last executing test programs: 5.796189868s ago: executing program 2 (id=2376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.010402788s ago: executing program 2 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() listen(0xffffffffffffffff, 0xffff8000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xeb, &(0x7f00000002c0), &(0x7f0000000080)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) migrate_pages(r0, 0x0, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x20400000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x3) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) move_pages(r0, 0x4, &(0x7f00000002c0)=[&(0x7f000091f000/0x4000)=nil, &(0x7f00003cb000/0x3000)=nil, &(0x7f00000f5000/0x1000)=nil, &(0x7f0000182000/0x4000)=nil], &(0x7f0000000300)=[0x8, 0x6, 0x4], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) bind$rds(0xffffffffffffffff, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}], 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/161, 0xa1}], 0x1, 0x76}}], 0x90}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002f80)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000040), 0xfe46) socket(0x10, 0x2, 0x0) 4.051633221s ago: executing program 2 (id=2387): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_setup(0xec0, &(0x7f0000000300)={0x0, 0xaf1, 0x10100, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_uring_setup(0x7c5a, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 3.878515007s ago: executing program 3 (id=2390): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) cachestat(r3, &(0x7f0000000040)={0x1f00, 0x1f}, &(0x7f0000000080), 0x0) 3.861246394s ago: executing program 2 (id=2391): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000180)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9", 0x42}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b1aaea9b9e5481dcd8c125f478bedc0474ab0607636ee67ac131020000c8001af506896b01dccc9d08e4f214056b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70a", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c910000000000", 0x78}, {&(0x7f0000000ac0)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526a", 0x3b}, {&(0x7f0000000840)="d31547c4f8a72a1d1f163c917e6e9ec6044b034b0fb9ad2702a1952a1914f33cdc35f1bc4139b5b35c886ad316729ceb015bdfaaae494bd9b206f9b201fe6e3f06f72abee112774d0fc530e9b05abf1a8df5a4a0cf9931e439d263fd5308507f32e9fc5a26752d6d5b984699efb70fb7f6f59c93dff1549946427fc420bd55256245dfe80908c219b7c053c646823af43dbb8a8ab1e1b20809cca5d52815afb14c76b97dc2ca4f7bf783579e6fcfe7f7e9105b3bc57414bd4da31fd1f155dd075ebda47cb00d0c9021b1878ebe9aaf907f82a62b9d7300c6b70a74620f40a1df8beeee3c296bf362dddcebca", 0xec}, {&(0x7f0000000640)="91f863dc974c0b31640ea56f5f2219e02b867338a4451b988393b9364939b45ee08a130e785e56198dbd0b4eed94352b188d74078f545ed6f7a9860324bf3f63326549b3f6dd96ebd6c43870644a554bf8ee7b9409ca7f4a01aafd53907fb1477d67bb5d06ee9a00256d651d8496944087516bd8e4d21ae5f6737320918dd8a62eb62fb0556e6f", 0x87}, {&(0x7f0000000000)="b7cc82d93bd01bb2c1610f6ae515a6bbe0b6db937bb7c30d3c49367f3fbaff963b2548c13fdd6e21bd14", 0x2a}], 0x7}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.724223593s ago: executing program 2 (id=2394): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 3.653994356s ago: executing program 0 (id=2395): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x0) tkill(r6, 0xb) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) close_range(0xffffffffffffffff, r7, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0x0) open$dir(0x0, 0x80080, 0x4) 3.165843897s ago: executing program 3 (id=2401): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_setup(0xec0, &(0x7f0000000300)={0x0, 0xaf1, 0x10100, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_uring_setup(0x7c5a, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x10001, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3.098435238s ago: executing program 2 (id=2403): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.864123842s ago: executing program 4 (id=2405): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000180)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9", 0x42}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b1aaea9b9e5481dcd8c125f478bedc0474ab0607636ee67ac131020000c8001af506896b01dccc9d08e4f214056b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70a", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000", 0x7a}, {&(0x7f0000000ac0)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526a", 0x3b}, {&(0x7f0000000840)="d31547c4f8a72a1d1f163c917e6e9ec6044b034b0fb9ad2702a1952a1914f33cdc35f1bc4139b5b35c886ad316729ceb015bdfaaae494bd9b206f9b201fe6e3f06f72abee112774d0fc530e9b05abf1a8df5a4a0cf9931e439d263fd5308507f32e9fc5a26752d6d5b984699efb70fb7f6f59c93dff1549946427fc420bd55256245dfe80908c219b7c053c646823af43dbb8a8ab1e1b20809cca5d52815afb14c76b97dc2ca4f7bf783579e6fcfe7f7e9105b3bc57414bd4da31fd1f155dd075ebda47cb00d0c9021b1878ebe9aaf907f82a62b9d7300c6b70a74620f40a1df8beeee3c296bf362dddcebca", 0xec}, {&(0x7f0000000640)="91f863dc974c0b31640ea56f5f2219e02b867338a4451b988393b9364939b45ee08a130e785e56198dbd0b4eed94352b188d74078f545ed6f7a9860324bf3f63326549b3f6dd96ebd6c43870644a554bf8ee7b9409ca7f4a01aafd53907fb1477d67bb5d06ee9a00256d651d8496944087516bd8e4d21ae5f6737320918dd8a62eb62fb0556e6f", 0x87}, {&(0x7f0000000000)="b7cc82d93bd01bb2c1610f6ae515a6bbe0b6db937bb7c30d3c49367f3fbaff963b2548c13fdd6e21bd14", 0x2a}], 0x7}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.769347299s ago: executing program 3 (id=2406): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000200000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe500030000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.768525791s ago: executing program 4 (id=2407): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x30}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ba1a7a92f16ca34e451b0045b563cf00"/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) 2.661303509s ago: executing program 3 (id=2408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 2.389703369s ago: executing program 3 (id=2409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0xde4d, 0x800, 0x2}, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 2.085265097s ago: executing program 1 (id=2410): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="030700000000000000", @ANYBLOB='2O'], 0x1c}}, 0x0) 1.914908502s ago: executing program 0 (id=2411): capset(&(0x7f0000000080)={0x20071026}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000003a80)={0x3, 'vlan0\x00'}) 1.825082224s ago: executing program 0 (id=2412): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000200), 0x0, &(0x7f0000000380)) syz_open_dev$sndmidi(&(0x7f0000000040), 0xd7, 0x8000) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x2def, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r3, 0x0, 0xfb68, 0x1, 0x0, 0x0) 1.564021962s ago: executing program 1 (id=2413): connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.499468547s ago: executing program 4 (id=2414): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) 1.362642723s ago: executing program 1 (id=2415): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x7}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.351746705s ago: executing program 4 (id=2416): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_setup(0xec0, &(0x7f0000000300)={0x0, 0xaf1, 0x10100, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_uring_setup(0x7c5a, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x10001, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.217316118s ago: executing program 3 (id=2417): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000050000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) 1.122335641s ago: executing program 4 (id=2418): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xff0c, 0x0, 0x6, @dev}, 0x14) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000003340)=""/4071, &(0x7f0000001100)=0xfe7) 970.568653ms ago: executing program 0 (id=2419): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 882.107125ms ago: executing program 0 (id=2420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = shmget(0x3, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x2000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 789.113204ms ago: executing program 4 (id=2421): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000050000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) 722.600178ms ago: executing program 1 (id=2422): capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000003a80)={0x3, 'vlan0\x00'}) 722.425697ms ago: executing program 1 (id=2423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="030700000000000000", @ANYBLOB='2O'], 0x1c}}, 0x0) 667.778705ms ago: executing program 1 (id=2424): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x30}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ba1a7a92f16ca34e451b0045b563cf00"/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) 0s ago: executing program 0 (id=2425): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x0, 0x9, 0xd5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, {0x6000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80, 0xfc, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xd, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xfe}, {0x1000}, {}, 0xddf8ffdb, 0x0, 0x207002, 0x140030, 0x5, 0xf801, 0x0, [0x0, 0x0, 0xfffffffffffffffd]}) kernel console output (not intermixed with test programs): udit(1728467708.117:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f19ecb7cc8a code=0x7ffc0000 [ 693.651895][ T29] audit: type=1326 audit(1728467708.117:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18140 comm="syz.2.