0 (1)[c::]:6789 connect error [ 859.456639][ T9030] usb 5-1: USB disconnect, device number 16 [ 859.651760][T12421] ceph: No mds server is up or the cluster is laggy [ 859.878382][T11177] libceph: connect (1)[c::]:6789 error -101 [ 860.883250][T12434] loop5: detected capacity change from 0 to 8192 [ 860.890803][T12434] UDF-fs: bad mount option "y" or missing value [ 860.912616][T11177] libceph: mon0 (1)[c::]:6789 connect error [ 861.128400][ T5611] blk_print_req_error: 13 callbacks suppressed [ 861.128421][ T5611] I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 861.925154][T11177] libceph: connect (1)[c::]:6789 error -101 [ 861.955558][T11177] libceph: mon0 (1)[c::]:6789 connect error [ 862.106155][T12426] fido_id[12426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 865.265754][T12466] loop5: detected capacity change from 0 to 512 [ 865.365490][T12466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 865.397150][T12466] System zones: 1-12 [ 865.455457][T12466] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33261: comm syz.5.2357: invalid block [ 865.465775][T12468] loop0: detected capacity change from 0 to 4096 [ 865.478586][T12466] EXT4-fs (loop5): Remounting filesystem read-only [ 865.508528][T12466] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2357: invalid indirect mapped block 8 (level 2) [ 865.563859][T12466] EXT4-fs (loop5): Remounting filesystem read-only [ 865.594254][T12466] EXT4-fs (loop5): 1 truncate cleaned up [ 865.614243][T12466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 866.455970][T12223] EXT4-fs (loop5): unmounting filesystem. [ 867.770316][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 868.255729][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.309103][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.320172][ T22] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 868.333639][ T22] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.343251][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.395095][ T22] usb 6-1: config 0 descriptor?? [ 868.846806][ T22] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 868.883600][ T22] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 869.051642][T11177] usb 6-1: USB disconnect, device number 2 [ 870.010561][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.016935][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.209809][T11177] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 870.989461][T12512] loop1: detected capacity change from 0 to 512 [ 870.997017][T12505] fido_id[12505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 871.464344][T12512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 871.525479][T12512] System zones: 1-12 [ 871.560133][T11177] usb 3-1: device descriptor read/64, error -71 [ 871.576956][T12512] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.2371: invalid block [ 871.596658][T12512] EXT4-fs (loop1): Remounting filesystem read-only [ 871.616188][T12512] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2371: invalid indirect mapped block 8 (level 2) [ 871.674146][T12512] EXT4-fs (loop1): Remounting filesystem read-only [ 871.693386][T12512] EXT4-fs (loop1): 1 truncate cleaned up [ 871.727309][T12512] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 871.864216][T11177] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 872.071094][T12521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 872.355294][T12521] EXT4-fs (loop1): Remounting filesystem read-only [ 872.894504][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 872.916672][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 873.178024][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 873.252974][ T14] libceph: connect (1)[c::]:6789 error -101 [ 873.259215][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 873.335143][T12530] ceph: No mds server is up or the cluster is laggy [ 873.836546][ T14] libceph: connect (1)[c::]:6789 error -101 [ 873.843922][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 877.216761][T12572] loop1: detected capacity change from 0 to 512 [ 877.280063][T12572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 877.298504][T12572] System zones: 1-12 [ 877.336018][T12572] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.2388: invalid block [ 877.434065][T12572] EXT4-fs (loop1): Remounting filesystem read-only [ 877.460070][T12572] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2388: invalid indirect mapped block 8 (level 2) [ 877.580962][T12572] EXT4-fs (loop1): Remounting filesystem read-only [ 877.587924][T12572] EXT4-fs (loop1): 1 truncate cleaned up [ 877.628849][T12572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 878.526246][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 881.622743][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'. [ 882.690475][ T7322] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 882.853647][T12631] loop0: detected capacity change from 0 to 512 [ 882.870089][ T7322] usb 5-1: device descriptor read/64, error -71 [ 883.001497][T12631] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 883.073422][T12631] System zones: 1-12 [ 883.141663][T12631] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2402: invalid indirect mapped block 8 (level 2) [ 883.155510][ T7322] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 883.278280][T12631] EXT4-fs (loop0): Remounting filesystem read-only [ 883.330184][ T7322] usb 5-1: device descriptor read/64, error -71 [ 883.354616][T12631] EXT4-fs (loop0): 1 truncate cleaned up [ 883.425820][T12631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 883.460796][ T7322] usb usb5-port1: attempt power cycle [ 884.120777][ T7322] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 884.162265][ T7322] usb 5-1: device descriptor read/8, error -71 [ 884.358363][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 884.530093][ T7322] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 884.594589][ T7322] usb 5-1: device descriptor read/8, error -71 [ 884.828877][ T7322] usb usb5-port1: unable to enumerate USB device [ 885.353581][T12651] loop1: detected capacity change from 0 to 16 [ 885.479507][T12654] loop0: detected capacity change from 0 to 1024 [ 886.094824][T12654] hfsplus: failed to load root directory [ 886.155552][T12651] erofs: (device loop1): mounted with root inode @ nid 36. [ 886.374266][T12651] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 886.505702][T12651] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 886.546306][T12651] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 886.606142][T12651] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 886.663322][ T26] audit: type=1800 audit(2000000942.013:51): pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2407" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 888.239487][T12677] loop0: detected capacity change from 0 to 16 [ 888.283760][T12677] erofs: (device loop0): mounted with root inode @ nid 36. [ 888.573369][T12679] loop1: detected capacity change from 0 to 256 [ 889.107325][T12679] FAT-fs (loop1): Directory bread(block 64) failed [ 889.159798][T12679] FAT-fs (loop1): Directory bread(block 65) failed [ 889.200782][T12679] FAT-fs (loop1): Directory bread(block 66) failed [ 889.261692][T12679] FAT-fs (loop1): Directory bread(block 67) failed [ 889.271953][T12679] FAT-fs (loop1): Directory bread(block 68) failed [ 889.289107][T12679] FAT-fs (loop1): Directory bread(block 69) failed [ 889.360191][T12679] FAT-fs (loop1): Directory bread(block 70) failed [ 889.366814][T12679] FAT-fs (loop1): Directory bread(block 71) failed [ 889.401178][T12679] FAT-fs (loop1): Directory bread(block 72) failed [ 889.407787][T12679] FAT-fs (loop1): Directory bread(block 73) failed [ 890.212228][ T4375] kworker/u4:10: attempt to access beyond end of device [ 890.212228][ T4375] loop1: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 890.247818][ T4375] kworker/u4:10: attempt to access beyond end of device [ 890.247818][ T4375] loop1: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 890.310644][ T4375] kworker/u4:10: attempt to access beyond end of device [ 890.310644][ T4375] loop1: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 890.345647][ T4375] kworker/u4:10: attempt to access beyond end of device [ 890.345647][ T4375] loop1: rw=1, sector=1960, nr_sectors = 3752 limit=256 [ 890.516362][ T4375] kworker/u4:10: attempt to access beyond end of device [ 890.516362][ T4375] loop1: rw=1, sector=5712, nr_sectors = 2056 limit=256 [ 890.672507][ T4375] kworker/u4:10: attempt to access beyond end of device [ 890.672507][ T4375] loop1: rw=1, sector=7768, nr_sectors = 2688 limit=256 [ 890.698990][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 891.158620][ T4375] kworker/u4:10: attempt to access beyond end of device [ 891.158620][ T4375] loop1: rw=1, sector=10456, nr_sectors = 23344 limit=256 [ 895.326345][ T14] libceph: connect (1)[c::]:6789 error -101 [ 895.334086][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 895.418293][T12726] loop2: detected capacity change from 0 to 256 [ 895.452327][T12726] FAT-fs (loop2): Directory bread(block 64) failed [ 895.460093][T12726] FAT-fs (loop2): Directory bread(block 65) failed [ 895.487205][T12726] FAT-fs (loop2): Directory bread(block 66) failed [ 895.530177][T12726] FAT-fs (loop2): Directory bread(block 67) failed [ 895.538795][T12726] FAT-fs (loop2): Directory bread(block 68) failed [ 895.555247][T12726] FAT-fs (loop2): Directory bread(block 69) failed [ 895.583167][T12726] FAT-fs (loop2): Directory bread(block 70) failed [ 895.593173][T12719] ceph: No mds server is up or the cluster is laggy [ 895.630417][ T14] libceph: connect (1)[c::]:6789 error -101 [ 895.636539][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 895.640245][T12726] FAT-fs (loop2): Directory bread(block 71) failed [ 895.660373][T12724] loop5: detected capacity change from 0 to 4096 [ 895.710965][T12726] FAT-fs (loop2): Directory bread(block 72) failed [ 895.717575][T12726] FAT-fs (loop2): Directory bread(block 73) failed [ 897.342340][T12740] loop1: detected capacity change from 0 to 128 [ 897.427933][T12740] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 897.511877][T12740] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.727945][ T34] kworker/u4:2: attempt to access beyond end of device [ 897.727945][ T34] loop2: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 897.801447][ T34] kworker/u4:2: attempt to access beyond end of device [ 897.801447][ T34] loop2: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 897.855671][ T34] kworker/u4:2: attempt to access beyond end of device [ 897.855671][ T34] loop2: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 897.883698][ T34] kworker/u4:2: attempt to access beyond end of device [ 897.883698][ T34] loop2: rw=1, sector=1960, nr_sectors = 2112 limit=256 [ 897.972955][ T34] kworker/u4:2: attempt to access beyond end of device [ 897.972955][ T34] loop2: rw=1, sector=4072, nr_sectors = 7752 limit=256 [ 898.261936][ T34] kworker/u4:2: attempt to access beyond end of device [ 898.261936][ T34] loop2: rw=1, sector=11824, nr_sectors = 9456 limit=256 [ 898.264202][T12752] loop0: detected capacity change from 0 to 512 [ 898.594364][ T34] kworker/u4:2: attempt to access beyond end of device [ 898.594364][ T34] loop2: rw=1, sector=21280, nr_sectors = 6832 limit=256 [ 898.809803][ T34] kworker/u4:2: attempt to access beyond end of device [ 898.809803][ T34] loop2: rw=1, sector=28112, nr_sectors = 4104 limit=256 [ 899.529850][ T34] kworker/u4:2: attempt to access beyond end of device [ 899.529850][ T34] loop2: rw=1, sector=32216, nr_sectors = 1584 limit=256 [ 899.754213][T12752] EXT4-fs (loop0): Test dummy encryption mode enabled [ 899.773577][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 