last executing test programs: 2m48.768705482s ago: executing program 3 (id=1618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2m48.203974427s ago: executing program 3 (id=1619): epoll_create1(0x0) r0 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x108, &(0x7f00000003c0)=0xffb, 0x0, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4004, @fd=r3, 0x10, 0x0, 0x0, 0x18, 0x1, {0x2, r6}}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000001b00)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r9 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e88234ac26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4e, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) 2m47.184726227s ago: executing program 3 (id=1623): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$caif_stream(0x25, 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = memfd_create(&(0x7f0000000600)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x02\x8f\xf5\n\xd1)\xc8\xa5x\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8sNe\xd3\xf4\xceM(\xa03\xe1\'\xc2\x9d3\xeb\x1d\x84\xb9\x15S\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00\x00\x00\x00\x00\x00\x8f\x05\x98\x93\xd0\xe6\xacQ&\xff\x01\x00\x00~K-\xa8`d^`&4\x99=\x10\x00$P\xfe\x99\xc1\x17\x17\a\xb4\x1d\xa5P\xfb\x04\xf7\xdc~\x17\x1e\xe6\f\x16\x10_\xfdM\x13\x01\xb3\xd2^\xd3\xe7ndMI)(\x98\xaa<&\xa2b\xff8o\xac\xb3\xb5\f\x82\x1b\x19\xdb\x1c\xfb\xee@\xbf\xdcSkrXj\x81\xf0\xc5\an<0\xdb\x93\x9e\xa8\xe2\xbd\x1c\xbd\xbb\xd6\xaf\xd7t\x90\xb2\xbevq/\v\xff8,4_\x10\x89\xef\xd0\x16\xd8Va\xc9\x99\x9a\x88\xf0\x93\xb8A', 0x1) fcntl$addseals(r6, 0x409, 0x12) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000005280)='macvtap0\x00', 0x10) connect$caif(r5, &(0x7f0000005b00)=@rfm={0x25, 0x1, "045b49844c0f565fc9e51537fe276ead"}, 0x18) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000001100)=""/33, 0x21, 0x160, &(0x7f0000000280)={0x2, 0x0, @initdev}, 0x10) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f00000000c0)=0x2, 0x4) r10 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r10, &(0x7f00000000c0)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r4, 0x1, 0x7fffffff, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x20000054) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x200000, 0xd8, 0x10}, &(0x7f0000000080)='./file1\x00', 0x18, 0x0, 0x12345}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 2m45.963983996s ago: executing program 3 (id=1625): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x410c04, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@noload}]}, 0x1, 0x779, &(0x7f0000001900)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$tun(r1, 0x0, 0x110d) r3 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) 2m44.821786408s ago: executing program 3 (id=1627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2m42.794803976s ago: executing program 3 (id=1631): epoll_create1(0x0) r0 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x108, &(0x7f00000003c0)=0xffb, 0x0, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4004, @fd=r3, 0x10, 0x0, 0x0, 0x18, 0x1, {0x2, r6}}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000001b00)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r9 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e88234ac26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4e, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) 2m42.005140093s ago: executing program 32 (id=1631): epoll_create1(0x0) r0 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x108, &(0x7f00000003c0)=0xffb, 0x0, 0x4) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x8, 0x4004, @fd=r3, 0x10, 0x0, 0x0, 0x18, 0x1, {0x2, r6}}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f0000001b00)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r9 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e88234ac26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4e, 0x0, 0x0, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) 11.160604919s ago: executing program 0 (id=1951): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100039040000000002000000000003e4", @ANYRES32=r1, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0005"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.100265265s ago: executing program 2 (id=1952): mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 10.898061215s ago: executing program 0 (id=1953): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="611000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0x20, 0xfffffffffffffffe}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 10.868425658s ago: executing program 2 (id=1954): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="0f7e998cc1ac58617ce1fbb6376c77c41a1a96b4da7f665ab0ba10e31828f922d42984ff743aac0de669573cb8490d9622b55de7abb7777c2c5473a9b854b8f54eb00eaf004cb9065dc006f418a81d78f32c142c339a6153e387b37cc066c279ec19836cafe0082c2c47d464ed86915b009ccddd71b99513c218ea2cdf784e4dd085c94749052a82fa29778594c24d47b723ecfba4c79e7a22f04cade3acdf", @ANYRES32, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16], 0xfd, 0x1ee, &(0x7f00000003c0)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 8.772865793s ago: executing program 0 (id=1956): syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x9) 8.523997337s ago: executing program 2 (id=1957): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 8.523765127s ago: executing program 0 (id=1958): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0xfc5e, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 7.592534868s ago: executing program 2 (id=1961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) 7.386877918s ago: executing program 1 (id=1963): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 4.127320727s ago: executing program 4 (id=1967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.028837176s ago: executing program 4 (id=1968): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000680)='./file0\x00', 0x600009, &(0x7f0000000040)={[{}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@file_umask={'file_umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "65b8e0fe"}}]}, 0x6, 0x37e, &(0x7f0000000280)="$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") mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) 4.028179106s ago: executing program 0 (id=1969): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5656, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, 0x0, 0x0, 0x0) munlockall() openat$ppp(0xffffffffffffff9c, 0x0, 0x588d00, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(0x0, 0x0) r2 = dup(0xffffffffffffffff) close(r2) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) close(0x3) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) close_range(0xffffffffffffffff, r0, 0x0) 3.900311659s ago: executing program 1 (id=1970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000280)={0xfffffff2, 0x1, &(0x7f0000000180)=[0x401], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x14000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r6 = fanotify_init(0xf00, 0x2) fanotify_mark(r6, 0x105, 0x8971, r5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYBLOB="000000788f27d6d286d67677469425ac00280000009c00128009000000fa000280080009"], 0x3c}, 0x1, 0x0, 0x0, 0x4040093}, 0x40) readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/88, 0xfffffdf1}], 0x1) prlimit64(r0, 0x9, 0x0, 0x0) 3.856445223s ago: executing program 4 (id=1971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100039040000000002000000000003e4", @ANYRES32=r2, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0005"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.081702819s ago: executing program 4 (id=1972): open(0x0, 0x80242, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r0 = socket(0xa, 0x8, 0xff) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 2.14798019s ago: executing program 2 (id=1973): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,noquota,nointegrity,errors=continue,iocharset=cp863,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,uid=', @ANYRESHEX=0xee01, @ANYBLOB="0000bbaa213ca1750a73593e8b6b51ec762e74cada46036fb2cd30b777e4a35afadbbd049c95b9880c70e694709bce9011b4c0460c95d9e0cc473d9f4f1841cdaff7b2a25ff3baddc86b3ab69e93b6beea217b6ff816e2f122cb63010bce65149c059d20b376f3696de010eb1b9ca12fc97b85d273e059e8c625da1575d7ac7d39571c4447ebadc4da39b8bcdf520b21994c5b02d448852f9765d56ffcedca0ad05a7fd150d8028a6997510bf1bf9871f25c4ab5966143ab5fbf218f99d125b00c5ebf68a5ad9dd56d7a"], 0x24, 0x61b6, &(0x7f00000075c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x44142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2c842, 0x67) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x11) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x62000, 0x0) sendfile(r1, r3, 0x0, 0xfffe82) sendfile(r0, r0, 0x0, 0x800000009) 1.794034365s ago: executing program 1 (id=1974): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb0100180000000000411de0f7bf00000c0000000c00000002001b00000000000000001200"], &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xfffa, 0x4}, {0x8, 0x10, 0x41}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r6, r7+10000000}) 507.59929ms ago: executing program 1 (id=1976): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="611000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) 176.741563ms ago: executing program 1 (id=1977): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x32000c1, &(0x7f0000000080)={[{@case_lower}, {@err_cont}, {@err_ro}, {@check_none}]}, 0x11, 0x9e15, &(0x7f0000013e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 0s ago: executing program 4 (id=1978): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) kernel console output (not intermixed with test programs): [ 708.292526][T11201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.310769][T11201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 709.237895][T11201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.316887][T11201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 709.324242][T11208] loop2: detected capacity change from 0 to 2048 [ 709.341279][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 709.388180][T11208] UDF-fs: bad mount option "gid=00000000000000000000=" or missing value [ 709.572510][T11211] binder: 11207:11211 ioctl 4018620d 0 returned -22 [ 709.696591][T11201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.736954][T11201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 710.197157][T11201] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 710.206842][T11201] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 710.802313][T11201] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 711.085591][T11201] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 711.267312][T11201] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 711.276804][T11201] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 711.380944][T11201] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 711.436774][T11201] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 713.140674][T11226] loop1: detected capacity change from 0 to 32768 [ 713.667063][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 713.679759][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 713.705798][T11247] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 713.714393][T11247] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1198'. [ 713.963254][ T786] libceph: connect (1)[c::]:6789 error -101 [ 713.973290][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 714.259270][T11244] ceph: No mds server is up or the cluster is laggy [ 714.369565][T11250] loop2: detected capacity change from 0 to 2048 [ 714.549199][T11250] UDF-fs: bad mount option "gid=00000000000000000000=" or missing value [ 715.035920][T11257] binder: 11249:11257 ioctl 4018620d 0 returned -22 [ 716.625264][T11272] trusted_key: encrypted_key: insufficient parameters specified [ 716.870184][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 717.111753][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 717.141005][ T27] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 717.150912][ T27] usb 1-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 717.185885][ T27] usb 1-1: config 0 has no interface number 0 [ 717.210476][ T27] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 717.240803][ T27] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 717.263929][ T27] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 717.279519][ T27] usb 1-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.297067][ T27] usb 1-1: config 0 interface 167 has no altsetting 0 [ 717.470403][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 717.479744][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.489922][ T27] usb 1-1: Product: syz [ 717.500221][ T27] usb 1-1: Manufacturer: syz [ 717.511144][ T27] usb 1-1: SerialNumber: syz [ 717.564587][T11283] netlink: 'syz.3.1207': attribute type 1 has an invalid length. [ 717.572676][T11283] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1207'. [ 717.675450][ T27] usb 1-1: config 0 descriptor?? [ 717.713646][T11270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 717.765623][T10438] libceph: connect (1)[c::]:6789 error -101 [ 717.774621][T10438] libceph: mon0 (1)[c::]:6789 connect error [ 718.106365][T11281] ceph: No mds server is up or the cluster is laggy [ 718.121662][T10438] libceph: connect (1)[c::]:6789 error -101 [ 718.163400][T10438] libceph: mon0 (1)[c::]:6789 connect error [ 718.781929][T11299] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 718.790238][T11299] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1209'. [ 719.032126][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 719.220335][ T27] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 719.220387][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 719.233892][ T27] usbtest: probe of 1-1:0.167 failed with error -22 [ 719.249206][T11295] ceph: No mds server is up or the cluster is laggy [ 719.359844][ T27] usb 1-1: USB disconnect, device number 5 [ 721.137796][T11320] trusted_key: encrypted_key: insufficient parameters specified [ 722.466235][T11329] 9pnet_fd: Insufficient options for proto=fd [ 722.801600][T11326] comedi comedi0: Minor 3 specified more than once! [ 723.565888][T11347] netlink: 'syz.3.1221': attribute type 1 has an invalid length. [ 723.574165][T11347] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1221'. [ 723.730911][ T968] libceph: connect (1)[c::]:6789 error -101 [ 723.740157][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 723.899009][T11324] loop2: detected capacity change from 0 to 32768 [ 723.929176][T11324] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 723.956615][T11345] ceph: No mds server is up or the cluster is laggy [ 723.999864][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 724.006104][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 726.012790][ T8296] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 727.083128][T11378] loop1: detected capacity change from 0 to 128 [ 727.106999][T11378] qnx4: no qnx4 filesystem (no root dir). [ 728.676919][T11390] loop2: detected capacity change from 0 to 4096 [ 728.724504][T11373] loop0: detected capacity change from 0 to 32768 [ 728.816719][T11373] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 730.131524][T11373] syz.0.1229 (11373) used greatest stack depth: 17712 bytes left [ 730.871280][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 731.262235][T11414] 9pnet_fd: Insufficient options for proto=fd [ 732.089221][T11420] omfs: Invalid superblock (0) [ 733.717680][T11432] loop1: detected capacity change from 0 to 2048 [ 733.725950][T11432] UDF-fs: bad mount option "gid=00000000000000000000=" or missing value [ 734.118302][T11432] binder: 11431:11432 ioctl 4018620d 0 returned -22 [ 735.599163][T11447] loop3: detected capacity change from 0 to 128 [ 735.611815][T11447] qnx6: invalid mount options. [ 736.391031][T11453] 9pnet_fd: Insufficient options for proto=fd [ 738.696471][T11456] loop1: detected capacity change from 0 to 32768 [ 739.053809][T11456] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 740.253601][T11456] XFS (loop1): Ending clean mount [ 740.292005][T11456] XFS (loop1): Quotacheck needed: Please wait. [ 740.455305][T11456] XFS (loop1): Quotacheck: Done. [ 740.615871][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 742.086125][T11483] loop2: detected capacity change from 0 to 32768 [ 742.124142][T11483] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 742.793763][ T8296] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 744.446968][T11509] loop2: detected capacity change from 0 to 32768 [ 744.505216][T11509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1262 (11509) [ 744.577276][T11509] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 744.587851][T11509] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 744.597067][T11509] BTRFS info (device loop2): using free space tree [ 744.690514][T11509] BTRFS info (device loop2): enabling ssd optimizations [ 744.698196][T11509] BTRFS info (device loop2): auto enabling async discard [ 745.000291][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 745.009989][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 745.038563][T11530] loop0: detected capacity change from 0 to 512 [ 745.885483][T11530] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1264: casefold flag without casefold feature [ 745.994115][T11530] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1264: couldn't read orphan inode 15 (err -117) [ 746.073073][T11536] loop1: detected capacity change from 0 to 2048 [ 746.082442][T11530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.160162][T11536] UDF-fs: bad mount option "gid=00000000000000000000=" or missing value [ 746.904415][ T5792] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 747.017526][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 747.413127][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.420365][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.498930][T11536] binder: 11535:11536 ioctl 4018620d 0 returned -22 [ 747.558065][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.024231][T11558] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 750.032580][T11558] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1269'. [ 750.574350][T11555] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 750.893047][T11557] loop1: detected capacity change from 0 to 4096 [ 752.839200][T11574] lo speed is unknown, defaulting to 1000 [ 754.900382][T11591] loop2: detected capacity change from 0 to 128 [ 754.913742][T11591] qnx6: invalid mount options. [ 755.821897][ T8296] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 756.579257][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 756.590663][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 756.605453][T11597] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 756.613667][T11597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1280'. [ 756.825506][ T6131] libceph: connect (1)[c::]:6789 error -101 [ 756.840809][ T6131] libceph: mon0 (1)[c::]:6789 connect error [ 756.857718][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 756.867139][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 756.877052][T11602] netlink: 'syz.3.1281': attribute type 1 has an invalid length. [ 756.887237][T11602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1281'. [ 756.927795][T11582] loop1: detected capacity change from 0 to 32768 [ 756.938856][T11582] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 757.102517][ T27] libceph: connect (1)[c::]:6789 error -101 [ 757.107001][ T8296] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 757.116377][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 757.231774][T11596] ceph: No mds server is up or the cluster is laggy [ 757.477250][T11601] ceph: No mds server is up or the cluster is laggy [ 757.641547][T11608] loop1: detected capacity change from 0 to 4096 [ 759.185010][T11624] loop3: detected capacity change from 0 to 128 [ 759.197368][T11624] qnx6: invalid mount options. [ 761.301768][ T8] libceph: connect (1)[c::]:6789 error -101 [ 761.318388][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 761.347493][T11643] loop3: detected capacity change from 0 to 4096 [ 761.356583][T11646] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 761.364710][T11646] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1296'. [ 761.390255][T11643] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 761.556970][T11643] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 761.579803][ T9] libceph: connect (1)[c::]:6789 error -101 [ 761.590079][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 761.766820][T11649] trusted_key: encrypted_key: insufficient parameters specified [ 761.960098][T11645] ceph: No mds server is up or the cluster is laggy [ 762.214704][ T8] kernel write not supported for file /snd/seq (pid: 8 comm: kworker/0:0) [ 762.437148][T11653] loop3: detected capacity change from 0 to 256 [ 762.492432][T11653] exfat: Unknown parameter 'zero_size_dir' [ 763.222083][T11637] loop0: detected capacity change from 0 to 32768 [ 763.461825][T11637] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 763.850014][ T8296] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 764.408253][ T27] libceph: connect (1)[c::]:6789 error -101 [ 764.420524][T11674] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 764.428866][T11674] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1305'. [ 764.440153][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 764.697895][ T27] libceph: connect (1)[c::]:6789 error -101 [ 764.704499][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 764.844393][T11665] loop1: detected capacity change from 0 to 32768 [ 764.912663][T11665] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 764.928444][T11671] ceph: No mds server is up or the cluster is laggy [ 765.734131][T11667] loop3: detected capacity change from 0 to 32768 [ 765.764218][ T28] audit: type=1326 audit(1760927506.748:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 765.843836][ T28] audit: type=1326 audit(1760927506.789:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 765.931138][T11683] hub 8-0:1.0: USB hub found [ 765.938256][T11683] hub 8-0:1.0: 1 port detected [ 767.097982][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 767.110091][ T28] audit: type=1326 audit(1760927506.789:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 767.276436][ T28] audit: type=1326 audit(1760927506.789:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 767.451943][ T28] audit: type=1326 audit(1760927506.789:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 767.596214][ T28] audit: type=1326 audit(1760927506.789:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 767.722894][ T28] audit: type=1326 audit(1760927506.789:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 767.831221][T11685] loop1: detected capacity change from 0 to 4096 [ 767.886038][ T28] audit: type=1326 audit(1760927506.789:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 767.949587][ T28] audit: type=1326 audit(1760927506.789:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 767.966545][T11685] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 767.985842][ T28] audit: type=1326 audit(1760927506.789:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.0.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe34fb8efc9 code=0x7ffc0000 [ 768.008566][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.124102][T11685] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 768.320401][T11689] trusted_key: encrypted_key: insufficient parameters specified [ 768.667201][T11627] kernel write not supported for file /snd/seq (pid: 11627 comm: kworker/0:4) [ 769.553394][T11701] loop3: detected capacity change from 0 to 64 [ 772.575798][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1) [ 772.625082][T11707] loop1: detected capacity change from 0 to 32768 [ 772.711936][T11707] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 772.755030][T11724] loop3: detected capacity change from 0 to 4096 [ 772.781521][T11724] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 773.669404][T11724] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 773.823378][T11736] trusted_key: encrypted_key: insufficient parameters specified [ 773.968101][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 774.122391][T11741] netlink: 'syz.2.1322': attribute type 1 has an invalid length. [ 774.130563][T11741] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1322'. [ 774.416988][T11627] libceph: connect (1)[c::]:6789 error -101 [ 774.441603][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 774.765013][T11627] libceph: connect (1)[c::]:6789 error -101 [ 774.785160][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 774.831088][T11740] ceph: No mds server is up or the cluster is laggy [ 774.942583][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 775.182455][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 775.918116][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.962199][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.028620][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 776.062732][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.127282][ T23] usb 4-1: config 0 descriptor?? [ 776.128316][T11761] 9pnet_fd: Insufficient options for proto=fd [ 776.145235][ T23] hub 4-1:0.0: USB hub found [ 776.414282][ T23] hub 4-1:0.0: 1 port detected [ 776.675709][T11769] loop2: detected capacity change from 0 to 128 [ 776.814871][T11769] EXT4-fs (loop2): Test dummy encryption mode enabled [ 776.876223][ T23] usb 4-1: USB disconnect, device number 9 [ 777.055098][T11769] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 777.081650][T11769] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 777.446942][T11769] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 777.618425][T11788] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 777.626511][T11788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1333'. [ 777.706604][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 777.768563][T11627] libceph: connect (1)[c::]:6789 error -101 [ 777.776539][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 778.071740][ T9] libceph: connect (1)[c::]:6789 error -101 [ 778.095482][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 778.317109][T11785] ceph: No mds server is up or the cluster is laggy [ 778.555930][T11790] loop3: detected capacity change from 0 to 32768 [ 779.524267][T11804] 9pnet_fd: Insufficient options for proto=fd [ 779.701489][T11807] loop0: detected capacity change from 0 to 1024 [ 779.745626][T11807] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 779.791209][T11807] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 779.853642][T11807] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 779.895526][T11807] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.1341: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 779.959338][T11807] EXT4-fs (loop0): no journal found [ 779.979973][T11807] EXT4-fs (loop0): can't get journal size [ 780.018907][T11807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 781.580656][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.006035][T10438] libceph: connect (1)[c::]:6789 error -101 [ 783.020114][T10438] libceph: mon0 (1)[c::]:6789 connect error [ 783.096013][T11824] loop0: detected capacity change from 0 to 32768 [ 783.318621][T10438] libceph: connect (1)[c::]:6789 error -101 [ 783.325053][T10438] libceph: mon0 (1)[c::]:6789 connect error [ 783.708287][T11824] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 784.040924][T11849] 9pnet_fd: Insufficient options for proto=fd [ 784.114480][T11824] XFS (loop0): Ending clean mount [ 784.234065][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 784.234085][ T28] audit: type=1800 audit(1760927525.228:62): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1343" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 784.278950][T11854] loop1: detected capacity change from 0 to 128 [ 784.325083][T11831] ceph: No mds server is up or the cluster is laggy [ 784.333664][T11854] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 784.474924][T11854] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.577188][ T6131] libceph: connect (1)[c::]:6789 error -101 [ 784.621003][ T6131] libceph: mon0 (1)[c::]:6789 connect error [ 785.881142][ T5789] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 789.341388][T11883] loop0: detected capacity change from 0 to 32768 [ 792.513357][T11906] Zero length message leads to an empty skb [ 792.615876][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 792.872629][T11913] syzkaller0: entered promiscuous mode [ 792.914917][T11913] syzkaller0: entered allmulticast mode [ 792.977500][T11910] loop0: detected capacity change from 0 to 4096 [ 792.998415][T11910] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 793.198358][T11910] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 794.001445][T11910] trusted_key: encrypted_key: insufficient parameters specified [ 797.272337][T11946] loop3: detected capacity change from 0 to 128 [ 797.319462][T11946] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 797.442856][T11946] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.337137][T11957] loop1: detected capacity change from 0 to 4096 [ 798.737385][T11957] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 799.299050][T11957] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 799.388951][T11966] trusted_key: encrypted_key: insufficient parameters specified [ 800.049073][T11967] loop2: detected capacity change from 0 to 4096 [ 800.315964][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 801.082237][T11967] EXT4-fs (loop2): Test dummy encryption mode enabled [ 801.187669][T11967] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 801.219393][T11967] System zones: 0-5 [ 801.422748][T11967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.869110][T11967] Quota error (device loop2): do_check_range: Getting block 2926 out of range 1-5 [ 801.895193][T11967] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 801.906171][T11967] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.1381: Failed to acquire dquot type 1 [ 802.864196][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.455975][T11992] loop0: detected capacity change from 0 to 32768 [ 803.480708][ T27] libceph: connect (1)[c::]:6789 error -101 [ 803.487137][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 803.518590][T12001] netlink: 'syz.1.1390': attribute type 1 has an invalid length. [ 803.533756][T12001] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1390'. [ 803.634042][T12007] loop3: detected capacity change from 0 to 128 [ 803.691030][T12007] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 803.714371][T12007] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.735874][T12000] ceph: No mds server is up or the cluster is laggy [ 803.798561][ T27] libceph: connect (1)[c::]:6789 error -101 [ 803.809969][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 805.610392][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 807.011077][T12032] loop3: detected capacity change from 0 to 64 [ 808.090200][T12042] loop1: detected capacity change from 0 to 4096 [ 808.580837][T12049] loop2: detected capacity change from 0 to 128 [ 808.631376][T12049] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 808.802545][T12049] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.830798][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.841944][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.362476][T12064] 9pnet_fd: Insufficient options for proto=fd [ 810.842861][T12071] 9pnet_fd: Insufficient options for proto=fd [ 811.687707][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 812.011349][T12084] loop1: detected capacity change from 0 to 1024 [ 812.948349][T12084] hfsplus: xattr searching