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f19ecb7c897 code=0x7ffc0000 [ 693.687328][T17669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.884327][T17696] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.067828][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 694.076950][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 694.086213][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 694.222420][T17897] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 694.252999][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 694.385555][T18165] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1629'. [ 694.393263][T17897] usb 2-1: device descriptor read/64, error -32 [ 694.394874][T18165] 0ªX¹¦À: renamed from caif0 [ 694.414046][T18165] 0ªX¹¦À: entered allmulticast mode [ 694.440209][T18165] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 694.632373][T17897] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 694.741643][ T9] usb 1-1: USB disconnect, device number 9 [ 694.802096][T17897] usb 2-1: Using ep0 maxpacket: 8 [ 694.835116][T17897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 694.921613][T17897] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 694.987992][T17897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.018117][T17897] usb 2-1: config 0 descriptor?? [ 695.261190][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 695.270290][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 695.279300][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1632'. [ 696.339548][T18179] lo speed is unknown, defaulting to 1000 [ 696.346482][T18185] lo speed is unknown, defaulting to 1000 [ 696.399823][T18188] siw: device registration error -23 [ 696.400105][T18183] siw: device registration error -23 [ 696.916988][T17897] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 696.948900][T17897] usb 2-1: USB disconnect, device number 10 [ 697.040524][T18195] lo speed is unknown, defaulting to 1000 [ 697.123402][T18198] siw: device registration error -23 [ 697.194520][T18200] loop2: detected capacity change from 0 to 1024 [ 697.202464][T18200] EXT4-fs: Ignoring removed orlov option [ 697.208564][T18200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 697.248146][T18200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.273878][T18200] usb usb8: usbfs: process 18200 (syz.2.1640) did not claim interface 0 before use [ 697.377474][T17696] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.620167][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 697.627675][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 697.643832][T18216] lo speed is unknown, defaulting to 1000 [ 697.653103][T18213] tipc: Started in network mode [ 697.660035][T18213] tipc: Node identity e6ad6d7ed841, cluster identity 4711 [ 697.668143][T18213] tipc: Enabled bearer , priority 0 [ 697.683521][T18219] siw: device registration error -23 [ 697.894191][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 697.901429][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 697.978423][T18196] tipc: Disabling bearer [ 698.109698][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 698.119164][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 698.129014][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 698.452450][T18212] ceph: No mds server is up or the cluster is laggy [ 698.472041][ T25] libceph: connect (1)[c::]:6789 error -101 [ 698.481676][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 698.803678][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 698.814436][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 698.831977][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 699.997715][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 700.006678][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 700.015773][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 701.066455][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 703.359363][T18288] __nla_validate_parse: 2 callbacks suppressed [ 703.359378][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 703.376883][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 704.012000][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 704.162045][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 704.174691][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.195374][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 704.221343][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.428341][ T9] usb 4-1: config 0 descriptor?? [ 704.451502][T18303] lo speed is unknown, defaulting to 1000 [ 704.628203][T18307] loop0: detected capacity change from 0 to 512 [ 704.744188][T18307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.802872][T18307] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.906557][T18307] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 705.065178][T17683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.082615][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 705.120664][T18315] lo speed is unknown, defaulting to 1000 [ 705.185282][T18318] siw: device registration error -23 [ 706.705368][ T9] usb 4-1: USB disconnect, device number 8 [ 706.794071][T18331] loop2: detected capacity change from 0 to 32768 [ 706.822906][T18331] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1674 (18331) [ 706.854862][T18335] loop1: detected capacity change from 0 to 32768 [ 706.868268][T18331] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 706.889873][T18335] BTRFS: device /dev/loop1 (7:1) using temp-fsid b1db21ee-8a3c-4f9f-81d5-6e1540efef14 [ 706.903002][T18331] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 706.913587][T18335] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1676 (18335) [ 706.930239][T18331] BTRFS info (device loop2): using free-space-tree [ 706.945440][T18335] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 706.969018][T18335] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 707.154126][T18335] BTRFS info (device loop1): using free-space-tree [ 707.355270][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 707.355289][ T29] audit: type=1800 audit(1728467722.667:841): pid=18331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1674" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 707.382093][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.453751][T17696] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 707.555834][ T29] audit: type=1800 audit(1728467722.847:842): pid=18335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1676" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 707.716864][T18383] random: crng reseeded on system resumption [ 707.798603][T17669] BTRFS info (device loop1): last unmount of filesystem b1db21ee-8a3c-4f9f-81d5-6e1540efef14 [ 708.280149][T18388] bridge0: port 3(team0) entered blocking state [ 708.288384][T18388] bridge0: port 3(team0) entered disabled state [ 708.335579][T18388] team0: entered allmulticast mode [ 708.384761][T18388] team_slave_0: entered allmulticast mode [ 708.393082][T18393] sg_write: data in/out 32733/14 bytes for SCSI command 0x15-- guessing data in; [ 708.393082][T18393] program syz.2.1684 not setting count and/or reply_len properly [ 708.422058][T18388] team_slave_1: entered allmulticast mode [ 708.459663][T18388] team0: entered promiscuous mode [ 708.520832][T18388] team_slave_0: entered promiscuous mode [ 708.577066][T18388] team_slave_1: entered promiscuous mode [ 708.702483][T18388] bridge0: port 3(team0) entered blocking state [ 708.708845][T18388] bridge0: port 3(team0) entered forwarding state [ 709.280669][T18407] bridge0: port 3(team0) entered blocking state [ 709.292791][T18407] bridge0: port 3(team0) entered disabled state [ 709.303947][T18407] team0: entered allmulticast mode [ 709.309168][T18407] team_slave_0: entered allmulticast mode [ 709.315130][T18407] team_slave_1: entered allmulticast mode [ 709.329162][T18407] team0: entered promiscuous mode [ 709.337562][T18407] team_slave_0: entered promiscuous mode [ 709.369353][T18407] team_slave_1: entered promiscuous mode [ 709.443611][T18407] bridge0: port 3(team0) entered blocking state [ 709.449965][T18407] bridge0: port 3(team0) entered forwarding state [ 709.467849][T18413] loop2: detected capacity change from 0 to 512 [ 