899.779876][T12752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 899.871073][T12752] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.2433: bad orphan inode 131083 [ 899.910332][T12752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 902.549633][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 902.840794][ T8851] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 903.110415][ T8851] usb 3-1: config 0 has no interfaces? [ 903.158999][ T8851] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 903.318712][ T8851] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 903.434538][ T8851] usb 3-1: Product: syz [ 903.483722][ T8851] usb 3-1: Manufacturer: syz [ 903.532806][ T8851] usb 3-1: SerialNumber: syz [ 903.567927][T12796] loop0: detected capacity change from 0 to 256 [ 903.599445][ T8851] usb 3-1: config 0 descriptor?? [ 903.680554][T12796] FAT-fs (loop0): Directory bread(block 64) failed [ 903.687193][T12796] FAT-fs (loop0): Directory bread(block 65) failed [ 903.743380][T12796] FAT-fs (loop0): Directory bread(block 66) failed [ 903.758024][T12796] FAT-fs (loop0): Directory bread(block 67) failed [ 903.776625][T12796] FAT-fs (loop0): Directory bread(block 68) failed [ 903.820211][T12796] FAT-fs (loop0): Directory bread(block 69) failed [ 903.829715][T12796] FAT-fs (loop0): Directory bread(block 70) failed [ 903.860083][T12796] FAT-fs (loop0): Directory bread(block 71) failed [ 903.866878][T12796] FAT-fs (loop0): Directory bread(block 72) failed [ 903.890635][T12796] FAT-fs (loop0): Directory bread(block 73) failed [ 904.972970][T12814] loop1: detected capacity change from 0 to 40427 [ 904.989413][T12814] F2FS-fs (loop1): invalid crc value [ 904.998485][T12814] F2FS-fs (loop1): Found nat_bits in checkpoint [ 905.031155][T12814] F2FS-fs (loop1): Start checkpoint disabled! [ 905.059887][T12814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 905.601542][ T8851] usb 3-1: USB disconnect, device number 21 [ 905.962646][ T56] kworker/u4:4: attempt to access beyond end of device [ 905.962646][ T56] loop0: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 906.025856][ T56] kworker/u4:4: attempt to access beyond end of device [ 906.025856][ T56] loop0: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 906.040873][ T56] kworker/u4:4: attempt to access beyond end of device [ 906.040873][ T56] loop0: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 906.062675][ T56] kworker/u4:4: attempt to access beyond end of device [ 906.062675][ T56] loop0: rw=1, sector=1960, nr_sectors = 4528 limit=256 [ 906.194463][ T56] kworker/u4:4: attempt to access beyond end of device [ 906.194463][ T56] loop0: rw=1, sector=6488, nr_sectors = 4112 limit=256 [ 907.001135][ T56] kworker/u4:4: attempt to access beyond end of device [ 907.001135][ T56] loop0: rw=1, sector=10600, nr_sectors = 3632 limit=256 [ 907.024337][ T56] kworker/u4:4: attempt to access beyond end of device [ 907.024337][ T56] loop0: rw=1, sector=14232, nr_sectors = 4192 limit=256 [ 908.106775][ T4593] kworker/u4:19: attempt to access beyond end of device [ 908.106775][ T4593] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 909.116506][T12843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2452'. [ 913.598932][T12867] loop2: detected capacity change from 0 to 128 [ 913.676936][ T26] audit: type=1800 audit(2000000969.023:52): pid=12867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2461" name="file2" dev="loop2" ino=1048802 res=0 errno=0 [ 913.700751][T12871] loop0: detected capacity change from 0 to 256 [ 913.719106][T12866] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 913.767584][T12866] FAT-fs (loop2): Filesystem has been set read-only [ 913.802985][T12866] syz.2.2461: attempt to access beyond end of device [ 913.802985][T12866] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 913.908543][T12871] FAT-fs (loop0): Directory bread(block 64) failed [ 913.964226][T12871] FAT-fs (loop0): Directory bread(block 65) failed [ 913.966352][T12866] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 913.977715][T12871] FAT-fs (loop0): Directory bread(block 66) failed [ 913.991675][T12871] FAT-fs (loop0): Directory bread(block 67) failed [ 913.999230][T12871] FAT-fs (loop0): Directory bread(block 68) failed [ 914.008706][T12871] FAT-fs (loop0): Directory bread(block 69) failed [ 914.018327][T12871] FAT-fs (loop0): Directory bread(block 70) failed [ 914.026406][T12871] FAT-fs (loop0): Directory bread(block 71) failed [ 914.034769][T12866] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 914.034945][T12871] FAT-fs (loop0): Directory bread(block 72) failed [ 914.053189][T12871] FAT-fs (loop0): Directory bread(block 73) failed [ 914.218245][T12867] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 914.265312][T12867] syz.2.2461: attempt to access beyond end of device [ 914.265312][T12867] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 914.340404][T12867] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 914.348846][T12867] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 914.482442][T12867] syz.2.2461: attempt to access beyond end of device [ 914.482442][T12867] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 915.525329][T12867] syz.2.2461: attempt to access beyond end of device [ 915.525329][T12867] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 916.687287][T12890] loop1: detected capacity change from 0 to 64 [ 917.001088][ T4375] kworker/u4:10: attempt to access beyond end of device [ 917.001088][ T4375] loop0: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 917.046113][ T4375] kworker/u4:10: attempt to access beyond end of device [ 917.046113][ T4375] loop0: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 917.673059][ T4375] kworker/u4:10: attempt to access beyond end of device [ 917.673059][ T4375] loop0: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 917.688905][ T4375] kworker/u4:10: attempt to access