failed [ 813.093811][T12094] hfsplus: xattr searching failed [ 813.195979][T12100] hfsplus: xattr searching failed [ 813.264928][ T28] audit: type=1800 audit(1760928578.261:63): pid=12100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1411" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 813.298985][T12094] hfsplus: bad catalog file entry [ 813.515460][T12102] loop3: detected capacity change from 0 to 4096 [ 813.546521][ T11] hfsplus: b-tree write err: -5, ino 3 [ 813.574242][ T11] hfsplus: bad catalog file entry [ 814.825882][T12099] loop2: detected capacity change from 0 to 32768 [ 814.860489][T12099] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1414 (12099) [ 814.916511][T12099] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 815.022418][T12099] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 815.078970][T12099] BTRFS error (device loop2): unrecognized mount option 'fragment=data' [ 815.495457][T12125] 9pnet_fd: Insufficient options for proto=fd [ 815.565829][T12099] BTRFS error (device loop2): open_ctree failed: -22 [ 815.931092][ T8325] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by udevd (8325) [ 816.396177][T12140] 9pnet_fd: Insufficient options for proto=fd [ 818.392994][T10438] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 818.611177][T10438] usb 4-1: Using ep0 maxpacket: 32 [ 818.645591][T10438] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 818.743559][T10438] usb 4-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 818.772438][T10438] usb 4-1: config 0 has no interface number 0 [ 818.787928][T10438] usb 4-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 818.800543][T10438] usb 4-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 818.812825][T10438] usb 4-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 818.825494][T10438] usb 4-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.839910][T10438] usb 4-1: config 0 interface 167 has no altsetting 0 [ 818.855724][T10438] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 818.875751][T10438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.884736][T10438] usb 4-1: Product: syz [ 818.889318][T10438] usb 4-1: Manufacturer: syz [ 818.895798][T10438] usb 4-1: SerialNumber: syz [ 818.958177][T10438] usb 4-1: config 0 descriptor?? [ 818.971907][T12151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 819.329133][T12162] loop0: detected capacity change from 0 to 64 [ 820.312172][T10438] usbtest 4-1:0.167: couldn't get endpoints, -22 [ 820.318852][T10438] usbtest: probe of 4-1:0.167 failed with error -22 [ 820.329451][T10438] usb 4-1: USB disconnect, device number 10 [ 821.569948][T12170] 9pnet_fd: Insufficient options for proto=fd [ 822.380140][T12182] loop2: detected capacity change from 0 to 32768 [ 822.405616][T12183] loop3: detected capacity change from 0 to 32768 [ 822.407808][T12182] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 822.497487][T12183] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 822.531230][T12183] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 822.563352][T12183] BTRFS info (device loop3): using free space tree [ 822.644522][ T8296] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (8296) [ 822.678691][T12183] BTRFS info (device loop3): enabling ssd optimizations [ 822.685746][T12183] BTRFS info (device loop3): auto enabling async discard [ 822.756627][ T28] audit: type=1800 audit(1760928843.764:64): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1431" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 822.778280][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.425709][ T5785] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 824.250767][T12213] loop3: detected capacity change from 0 to 128 [ 824.476599][T12213] qnx6: invalid mount options. [ 824.797498][ T786] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 825.027249][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 825.044909][ T786] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 825.071235][ T786] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 825.117244][ T786] usb 3-1: config 0 has no interface number 0 [ 825.143855][ T786] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 825.184957][ T786] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 825.223232][ T786] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 825.276122][ T786] usb 3-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.321659][ T786] usb 3-1: config 0 interface 167 has no altsetting 0 [ 825.362452][ T786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 825.394296][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.626991][ T786] usb 3-1: Product: syz [ 825.631346][ T786] usb 3-1: Manufacturer: syz [ 825.636261][ T786] usb 3-1: SerialNumber: syz [ 825.659685][ T786] usb 3-1: config 0 descriptor?? [ 825.665701][T12216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 827.161234][ T786] usbtest 3-1:0.167: couldn't get endpoints, -22 [ 827.210680][ T786] usbtest: probe of 3-1:0.167 failed with error -22 [ 827.355172][T12235] 9pnet_fd: Insufficient options for proto=fd [ 827.405751][ T786] usb 3-1: USB disconnect, device number 14 [ 828.253156][T12247] 9pnet_fd: Insufficient options for proto=fd [ 828.466423][T12231] loop3: detected capacity change from 0 to 32768 [ 828.680566][T12238] loop2: detected capacity change from 0 to 32768 [ 828.708735][T12238] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1442 (12238) [ 828.785144][T12238] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 828.830041][T12238] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 828.885359][T12238] BTRFS info (device loop2): using free space tree [ 829.218593][T12238] BTRFS info (device loop2): enabling ssd optimizations [ 829.245454][T12238] BTRFS info (device loop2): auto enabling async discard [ 829.449308][ T28] audit: type=1800 audit(1760928850.457:65): pid=12238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1442" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 829.472572][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.589043][ T5792] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 830.700323][T12294] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 830.714878][ T27] libceph: connect (1)[c::]:6789 error -101 [ 830.754120][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 830.771617][T12294] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1444'. [ 831.116878][T12285] ceph: No mds server is up or the cluster is laggy [ 831.259090][ T27] libceph: connect (1)[c::]:6789 error -101 [ 831.265884][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 833.124580][T12317] 9pnet_fd: Insufficient options for proto=fd [ 833.567430][T12319] loop2: detected capacity change from 0 to 32768 [ 833.825752][T12323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1454'. [ 835.121471][T12327] loop3: detected capacity change from 0 to 40427 [ 835.155709][T12327] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 835.197236][T12327] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 835.248092][T12327] F2FS-fs (loop3): Image doesn't support compression [ 835.303338][T12327] F2FS-fs (loop3): invalid crc value [ 835.561302][T12327] F2FS-fs (loop3): Found nat_bits in checkpoint [ 836.269137][T12327] F2FS-fs (loop3): Start checkpoint disabled! [ 836.325345][T12327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 836.412286][T12327] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 836.421288][T12327] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 836.472234][T12327] F2FS-fs (loop3): Image doesn't support compression [ 836.993274][ T968] libceph: connect (1)[c::]:6789 error -101 [ 837.020546][T12357] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 837.030776][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 837.315000][ T968] libceph: connect (1)[c::]:6789 error -101 [ 837.416038][T12357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1459'. [ 837.451183][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 837.854841][T12355] ceph: No mds server is up or the cluster is laggy [ 837.908577][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1463'. [ 838.110251][T12352] loop1: detected capacity change from 0 to 32768 [ 839.519453][T12382] QAT: Stopping all acceleration devices. [ 839.555215][T12382] loop2: detected capacity change from 0 to 1024 [ 840.067806][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 840.630326][ T7156] hfsplus: b-tree write err: -5, ino 3 [ 841.938319][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1474'. [ 842.760956][T12397] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 843.342575][T12414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1478'. [ 843.763385][T12406] loop2: detected capacity change from 0 to 32768 [ 845.059968][ T6243] libceph: connect (1)[c::]:6789 error -101 [ 845.072154][T12425] loop1: detected capacity change from 0 to 4096 [ 845.104578][ T6243] libceph: mon0 (1)[c::]:6789 connect error [ 845.187441][T12433] netlink: 'syz.3.1477': attribute type 1 has an invalid length. [ 845.215323][T12433] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1477'. [ 845.413294][T10438] libceph: connect (1)[c::]:6789 error -101 [ 845.437315][T10438] libceph: mon0 (1)[c::]:6789 connect error [ 845.444159][T12430] ceph: No mds server is up or the cluster is laggy [ 846.101778][T12436] loop2: detected capacity change from 0 to 32768 [ 846.151309][T12436] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1483 (12436) [ 846.488220][T12438] loop0: detected capacity change from 0 to 32768 [ 846.505942][T12436] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 846.521175][T12438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1484 (12438) [ 846.569261][T12436] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 846.616499][T12438] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 846.633235][T12436] BTRFS info (device loop2): using free space tree [ 846.655538][T12438] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 846.678404][T12438] BTRFS info (device loop0): using free space tree [ 846.852424][T12436] BTRFS info (device loop2): enabling ssd optimizations [ 846.860995][T12438] BTRFS info (device loop0): enabling ssd optimizations [ 846.896939][T12436] BTRFS info (device loop2): auto enabling async discard [ 846.910387][T12438] BTRFS info (device loop0): auto enabling async discard [ 847.002709][ T28] audit: type=1800 audit(1760928868.026:66): pid=12436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1483" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 847.283731][ T5789] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 847.314002][ T5792] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 847.543449][ T8842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (8842) [ 849.681936][T12502] loop0: detected capacity change from 0 to 4096 [ 850.472131][T12494] loop2: detected capacity change from 0 to 32768 [ 850.511803][T12506] syzkaller0: entered promiscuous mode [ 850.550407][T12506] syzkaller0: entered allmulticast mode [ 853.225977][T12511] loop1: detected capacity change from 0 to 32768 [ 853.347632][T12526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1501'. [ 853.451531][T12511] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 854.127598][ T8296] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 855.097008][T12536] loop2: detected capacity change from 0 to 4096 [ 855.202593][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 855.432639][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 855.458741][ T9] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 855.507728][ T9] usb 1-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 855.575265][ T9] usb 1-1: config 0 has no interface number 0 [ 855.614577][ T9] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 855.680785][ T9] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 855.747624][ T9] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 855.769649][ T9] usb 1-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.788788][ T9] usb 1-1: config 0 interface 167 has no altsetting 0 [ 855.801414][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 855.828776][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.856513][ T9] usb 1-1: Product: syz [ 855.881703][ T9] usb 1-1: Manufacturer: syz [ 855.887883][ T9] usb 1-1: SerialNumber: syz [ 855.949901][ T9] usb 1-1: config 0 descriptor?? [ 855.987271][T12538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 856.540089][T12551] 9pnet_fd: Insufficient options for proto=fd [ 857.263792][ T9] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 857.364304][ T9] usbtest: probe of 1-1:0.167 failed with error -22 [ 857.423036][ T9] usb 1-1: USB disconnect, device number 6 [ 857.733371][T12558] loop3: detected capacity change from 0 to 4096 [ 857.792657][T12558] EXT4-fs (loop3): Test dummy encryption mode enabled [ 858.052773][T12558] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 858.224000][T12558] System zones: 0-5 [ 858.363804][T12558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.499975][T12558] Quota error (device loop3): do_check_range: Getting block 2926 out of range 1-5 [ 858.573057][T12558] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 858.641406][T12558] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1509: Failed to acquire dquot type 1 [ 858.801016][T12565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1511'. [ 859.755123][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.022755][T12580] netlink: 'syz.1.1515': attribute type 1 has an invalid length. [ 861.032184][T12580] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1515'. [ 861.195920][T11627] libceph: connect (1)[c::]:6789 error -101 [ 861.359726][T12579] ceph: No mds server is up or the cluster is laggy [ 861.402335][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 861.705683][T11627] libceph: connect (1)[c::]:6789 error -101 [ 861.719079][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 862.595877][ T5793] Bluetooth: hci0: unexpected cc 0x2027 length: 5 > 1 [ 862.603313][ T5793] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 862.612896][T11627] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 863.058447][T11627] usb 3-1: Using ep0 maxpacket: 32 [ 863.222508][T11627] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 863.252583][T11627] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 863.421461][T11627] usb 3-1: config 0 has no interface number 0 [ 863.427673][T11627] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 863.439243][T11627] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 863.452087][T11627] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 863.484259][T11627] usb 3-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.524580][ T968] libceph: connect (1)[c::]:6789 error -101 [ 863.532605][T11627] usb 3-1: config 0 interface 167 has no altsetting 0 [ 863.559616][T12604] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 863.568545][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 863.585868][T12604] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1518'. [ 863.694819][T11627] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 863.757427][T11627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.773096][T12601] ceph: No mds server is up or the cluster is laggy [ 863.780961][T11627] usb 3-1: Product: syz [ 863.785196][T11627] usb 3-1: Manufacturer: syz [ 863.839245][T11627] usb 3-1: SerialNumber: syz [ 863.886126][T11627] usb 3-1: config 0 descriptor?? [ 863.918943][T12592] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 863.983625][ T968] libceph: connect (1)[c::]:6789 error -101 [ 863.999085][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 864.067554][T12609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1522'. [ 865.194929][T11627] usbtest 3-1:0.167: couldn't get endpoints, -22 [ 865.288998][T11627] usbtest: probe of 3-1:0.167 failed with error -22 [ 865.301298][T11627] usb 3-1: USB disconnect, device