709.537105][T18413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.557005][T18413] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.599989][T18399] loop3: detected capacity change from 0 to 32768 [ 709.636218][T18399] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1687 (18399) [ 709.685618][T18413] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 709.717356][T18399] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 709.724209][T17696] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.771228][T18399] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 709.799578][T18399] BTRFS info (device loop3): using free-space-tree [ 709.962110][ T29] audit: type=1800 audit(1728467725.247:843): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1687" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 710.030438][T17453] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 710.487581][T18435] loop2: detected capacity change from 0 to 32768 [ 710.508283][T18435] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1689 (18435) [ 710.563660][T18435] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 710.629205][T18435] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 710.662429][T18435] BTRFS info (device loop2): using free-space-tree [ 710.845581][T18437] loop3: detected capacity change from 0 to 32768 [ 710.869184][T18437] BTRFS: device /dev/loop3 (7:3) using temp-fsid e88448df-57f5-4031-bb1a-82303bc8f30d [ 710.909334][T18437] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1690 (18437) [ 710.964302][T18437] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 711.012786][ T29] audit: type=1800 audit(1728467726.307:844): pid=18435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1689" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 711.047139][T18437] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 711.087614][T18437] BTRFS info (device loop3): using free-space-tree [ 711.119767][T17696] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 711.724343][ T29] audit: type=1800 audit(1728467727.037:845): pid=18437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1690" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 711.790772][T17453] BTRFS info (device loop3): last unmount of filesystem e88448df-57f5-4031-bb1a-82303bc8f30d [ 712.812344][ T5283] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 712.928933][T18483] loop0: detected capacity change from 0 to 32768 [ 712.946051][T18483] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1695 (18483) [ 712.991992][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 712.998417][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.019666][ T5283] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 713.066891][T18483] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 713.088635][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.102121][T18483] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 713.122076][T18483] BTRFS info (device loop0): using free-space-tree [ 713.237504][T18492] loop3: detected capacity change from 0 to 32768 [ 713.262270][T18492] BTRFS: device /dev/loop3 (7:3) using temp-fsid e42c06be-d2ae-4619-9a36-a48bab7c4520 [ 713.274010][T18492] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1694 (18492) [ 713.652122][ T5283] usb 2-1: config 0 descriptor?? [ 713.693606][T18492] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 713.720445][T18492] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 713.733241][T18492] BTRFS info (device loop3): using free-space-tree [ 714.007787][ T29] audit: type=1800 audit(1728467729.317:846): pid=18483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1695" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 714.149216][ T5283] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 714.190901][T17453] BTRFS info (device loop3): last unmount of filesystem e42c06be-d2ae-4619-9a36-a48bab7c4520 [ 714.235406][T17683] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 714.665637][ T5280] libceph: connect (1)[c::]:6789 error -101 [ 714.671717][ T5280] libceph: mon0 (1)[c::]:6789 connect error [ 714.700019][T18552] ceph: No mds server is up or the cluster is laggy [ 715.603896][T18558] bridge0: port 3(team0) entered blocking state [ 715.635310][T18558] bridge0: port 3(team0) entered disabled state [ 716.105864][ T5280] usb 2-1: USB disconnect, device number 11 [ 716.108810][T18558] team0: entered allmulticast mode [ 716.117458][T18558] team_slave_0: entered allmulticast mode [ 716.146396][T18558] team_slave_1: entered allmulticast mode [ 716.208008][T18558] team0: entered promiscuous mode [ 716.215940][T18558] team_slave_0: entered promiscuous mode [ 716.231452][T18550] loop3: detected capacity change from 0 to 32768 [ 716.239841][T18550] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1705 (18550) [ 716.255842][T18558] team_slave_1: entered promiscuous mode [ 716.263160][T18550] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 716.280786][T18558] bridge0: port 3(team0) entered blocking state [ 716.287197][T18558] bridge0: port 3(team0) entered forwarding state [ 716.299651][T18577] siw: device registration error -23 [ 716.312613][T18550] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 716.346492][T18575] lo speed is unknown, defaulting to 1000 [ 716.430779][T18550] BTRFS info (device loop3): using free-space-tree [ 717.099911][ T29] audit: type=1800 audit(1728467732.407:847): pid=18550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1705" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 717.237589][T17453] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 717.835154][T18581] loop2: detected capacity change from 0 to 32768 [ 717.846133][T18581] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1714 (18581) [ 717.888206][T18581] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 717.999555][T18611] lo speed is unknown, defaulting to 1000 [ 718.305555][T18581] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 718.396929][T18581] BTRFS info (device loop2): using free-space-tree [ 718.426656][T18605] loop3: detected capacity change from 0 to 32768 [ 718.505274][T18605] BTRFS: device /dev/loop3 (7:3) using temp-fsid 89fa2e90-b060-46c2-a801-ecf14a2d2ca2 [ 718.515172][T18605] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1715 (18605) [ 718.557590][T18605] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 718.568148][T18605] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 718.577954][T18605] BTRFS info (device loop3): using free-space-tree [ 718.780272][T18616] loop0: detected capacity change from 0 to 32768 [ 718.808628][T18616] BTRFS: device /dev/loop0 (7:0) using temp-fsid 874d405b-b06a-4a60-8100-974ecc6ab281 [ 718.818817][T18616] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1718 (18616) [ 719.186637][T18644] siw: device registration error -23 [ 719.296472][T18636] lo speed is unknown, defaulting to 1000 [ 719.302344][T18616] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 719.307809][T18616] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 719.322683][T18616] BTRFS info (device loop0): using free-space-tree [ 719.434585][T17453] BTRFS info (device loop3): last unmount of filesystem 89fa2e90-b060-46c2-a801-ecf14a2d2ca2 [ 719.513073][T18581] BTRFS error (device loop2): open_ctree failed [ 719.591343][ T29] audit: type=1800 audit(1728467734.897:848): pid=18616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1718" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 719.814857][T17683] BTRFS info (device loop0): last unmount of filesystem 874d405b-b06a-4a60-8100-974ecc6ab281 [ 720.013763][T18684] loop2: detected capacity change from 0 to 32768 [ 720.039668][T18684] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1726 (18684) [ 720.101062][T18684] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 720.196558][T18684] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 720.213992][T18684] BTRFS info (device loop2): using free-space-tree [ 720.768047][ T29] audit: type=1800 audit(1728467736.077:849): pid=18684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1726" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 720.829891][T17696] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 721.581956][ T29] audit: type=1326 audit(1728467736.827:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.1.1733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc97dff9 code=0x0 [ 721.682209][T18721] tipc: Started in network mode [ 721.688855][T18721] tipc: Node identity d67faae41e2e, cluster identity 4711 [ 722.302344][T18721] tipc: Enabled bearer , priority 0 [ 722.312053][T18727] lo speed is unknown, defaulting to 1000 [ 722.625691][T18723] loop0: detected capacity change from 0 to 32768 [ 722.717694][T18691] tipc: Disabling bearer [ 722.849089][T18723] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1734 (18723) [ 723.131875][T18723] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 723.156085][T18723] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 723.166667][T18723] BTRFS info (device loop0): using