beyond end of device [ 917.688905][ T4375] loop0: rw=1, sector=1960, nr_sectors = 1192 limit=256 [ 919.446667][T12917] loop1: detected capacity change from 0 to 4096 [ 919.603834][T12917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 919.638984][T12916] infiniband sz1: set active [ 919.661877][T12916] infiniband sz1: set active [ 919.676718][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 919.705455][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 919.709811][T12928] loop5: detected capacity change from 0 to 1024 [ 919.758396][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 919.815755][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 919.830454][T12928] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 919.905944][T12928] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.2475: Allocating blocks 385-513 which overlap fs metadata [ 919.938943][ T4302] lo speed is unknown, defaulting to 1000 [ 919.947690][ T4244] lo speed is unknown, defaulting to 1000 [ 920.088351][T12925] EXT4-fs (loop5): pa ffff888073fdfc40: logic 16, phys. 129, len 24 [ 920.097567][T12925] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 920.818827][T12223] EXT4-fs (loop5): unmounting filesystem. [ 921.209495][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 921.980231][ T8851] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 922.432481][T12949] loop1: detected capacity change from 0 to 256 [ 922.535107][T12949] FAT-fs (loop1): Directory bread(block 64) failed [ 922.582715][ T8851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.600070][T12949] FAT-fs (loop1): Directory bread(block 65) failed [ 922.606862][T12949] FAT-fs (loop1): Directory bread(block 66) failed [ 922.614079][ T8851] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 922.639739][T12949] FAT-fs (loop1): Directory bread(block 67) failed [ 922.655640][ T8851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.677572][T12949] FAT-fs (loop1): Directory bread(block 68) failed [ 922.751596][ T8851] usb 1-1: config 0 descriptor?? [ 922.757655][T12949] FAT-fs (loop1): Directory bread(block 69) failed [ 922.838923][T12949] FAT-fs (loop1): Directory bread(block 70) failed [ 922.876459][ T8851] pwc: Askey VC010 type 2 USB webcam detected. [ 922.912856][T12949] FAT-fs (loop1): Directory bread(block 71) failed [ 922.929344][T12951] loop5: detected capacity change from 0 to 512 [ 922.980569][T12949] FAT-fs (loop1): Directory bread(block 72) failed [ 923.113943][ T8851] pwc: send_video_command error -71 [ 923.119327][ T8851] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 923.171058][T12949] FAT-fs (loop1): Directory bread(block 73) failed [ 923.205891][T12951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 923.276734][ T8851] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 923.321873][T12951] System zones: 1-12 [ 923.473318][ T8851] usb 1-1: USB disconnect, device number 24 [ 923.522604][T12951] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2482: invalid indirect mapped block 8 (level 2) [ 923.607753][T12951] EXT4-fs (loop5): Remounting filesystem read-only [ 923.614912][T12951] EXT4-fs (loop5): 1 truncate cleaned up [ 923.628379][T12951] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 924.046997][ T8851] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 924.632196][T12962] loop2: detected capacity change from 0 to 65536 [ 924.646196][T12967] Can't find a SQUASHFS superblock on nullb0 [ 925.065709][T12962] XFS (loop2): Mounting V5 Filesystem [ 925.160832][T12962] XFS (loop2): Ending clean mount [ 925.230248][ T8851] usb 1-1: device not accepting address 25, error -71 [ 925.665024][ T7322] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 925.722989][ T7322] XFS (loop2): Unmount and run xfs_repair [ 925.747109][ T7322] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 925.789857][ T7322] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 925.800221][ T7322] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 925.809317][ T7322] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 925.819088][ T7322] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 925.828989][ T7322] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 925.838024][ T7322] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 925.847404][ T7322] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 925.856478][ T7322] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 925.866326][T12962] XFS (loop2): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 925.925989][T12962] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 925.940789][T12962] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 926.310605][ T4413] kworker/u4:16: attempt to access beyond end of device [ 926.310605][ T4413] loop1: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 926.341768][ T4413] kworker/u4:16: attempt to access beyond end of device [ 926.341768][ T4413] loop1: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 926.362450][T12223] EXT4-fs (loop5): unmounting filesystem. [ 926.440581][ T4413] kworker/u4:16: attempt to access beyond end of device [ 926.440581][ T4413] loop1: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 926.502665][ T4413] kworker/u4:16: attempt to access beyond end of device [ 926.502665][ T4413] loop1: rw=1, sector=1960, nr_sectors = 1720 limit=256 [ 927.500560][ T4266] XFS (loop2): Unmounting Filesystem [ 930.042695][T13012] lo speed is unknown, defaulting to 1000 [ 930.048677][T13012] lo speed is unknown, defaulting to 1000 [ 930.055066][T13012] lo speed is unknown, defaulting to 1000 [ 930.070357][T13012] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 930.087922][T13012] lo speed is unknown, defaulting to 1000 [ 930.095276][T13012] lo speed is unknown, defaulting to 1000 [ 930.102148][T13012] lo speed is unknown, defaulting to 1000 [ 930.108908][T13012] lo speed is unknown, defaulting to 1000 [ 930.115875][T13012] lo