number 15 [ 867.645337][T12640] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1531'. [ 867.815879][T12642] 9pnet_fd: Insufficient options for proto=fd [ 867.975525][T12647] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 867.983584][T12647] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1532'. [ 868.557386][T12645] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 868.615274][T12649] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 868.753501][T12649] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1528'. [ 868.782371][ T968] libceph: connect (1)[c::]:6789 error -101 [ 868.812978][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 869.242447][T12643] ceph: No mds server is up or the cluster is laggy [ 869.323398][ T9] libceph: connect (1)[c::]:6789 error -101 [ 869.376381][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 870.693069][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.734588][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.322221][T12692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1541'. [ 876.057659][T12728] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 876.065835][T12728] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1542'. [ 876.379015][T12725] ceph: No mds server is up or the cluster is laggy [ 876.388416][T10438] libceph: connect (1)[c::]:6789 error -101 [ 876.439963][T10438] libceph: mon0 (1)[c::]:6789 connect error [ 877.551219][T11627] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 877.901014][T11627] usb 3-1: Using ep0 maxpacket: 32 [ 877.901461][T10438] libceph: connect (1)[c::]:6789 error -101 [ 877.912479][T11627] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 877.930842][T11627] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 877.952931][T11627] usb 3-1: config 0 has no interface number 0 [ 877.959192][T11627] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 877.960945][T10438] libceph: mon0 (1)[c::]:6789 connect error [ 877.980038][T11627] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 878.000805][T11627] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 878.012453][T11627] usb 3-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.027806][T11627] usb 3-1: config 0 interface 167 has no altsetting 0 [ 878.044057][T11627] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 878.057438][T11627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.064036][T12748] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 878.070250][T11627] usb 3-1: Product: syz [ 878.095947][T11627] usb 3-1: Manufacturer: syz [ 878.108823][T11627] usb 3-1: SerialNumber: syz [ 878.108924][T12748] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1547'. [ 878.125281][T11627] usb 3-1: config 0 descriptor?? [ 878.141752][T12739] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 878.272631][T12747] loop1: detected capacity change from 0 to 4096 [ 878.301161][T10438] libceph: connect (1)[c::]:6789 error -101 [ 878.307725][T12747] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 878.336412][T10438] libceph: mon0 (1)[c::]:6789 connect error [ 878.399725][T12747] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 878.474645][T12741] ceph: No mds server is up or the cluster is laggy [ 878.839741][T12761] trusted_key: encrypted_key: insufficient parameters specified [ 879.459222][T12763] loop0: detected capacity change from 0 to 64 [ 879.492838][T12763] hfs: unable to parse mount options [ 879.796485][T11627] usbtest 3-1:0.167: couldn't get endpoints, -22 [ 880.189887][T11627] usbtest: probe of 3-1:0.167 failed with error -22 [ 880.251374][T11627] usb 3-1: USB disconnect, device number 16 [ 880.656886][ T787] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 880.989400][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 881.083286][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.238971][ T787] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 881.396228][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 881.452464][ T787] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 881.471142][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 881.488981][ T787] usb 2-1: Product: syz [ 881.495750][ T787] usb 2-1: Manufacturer: syz [ 881.508981][ T787] usb 2-1: SerialNumber: syz [ 881.539217][ T787] usb 2-1: config 0 descriptor?? [ 881.558549][ T787] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 881.576642][ T787] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 881.588082][ T787] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 882.114953][ T9] libceph: connect (1)[c::]:6789 error -101 [ 882.121355][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 882.167553][T12790] netlink: 'syz.0.1558': attribute type 1 has an invalid length. [ 882.175649][T12790] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1558'. [ 882.186940][T12776] loop2: detected capacity change from 0 to 40427 [ 882.231520][T12776] F2FS-fs (loop2): invalid crc value [ 882.297400][T12776] F2FS-fs (loop2): Found nat_bits in checkpoint [ 882.399111][T11627] libceph: connect (1)[c::]:6789 error -101 [ 882.405599][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 882.436277][T12786] ceph: No mds server is up or the cluster is laggy [ 882.458802][T12795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1561'. [ 882.478630][T12776] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 882.677070][ T5792] syz-executor: attempt to access beyond end of device [ 882.677070][ T5792] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 882.729645][ T5792] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 882.828223][ T27] usb 2-1: USB disconnect, device number 11 [ 885.446519][T12816] loop0: detected capacity change from 0 to 4096 [ 885.501230][T12816] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 885.520587][T12816] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 886.103723][T12822] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 886.681108][ T787] libceph: connect (1)[c::]:6789 error -101 [ 886.736653][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 886.768792][T12822] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1567'. [ 886.909974][ T58] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 886.917845][ T5789] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 886.927407][ T5789] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 886.944884][ T5789] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 886.965343][ T58] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 887.014924][ T27] libceph: connect (1)[c::]:6789 error -101 [ 887.021316][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 887.087266][T12817] ceph: No mds server is up or the cluster is laggy [ 888.113110][T12813] loop3: detected capacity change from 0 to 32768 [ 888.231138][T12813] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 888.646814][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 889.720497][T12852] loop3: detected capacity change from 0 to 256 [ 889.935017][T12852] exfat: Deprecated parameter 'utf8' [ 890.346040][T12852] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 893.922982][T11627] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 894.212737][T11627] usb 1-1: Using ep0 maxpacket: 32 [ 894.264869][T11627] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 894.533061][T11627] usb 1-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 894.544719][T11627] usb 1-1: config 0 has no interface number 0 [ 894.551001][T11627] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 894.564520][T11627] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 894.580091][T11627] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 894.592735][T11627] usb 1-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 894.607164][T11627] usb 1-1: config 0 interface 167 has no altsetting 0 [ 894.624374][T11627] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 894.654494][T11627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.678448][T11627] usb 1-1: Product: syz [ 894.704252][T11627] usb 1-1: Manufacturer: syz [ 894.725635][T11627] usb 1-1: SerialNumber: syz [ 894.741589][T11627] usb 1-1: config 0 descriptor?? [ 894.762447][T12865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 895.029128][T12875] loop3: detected capacity change from 0 to 4096 [ 895.051975][T12875] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 895.144650][T12875] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 895.216868][T12876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 895.784773][T12873] loop2: detected capacity change from 0 to 32768 [ 896.043344][T11627] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 896.079822][T11627] usbtest: probe of 1-1:0.167 failed with error -22 [ 896.177617][T11627] usb 1-1: USB disconnect, device number 7 [ 896.209128][T12875] syz.3.1584 (12875): drop_caches: 2 [ 896.450334][T12873] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 897.358382][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 897.682612][ T27] libceph: connect (1)[c::]:6789 error -101 [ 897.688985][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 897.775429][T12900] netlink: 'syz.0.1589': attribute type 1 has an invalid length. [ 897.801127][T12900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1589'. [ 897.956900][T12901] ceph: No mds server is up or the cluster is laggy [ 897.966870][ T27] libceph: connect (1)[c::]:6789 error -101 [ 897.980816][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 898.993714][ T27] libceph: connect (1)[c::]:6789 error -101 [ 899.020487][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 899.038466][T12911] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 899.079089][ T27] libceph: connect (1)[c::]:6789 error -101 [ 899.096374][T12911] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1591'. [ 899.108747][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 899.353025][T12910] ceph: No mds server is up or the cluster is laggy [ 899.391818][ T27] libceph: connect (1)[c::]:6789 error -101 [ 899.400200][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 900.457506][T12929] loop3: detected capacity change from 0 to 128 [ 900.465085][T12929] EXT4-fs: Ignoring removed nobh option [ 900.790872][T12929] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 900.804523][T12929] ext4 filesystem being mounted at /423/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 901.623167][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 901.660940][T11627] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 901.735392][T12938] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1601'. [ 901.860091][T11627] usb 3-1: Using ep0 maxpacket: 32 [ 901.884036][T11627] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 901.900416][T11627] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 901.911996][T11627] usb 3-1: config 0 has no interface number 0 [ 901.918171][T11627] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 901.929755][T11627] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 901.941556][T11627] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 901.954050][T11627] usb 3-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.967771][T11627] usb 3-1: config 0 interface 167 has no altsetting 0 [ 901.985173][T11627] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 901.998628][T11627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.012595][T11627] usb 3-1: Product: syz [ 902.016905][T11627] usb 3-1: Manufacturer: syz [ 902.022373][T11627] usb 3-1: SerialNumber: syz [ 902.036919][T11627] usb 3-1: config 0 descriptor?? [ 902.049391][T12924] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 903.404657][T11627] usbtest 3-1:0.167: couldn't get endpoints, -22 [ 903.413649][T11627] usbtest: probe of 3-1:0.167 failed with error -22 [ 903.425018][T11627] usb 3-1: USB disconnect, device number 17 [ 903.519895][T12940] loop3: detected capacity change from 0 to 32768 [ 903.691058][T12940] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 903.843724][T12948] loop1: detected capacity change from 0 to 32768 [ 903.855633][T12948] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1603 (12948) [ 904.007800][T12948] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 904.064614][T12948] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 904.103179][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 904.117866][T12948] BTRFS info (device loop1): using free space tree [ 904.466855][T12948] BTRFS info (device loop1): enabling ssd optimizations [ 904.479168][T12978] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1610'. [ 904.515540][T12974] loop0: detected capacity change from 0 to 4096 [ 904.522497][T12948] BTRFS info (device loop1): auto enabling async discard [ 904.827045][ T28] audit: type=1800 audit(1760928925.775:67): pid=12948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1603" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 904.848100][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.333416][ T5784] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 905.819520][T11627] libceph: connect (1)[c::]:6789 error -101 [ 906.629268][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 906.692623][T13000] netlink: 'syz.2.1611': attribute type 1 has an invalid length. [ 906.700759][T13000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1611'. [ 906.731290][ T8] libceph: connect (1)[c::]:6789 error -101 [ 906.765406][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 906.823737][T12998] ceph: No mds server is up or the cluster is laggy [ 906.866843][T12995] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 906.916924][ T8] libceph: connect (1)[c::]:6789 error -101 [ 906.923053][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 906.950201][T12995] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1607'. [ 907.185415][T13006] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1614'. [ 907.222093][T12990] ceph: No mds server is up or the cluster is laggy [ 907.332419][ T787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 907.543427][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 907.563705][ T787] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 907.595950][ T787] usb 1-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 907.615901][ T787] usb 1-1: config 0 has no interface number 0 [ 907.632375][ T787] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 907.652978][ T787] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 907.684745][ T787] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 907.705909][ T787] usb 1-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.729795][ T787] usb 1-1: config 0 interface 167 has no altsetting 0 [ 907.749906][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 907.765815][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.784352][ T787] usb 1-1: Product: syz [ 907.794515][ T787] usb 1-1: Manufacturer: syz [ 907.804764][ T787] usb 1-1: SerialNumber: syz [ 907.832946][ T787] usb 1-1: config 0 descriptor?? [ 907.846709][T12996] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 907.886408][T13005] loop1: detected capacity change from 0 to 32768 [ 907.916086][T13005] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1612 (13005) [ 907.969962][T13005] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 907.997515][T13005] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 908.025795][T13005] BTRFS info (device loop1): disabling tree log [ 908.053285][T13005] BTRFS info (device loop1): turning on flush-on-commit [ 908.086208][T13005] BTRFS info (device loop1): setting nodatasum [ 908.092567][T13005] BTRFS info (device loop1): enabling auto defrag [ 908.129661][T13005] BTRFS info (device loop1): trying to use backup root at mount time [ 908.157137][T13005] BTRFS info (device loop1): turning on async discard [ 908.174269][T13005] BTRFS info (device loop1): using free space tree [ 908.272567][ T1136] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 908.287736][T13008] loop2: detected