free-space-tree [ 723.255925][ T29] audit: type=1800 audit(1728467738.567:851): pid=18723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1734" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 723.342082][T17683] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 723.500986][T18732] loop4: detected capacity change from 0 to 32768 [ 723.542485][T18732] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1735 (18732) [ 723.583151][T18734] loop1: detected capacity change from 0 to 32768 [ 723.599742][T18734] BTRFS: device /dev/loop1 (7:1) using temp-fsid 00c1422c-3ba6-4fcc-b6eb-129100cb4042 [ 723.603574][T18732] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 723.612938][T18734] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1736 (18734) [ 723.640464][T18734] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 723.650957][T18734] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 723.660728][T18734] BTRFS info (device loop1): using free-space-tree [ 723.671758][T18732] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 723.726656][T18732] BTRFS info (device loop4): using free-space-tree [ 723.882325][ T29] audit: type=1800 audit(1728467739.187:852): pid=18734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1736" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 724.006493][T17669] BTRFS info (device loop1): last unmount of filesystem 00c1422c-3ba6-4fcc-b6eb-129100cb4042 [ 724.029541][T18775] loop0: detected capacity change from 0 to 32768 [ 724.041114][T18775] BTRFS: device /dev/loop0 (7:0) using temp-fsid 68595fbc-b8d4-4c8d-874b-2eb7fd9df1ce [ 724.051207][T18775] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1738 (18775) [ 724.064298][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 724.078156][T18775] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 724.088841][T18775] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 724.099207][T18775] BTRFS info (device loop0): using free-space-tree [ 724.145146][T18760] loop3: detected capacity change from 0 to 32768 [ 724.152921][T18760] XFS: ikeep mount option is deprecated. [ 724.267748][T18760] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 724.302835][ T29] audit: type=1800 audit(1728467739.617:853): pid=18775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1738" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 724.322010][T18760] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 724.493960][T17683] BTRFS info (device loop0): last unmount of filesystem 68595fbc-b8d4-4c8d-874b-2eb7fd9df1ce [ 724.520529][T18760] XFS (loop3): Starting recovery (logdev: internal) [ 724.642544][T18760] XFS (loop3): Ending recovery (logdev: internal) [ 725.117725][ T29] audit: type=1326 audit(1728467740.037:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18828 comm="syz.1.1746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc97dff9 code=0x0 [ 725.151246][ T29] audit: type=1800 audit(1728467740.457:855): pid=18760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1740" name="bus" dev="loop3" ino=6153 res=0 errno=0 [ 725.233430][T18814] loop4: detected capacity change from 0 to 32768 [ 725.242530][T18814] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1743 (18814) [ 725.270970][T18814] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 725.283160][T18814] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 725.330062][T18814] BTRFS info (device loop4): using free-space-tree [ 725.337391][T18760] loop3: detected capacity change from 32768 to 0 [ 725.362495][T18760] bio_check_eod: 112 callbacks suppressed [ 725.362515][T18760] syz.3.1740: attempt to access beyond end of device [ 725.362515][T18760] loop3: rw=524288, sector=12252, nr_sectors = 4 limit=0 [ 725.472908][T18760] syz.3.1740: attempt to access beyond end of device [ 725.472908][T18760] loop3: rw=0, sector=12252, nr_sectors = 4 limit=0 [ 725.489475][ T29] audit: type=1800 audit(1728467740.797:856): pid=18760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1740" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 725.510631][T18760] syz.3.1740: attempt to access beyond end of device [ 725.510631][T18760] loop3: rw=2048, sector=12252, nr_sectors = 4 limit=0 [ 725.665571][T18849] lo speed is unknown, defaulting to 1000 [ 726.087118][T17453] syz-executor: attempt to access beyond end of device [ 726.087118][T17453] loop3: rw=432129, sector=96, nr_sectors = 16 limit=0 [ 726.111150][ T1030] XFS (loop3): log I/O error -5 [ 726.111690][ T6433] kworker/1:7: attempt to access beyond end of device [ 726.111690][ T6433] loop3: rw=4096, sector=3, nr_sectors = 1 limit=0 [ 726.116258][ T1030] XFS (loop3): Filesystem has been shut down due to log error (0x2). [ 726.137437][ T1030] XFS (loop3): Please unmount the filesystem and rectify the problem(s). [ 726.146590][T17453] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 726.632624][ T29] audit: type=1800 audit(1728467741.867:857): pid=18814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1743" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 727.153855][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 727.213624][T18868] loop3: detected capacity change from 0 to 32768 [ 727.267936][T18868] BTRFS: device /dev/loop3 (7:3) using temp-fsid 4934b8e1-8674-414a-9b14-c6c0205b8ffc [ 727.304013][T18868] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1748 (18868) [ 727.340192][T18868] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 727.384187][T18868] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 727.393721][T18868] BTRFS info (device loop3): using free-space-tree [ 727.553033][T17897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 727.695518][ T29] audit: type=1800 audit(1728467742.987:858): pid=18868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1748" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 727.702078][T17897] usb 2-1: Using ep0 maxpacket: 8 [ 727.802038][T17897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 727.832463][T17897] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 727.862048][T17897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.904268][T17453] BTRFS info (device loop3): last unmount of filesystem 4934b8e1-8674-414a-9b14-c6c0205b8ffc [ 727.975798][T17897] usb 2-1: config 0 descriptor?? [ 728.194499][T18898] loop4: detected capacity change from 0 to 32768 [ 728.243423][T18898] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1753 (18898) [ 728.421310][T17897] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 728.600623][T18898] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 728.640224][T18898] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 728.680145][T18898] BTRFS info (device loop4): using free-space-tree [ 729.074128][T18904] loop3: detected capacity change from 0 to 32768 [ 729.443650][T18904] BTRFS: device /dev/loop3 (7:3) using temp-fsid fa836610-acb9-4793-aa2f-d4ad97f1d9c6 [ 729.471432][T18904] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1755 (18904) [ 730.002755][T17897] usb 2-1: USB disconnect, device number 12 [ 730.073492][T18904] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 730.083847][T18904] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 730.095784][T18904] BTRFS info (device loop3): using free-space-tree [ 730.161230][ T29] audit: type=1800 audit(1728467745.467:859): pid=18898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1753" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 730.217328][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 730.324788][ T29] audit: type=1800 audit(1728467745.627:860): pid=18904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1755" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 730.413005][T17453] BTRFS info (device loop3): last unmount of filesystem fa836610-acb9-4793-aa2f-d4ad97f1d9c6 [ 730.617070][T18946] 9pnet_fd: Insufficient options for proto=fd [ 730.944018][T18953] lo speed is unknown, defaulting to 1000 [ 732.140234][T18945] loop3: detected capacity change from 0 to 32768 [ 732.150020][T18940] loop4: detected capacity change from 0 to 32768 [ 732.167412][T18945] XFS: ikeep mount option is deprecated. [ 732.190050][T18940] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1756 (18940) [ 732.217560][T18940] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 732.341733][T18940] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 732.353703][T18945] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 732.372166][T18940] BTRFS info (device loop4): using free-space-tree [ 732.456952][T18945] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 732.468262][ T5320] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 732.487997][T18945] XFS (loop3): Starting recovery (logdev: internal) [ 732.533158][ T29] audit: type=1800 audit(1728467747.827:861): pid=18940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1756" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 732.587701][T18945] XFS (loop3): Ending recovery (logdev: internal) [ 732.632046][ T5320] usb 3-1: Using ep0 maxpacket: 