speed is unknown, defaulting to 1000 [ 930.122724][T13012] lo speed is unknown, defaulting to 1000 [ 930.152258][T13014] loop4: detected capacity change from 0 to 256 [ 930.460144][T13018] loop0: detected capacity change from 0 to 512 [ 931.117874][T13020] loop1: detected capacity change from 0 to 40427 [ 931.257189][T13020] F2FS-fs (loop1): invalid crc value [ 931.293746][T13014] FAT-fs (loop4): Directory bread(block 64) failed [ 931.316513][T13018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 931.326584][T13020] F2FS-fs (loop1): Found nat_bits in checkpoint [ 931.368951][T13020] F2FS-fs (loop1): Start checkpoint disabled! [ 931.385918][T13018] System zones: 1-12 [ 931.400275][T13014] FAT-fs (loop4): Directory bread(block 65) failed [ 931.431211][T13014] FAT-fs (loop4): Directory bread(block 66) failed [ 931.506871][T13014] FAT-fs (loop4): Directory bread(block 67) failed [ 931.516847][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.531976][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.550316][T13014] FAT-fs (loop4): Directory bread(block 68) failed [ 931.556988][T13014] FAT-fs (loop4): Directory bread(block 69) failed [ 931.564905][T13018] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.2500: invalid block [ 931.565044][T13014] FAT-fs (loop4): Directory bread(block 70) failed [ 931.577390][T13020] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 931.618483][T13014] FAT-fs (loop4): Directory bread(block 71) failed [ 931.653282][T13018] EXT4-fs (loop0): Remounting filesystem read-only [ 931.677040][T13018] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2500: invalid indirect mapped block 8 (level 2) [ 931.720880][T13014] FAT-fs (loop4): Directory bread(block 72) failed [ 931.763382][T13018] EXT4-fs (loop0): Remounting filesystem read-only [ 932.141135][T13014] FAT-fs (loop4): Directory bread(block 73) failed [ 932.260359][T13018] EXT4-fs (loop0): 1 truncate cleaned up [ 932.266101][T13018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 934.017460][ T26] audit: type=1326 audit(2000000989.363:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.4.2504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb6698e929 code=0x0 [ 934.224621][ T4401] kworker/u4:15: attempt to access beyond end of device [ 934.224621][ T4401] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 934.254756][T13044] loop2: detected capacity change from 0 to 512 [ 934.310668][ T4261] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 934.430219][T13025] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 934.485463][T13025] EXT4-fs (loop0): Remounting filesystem read-only [ 934.675485][T13050] process 'syz.2.2508' launched './file2' with NULL argv: empty string added [ 935.793354][T13060] loop2: detected capacity change from 0 to 64 [ 935.978160][ T26] audit: type=1800 audit(2000000991.323:54): pid=13060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2510" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 936.111975][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 936.401081][T13062] loop5: detected capacity change from 0 to 40427 [ 937.129668][T13062] F2FS-fs (loop5): invalid crc value [ 937.142777][T13062] F2FS-fs (loop5): Found nat_bits in checkpoint [ 937.211537][T13062] F2FS-fs (loop5): Start checkpoint disabled! [ 937.327033][T13062] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 938.724590][T13089] loop1: detected capacity change from 0 to 64 [ 940.135761][ T4395] kworker/u4:14: attempt to access beyond end of device [ 940.135761][ T4395] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 940.633990][T13106] loop1: detected capacity change from 0 to 512 [ 940.831846][T13106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 940.945362][T13106] System zones: 1-12 [ 941.005897][T13106] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2525: invalid indirect mapped block 8 (level 2) [ 941.030923][T13106] EXT4-fs (loop1): Remounting filesystem read-only [ 941.037798][T13106] EXT4-fs (loop1): 1 truncate cleaned up [ 941.049796][T13106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 941.955804][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 942.733539][T13121] loop2: detected capacity change from 0 to 40427 [ 942.755219][T13121] F2FS-fs (loop2): invalid crc value [ 942.794940][T13121] F2FS-fs (loop2): Found nat_bits in checkpoint [ 942.845377][T13121] F2FS-fs (loop2): Start checkpoint disabled! [ 942.910197][T13121] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 943.594725][T13133] loop5: detected capacity change from 0 to 65536 [ 944.667379][T13133] XFS (loop5): Mounting V5 Filesystem [ 944.809530][T13133] XFS (loop5): Ending clean mount [ 945.232990][T13161] loop0: detected capacity change from 0 to 4096 [ 947.883598][T13166] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 947.958916][ T26] audit: type=1800 audit(2000001003.303:55): pid=13161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2539" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 948.028353][T12223] XFS (loop5): Unmounting Filesystem [ 949.156957][T13170] loop4: detected capacity change from 0 to 512 [ 949.308411][T12502] kworker/u4:1: attempt to access beyond end of device [ 949.308411][T12502] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 949.371226][T13170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 949.390291][T13170] System zones: 1-12 [ 949.403294][T13170] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2541: invalid indirect mapped block 8 (level 2) [ 949.523700][T13170] EXT4-fs (loop4): Remounting filesystem read-only [ 949.535923][T13170] EXT4-fs (loop4): 1 truncate cleaned up [ 949.610181][T13170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 950.349994][T13172] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 951.169983][T13172] EXT4-fs (loop4): Remounting filesystem read-only [ 951.201206][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 