capacity change from 0 to 32768 [ 908.322830][T13005] BTRFS error (device loop1): failed to load root extent [ 908.336029][T13005] BTRFS warning (device loop1): try to load backup roots slot 1 [ 908.373349][T13008] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 908.399131][ T1094] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 908.441029][T13005] BTRFS warning (device loop1): couldn't read tree root [ 908.464385][T13005] BTRFS warning (device loop1): try to load backup roots slot 2 [ 908.497390][ T1094] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 908.581351][T13005] BTRFS warning (device loop1): couldn't read tree root [ 908.598256][T13005] BTRFS warning (device loop1): try to load backup roots slot 3 [ 908.640653][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 908.666340][T13005] BTRFS info (device loop1): enabling ssd optimizations [ 908.711928][T13005] BTRFS info (device loop1): rebuilding free space tree [ 908.815387][T13005] BTRFS info (device loop1): checking UUID tree [ 909.139855][ T787] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 909.171436][ T787] usbtest: probe of 1-1:0.167 failed with error -22 [ 909.276711][ T787] usb 1-1: USB disconnect, device number 8 [ 909.330554][ T5784] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 910.252652][T13042] loop0: detected capacity change from 0 to 4096 [ 911.522967][T13059] loop3: detected capacity change from 0 to 2048 [ 911.689795][T13059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.780530][ T28] audit: type=1800 audit(1760928932.839:68): pid=13059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1625" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 911.833943][T13059] loop3: detected capacity change from 2048 to 0 [ 911.848844][T13059] syz.3.1625: attempt to access beyond end of device [ 911.848844][T13059] loop3: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 911.884042][T13059] syz.3.1625: attempt to access beyond end of device [ 911.884042][T13059] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 911.913925][T13059] syz.3.1625: attempt to access beyond end of device [ 911.913925][T13059] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 911.928679][T13045] loop1: detected capacity change from 0 to 32768 [ 911.954175][T13045] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1620 (13045) [ 911.994256][T13059] syz.3.1625: attempt to access beyond end of device [ 911.994256][T13059] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 912.021687][T13045] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 912.035644][T13059] syz.3.1625: attempt to access beyond end of device [ 912.035644][T13059] loop3: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 912.063776][T13059] EXT4-fs error (device loop3): ext4_get_inode_loc:4627: inode #18: block 6: comm syz.3.1625: unable to read itable block [ 912.077302][T13045] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 912.097631][T13059] syz.3.1625: attempt to access beyond end of device [ 912.097631][T13059] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 912.111718][T13045] BTRFS info (device loop1): using free space tree [ 912.150383][T13059] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 912.176117][T13059] EXT4-fs (loop3): I/O error while writing superblock [ 912.198424][T13059] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5908: IO failure [ 912.213914][T13059] syz.3.1625: attempt to access beyond end of device [ 912.213914][T13059] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 912.248079][T13059] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 912.281971][T13059] EXT4-fs (loop3): I/O error while writing superblock [ 912.308719][T13045] BTRFS info (device loop1): enabling ssd optimizations [ 912.324220][T13059] EXT4-fs error (device loop3): ext4_dirty_inode:6112: inode #18: comm syz.3.1625: mark_inode_dirty error [ 912.333586][T13045] BTRFS info (device loop1): auto enabling async discard [ 912.372376][T13059] syz.3.1625: attempt to access beyond end of device [ 912.372376][T13059] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 912.404144][ T28] audit: type=1800 audit(1760928933.469:69): pid=13045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1620" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 912.423697][T13059] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 912.425303][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.504836][T13059] EXT4-fs (loop3): I/O error while writing superblock [ 912.590229][ T5785] syz-executor: attempt to access beyond end of device [ 912.590229][ T5785] loop3: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 912.612079][ T787] libceph: connect (1)[c::]:6789 error -101 [ 912.658188][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 912.707716][T13088] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 912.716056][T13088] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1624'. [ 912.778952][ T1094] kworker/u4:6: attempt to access beyond end of device [ 912.778952][ T1094] loop3: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 912.794519][ T5784] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 912.817976][ T1094] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4612: inode #18: block 6: comm kworker/u4:6: unable to read itable block [ 912.880127][ T1094] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 912.896288][ T1094] EXT4-fs (loop3): I/O error while writing superblock [ 912.965802][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.976929][T13085] ceph: No mds server is up or the cluster is laggy [ 913.007138][ T5785] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 913.021077][ T5785] EXT4-fs (loop3): I/O error while writing superblock [ 913.024884][ T787] libceph: connect (1)[c::]:6789 error -101 [ 913.621186][ T8296] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (8296) [ 913.937225][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 913.953516][T13060] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 914.262148][T13084] loop2: detected capacity change from 0 to 32768 [ 914.390926][T13084] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 915.000922][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 915.141155][ T2906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.505760][ T2906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.847266][ T2906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.556922][T13107] loop0: detected capacity change from 0 to 4096 [ 916.839257][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.300373][T13112] syz.2.1634 (13112): /proc/13109/oom_adj is deprecated, please use /proc/13109/oom_score_adj instead. [ 918.420515][T13119] loop1: detected capacity change from 0 to 4096 [ 918.470550][T13119] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 918.577193][T13119] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 918.894817][T13124] trusted_key: encrypted_key: insufficient parameters specified [ 919.347668][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 919.361149][T13126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 919.374429][T13126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 919.473199][T13128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 919.481838][T13128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 919.493866][T13128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 919.916980][T13122] lo speed is unknown, defaulting to 1000 [ 920.016497][T13138] loop0: detected capacity change from 0 to 64 [ 920.060295][T13138] hfs: unable to parse mount options [ 921.056247][T11627] libceph: connect (1)[c::]:6789 error -101 [ 921.074236][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 921.093522][T13156] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 921.102161][T13156] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1640'. [ 921.231032][T13152] ceph: No mds server is up or the cluster is laggy [ 921.559532][T13128] Bluetooth: hci1: command tx timeout [ 921.863447][T13144] loop0: detected capacity change from 0 to 32768 [ 922.342576][T13144] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 922.374634][T13122] chnl_net:caif_netlink_parms(): no params data found [ 922.621836][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 923.278302][T13122] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.285531][T13122] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.436002][T13122] bridge_slave_0: entered allmulticast mode [ 923.591888][T13122] bridge_slave_0: entered promiscuous mode [ 923.668846][ T787] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 923.684617][T13128] Bluetooth: hci1: command tx timeout [ 923.881536][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 923.911367][T13122] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.919843][ T787] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 924.046959][T13122] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.084195][ T787] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 924.095520][T13122] bridge_slave_1: entered allmulticast mode [ 924.103205][T13122] bridge_slave_1: entered promiscuous mode [ 924.137626][ T787] usb 3-1: config 0 has no interface number 0 [ 924.156104][ T787] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 924.185242][ T787] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 924.221383][ T787] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 924.249005][ T787] usb 3-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 924.264064][ T2906] hsr_slave_0: left promiscuous mode [ 924.268302][ T787] usb 3-1: config 0 interface 167 has no altsetting 0 [ 924.286096][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 924.288099][ T2906] hsr_slave_1: left promiscuous mode [ 924.297874][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.315041][ T787] usb 3-1: Product: syz [ 924.320026][ T787] usb 3-1: Manufacturer: syz [ 924.324853][ T787] usb 3-1: SerialNumber: syz [ 924.337960][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.345629][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.364862][ T787] usb 3-1: config 0 descriptor?? [ 924.371772][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.386493][T13192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 924.387585][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.420734][ T2906] bridge_slave_1: left allmulticast mode [ 924.426566][ T2906] bridge_slave_1: left promiscuous mode [ 924.463114][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.498034][ T2906] bridge_slave_0: left allmulticast mode [ 924.514085][ T2906] bridge_slave_0: left promiscuous mode [ 924.527971][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.624366][ T2906] veth1_macvtap: left promiscuous mode [ 924.640922][ T2906] veth0_macvtap: left promiscuous mode [ 924.671566][ T2906] veth1_vlan: left promiscuous mode [ 924.695450][ T2906] veth0_vlan: left promiscuous mode [ 924.999462][T13190] loop0: detected capacity change from 0 to 32768 [ 925.001628][T13196] loop1: detected capacity change from 0 to 32768 [ 925.034223][T13190] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 925.102290][T13196] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1648 (13196) [ 925.153022][T13196] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 925.238844][T13196] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 925.244241][ T8325] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (8325) [ 925.286898][T13196] BTRFS info (device loop1): using free space tree [ 925.483069][T13196] BTRFS info (device loop1): enabling ssd optimizations [ 925.497655][T13196] BTRFS info (device loop1): auto enabling async discard [ 925.765362][T13128] Bluetooth: hci1: command tx timeout [ 925.961495][ T787] usbtest 3-1:0.167: couldn't get endpoints, -22 [ 926.060261][ T787] usbtest: probe of 3-1:0.167 failed with error -22 [ 926.078527][ T787] usb 3-1: USB disconnect, device number 18 [ 926.276000][T13218] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1650'. [ 926.578194][T11627] libceph: connect (1)[c::]:6789 error -101 [ 926.584331][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 926.609733][T13223] loop2: detected capacity change from 0 to 4096 [ 926.638392][T13227] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 926.646532][T13227] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1649'. [ 926.768928][T13224] ceph: No mds server is up or the cluster is laggy [ 926.828178][T13223] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 926.902556][T13223] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 927.107387][T13228] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 927.813594][T13128] Bluetooth: hci1: command tx timeout [ 927.849218][T13231] loop0: detected capacity change from 0 to 32768 [ 927.972490][T13231] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 928.268208][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 929.202662][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 929.214355][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 929.275622][ T5784] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 929.430106][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.717441][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.923563][T13246] loop2: detected capacity change from 0 to 32768 [ 929.967677][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 930.004482][T13246] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 930.031094][T13246] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 930.050708][T13246] BTRFS info (device loop2): using free space tree [ 930.077102][T13253] 9pnet_fd: Insufficient options for proto=fd [ 930.170152][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 930.180791][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 930.189317][ T8] usb 1-1: config 0 has no interface number 0 [ 930.230918][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 930.249586][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.258037][ T8] usb 1-1: Product: syz [ 930.262573][ T8] usb 1-1: Manufacturer: syz [ 930.267659][ T8] usb 1-1: SerialNumber: syz [ 930.278171][ T8] usb 1-1: config 0 descriptor?? [ 930.288980][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 930.319842][T13246] BTRFS info (device loop2): enabling ssd optimizations [ 930.327802][T13246] BTRFS info (device loop2): auto enabling async discard [ 930.588285][ T5792] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 930.681710][ C1] vkms_vblank_simulate: vblank timer overrun [ 930.950315][ T8296] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (8296) [ 931.638163][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.645436][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.103233][ T2906] bond0 (unregistering): Released all slaves [ 932.164206][ T8] gspca_spca1528: reg_w err -71 [ 932.171687][ T8] spca1528: probe of 1-1:0.1 failed with error -71 [ 932.215067][ T8] usb 1-1: USB disconnect, device number 9 [ 932.290309][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.379669][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.491623][T13122] team0: Port device team_slave_0 added [ 932.551859][T13122] team0: Port device team_slave_1 added [ 932.664022][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.672592][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.699461][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.707618][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.723187][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.731263][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.810165][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.077818][T13287] loop0: detected capacity change from 0 to 64 [ 933.099219][T13287] hfs: unable to parse mount options [ 935.038989][T13122] hsr_slave_0: entered promiscuous mode [ 935.104448][T13302] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1667'. [ 935.114271][T13122] hsr_slave_1: entered promiscuous mode [ 935.354540][T13299] loop0: detected capacity change