32 [ 732.638825][ T5320] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 732.652099][ T5320] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 732.661581][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 732.678737][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 732.689482][ T29] audit: type=1800 audit(1728467747.967:862): pid=18945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1758" name="bus" dev="loop3" ino=6153 res=0 errno=0 [ 732.699089][ T5320] usb 3-1: Product: syz [ 732.724921][ T5320] usb 3-1: Manufacturer: syz [ 732.737638][ T5320] usb 3-1: SerialNumber: syz [ 732.745928][ T5320] usb 3-1: config 0 descriptor?? [ 732.762091][T18945] loop3: detected capacity change from 32768 to 0 [ 732.768827][T18968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 732.907587][T18945] syz.3.1758: attempt to access beyond end of device [ 732.907587][T18945] loop3: rw=524288, sector=12252, nr_sectors = 4 limit=0 [ 732.945567][T18967] loop1: detected capacity change from 0 to 32768 [ 732.962597][T18945] syz.3.1758: attempt to access beyond end of device [ 732.962597][T18945] loop3: rw=0, sector=12252, nr_sectors = 4 limit=0 [ 732.993232][T18945] syz.3.1758: attempt to access beyond end of device [ 732.993232][T18945] loop3: rw=2048, sector=12252, nr_sectors = 4 limit=0 [ 733.010870][ T29] audit: type=1800 audit(1728467748.297:863): pid=18945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1758" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 733.024060][T18968] [U]  [ 733.041356][T18967] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1764 (18967) [ 733.095590][T18967] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 733.107930][T18967] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 733.119546][T18967] BTRFS info (device loop1): using free-space-tree [ 733.188015][ T29] audit: type=1800 audit(1728467748.497:864): pid=18967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1764" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 733.208956][ T5320] kworker/0:5: attempt to access beyond end of device [ 733.208956][ T5320] loop3: rw=4096, sector=3, nr_sectors = 1 limit=0 [ 733.222915][T17453] syz-executor: attempt to access beyond end of device [ 733.222915][T17453] loop3: rw=432129, sector=96, nr_sectors = 16 limit=0 [ 733.224984][ T5320] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 5 [ 733.275420][ T6433] XFS (loop3): xfs_difree: xfs_ialloc_read_agi() returned error -5. [ 733.288760][ T1030] XFS (loop3): log I/O error -5 [ 733.295265][ T5320] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 733.310165][T17453] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 733.350782][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 733.361870][ T5320] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 733.373558][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 733.401125][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 734.546448][T19017] loop0: detected capacity change from 0 to 32768 [ 734.564502][T19017] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1769 (19017) [ 734.629907][T19017] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 734.746463][ T5320] libceph: connect (1)[c::]:6789 error -101 [ 734.827013][T19037] random: crng reseeded on system resumption [ 735.223726][ T5320] libceph: mon0 (1)[c::]:6789 connect error [ 735.264245][T19017] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 735.274689][T19017] BTRFS info (device loop0): using free-space-tree [ 735.315672][T19050] 9pnet_fd: Insufficient options for proto=fd [ 735.359937][ T29] audit: type=1800 audit(1728467750.667:865): pid=19017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1769" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 735.416647][T17683] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 735.429180][T19029] ceph: No mds server is up or the cluster is laggy [ 735.687244][T19068] lo speed is unknown, defaulting to 1000 [ 736.957307][T19075] loop0: detected capacity change from 0 to 32768 [ 736.962122][ T5320] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 736.965563][T19075] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1778 (19075) [ 736.998416][T19075] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 737.015019][T19075] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 737.027764][T19075] BTRFS info (device loop0): using free-space-tree [ 737.067145][ T29] audit: type=1800 audit(1728467752.377:866): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1778" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 737.122121][ T5320] usb 4-1: Using ep0 maxpacket: 8 [ 737.131626][ T5320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.161482][T17683] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 737.182051][ T5320] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 737.197209][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.213283][ T5320] usb 4-1: config 0 descriptor?? [ 738.064596][ T5320] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 738.499180][ T29] audit: type=1326 audit(1728467753.647:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.4.1784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa522b7dff9 code=0x0 [ 738.864289][T19116] random: crng reseeded on system resumption [ 739.917714][T19122] lo speed is unknown, defaulting to 1000 [ 740.313745][ T5320] usb 4-1: USB disconnect, device number 9 [ 740.356919][T19110] loop1: detected capacity change from 0 to 32768 [ 740.390861][T19110] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1785 (19110) [ 740.430800][T19110] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 740.459774][T19110] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 740.489302][T19110] BTRFS info (device loop1): using free-space-tree [ 740.540719][T19139] 9pnet_fd: Insufficient options for proto=fd [ 740.620719][ T29] audit: type=1800 audit(1728467755.927:868): pid=19110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1785" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 740.677478][T19126] loop0: detected capacity change from 0 to 32768 [ 740.688570][T19128] loop4: detected capacity change from 0 to 32768 [ 740.701774][T19128] BTRFS: device /dev/loop4 (7:4) using temp-fsid bb1af331-f511-4952-94fd-154e3be0a5fa [ 740.712285][T19128] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1790 (19128) [ 740.720015][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 740.739726][T19126] BTRFS: device /dev/loop0 (7:0) using temp-fsid 6198260e-bcb2-45a6-8dd4-3a4ccf21cba8 [ 740.746377][T19128] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 740.750310][T19126] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1789 (19126) [ 740.761035][T19128] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 740.782546][T19128] BTRFS info (device loop4): using free-space-tree [ 740.785320][T19126] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 740.800444][T19126] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 740.812579][T19126] BTRFS info (device loop0): using free-space-tree [ 740.917807][ T29] audit: type=1800 audit(1728467756.227:869): pid=19128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1790" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 741.001633][ T29] audit: type=1800 audit(1728467756.307:870): pid=19126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1789" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 741.039756][T17575] BTRFS info (device loop4): last unmount of filesystem bb1af331-f511-4952-94fd-154e3be0a5fa [ 741.097057][T17683] BTRFS info (device loop0): last unmount of filesystem 6198260e-bcb2-45a6-8dd4-3a4ccf21cba8 [ 741.414814][T19187] loop4: detected capacity change from 0 to 32768 [ 741.417196][T19194] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 741.443808][T19194] netlink: 9396 bytes leftover after parsing attributes in process `syz.0.1798'. [ 741.443819][T19187] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1793 (19187) [ 741.498972][T19187] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 741.509486][T19187] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 741.519020][T19187] BTRFS info (device loop4): using free-space-tree [ 741.691601][ T29] audit: type=1800 audit(1728467756.997:871): pid=19187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1793" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 741.740831][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 741.982218][T19217] random: crng reseeded on system resumption [ 742.262651][T19224] lo speed is unknown, defaulting to 1000 [ 743.122036][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.139609][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.155835][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.228171][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 743.237254][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 743.246590][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 743.285584][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.294742][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 