951.320813][T13182] loop1: detected capacity change from 0 to 256 [ 951.354455][T13184] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2546'. [ 952.578427][T13182] FAT-fs (loop1): Directory bread(block 64) failed [ 952.704833][T13182] FAT-fs (loop1): Directory bread(block 65) failed [ 952.845408][T13182] FAT-fs (loop1): Directory bread(block 66) failed [ 952.870543][T13182] FAT-fs (loop1): Directory bread(block 67) failed [ 952.877627][T13182] FAT-fs (loop1): Directory bread(block 68) failed [ 952.918823][T13182] FAT-fs (loop1): Directory bread(block 69) failed [ 952.948599][T13182] FAT-fs (loop1): Directory bread(block 70) failed [ 952.976637][T13182] FAT-fs (loop1): Directory bread(block 71) failed [ 953.030234][T13182] FAT-fs (loop1): Directory bread(block 72) failed [ 953.053551][T13182] FAT-fs (loop1): Directory bread(block 73) failed [ 956.203520][T11041] kworker/u4:0: attempt to access beyond end of device [ 956.203520][T11041] loop1: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 956.223921][T11041] kworker/u4:0: attempt to access beyond end of device [ 956.223921][T11041] loop1: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 956.241582][T11041] kworker/u4:0: attempt to access beyond end of device [ 956.241582][T11041] loop1: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 956.354194][T11041] kworker/u4:0: attempt to access beyond end of device [ 956.354194][T11041] loop1: rw=1, sector=1960, nr_sectors = 2704 limit=256 [ 959.440264][T13260] loop1: detected capacity change from 0 to 256 [ 959.477919][T13261] loop4: detected capacity change from 0 to 4096 [ 959.564387][T13265] loop5: detected capacity change from 0 to 512 [ 959.569808][T13260] FAT-fs (loop1): Directory bread(block 64) failed [ 959.577341][T13260] FAT-fs (loop1): Directory bread(block 65) failed [ 959.602296][T13268] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 959.672702][T13260] FAT-fs (loop1): Directory bread(block 66) failed [ 959.706381][T13260] FAT-fs (loop1): Directory bread(block 67) failed [ 959.745853][T13260] FAT-fs (loop1): Directory bread(block 68) failed [ 959.814745][T13260] FAT-fs (loop1): Directory bread(block 69) failed [ 959.885311][T13260] FAT-fs (loop1): Directory bread(block 70) failed [ 959.953141][T13260] FAT-fs (loop1): Directory bread(block 71) failed [ 959.986469][T13260] FAT-fs (loop1): Directory bread(block 72) failed [ 960.040132][T13260] FAT-fs (loop1): Directory bread(block 73) failed [ 964.168636][ T4593] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.233278][T13307] netlink: 'syz.5.2579': attribute type 10 has an invalid length. [ 964.369681][T13323] loop0: detected capacity change from 0 to 512 [ 964.456588][T13325] loop1: detected capacity change from 0 to 256 [ 964.494189][ T4261] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 965.147544][T13325] FAT-fs (loop1): Directory bread(block 64) failed [ 965.175743][T13325] FAT-fs (loop1): Directory bread(block 65) failed [ 965.226005][T13325] FAT-fs (loop1): Directory bread(block 66) failed [ 965.272525][T13333] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2587'. [ 965.301539][T13325] FAT-fs (loop1): Directory bread(block 67) failed [ 965.319603][T13325] FAT-fs (loop1): Directory bread(block 68) failed [ 965.369036][T13325] FAT-fs (loop1): Directory bread(block 69) failed [ 965.426970][ T4593] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.455107][T13325] FAT-fs (loop1): Directory bread(block 70) failed [ 965.510050][T13325] FAT-fs (loop1): Directory bread(block 71) failed [ 965.516751][T13325] FAT-fs (loop1): Directory bread(block 72) failed [ 965.579958][T13325] FAT-fs (loop1): Directory bread(block 73) failed [ 966.483066][ T4593] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.174988][ T4593] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.391035][T13352] netlink: 'syz.0.2591': attribute type 10 has an invalid length. [ 967.543205][T13352] device hsr_slave_0 left promiscuous mode [ 967.698991][T13352] device hsr_slave_1 left promiscuous mode [ 968.011621][T13309] kworker/u4:3: attempt to access beyond end of device [ 968.011621][T13309] loop1: rw=1, sector=1224, nr_sectors = 64 limit=256 [ 968.096620][T13309] kworker/u4:3: attempt to access beyond end of device [ 968.096620][T13309] loop1: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 968.190539][T13309] kworker/u4:3: attempt to access beyond end of device [ 968.190539][T13309] loop1: rw=1, sector=1832, nr_sectors = 96 limit=256 [ 968.255135][T13309] kworker/u4:3: attempt to access beyond end of device [ 968.255135][T13309] loop1: rw=1, sector=1960, nr_sectors = 1840 limit=256 [ 971.239549][T13411] loop4: detected capacity change from 0 to 256 [ 971.974115][T13411] FAT-fs (loop4): Directory bread(block 64) failed [ 972.049988][T13411] FAT-fs (loop4): Directory bread(block 65) failed [ 972.056716][T13411] FAT-fs (loop4): Directory bread(block 66) failed [ 972.091678][T13411] FAT-fs (loop4): Directory bread(block 67) failed [ 972.098388][T13411] FAT-fs (loop4): Directory bread(block 68) failed [ 972.106998][T13411] FAT-fs (loop4): Directory bread(block 69) failed [ 972.114271][T13411] FAT-fs (loop4): Directory bread(block 70) failed [ 972.124046][T13411] FAT-fs (loop4): Directory bread(block 71) failed [ 972.131326][T13411] FAT-fs (loop4): Directory bread(block 72) failed [ 972.137893][T13411] FAT-fs (loop4): Directory bread(block 73) failed [ 973.243618][T13432] loop0: detected capacity change from 0 to 64 [ 974.187126][ T4593] bond0: (slave wlan1): Releasing backup interface [ 974.255708][T13441] netlink: 'syz.5.2614': attribute type 29 has an invalid length. [ 974.305989][T13441] netlink: 'syz.5.2614': attribute type 29 has an invalid length. [ 974.324211][T13442] netlink: 'syz.5.2614': attribute type 29 has an invalid length. [ 975.066954][ T4593] device hsr_slave_0 left promiscuous mode [ 975.083262][ T4593] device hsr_slave_1 left