from 0 to 256 [ 935.363015][T13299] exfat: Deprecated parameter 'namecase' [ 935.369104][T13299] exfat: Deprecated parameter 'namecase' [ 935.418533][T13299] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 935.514594][T13310] 9pnet_fd: Insufficient options for proto=fd [ 936.004759][T13122] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 936.020775][T13122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 936.047346][T13122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 936.079341][T13122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 936.190920][T13297] loop2: detected capacity change from 0 to 32768 [ 936.324168][T13297] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 936.809532][T13122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.290604][T13122] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.561797][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.569589][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.666537][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.674007][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.886008][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 937.953721][T13122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.407481][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.000902][T13122] veth0_vlan: entered promiscuous mode [ 942.053420][T13122] veth1_vlan: entered promiscuous mode [ 942.368761][T13122] veth0_macvtap: entered promiscuous mode [ 942.390250][T13122] veth1_macvtap: entered promiscuous mode [ 942.970080][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.992571][T13387] loop0: detected capacity change from 0 to 32768 [ 943.048727][T13387] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 943.061358][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.128445][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.203579][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.268053][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.288171][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.326729][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.386428][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.437525][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.472698][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.587623][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.765712][T13122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.840595][ T8296] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 943.991610][T13122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.251679][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.265344][T13122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.274899][T13122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.284489][T13122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.297116][T13122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.472090][ T7774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.487058][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.496549][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.511053][ T7774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.413511][T13428] loop1: detected capacity change from 0 to 512 [ 947.550558][T13428] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 947.577591][T13428] EXT4-fs (loop1): external journal has bad superblock [ 948.236061][T13438] loop0: detected capacity change from 0 to 64 [ 948.244835][T13438] hfs: unable to parse mount options [ 951.084500][ T9] libceph: connect (1)[c::]:6789 error -101 [ 951.090881][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 951.102663][T13459] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 951.111063][T13459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1695'. [ 951.406473][ T9] libceph: connect (1)[c::]:6789 error -101 [ 951.448137][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 951.705199][T13458] ceph: No mds server is up or the cluster is laggy [ 952.398958][T13473] loop1: detected capacity change from 0 to 4096 [ 955.245391][T13497] loop2: detected capacity change from 0 to 64 [ 955.257141][T13497] hfs: unable to parse mount options [ 955.632462][ T9] libceph: connect (1)[c::]:6789 error -101 [ 955.643340][T13505] netlink: 'syz.4.1707': attribute type 1 has an invalid length. [ 955.651402][T13505] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1707'. [ 955.713391][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 956.042210][ T968] libceph: connect (1)[c::]:6789 error -101 [ 956.048339][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 956.249679][T13504] ceph: No mds server is up or the cluster is laggy [ 956.706733][T13527] loop2: detected capacity change from 0 to 4096 [ 956.807867][ T6243] libceph: connect (1)[c::]:6789 error -101 [ 956.815919][ T6243] libceph: mon0 (1)[c::]:6789 connect error [ 956.844243][T13530] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 956.852884][T13530] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1712'. [ 957.081827][ T6243] libceph: connect (1)[c::]:6789 error -101 [ 957.127002][ T6243] libceph: mon0 (1)[c::]:6789 connect error [ 957.392493][T13529] ceph: No mds server is up or the cluster is laggy [ 957.673867][T13503] loop1: detected capacity change from 0 to 32768 [ 957.792812][T13503] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 958.097715][ T8842] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 960.496613][T13556] loop2: detected capacity change from 0 to 256 [ 960.809992][T13565] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 960.817911][T13565] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1720'. [ 960.919731][ T786] libceph: connect (1)[c::]:6789 error -101 [ 960.927532][T13567] loop0: detected capacity change from 0 to 64 [ 960.936291][T13567] hfs: unable to parse mount options [ 960.953188][T13556] FAT-fs (loop2): Directory bread(block 64) failed [ 960.961045][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 960.977802][T13556] FAT-fs (loop2): Directory bread(block 65) failed [ 961.004421][T13556] FAT-fs (loop2): Directory bread(block 66) failed [ 961.086782][T13556] FAT-fs (loop2): Directory bread(block 67) failed [ 961.119418][T13556] FAT-fs (loop2): Directory bread(block 68) failed [ 961.143127][T13556] FAT-fs (loop2): Directory bread(block 69) failed [ 961.170492][T13556] FAT-fs (loop2): Directory bread(block 70) failed [ 961.193187][T13556] FAT-fs (loop2): Directory bread(block 71) failed [ 961.219656][ T786] libceph: connect (1)[c::]:6789 error -101 [ 961.225893][T13556] FAT-fs (loop2): Directory bread(block 72) failed [ 961.241843][T13556] FAT-fs (loop2): Directory bread(block 73) failed [ 961.250996][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 961.349893][T13560] ceph: No mds server is up or the cluster is laggy [ 963.155727][T13585] loop2: detected capacity change from 0 to 4096 [ 964.957452][ T6131] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 965.257279][ T6131] usb 5-1: Using ep0 maxpacket: 8 [ 965.308177][ T6131] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 965.340233][ T6131] usb 5-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config [ 965.391421][ T6131] usb 5-1: config 0 has no interface number 1 [ 965.417232][ T6131] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 965.456718][ T6131] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 965.658282][ T6131] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 965.869689][ T6131] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 966.169888][ T6131] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 966.342851][ T6131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.400258][ T6131] usb 5-1: Product: syz [ 966.404680][ T6131] usb 5-1: Manufacturer: syz [ 966.469502][ T6131] usb 5-1: SerialNumber: syz [ 966.518306][ T6131] usb 5-1: config 0 descriptor?? [ 966.527119][T13605] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 966.562835][ T6131] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 966.599911][ T6131] snd-usb-audio: probe of 5-1:0.151 failed with error -2 [ 966.629812][ T6131] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 966.900991][ T786] libceph: connect (1)[c::]:6789 error -101 [ 966.917262][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 966.934124][T13620] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 966.942998][T13620] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1730'. [ 966.969644][T13625] loop0: detected capacity change from 0 to 64 [ 966.981586][T13625] hfs: unable to parse mount options [ 967.043644][ T6131] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 967.073624][ T6131] usb 5-1: USB disconnect, device number 2 [ 967.138705][ T8296] udevd[8296]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.180983][ T786] libceph: connect (1)[c::]:6789 error -101 [ 967.209633][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 967.302301][T13615] loop2: detected capacity change from 0 to 32768 [ 967.388142][T13615] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 967.426140][T13618] ceph: No mds server is up or the cluster is laggy [ 970.192639][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 971.343189][T13662] fuse: Bad value for 'fd' [ 971.678693][T13669] loop4: detected capacity change from 0 to 64 [ 971.700424][T13669] hfs: unable to parse mount options [ 971.903814][ T786] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 972.114227][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 972.399682][ T786] usb 1-1: config 5 has an invalid interface number: 17 but max is 0 [ 972.445399][ T786] usb 1-1: config 5 has no interface number 0 [ 972.503580][ T786] usb 1-1: config 5 interface 17 has no altsetting 0 [ 972.559424][ T786] usb 1-1: New USB device found, idVendor=0930, idProduct=7860, bcdDevice=85.02 [ 972.579264][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.863114][T13686] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 972.870687][T13686] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 972.882621][T13686] vhci_hcd vhci_hcd.0: Device attached [ 973.002010][T13687] vhci_hcd: connection closed [ 973.068934][ T7156] vhci_hcd: stop threads [ 973.193661][ T27] vhci_hcd: vhci_device speed not set [ 973.214744][ T7156] vhci_hcd: release socket [ 973.313374][ T27] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 973.323519][ T7156] vhci_hcd: disconnect device [ 973.428728][ T27] usb 35-1: enqueue for inactive port 0 [ 973.447656][ T786] usb 1-1: Product: syz [ 973.451920][ T786] usb 1-1: Manufacturer: syz [ 973.517020][ T786] usb 1-1: SerialNumber: syz [ 973.619524][ T27] vhci_hcd: vhci_device speed not set [ 973.760986][ T786] usb 1-1: USB disconnect, device number 10 [ 976.419734][T13693] loop2: detected capacity change from 0 to 40427 [ 976.492307][T13693] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 976.514646][T13720] fuse: Bad value for 'fd' [ 978.050055][T13747] loop1: detected capacity change from 0 to 64 [ 978.071527][T13747] hfs: unable to parse mount options [ 978.427654][T13752] loop2: detected capacity change from 0 to 128 [ 978.444025][T13752] EXT4-fs: Ignoring removed nobh option [ 979.273038][T13752] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 979.306184][T13752] ext4 filesystem being mounted at /461/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 979.534520][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 979.774626][T13742] loop4: detected capacity change from 0 to 32768 [ 979.795847][T13742] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 980.106371][ T8296] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 982.188025][T13783] lo speed is unknown, defaulting to 1000 [ 986.343816][T13824] loop2: detected capacity change from 0 to 164 [ 986.411342][T13824] Unable to read rock-ridge attributes [ 986.671237][T13833] 9pnet_fd: Insufficient options for proto=fd [ 986.682513][T13832] Unable to read rock-ridge attributes [ 987.586339][T13832] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 992.527037][T13879] loop0: detected capacity change from 0 to 128 [ 992.861322][T13884] loop2: detected capacity change from 0 to 256 [ 992.997988][T13866] loop1: detected capacity change from 0 to 32768 [ 993.957920][T13897] loop0: detected capacity change from 0 to 1024 [ 994.042173][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.076135][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.881924][ T8325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (8325) [ 995.089424][T13911] loop2: detected capacity change from 0 to 64 [ 995.492267][ T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 995.962647][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 995.982508][ T787] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 996.019383][ T787] usb 1-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 996.080174][ T787] usb 1-1: config 0 has no interface number 0 [ 996.237924][ T787] usb 1-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 996.464861][ T787] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 996.921125][ T787] usb 1-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 997.061274][ T787] usb 1-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.078544][ T787] usb 1-1: config 0 interface 167 has no altsetting 0 [ 997.096310][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 997.107668][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.117318][ T787] usb 1-1: Product: syz [ 997.121806][ T787] usb 1-1: Manufacturer: syz [ 997.126947][ T787] usb 1-1: SerialNumber: syz [ 997.178341][ T787] usb 1-1: config 0 descriptor?? [ 997.195190][T13914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 998.285122][T13933] loop2: detected capacity change from 0 to 1024 [ 998.307562][T13933] EXT4-fs: Ignoring removed orlov option [ 998.324449][T13933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 998.551405][ T787] usbtest 1-1:0.167: couldn't get endpoints, -22 [ 998.558254][ T787] usbtest: probe of 1-1:0.167 failed with error -22 [ 998.612967][ T787] usb 1-1: USB disconnect, device number 11 [ 998.655963][T13933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.447896][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.848568][ T786] libceph: connect (1)[c::]:6789 error -101 [ 999.855224][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 999.898268][T13961] netlink: 'syz.4.1795': attribute type 1 has an invalid length. [ 999.907264][T13961] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1795'. [ 999.953029][T13959] lo speed is unknown, defaulting to 1000 [ 1000.140803][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1000.147328][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1000.348544][T13954] ceph: No mds server is up or the cluster is laggy [ 1001.625900][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1001.632203][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1004.731945][T13992] loop4: detected capacity change from 0 to 4096 [ 1004.767591][T13992] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1004.815832][T13992] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1004.853393][T13993] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1004.905852][ T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1004.993226][ T28] audit: type=1326 audit(1760929026.095:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13995 comm="syz.0.1806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe34fb8efc9 code=0x0 [ 1004.999678][ T6243] libceph: connect (1)[c::]:6789 error -101 [ 1005.028210][ T6243] libceph: mon0 (1)[c::]:6789 connect error [ 1005.042158][T13999] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 1005.050513][T13999] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1805'. [ 1005.127499][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1005.141248][ T27] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 1005.170482][ T27] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1005.268580][ T27] usb 3-1: config 0 has no interface number 0 [ 1005.300025][ T6243] libceph: connect (1)[c::]:6789 error -101 [ 1005.326208][ T27] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1005.352968][ T6243] libceph: mon0 (1)[c::]:6789 connect error [ 1005.403262][ T27] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 1005.503294][ T27] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 1005.519973][T13994] ceph: No mds server is up or the cluster is laggy [ 1005.567069][ T27] usb 3-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.593381][ T27] usb 3-1: config 0 interface 167 has no altsetting 0 [ 1005.635249][ T27] usb 3-1: string descriptor 0 read error: -71 [ 1005.785686][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1005.813909][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.832622][ T27] usb 3-1: config 0 descriptor?? [ 1005.914073][ T27] usb 3-1: can't set config #0, error -71 [ 1006.065319][ T27] usb 3-1: USB disconnect, device number 19 [ 1007.244217][T14011] lo speed is unknown, defaulting to 1000 [ 1008.414395][T14030] loop4: detected capacity change from 0 to 256 [ 1008.447183][T14030] exfat: Deprecated parameter 'utf8' [ 1008.616220][T14030] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 1010.024868][ T968] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1010.227134][ T968] usb 5-1: config 1 has an invalid interface number: 195 but max is 0 [ 1010.244854][ T968] usb 5-1: config 1 has no interface number 0 [ 1010.251833][ T968] usb 5-1: config 1 interface 195 altsetting 5 has an invalid endpoint with address 0xC2, skipping [ 1010.287662][ T968] usb 5-1: config 1 interface 195 has no altsetting 0 [ 1010.516485][ T968] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=e0.0a [ 1010.584651][ T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.669341][ T5835] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1010.717644][ T968] usb 5-1: Product: syz [ 1010.723169][ T968] usb 5-1: Manufacturer: syz [ 1010.801063][ T968] usb 5-1: SerialNumber: syz [ 1010.975413][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 1011.035272][ T5835] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 1011.054242][ T5835] usb 2-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1011.078974][ T5835] usb 2-1: config 0 has no interface number 0 [ 1011.094528][ T5835] usb 2-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1011.114186][ T5835] usb 2-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 1011.146861][ T5835] usb 2-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 1011.171243][ T5835] usb 2-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1011.211573][ T5835] usb 2-1: config 0 interface 167 has no altsetting 0 [ 1011.221464][ T968] ttusbir 5-1:1.195: cannot find expected altsetting [ 1011.246716][ T5835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1011.263688][ T968] usb 5-1: USB disconnect, device number 3 [ 1011.279395][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.314112][ T5835] usb 2-1: Product: syz [ 1011.324118][ T5835] usb 2-1: Manufacturer: syz [ 1011.330639][ T5835] usb 2-1: SerialNumber: syz [ 1011.340373][ T5835] usb 2-1: config 0 descriptor?? [ 1011.346417][T14042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1011.389198][T14046] loop2: detected capacity change from 0 to 136 [ 1012.739210][T14052] loop4: detected capacity change from 0 to 4096 [ 1013.397520][ T5835] usbtest 2-1:0.167: couldn't get endpoints, -22 [ 1013.477836][ T5835] usbtest: probe of 2-1:0.167 failed with error -22 [ 1013.515898][ T5835] usb 2-1: USB disconnect, device number 12 [ 1015.223027][T14071] lo speed is unknown, defaulting to 1000 [ 1015.428159][T14077] syzkaller0: entered promiscuous mode [ 1015.445545][T14077] syzkaller0: entered allmulticast mode [ 1015.628433][T14077] tipc: Started in network mode [ 1015.656591][T14077] tipc: Node identity 82f0d75c1914, cluster identity 4711 [ 1015.689591][T14077] tipc: Enabled bearer , priority 0 [ 1015.702098][T14076] tipc: Resetting bearer [ 1015.733690][T14072] loop1: detected capacity change from 0 to 32768 [ 1016.005988][T14076] tipc: Disabling bearer [ 1016.130007][T14072] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1016.433162][T14090] Cannot find set identified by id 0 to match [ 1017.587352][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 1018.730513][T14059] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1019.859821][ T5835] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1019.926030][T14113] loop2: detected capacity change from 0 to 4096 [ 1020.108163][T14059] usb 5-1: Using ep0 maxpacket: 32 [ 1020.123094][T14059] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 1020.143100][T14059] usb 5-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1020.162217][T14116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1836'. [ 1020.176943][T14059] usb 5-1: config 0 has no interface number 0 [ 1020.188719][T14059] usb 5-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1020.219121][T14059] usb 5-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 1020.229674][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 1020.242064][T14059] usb 5-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 1020.248920][ T5835] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 1020.256596][T14059] usb 5-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.274064][ T5835] usb 2-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1020.438989][ T5835] usb 2-1: config 0 has no interface number 0 [ 1020.526419][ T5835] usb 2-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1020.669839][ T5835] usb 2-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 1020.908420][T14059] usb 5-1: config 0 interface 167 has no altsetting 0 [ 1020.919585][T14059] usb 5-1: string descriptor 0 read error: -71 [ 1020.947339][ T5835] usb 2-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 1020.954652][T14059] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1020.969763][ T5835] usb 2-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.984712][T14059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.997381][ T5835] usb 2-1: config 0 interface 167 has no altsetting 0 [ 1021.012337][ T5835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1021.015895][T14059] usb 5-1: config 0 descriptor?? [ 1021.021712][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.035644][ T5835] usb 2-1: Product: syz [ 1021.040482][ T5835] usb 2-1: Manufacturer: syz [ 1021.045350][ T5835] usb 2-1: SerialNumber: syz [ 1021.050192][T14059] usb 5-1: can't set config #0, error -71 [ 1021.070076][T14059] usb 5-1: USB disconnect, device number 4 [ 1021.138421][T14126] loop4: detected capacity change from 0 to 128 [ 1021.149230][T14126] EXT4-fs: Ignoring removed nobh option [ 1021.309588][T14126] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1021.337683][T14126] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.935019][ T5835] usb 2-1: config 0 descriptor?? [ 1021.977715][T13122] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1021.986511][ T5835] usb 2-1: can't set config #0, error -71 [ 1021.996038][ T5835] usb 2-1: USB disconnect, device number 13 [ 1023.258379][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 1023.704265][T14150] loop1: detected capacity change from 0 to 2048 [ 1023.769106][T14152] lo speed is unknown, defaulting to 1000 [ 1024.075562][T14158] loop2: detected capacity change from 0 to 128 [ 1024.086367][T14158] EXT4-fs: Ignoring removed nobh option [ 1024.370064][T14150] loop1: detected capacity change from 0 to 256 [ 1024.388840][T14158] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1024.407035][T14158] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.252076][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1026.419129][ T5835] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1026.446819][T14185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1856'. [ 1026.636490][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 1026.651468][ T5835] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 1026.671260][ T5835] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1026.697547][ T5835] usb 3-1: config 0 has no interface number 0 [ 1026.711727][ T5835] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1026.745202][ T5835] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 1026.775192][T14192] lo speed is unknown, defaulting to 1000 [ 1026.775201][ T5835] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 1026.799053][ T5835] usb 3-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.820113][ T5835] usb 3-1: config 0 interface 167 has no altsetting 0 [ 1026.834013][ T5835] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1026.864890][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.885635][ T5835] usb 3-1: Product: syz [ 1026.897943][ T5835] usb 3-1: Manufacturer: syz [ 1026.902930][ T5835] usb 3-1: SerialNumber: syz [ 1026.931284][ T5835] usb 3-1: config 0 descriptor?? [ 1026.963455][T14176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1027.284599][T14189] loop0: detected capacity change from 0 to 32768 [ 1030.456604][T14206] loop1: detected capacity change from 0 to 512 [ 1030.476892][T14202] loop4: detected capacity change from 0 to 128 [ 1030.489482][T14202] EXT4-fs: Ignoring removed nobh option [ 1030.821320][T14206] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1030.915044][T14202] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1030.938539][T14202] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.992151][T14206] EXT4-fs (loop1): 1 truncate cleaned up [ 1031.006376][T14206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.041274][ T5835] usbtest 3-1:0.167: couldn't get endpoints, -22 [ 1032.057937][ T5835] usbtest: probe of 3-1:0.167 failed with error -22 [ 1032.070209][ T5835] usb 3-1: USB disconnect, device number 20 [ 1032.102920][T13122] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1033.090996][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.489640][T14219] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1866'. [ 1033.702038][T14226] loop0: detected capacity change from 0 to 2048 [ 1033.728380][T14229] loop1: detected capacity change from 0 to 128 [ 1033.756605][T14229] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1033.761432][T14226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1033.804447][T14229] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1033.825872][T14229] ext2 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.852291][T14230] lo speed is unknown, defaulting to 1000 [ 1033.852838][ T28] audit: type=1800 audit(1760929054.950:71): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1867" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 1034.831310][T14221] loop4: detected capacity change from 0 to 32768 [ 1035.520979][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1035.567795][T14221] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1035.709905][T14252] syz.2.1872[14252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1035.710067][T14252] syz.2.1872[14252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1035.856134][T14221] XFS (loop4): Ending clean mount [ 1038.700349][ T28] audit: type=1800 audit(1760929059.122:72): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1863" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 1038.721783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.939069][T13122] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1039.383092][T14278] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 1039.392019][T14278] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1876'. [ 1039.838169][T14277] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1044.808750][T14292] loop1: detected capacity change from 0 to 256 [ 1045.005164][T14292] exfat: Deprecated parameter 'utf8' [ 1045.018778][T14292] exfat: Deprecated parameter 'namecase' [ 1045.039143][T14292] exfat: Deprecated parameter 'namecase' [ 1045.050415][T14292] exfat: Deprecated parameter 'utf8' [ 1046.168162][T14316] syz.4.1888 (14316) used greatest stack depth: 17160 bytes left [ 1046.292581][T14292] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1046.376789][T13128] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.794085][T14329] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 1046.802262][T14329] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1889'. [ 1047.263772][T14328] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1049.848723][T14348] loop2: detected capacity change from 0 to 32768 [ 1050.005753][T14348] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1050.015417][T14348] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1050.097673][T14348] XFS (loop2): Ending clean mount [ 1050.110782][T14348] XFS (loop2): Quotacheck needed: Please wait. [ 1050.134874][ T5835] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 1050.163608][ T5835] XFS (loop2): Unmount and run xfs_repair [ 1050.170144][ T5835] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1050.181889][ T5835] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 1050.192261][ T5835] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 1050.220295][ T5835] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1050.248945][ T5835] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 1050.275738][ T5835] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1050.314901][ T5835] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 1050.354836][ T5835] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1050.387438][ T5835] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1050.442464][ T48] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 1050.498297][T14348] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1051.478676][ T5792] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1052.983037][T14393] loop4: detected capacity change from 0 to 64 [ 1053.816491][T14404] loop4: detected capacity change from 0 to 512 [ 1053.842914][T14404] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1053.854791][T14404] EXT4-fs (loop4): external journal has bad superblock [ 1054.871504][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.878394][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.265233][T14447] loop0: detected capacity change from 0 to 512 [ 1058.411173][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1058.430326][T14447] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1058.442884][T14447] EXT4-fs (loop0): external journal has bad superblock [ 1058.515003][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 1058.521462][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 1058.543252][T14453] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 1058.552001][T14453] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1922'. [ 1058.793194][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 1058.800850][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 1058.919971][T14449] ceph: No mds server is up or the cluster is laggy [ 1059.338586][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 1059.370277][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 1059.739823][ T23] usb 5-1: device not accepting address 5, error -71 [ 1059.819887][T10438] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1060.051956][T10438] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1060.062333][T10438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.097756][T10438] usb 1-1: config 0 descriptor?? [ 1060.568088][T10438] gembird 0003:11FF:3331.0004: unknown main item tag 0x0 [ 1060.583055][T10438] gembird 0003:11FF:3331.0004: item fetching failed at offset 3/5 [ 1060.602506][T10438] gembird: probe of 0003:11FF:3331.0004 failed with error -22 [ 1060.786024][T14044] usb 1-1: USB disconnect, device number 12 [ 1061.272096][T14477] loop2: detected capacity change from 0 to 512 [ 1061.290448][T14477] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1061.300491][T14477] EXT4-fs (loop2): external journal has bad superblock [ 1062.369193][T14044] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1062.639492][T14044] usb 