743.303302][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.585688][T19236] loop0: detected capacity change from 0 to 2048 [ 743.635475][T19236] loop0: p1 < > p4 [ 743.640271][T19236] loop0: p4 size 8388608 extends beyond EOD, truncated [ 743.697247][T19231] lo speed is unknown, defaulting to 1000 [ 743.747346][ T4688] loop0: p1 < > p4 [ 743.765567][ T4688] loop0: p4 size 8388608 extends beyond EOD, truncated [ 744.099268][T19238] kvm: emulating exchange as write [ 744.130028][T17841] udevd[17841]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 744.180945][T17841] udevd[17841]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 744.202655][T19245] 9pnet_fd: Insufficient options for proto=fd [ 744.261676][T17697] udevd[17697]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 744.302655][T17841] udevd[17841]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 744.383021][T19231] chnl_net:caif_netlink_parms(): no params data found [ 744.538200][T19231] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.628138][T19231] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.649449][T19231] bridge_slave_0: entered allmulticast mode [ 744.666173][T19231] bridge_slave_0: entered promiscuous mode [ 744.688614][T19231] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.738195][T19231] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.750451][T19231] bridge_slave_1: entered allmulticast mode [ 744.759654][T19231] bridge_slave_1: entered promiscuous mode [ 744.828221][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 744.837248][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 744.846394][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 745.199076][T19231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.211391][T19231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.415382][T19264] lo speed is unknown, defaulting to 1000 [ 745.708780][T19231] team0: Port device team_slave_0 added [ 745.734273][ T5232] Bluetooth: hci2: command tx timeout [ 745.798711][ T29] audit: type=1326 audit(1728467761.107:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28fb7dff9 code=0x7ffc0000 [ 745.847519][T19231] team0: Port device team_slave_1 added [ 745.851719][T19268] loop3: detected capacity change from 0 to 1024 [ 745.858977][ T29] audit: type=1326 audit(1728467761.107:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28fb7dff9 code=0x7ffc0000 [ 745.869775][T19268] EXT4-fs: Ignoring removed orlov option [ 745.887986][T19268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 745.895272][ T29] audit: type=1326 audit(1728467761.157:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe28fb7dff9 code=0x7ffc0000 [ 745.918531][ T29] audit: type=1326 audit(1728467761.157:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe28fb7e033 code=0x7ffc0000 [ 745.942564][ T29] audit: type=1326 audit(1728467761.157:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe28fb7cadf code=0x7ffc0000 [ 745.966093][ T29] audit: type=1326 audit(1728467761.157:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe28fb7e087 code=0x7ffc0000 [ 745.990470][ T29] audit: type=1326 audit(1728467761.157:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe28fb7c990 code=0x7ffc0000 [ 746.045149][ T29] audit: type=1326 audit(1728467761.157:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28fb7dbfb code=0x7ffc0000 [ 746.050793][T19231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.075301][ T29] audit: type=1326 audit(1728467761.167:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe28fb7cc8a code=0x7ffc0000 [ 746.099349][T19268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.166328][T19231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.176652][T19268] usb usb8: usbfs: process 19268 (syz.3.1813) did not claim interface 0 before use [ 746.194740][ T29] audit: type=1326 audit(1728467761.167:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe28fb7cc8a code=0x7ffc0000 [ 746.270504][T19258] loop0: detected capacity change from 0 to 32768 [ 746.278200][T19231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.328791][T19258] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1811 (19258) [ 746.365267][T17453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.384134][T19231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.391125][T19231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.418138][T19258] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 746.439165][T19258] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 746.464757][T19258] BTRFS info (device loop0): using free-space-tree [ 746.471814][T19231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.567822][T19231] hsr_slave_0: entered promiscuous mode [ 746.578000][T19231] hsr_slave_1: entered promiscuous mode [ 746.587144][T19231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 746.782873][T19231] Cannot create hsr debugfs directory [ 747.082670][T19297] random: crng reseeded on system resumption [ 747.189952][T17683] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 747.243599][T19231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.369642][T19231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.436710][T19231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.486752][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.493246][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.520005][T19231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.754245][T19231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 747.790594][T19231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 747.802422][ T5232] Bluetooth: hci2: command tx timeout [ 747.843709][T19231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 747.934401][T19231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 748.066097][T19309] loop4: detected capacity change from 0 to 32768 [ 748.097565][T19309] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1821 (19309) [ 748.179559][T19309] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 748.208583][T19231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.217523][T19309] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 748.306438][T19231] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.313489][T19309] BTRFS info (device loop4): using free-space-tree [ 748.430981][T19231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 748.443869][T19231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.461474][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.468636][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.583627][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.590802][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.970325][T19337] lo speed is unknown, defaulting to 1000 [ 749.089400][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 749.354609][T19231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.932790][ T5232] Bluetooth: hci2: command tx timeout [ 750.853995][T19231] veth0_vlan: entered promiscuous mode [ 750.873356][T19231] veth1_vlan: entered promiscuous mode [ 750.891126][T19231] veth0_macvtap: entered promiscuous mode [ 750.899505][T19231] veth1_macvtap: entered promiscuous mode [ 750.912508][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.923013][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.932881][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.943376][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.953537][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.964292][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.974175][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.984842][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.994880][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.005582][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.018246][T19231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.086512][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.112014][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.139652][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.163653][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.174496][T19356] loop1: detected capacity change from 0 to 32768 [ 751.188527][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.192060][T19356] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1827 (19356) [ 751.224729][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.242009][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.252521][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.262711][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.274348][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.285248][T19231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.308039][T19356] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 751.324397][T19356] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 