promiscuous mode [ 975.091589][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.104821][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.115454][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.123188][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.131441][ T4593] device bridge_slave_1 left promiscuous mode [ 975.141076][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.158664][ T4593] device bridge_slave_0 left promiscuous mode [ 975.168210][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.217094][ T4593] device veth1_macvtap left promiscuous mode [ 975.224094][ T4593] device veth0_macvtap left promiscuous mode [ 975.230729][ T4593] device veth1_vlan left promiscuous mode [ 975.237425][ T4593] device veth0_vlan left promiscuous mode [ 976.076171][T13477] loop0: detected capacity change from 0 to 4096 [ 976.208312][T13477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 977.452325][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 979.926228][ T4593] team0 (unregistering): Port device team_slave_1 removed [ 980.160316][T13505] loop2: detected capacity change from 0 to 40427 [ 980.182267][T13505] F2FS-fs (loop2): invalid crc value [ 980.192249][T13505] F2FS-fs (loop2): Found nat_bits in checkpoint [ 980.234995][T13505] F2FS-fs (loop2): Start checkpoint disabled! [ 980.245819][T13505] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 980.246784][ T4593] team0 (unregistering): Port device team_slave_0 removed [ 980.775289][ T4593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.914733][ T56] kworker/u4:4: attempt to access beyond end of device [ 980.914733][ T56] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 980.981200][ T4593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.430921][ T9030] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 981.638284][ T9030] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 981.651784][ T9030] usb 3-1: config 0 interface 0 has no altsetting 0 [ 981.685480][ T9030] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 981.705897][ T9030] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 981.720877][ T9030] usb 3-1: Product: syz [ 981.725157][ T9030] usb 3-1: Manufacturer: syz [ 981.730382][ T9030] usb 3-1: SerialNumber: syz [ 981.737597][ T9030] usb 3-1: config 0 descriptor?? [ 981.768718][ T9030] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 981.924211][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.461072][ T4593] bond0 (unregistering): Released all slaves [ 984.566138][T13473] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2626'. [ 984.569431][ T4302] hsr0 speed is unknown, defaulting to 1000 [ 984.669558][ T4302] ================================================================== [ 984.677706][ T4302] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 984.684952][ T4302] Read of size 4 at addr ffff88805755a0e0 by task kworker/1:5/4302 [ 984.692885][ T4302] [ 984.695252][ T4302] CPU: 1 PID: 4302 Comm: kworker/1:5 Not tainted 6.1.141-syzkaller #0 [ 984.703448][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 984.713565][ T4302] Workqueue: infiniband ib_cache_event_task [ 984.719536][ T4302] Call Trace: [ 984.722855][ T4302] [ 984.725819][ T4302] dump_stack_lvl+0x168/0x22e [ 984.730535][ T4302] ? __lock_acquire+0x7c50/0x7c50 [ 984.735603][ T4302] ? show_regs_print_info+0x12/0x12 [ 984.740848][ T4302] ? load_image+0x3b0/0x3b0 [ 984.745404][ T4302] ? __virt_addr_valid+0x465/0x540 [ 984.750566][ T4302] ? siw_query_port+0x358/0x450 [ 984.755638][ T4302] print_report+0xa8/0x220 [ 984.760111][ T4302] kasan_report+0x10b/0x140 [ 984.764679][ T4302] ? siw_query_port+0x358/0x450 [ 984.769583][ T4302] siw_query_port+0x358/0x450 [ 984.774301][ T4302] ? ib_query_port+0x372/0x820 [ 984.779098][ T4302] ib_cache_update+0x1bb/0x980 [ 984.783884][ T4302] ? ib_cache_setup_one+0x5d0/0x5d0 [ 984.789097][ T4302] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 984.795100][ T4302] ? read_lock_is_recursive+0x10/0x10 [ 984.800489][ T4302] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 984.806400][ T4302] ? _raw_spin_unlock+0x40/0x40 [ 984.811279][ T4302] ib_cache_event_task+0xd4/0x1c0 [ 984.816330][ T4302] ? process_one_work+0x7a1/0x1160 [ 984.821470][ T4302] process_one_work+0x898/0x1160 [ 984.826483][ T4302] ? worker_detach_from_pool+0x240/0x240 [ 984.832147][ T4302] ? _raw_spin_lock_irq+0xab/0xe0 [ 984.837203][ T4302] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 984.842622][ T4302] ? kthread_data+0x4b/0xc0 [ 984.847149][ T4302] worker_thread+0xaa2/0x1250 [ 984.851851][ T4302] ? __kthread_parkme+0x162/0x1c0 [ 984.856948][ T4302] kthread+0x29d/0x330 [ 984.861063][ T4302] ? worker_clr_flags+0x1a0/0x1a0 [ 984.866113][ T4302] ? kthread_blkcg+0xd0/0xd0 [ 984.870832][ T4302] ret_from_fork+0x1f/0x30 [ 984.875276][ T4302] [ 984.878300][ T4302] [ 984.880633][ T4302] Allocated by task 4253: [ 984.884976][ T4302] kasan_set_track+0x4b/0x70 [ 984.889592][ T4302] __kasan_kmalloc+0x8e/0xa0 [ 984.894202][ T4302] __kmalloc_node+0xb0/0x240 [ 984.898801][ T4302] kvmalloc_node+0x6c/0x180 [ 984.903312][ T4302] alloc_netdev_mqs+0x84/0xf00 [ 984.908178][ T4302] rtnl_create_link+0x2fb/0xb80 [ 984.913042][ T4302] rtnl_newlink+0x13ca/0x1ff0 [ 984.917739][ T4302] rtnetlink_rcv_msg+0x79b/0xed0 [ 984.922697][ T4302] netlink_rcv_skb+0x1de/0x420 [ 984.927492][ T4302] netlink_unicast+0x74c/0x8c0 [ 984.932389][ T4302] netlink_sendmsg+0x89e/0xbc0 [ 984.937173][ T4302] __sys_sendto+0x44f/0x5c0 [ 984.941702][ T4302] __x64_sys_sendto+0xda/0xf0 [ 984.946396][ T4302] do_syscall_64+0x4c/0xa0 [ 984.950834][ T4302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 984.956755][ T4302] [ 984.959091][ T4302] Freed by task 4593: [ 984.963074][ T4302] kasan_set_track+0x4b/0x70 [ 984.967769][ T4302] kasan_save_free_info+0x2d/0x50 [ 984.972813][ T4302] ____kasan_slab_free+0x126/0x1e0 [ 984.977985][ T4302] slab_free_freelist_hook+0x131/0x1a0 [ 