3-1: Using ep0 maxpacket: 32 [ 1062.673919][T14044] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 1062.743184][T14044] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1062.759741][T14493] loop1: detected capacity change from 0 to 1024 [ 1062.999572][T14044] usb 3-1: config 0 has no interface number 0 [ 1063.006500][T14044] usb 3-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1063.016979][T14044] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 1063.030006][T14044] usb 3-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 1063.050446][T14044] usb 3-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.064751][T14044] usb 3-1: config 0 interface 167 has no altsetting 0 [ 1063.532261][T14044] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1063.541552][T14044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.550432][T14044] usb 3-1: Product: syz [ 1063.554816][T14044] usb 3-1: Manufacturer: syz [ 1063.561250][T14044] usb 3-1: SerialNumber: syz [ 1063.576468][T14044] usb 3-1: config 0 descriptor?? [ 1063.594193][T14487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1063.858247][T14209] hfsplus: b-tree write err: -5, ino 4 [ 1064.985519][T14044] usbtest 3-1:0.167: couldn't get endpoints, -22 [ 1064.992132][T14044] usbtest: probe of 3-1:0.167 failed with error -22 [ 1065.006991][T14044] usb 3-1: USB disconnect, device number 21 [ 1065.165653][T11627] libceph: connect (1)[c::]:6789 error -101 [ 1065.181637][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 1065.200430][T14520] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 1065.224516][T14520] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1942'. [ 1065.477491][T14044] libceph: connect (1)[c::]:6789 error -101 [ 1065.492910][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 1065.552685][T14517] ceph: No mds server is up or the cluster is laggy [ 1065.705523][T14527] lo speed is unknown, defaulting to 1000 [ 1067.321532][T14546] loop2: detected capacity change from 0 to 8 [ 1068.738648][T14546] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1068.775378][T14546] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1068.814757][T14546] SQUASHFS error: Unable to read directory block [631:26] [ 1068.905520][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1069.325088][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 1069.494369][ T27] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 1069.513178][ T27] usb 5-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1069.537515][ T27] usb 5-1: config 0 has no interface number 0 [ 1069.544435][ T27] usb 5-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1069.559744][ T27] usb 5-1: config 0 interface 167 altsetting 1 endpoint 0x6 has an invalid bInterval 46, changing to 7 [ 1069.586288][ T27] usb 5-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 8278, setting to 1024 [ 1069.601135][T14569] lo speed is unknown, defaulting to 1000 [ 1069.608668][ T27] usb 5-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1069.640133][ T27] usb 5-1: config 0 interface 167 has no altsetting 0 [ 1069.661945][ T27] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1069.672689][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.686531][ T27] usb 5-1: Product: syz [ 1069.691105][ T27] usb 5-1: Manufacturer: syz [ 1069.698928][ T27] usb 5-1: SerialNumber: syz [ 1069.710907][ T27] usb 5-1: config 0 descriptor?? [ 1069.717890][T14551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1070.631684][T11627] libceph: connect (1)[c::]:6789 error -101 [ 1070.720968][T14584] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 1070.731947][T14584] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1963'. [ 1070.750638][T11627] libceph: mon0 (1)[c::]:6789 connect error [ 1071.348806][T14581] ceph: No mds server is up or the cluster is laggy [ 1071.350990][ T27] usbtest 5-1:0.167: couldn't get endpoints, -22 [ 1071.356576][T14044] libceph: connect (1)[c::]:6789 error -101 [ 1071.443042][ T27] usbtest: probe of 5-1:0.167 failed with error -22 [ 1071.458520][ T27] usb 5-1: USB disconnect, device number 7 [ 1071.466143][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 1072.451174][T14591] loop1: detected capacity change from 0 to 128 [ 1072.459047][T14591] EXT4-fs: Ignoring removed nobh option [ 1073.322198][T14591] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1073.337729][T14591] ext4 filesystem being mounted at /440/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.418495][T14597] loop4: detected capacity change from 0 to 64 [ 1073.536817][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1073.730722][T14604] 9pnet_fd: Insufficient options for proto=fd [ 1076.227570][T14625] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 1076.235583][T14625] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1974'. [ 1076.700411][T14623] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1077.258445][T14621] loop0: detected capacity change from 0 to 4096 [ 1077.294849][T14621] ntfs3: loop0: ino=3, Correct links count -> 2. [ 1077.321429][T14630] loop1: detected capacity change from 0 to 128 [ 1077.358437][T14630] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1077.372054][T14621] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1077.387134][T14630] hpfs: filesystem error: improperly stopped [ 1077.430961][T14630] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1077.449255][T14630] hpfs: You really don't want any checks? You are crazy... [ 1077.463760][T14615] loop2: detected capacity change from 0 to 32768 [ 1077.471234][T14630] hpfs: hpfs_map_sector(): read error [ 1077.476940][T14630] hpfs: code page support is disabled [ 1077.487769][T14621] ntfs3: loop0: failed to convert "0080" to cp864 [ 1077.487995][T14630] ================================================================== [ 1077.505705][T14630] BUG: KASAN: use-after-free in strcmp+0x6f/0xb0 [ 1077.512970][T14630] Read of size 1 at addr ffff888052c00001 by task syz.1.1977/14630 [ 1077.517136][T14621] ntfs3: loop0: failed to convert name for inode 1e. [ 1077.521067][T14630] [ 1077.521095][T14630] CPU: 0 PID: 14630 Comm: syz.1.1977 Not tainted syzkaller #0 [ 1077.521116][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1077.521133][T14630] Call Trace: [ 1077.521142][T14630] [ 1077.521155][T14630] dump_stack_lvl+0x16c/0x230 [ 1077.521187][T14630] ? __lock_acquire+0x7c80/0x7c80 [ 1077.521211][T14630] ? show_regs_print_info+0x20/0x20 [ 1077.521237][T14630] ? load_image+0x3b0/0x3b0 [ 1077.521258][T14630] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1077.521280][T14630] ? __virt_addr_valid+0x18c/0x540 [ 1077.521304][T14630] ? __virt_addr_valid+0x469/0x540 [ 1077.521329][T14630] print_report+0xac/0x220 [ 1077.521353][T14630] ? strcmp+0x6f/0xb0 [ 1077.599150][T14630] kasan_report+0x117/0x150 [ 1077.603966][T14630] ? strcmp+0x6f/0xb0 [ 1077.608094][T14630] strcmp+0x6f/0xb0 [ 1077.612071][T14630] hpfs_get_ea+0x115/0xda0 [ 1077.616541][T14630] ? bit_wait+0xd0/0xd0 [ 1077.621016][T14630] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1077.627396][T14630] ? hpfs_read_ea+0xba0/0xba0 [ 1077.632658][T14630] ? bit_waitqueue+0x30/0x30 [ 1077.637473][T14630] ? __bread_gfp+0x2a8/0x330 [ 1077.642297][T14630] ? hpfs_map_sector+0x14f/0x370 [ 1077.647621][T14630] ? hpfs_map_fnode+0x27e/0x690 [ 1077.652877][T14630] hpfs_read_inode+0x19e/0x1010 [ 1077.657973][T14630] ? iget_locked+0x733/0x840 [ 1077.662769][T14630] ? hpfs_init_inode+0x2d0/0x2d0 [ 1077.667904][T14630] ? security_inode_alloc+0xc1/0x110 [ 1077.673503][T14630] ? do_raw_spin_unlock+0x121/0x230 [ 1077.678937][T14630] ? hpfs_init_inode+0x1d0/0x2d0 [ 1077.684080][T14630] hpfs_fill_super+0x12d5/0x1ec0 [ 1077.689193][T14630] ? hpfs_mount+0x40/0x40 [ 1077.694065][T14630] ? vscnprintf+0x80/0x80 [ 1077.698710][T14630] ? down_read_killable+0x340/0x340 [ 1077.704238][T14630] ? setup_bdev_super+0x56b/0x660 [ 1077.710173][T14630] mount_bdev+0x22b/0x2d0 [ 1077.714883][T14630] ? hpfs_mount+0x40/0x40 [ 1077.719488][T14630] ? get_tree_bdev+0x510/0x510 [ 1077.724650][T14630] legacy_get_tree+0xea/0x180 [ 1077.729572][T14630] ? hpfs_ioctl+0x240/0x240 [ 1077.734997][T14630] vfs_get_tree+0x8c/0x280 [ 1077.739473][T14630] do_new_mount+0x24b/0xa40 [ 1077.744118][T14630] __se_sys_mount+0x2da/0x3c0 [ 1077.749100][T14630] ? __x64_sys_mount+0xc0/0xc0 [ 1077.753978][T14630] ? lockdep_hardirqs_on+0x98/0x150 [ 1077.759383][T14630] ? __x64_sys_mount+0x20/0xc0 [ 1077.764195][T14630] do_syscall_64+0x55/0xb0 [ 1077.768658][T14630] ? clear_bhb_loop+0x40/0x90 [ 1077.773543][T14630] ? clear_bhb_loop+0x40/0x90 [ 1077.778458][T14630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1077.784985][T14630] RIP: 0033:0x7f09cd39076a [ 1077.789475][T14630] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.809490][T14630] RSP: 002b:00007f09ce22ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1077.818388][T14630] RAX: ffffffffffffffda RBX: 00007f09ce22eef0 RCX: 00007f09cd39076a [ 1077.826592][T14630] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f09ce22eeb0 [ 1077.834676][T14630] RBP: 000020000000a000 R08: 00007f09ce22eef0 R09: 00000000032000c1 [ 1077.842856][T14630] R10: 00000000032000c1 R11: 0000000000000246 R12: 0000200000009ec0 [ 1077.850874][T14630] R13: 00007f09ce22eeb0 R14: 0000000000009e15 R15: 0000200000000080 [ 1077.859201][T14630] [ 1077.862256][T14630] [ 1077.864793][T14630] The buggy address belongs to the physical page: [ 1077.871859][T14630] page:ffffea00014b0000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x52c00 [ 1077.883973][T14630] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1077.892003][T14630] page_type: 0xffffff7f(buddy) [ 1077.897833][T14630] raw: 00fff00000000000 ffffea0001486808 ffffea0001670808 0000000000000000 [ 1077.907155][T14630] raw: 0000000000000001 0000000000000005 00000000ffffff7f 0000000000000000 [ 1077.915936][T14630] page dumped because: kasan: bad access detected [ 1077.922530][T14630] page_owner tracks the page as freed [ 1077.928189][T14630] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 14397, tgid 14396 (syz.2.1911), ts 1053117792591, free_ts 1053978706432 [ 1077.946913][T14630] post_alloc_hook+0x1cd/0x210 [ 1077.951981][T14630] get_page_from_freelist+0x195c/0x19f0 [ 1077.957552][T14630] __alloc_pages+0x1e3/0x460 [ 1077.962257][T14630] __folio_alloc+0x10/0x20 [ 1077.966881][T14630] vma_alloc_folio+0x47a/0x8f0 [ 1077.971756][T14630] shmem_alloc_folio+0x179/0x230 [ 1077.977065][T14630] shmem_alloc_and_acct_folio+0x189/0x630 [ 1077.982975][T14630] shmem_get_folio_gfp+0xcde/0x2ac0 [ 1077.988269][T14630] shmem_fault+0x1b6/0x7f0 [ 1077.992722][T14630] __do_fault+0x13b/0x4e0 [ 1077.997154][T14630] handle_mm_fault+0x3886/0x4920 [ 1078.002132][T14630] __get_user_pages+0x5ea/0x1470 [ 1078.007348][T14630] populate_vma_page_range+0x2b6/0x370 [ 1078.012931][T14630] __mm_populate+0x24c/0x380 [ 1078.017639][T14630] vm_mmap_pgoff+0x2e7/0x400 [ 1078.022344][T14630] do_syscall_64+0x55/0xb0 [ 1078.026778][T14630] page last free stack trace: [ 1078.031465][T14630] free_unref_page_prepare+0x7ce/0x8e0 [ 1078.037240][T14630] free_unref_page_list+0xbe/0x860 [ 1078.042582][T14630] release_pages+0x1fa0/0x2220 [ 1078.047535][T14630] __folio_batch_release+0x71/0xe0 [ 1078.052852][T14630] shmem_undo_range+0x5d0/0x1a40 [ 1078.058625][T14630] shmem_evict_inode+0x273/0xa70 [ 1078.063937][T14630] evict+0x486/0x870 [ 1078.067852][T14630] __dentry_kill+0x431/0x650 [ 1078.072549][T14630] dentry_kill+0xb8/0x290 [ 1078.077189][T14630] dput+0xfe/0x1e0 [ 1078.081210][T14630] __fput+0x5e5/0x970 [ 1078.085249][T14630] task_work_run+0x1ce/0x250 [ 1078.090054][T14630] do_exit+0x90b/0x23c0 [ 1078.094299][T14630] do_group_exit+0x21b/0x2d0 [ 1078.099467][T14630] get_signal+0x12fc/0x1400 [ 1078.104583][T14630] arch_do_signal_or_restart+0x9c/0x7b0 [ 1078.110388][T14630] [ 1078.112859][T14630] Memory state around the buggy address: [ 1078.118711][T14630] ffff888052bfff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1078.126890][T14630] ffff888052bfff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1078.135598][T14630] >ffff888052c00000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1078.144201][T14630] ^ [ 1078.148480][T14630] ffff888052c00080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1078.157539][T14630] ffff888052c00100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1078.166214][T14630] ================================================================== [ 1078.227060][T14630] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1078.234639][T14630] CPU: 0 PID: 14630 Comm: syz.1.1977 Not tainted syzkaller #0 [ 1078.242138][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1078.252324][T14630] Call Trace: [ 1078.255947][T14630] [ 1078.258995][T14630] dump_stack_lvl+0x16c/0x230 [ 1078.263816][T14630] ? show_regs_print_info+0x20/0x20 [ 1078.269152][T14630] ? load_image+0x3b0/0x3b0 [ 1078.273705][T14630] panic+0x2c0/0x710 [ 1078.277634][T14630] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1078.284009][T14630] ? bpf_jit_dump+0xd0/0xd0 [ 1078.288823][T14630] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1078.294801][T14630] ? _raw_spin_unlock+0x40/0x40 [ 1078.299732][T14630] ? strcmp+0x6f/0xb0 [ 1078.303752][T14630] check_panic_on_warn+0x84/0xa0 [ 1078.308836][T14630] ? strcmp+0x6f/0xb0 [ 1078.313026][T14630] end_report+0x6f/0x140 [ 1078.317313][T14630] kasan_report+0x128/0x150 [ 1078.322033][T14630] ? strcmp+0x6f/0xb0 [ 1078.326229][T14630] strcmp+0x6f/0xb0 [ 1078.330256][T14630] hpfs_get_ea+0x115/0xda0 [ 1078.334897][T14630] ? bit_wait+0xd0/0xd0 [ 1078.339115][T14630] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1078.345105][T14630] ? hpfs_read_ea+0xba0/0xba0 [ 1078.350103][T14630] ? bit_waitqueue+0x30/0x30 [ 1078.354746][T14630] ? __bread_gfp+0x2a8/0x330 [ 1078.359577][T14630] ? hpfs_map_sector+0x14f/0x370 [ 1078.364647][T14630] ? hpfs_map_fnode+0x27e/0x690 [ 1078.369828][T14630] hpfs_read_inode+0x19e/0x1010 [ 1078.374820][T14630] ? iget_locked+0x733/0x840 [ 1078.379538][T14630] ? hpfs_init_inode+0x2d0/0x2d0 [ 1078.384568][T14630] ? security_inode_alloc+0xc1/0x110 [ 1078.389991][T14630] ? do_raw_spin_unlock+0x121/0x230 [ 1078.395266][T14630] ? hpfs_init_inode+0x1d0/0x2d0 [ 1078.400877][T14630] hpfs_fill_super+0x12d5/0x1ec0 [ 1078.406141][T14630] ? hpfs_mount+0x40/0x40 [ 1078.410550][T14630] ? vscnprintf+0x80/0x80 [ 1078.415110][T14630] ? down_read_killable+0x340/0x340 [ 1078.420466][T14630] ? setup_bdev_super+0x56b/0x660 [ 1078.425806][T14630] mount_bdev+0x22b/0x2d0 [ 1078.430359][T14630] ? hpfs_mount+0x40/0x40 [ 1078.434857][T14630] ? get_tree_bdev+0x510/0x510 [ 1078.439955][T14630] legacy_get_tree+0xea/0x180 [ 1078.444787][T14630] ? hpfs_ioctl+0x240/0x240 [ 1078.449440][T14630] vfs_get_tree+0x8c/0x280 [ 1078.454004][T14630] do_new_mount+0x24b/0xa40 [ 1078.458639][T14630] __se_sys_mount+0x2da/0x3c0 [ 1078.463587][T14630] ? __x64_sys_mount+0xc0/0xc0 [ 1078.468619][T14630] ? lockdep_hardirqs_on+0x98/0x150 [ 1078.473882][T14630] ? __x64_sys_mount+0x20/0xc0 [ 1078.478947][T14630] do_syscall_64+0x55/0xb0 [ 1078.483503][T14630] ? clear_bhb_loop+0x40/0x90 [ 1078.488378][T14630] ? clear_bhb_loop+0x40/0x90 [ 1078.493110][T14630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.499680][T14630] RIP: 0033:0x7f09cd39076a [ 1078.504162][T14630] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.524768][T14630] RSP: 002b:00007f09ce22ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1078.533330][T14630] RAX: ffffffffffffffda RBX: 00007f09ce22eef0 RCX: 00007f09cd39076a [ 1078.541340][T14630] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f09ce22eeb0 [ 1078.549412][T14630] RBP: 000020000000a000 R08: 00007f09ce22eef0 R09: 00000000032000c1 [ 1078.557539][T14630] R10: 00000000032000c1 R11: 0000000000000246 R12: 0000200000009ec0 [ 1078.565609][T14630] R13: 00007f09ce22eeb0 R14: 0000000000009e15 R15: 0000200000000080 [ 1078.573786][T14630] [ 1078.577257][T14630] Kernel Offset: disabled [ 1078.581702][T14630] Rebooting in 86400 seconds..