984.983458][ T4302] __kmem_cache_free+0xb6/0x1f0 [ 984.988323][ T4302] device_release+0x92/0x1c0 [ 984.992962][ T4302] kobject_put+0x21d/0x460 [ 984.997397][ T4302] netdev_run_todo+0xc8f/0xd80 [ 985.002178][ T4302] default_device_exit_batch+0x9c8/0xa50 [ 985.007841][ T4302] cleanup_net+0x77b/0xb80 [ 985.012286][ T4302] process_one_work+0x898/0x1160 [ 985.017240][ T4302] worker_thread+0xaa2/0x1250 [ 985.021931][ T4302] kthread+0x29d/0x330 [ 985.026020][ T4302] ret_from_fork+0x1f/0x30 [ 985.030448][ T4302] [ 985.032778][ T4302] The buggy address belongs to the object at ffff88805755a000 [ 985.032778][ T4302] which belongs to the cache kmalloc-cg-4k of size 4096 [ 985.047099][ T4302] The buggy address is located 224 bytes inside of [ 985.047099][ T4302] 4096-byte region [ffff88805755a000, ffff88805755b000) [ 985.060470][ T4302] [ 985.062979][ T4302] The buggy address belongs to the physical page: [ 985.069414][ T4302] page:ffffea00015d5600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57558 [ 985.079592][ T4302] head:ffffea00015d5600 order:3 compound_mapcount:0 compound_pincount:0 [ 985.087925][ T4302] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 985.096022][ T4302] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801744c280 [ 985.104634][ T4302] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 985.113245][ T4302] page dumped because: kasan: bad access detected [ 985.119677][ T4302] page_owner tracks the page as allocated [ 985.125409][ T4302] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4254, tgid 4254 (syz-executor), ts 75413696854, free_ts 21759166904 [ 985.148520][ T4302] post_alloc_hook+0x173/0x1a0 [ 985.153316][ T4302] get_page_from_freelist+0x1a26/0x1ac0 [ 985.158959][ T4302] __alloc_pages+0x1df/0x4e0 [ 985.163646][ T4302] alloc_slab_page+0x5d/0x160 [ 985.168346][ T4302] new_slab+0x87/0x2c0 [ 985.172426][ T4302] ___slab_alloc+0xbc6/0x1220 [ 985.177114][ T4302] __kmem_cache_alloc_node+0x1a0/0x260 [ 985.182585][ T4302] __kmalloc_node+0xa0/0x240 [ 985.187181][ T4302] kvmalloc_node+0x6c/0x180 [ 985.191696][ T4302] alloc_netdev_mqs+0x84/0xf00 [ 985.196475][ T4302] rtnl_create_link+0x2fb/0xb80 [ 985.201338][ T4302] veth_newlink+0x28e/0xbe0 [ 985.205856][ T4302] rtnl_newlink+0x14c4/0x1ff0 [ 985.210550][ T4302] rtnetlink_rcv_msg+0x79b/0xed0 [ 985.215501][ T4302] netlink_rcv_skb+0x1de/0x420 [ 985.220283][ T4302] netlink_unicast+0x74c/0x8c0 [ 985.225059][ T4302] page last free stack trace: [ 985.229824][ T4302] free_unref_page_prepare+0x8b4/0x9a0 [ 985.235334][ T4302] free_unref_page+0x2e/0x3f0 [ 985.240059][ T4302] free_contig_range+0x9d/0x150 [ 985.244919][ T4302] destroy_args+0xef/0x8bf [ 985.249352][ T4302] debug_vm_pgtable+0x32a/0x37e [ 985.254217][ T4302] do_one_initcall+0x214/0x7a0 [ 985.258994][ T4302] do_initcall_level+0x137/0x1e4 [ 985.263946][ T4302] do_initcalls+0x4b/0x8a [ 985.268280][ T4302] kernel_init_freeable+0x3fa/0x5ac [ 985.273490][ T4302] kernel_init+0x19/0x1b0 [ 985.277829][ T4302] ret_from_fork+0x1f/0x30 [ 985.282275][ T4302] [ 985.284625][ T4302] Memory state around the buggy address: [ 985.290271][ T4302] ffff888057559f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 985.298344][ T4302] ffff88805755a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.306411][ T4302] >ffff88805755a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.314479][ T4302] ^ [ 985.321675][ T4302] ffff88805755a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.329744][ T4302] ffff88805755a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.337813][ T4302] ================================================================== [ 985.541483][ T4302] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 985.548747][ T4302] CPU: 1 PID: 4302 Comm: kworker/1:5 Not tainted 6.1.141-syzkaller #0 [ 985.556937][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 985.567031][ T4302] Workqueue: infiniband ib_cache_event_task [ 985.572981][ T4302] Call Trace: [ 985.576290][ T4302] [ 985.579243][ T4302] dump_stack_lvl+0x168/0x22e [ 985.583956][ T4302] ? memcpy+0x3c/0x60 [ 985.587952][ T4302] ? show_regs_print_info+0x12/0x12 [ 985.593163][ T4302] ? load_image+0x3b0/0x3b0 [ 985.597690][ T4302] panic+0x2c9/0x710 [ 985.601635][ T4302] ? bpf_jit_dump+0xd0/0xd0 [ 985.606168][ T4302] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 985.612179][ T4302] ? _raw_spin_unlock+0x40/0x40 [ 985.617052][ T4302] ? print_memory_metadata+0x314/0x400 [ 985.622525][ T4302] check_panic_on_warn+0x80/0xa0 [ 985.627474][ T4302] ? siw_query_port+0x358/0x450 [ 985.632330][ T4302] end_report+0x66/0x110 [ 985.636587][ T4302] kasan_report+0x118/0x140 [ 985.641112][ T4302] ? siw_query_port+0x358/0x450 [ 985.645972][ T4302] siw_query_port+0x358/0x450 [ 985.650662][ T4302] ? ib_query_port+0x372/0x820 [ 985.655445][ T4302] ib_cache_update+0x1bb/0x980 [ 985.660225][ T4302] ? ib_cache_setup_one+0x5d0/0x5d0 [ 985.665440][ T4302] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 985.671445][ T4302] ? read_lock_is_recursive+0x10/0x10 [ 985.676917][ T4302] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 985.682826][ T4302] ? _raw_spin_unlock+0x40/0x40 [ 985.687704][ T4302] ib_cache_event_task+0xd4/0x1c0 [ 985.692755][ T4302] ? process_one_work+0x7a1/0x1160 [ 985.697894][ T4302] process_one_work+0x898/0x1160 [ 985.702958][ T4302] ? worker_detach_from_pool+0x240/0x240 [ 985.708625][ T4302] ? _raw_spin_lock_irq+0xab/0xe0 [ 985.713691][ T4302] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 985.719091][ T4302] ? kthread_data+0x4b/0xc0 [ 985.723705][ T4302] worker_thread+0xaa2/0x1250 [ 985.728407][ T4302] ? __kthread_parkme+0x162/0x1c0 [ 985.733466][ T4302] kthread+0x29d/0x330 [ 985.737550][ T4302] ? worker_clr_flags+0x1a0/0x1a0 [ 985.742583][ T4302] ? kthread_blkcg+0xd0/0xd0 [ 985.747194][ T4302] ret_from_fork+0x1f/0x30 [ 985.751636][ T4302] [ 985.754993][ T4302] Kernel Offset: disabled [ 985.759319][ T4302] Rebooting in 86400 seconds..