751.324701][T19231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.342647][T19231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.351379][T19231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.360157][T19231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.367715][T19356] BTRFS info (device loop1): using free-space-tree [ 751.496382][ T8548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.504402][ T8548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.526314][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.534411][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.587316][T19377] loop0: detected capacity change from 0 to 32768 [ 751.600033][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 751.600050][ T29] audit: type=1800 audit(1728467766.907:914): pid=19356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1827" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 751.635422][T19395] random: crng reseeded on system resumption [ 751.643749][T19377] BTRFS: device /dev/loop0 (7:0) using temp-fsid 962f7255-a3db-453b-8d48-376f461394b5 [ 751.712477][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 751.734862][T19377] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1835 (19377) [ 751.852009][T19377] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 751.876145][T19377] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 752.040938][ T5232] Bluetooth: hci2: command tx timeout [ 752.119144][T19377] BTRFS info (device loop0): using free-space-tree [ 752.347520][T19407] lo speed is unknown, defaulting to 1000 [ 753.149160][T19394] loop2: detected capacity change from 0 to 32768 [ 753.176009][T19394] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1803 (19394) [ 753.196628][T19394] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 753.207627][T19394] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 753.219342][T19394] BTRFS info (device loop2): using free-space-tree [ 753.312185][ T29] audit: type=1800 audit(1728467768.617:915): pid=19377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1835" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 753.439478][ T29] audit: type=1800 audit(1728467768.747:916): pid=19394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1803" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 753.701195][T19459] loop3: detected capacity change from 0 to 32768 [ 753.720846][T19459] BTRFS: device /dev/loop3 (7:3) using temp-fsid 428995c5-e4d5-4490-8033-6aca88997418 [ 753.731032][T19459] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1844 (19459) [ 753.784274][T19459] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 753.796019][T19231] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 753.829115][T19459] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 753.868587][T19459] BTRFS info (device loop3): using free-space-tree [ 753.936555][T17683] BTRFS info (device loop0): last unmount of filesystem 962f7255-a3db-453b-8d48-376f461394b5 [ 754.021753][ T29] audit: type=1800 audit(1728467769.327:917): pid=19459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1844" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 754.217269][T17453] BTRFS info (device loop3): last unmount of filesystem 428995c5-e4d5-4490-8033-6aca88997418 [ 754.288127][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 754.297300][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 754.306461][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 754.942025][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 755.418931][T19491] random: crng reseeded on system resumption [ 755.607580][T19485] loop1: detected capacity change from 0 to 32768 [ 755.619206][T19485] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1847 (19485) [ 755.694962][T19485] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 755.714948][T19485] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 755.754838][T19485] BTRFS info (device loop1): using free-space-tree [ 755.956828][T19500] bridge0: port 3(team0) entered blocking state [ 755.970203][T19500] bridge0: port 3(team0) entered disabled state [ 755.990119][T19500] team0: entered allmulticast mode [ 756.113233][T19500] team_slave_0: entered allmulticast mode [ 756.353774][T19500] team_slave_1: entered allmulticast mode [ 756.491825][T19500] team0: entered promiscuous mode [ 756.521837][T19500] team_slave_0: entered promiscuous mode [ 756.561099][T19500] team_slave_1: entered promiscuous mode [ 756.588186][T19500] bridge0: port 3(team0) entered blocking state [ 756.594548][T19500] bridge0: port 3(team0) entered forwarding state [ 756.677977][ T29] audit: type=1800 audit(1728467771.987:918): pid=19485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1847" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 756.799198][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 757.120725][T19533] lo speed is unknown, defaulting to 1000 [ 757.789360][T19548] random: crng reseeded on system resumption [ 758.141239][T19539] loop4: detected capacity change from 0 to 32768 [ 758.215439][T19539] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1854 (19539) [ 758.356967][T19539] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 758.368938][T19539] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 758.378906][T19539] BTRFS info (device loop4): using free-space-tree [ 758.492582][ T29] audit: type=1800 audit(1728467773.797:919): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1854" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 758.551320][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 758.771331][ T25] libceph: connect (1)[c::]:6789 error -101 [ 758.777438][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 758.890320][T19592] tipc: Enabled bearer , priority 0 [ 759.134038][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 759.322467][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 760.023583][T19584] ceph: No mds server is up or the cluster is laggy [ 760.024496][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 760.042969][ T25] tipc: Node number set to 1055681918 [ 760.050425][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 760.068687][T19578] tipc: Disabling bearer [ 760.823748][T19615] lo speed is unknown, defaulting to 1000 [ 761.460058][T19627] lo speed is unknown, defaulting to 1000 [ 761.657167][ T29] audit: type=1326 audit(1728467776.967:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28fb7dff9 code=0x7ffc0000 [ 761.679782][ T29] audit: type=1326 audit(1728467776.967:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28fb7dff9 code=0x7ffc0000 [ 761.692752][T19624] loop0: detected capacity change from 0 to 32768 [ 761.720734][ T29] audit: type=1326 audit(1728467777.017:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe28fb7dff9 code=0x7ffc0000 [ 761.731717][T19633] loop3: detected capacity change from 0 to 1024 [ 761.752297][T19624] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1871 (19624) [ 761.761985][ T29] audit: type=1326 audit(1728467777.027:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe28fb7e033 code=0x7ffc0000 [ 761.813144][T19633] EXT4-fs: Ignoring removed orlov option [ 761.828865][T19633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 761.872606][T19624] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 761.872706][ T29] audit: type=1326 audit(1728467777.037:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe28fb7cadf code=0x7ffc0000 [ 761.883086][T19624] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 761.915920][T19624] BTRFS info (device loop0): using free-space-tree [ 762.005205][ T29] audit: type=1326 audit(1728467777.037:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe28fb7e087 code=0x7ffc0000 [ 762.065863][T19633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.086336][T19633] usb usb8: usbfs: process 19633 (syz.3.1874) did not claim interface 0 before use [ 762.092044][ T29] audit: type=1326 audit(1728467777.037:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe28fb7c990 code=0x7ffc0000 [ 762.149080][ T29] audit: type=1326 audit(1728467777.037:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe28fb7dbfb code=0x7ffc0000 [ 762.193149][T17453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.202118][ T29] audit: type=1326 audit(1728467777.127:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe28fb7cc8a code=0x7ffc0000 [ 762.202154][ T29] audit: type=1326 audit(1728467777.127:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe28fb7cc8a code=0x7ffc0000 [ 762.202179][ T29] audit: type=1326 audit(1728467777.127:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe28fb7c897 code=0x7ffc0000 [ 762.202204][ T29] audit: type=1326 audit(1728467777.127:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19631 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe28fb7f79a code=0x7ffc0000 [ 762.400865][T17683] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 763.570455][T19646] loop2: detected capacity change from 0 to 32768 [ 763.632486][T19646] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1876 (19646) [ 763.649622][ T5279] libceph: connect (1)[c::]:6789 error -101 [ 763.655896][ T5279] libceph: mon0 (1)[c::]:6789 connect error [ 763.742632][T19646] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 763.754261][T19646] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 763.763963][T19646] BTRFS info (device loop2): using free-space-tree [ 763.793276][T19683] random: crng reseeded on system resumption [ 763.950878][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 763.958071][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 764.044310][T19231] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 764.441159][T19672] ceph: No mds server is up or the cluster is laggy [ 765.941729][T19725] random: crng reseeded on system resumption [ 767.142069][T19741] tipc: Started in network mode [ 767.147311][T19741] tipc: Node identity c6ec5ab92da6, cluster identity 4711 [ 767.155032][T19741] tipc: Enabled bearer , priority 0 [ 767.172841][T19739] tipc: Disabling bearer [ 769.778383][T19774] 9pnet_fd: Insufficient options for proto=fd [ 771.294215][T19796] random: crng reseeded on system resumption [ 771.374604][T19797] lo speed is unknown, defaulting to 1000 [ 772.919349][T19819] lo speed is unknown, defaulting to 1000 [ 772.958251][T19820] siw: device registration error -23 [ 773.271789][T19827] bridge0: port 3(team0) entered blocking state [ 773.304446][T19827] bridge0: port 3(team0) entered disabled state [ 773.316539][T19827] team0: entered allmulticast mode [ 773.321872][T19827] team_slave_0: entered allmulticast mode [ 773.340346][T19827] team_slave_1: entered allmulticast mode [ 773.381071][T19827] team0: entered promiscuous mode [ 773.408398][T19827] team_slave_0: entered promiscuous mode [ 773.512894][T19827] team_slave_1: entered promiscuous mode [ 773.536281][T19827] bridge0: port 3(team0) entered blocking state [ 773.542667][T19827] bridge0: port 3(team0) entered forwarding state [ 773.861096][T19840] 9pnet_fd: Insufficient options for proto=fd [ 774.530221][ T25] libceph: connect (1)[c::]:6789 error -101 [ 774.540408][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 774.613733][T19847] ceph: No mds server is up or the cluster is laggy [ 775.056055][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 775.162034][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 775.201994][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 775.640433][T19869] siw: device registration error -23 [ 775.651169][T19866] lo speed is unknown, defaulting to 1000 [ 776.284771][T19876] random: crng reseeded on system resumption [ 776.803871][T19885] lo speed is unknown, defaulting to 1000 [ 778.139390][T19905] tipc: Enabled bearer , priority 0 [ 778.155310][T19908] lo speed is unknown, defaulting to 1000 [ 778.164735][T19904] tipc: Disabling bearer [ 780.834737][T19939] lo speed is unknown, defaulting to 1000 [ 781.509053][T19949] lo speed is unknown, defaulting to 1000 [ 781.562533][T19950] siw: device registration error -23 [ 781.829066][T19957] random: crng reseeded on system resumption [ 782.175177][T17897] libceph: connect (1)[c::]:6789 error -101 [ 782.181317][T17897] libceph: mon0 (1)[c::]:6789 connect error [ 782.616699][ T5320] libceph: connect (1)[c::]:6789 error -101 [ 782.637921][ T5320] libceph: mon0 (1)[c::]:6789 connect error [ 783.223698][ T9] libceph: connect (1)[c::]:6789 error -101 [ 783.229752][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 783.287188][T19961] ceph: No mds server is up or the cluster is laggy [ 783.293964][T17897] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 783.781427][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 783.790472][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 783.842037][T17897] usb 1-1: Using ep0 maxpacket: 8 [ 783.848836][T17897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 783.861970][T17897] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 783.878469][T17897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.889468][T17897] usb 1-1: config 0 descriptor?? [ 784.182947][T17897] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 784.355811][T19992] lo speed is unknown, defaulting to 1000 [ 785.499391][ T5279] usb 1-1: USB disconnect, device number 10 [ 786.774958][T20016] loop3: detected capacity change from 0 to 32768 [ 786.818853][T20016] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1968 (20016) [ 787.095944][T20016] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 787.156401][T20016] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 787.166758][T20016] BTRFS info (device loop3): using free-space-tree [ 787.395213][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 787.395231][ T29] audit: type=1800 audit(1728467802.707:963): pid=20016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1968" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 787.450415][T17453] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 787.581343][T20051] tipc: Enabled bearer , priority 0 [ 788.219439][T20034] tipc: Disabling bearer [ 790.357598][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 790.492198][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 790.524197][ T5243] Bluetooth: hci4: command 0x0406 tx timeout [ 790.524476][ T4626] Bluetooth: hci5: command 0x0406 tx timeout [ 790.775641][T20098] random: crng reseeded on system resumption [ 791.635438][T20106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 791.661969][T20106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 792.168384][T20100] loop4: detected capacity change from 0 to 32768 [ 792.180463][T20100] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1988 (20100) [ 792.611580][T20100] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 792.644039][T20100] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 792.654141][T20100] BTRFS info (device loop4): using free-space-tree [ 792.662216][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 792.670443][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 792.678040][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 792.685260][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 792.943534][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 792.979417][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 793.193731][T20118] ceph: No mds server is up or the cluster is laggy [ 793.233002][ T29] audit: type=1800 audit(1728467808.537:964): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1988" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 793.397124][T20148] lo speed is unknown, defaulting to 1000 [ 793.816486][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 794.156460][T20164] siw: device registration error -23 [ 794.157758][T20159] lo speed is unknown, defaulting to 1000 [ 795.359110][T20175] random: crng reseeded on system resumption [ 796.817508][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 796.831760][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 796.895125][T20187] ceph: No mds server is up or the cluster is laggy [ 797.566865][T20214] lo speed is unknown, defaulting to 1000 [ 798.123321][T20204] tipc: Started in network mode [ 798.151262][T20204] tipc: Node identity 26695db7b23, cluster identity 4711 [ 798.193094][T20204] tipc: Enabled bearer , priority 0 [ 798.611608][T20194] tipc: Disabling bearer [ 799.444313][T20238] random: crng reseeded on system resumption [ 800.869976][T20261] tipc: Enabled bearer , priority 0 [ 800.941029][T20262] tipc: Enabled bearer , priority 0 [ 801.225498][T20237] tipc: Disabling bearer [ 801.420714][T20247] tipc: Disabling bearer [ 804.044268][T20311] tipc: Enabled bearer , priority 0 [ 804.057123][T20308] tipc: Disabling bearer [ 804.057312][T20287] loop4: detected capacity change from 0 to 32768 [ 804.072032][T20287] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2031 (20287) [ 804.114005][T20287] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 804.138414][T20287] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 804.160040][T20287] BTRFS info (device loop4): using free-space-tree [ 804.279511][T20307] loop0: detected capacity change from 0 to 32768 [ 804.322853][T20307] BTRFS: device /dev/loop0 (7:0) using temp-fsid 3262c35f-d354-4e87-8afe-c2ae76bb48b6 [ 804.368553][T20307] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2037 (20307) [ 804.385727][T20334] random: crng reseeded on system resumption [ 804.486409][ T29] audit: type=1800 audit(1728467819.787:965): pid=20287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2031" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 804.594967][T20307] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 804.613606][T17575] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 804.639599][T20307] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 804.654957][T20307] BTRFS info (device loop0): using free-space-tree [ 804.676552][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 804.683867][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 804.741602][T20313] ceph: No mds server is up or the cluster is laggy [ 804.783382][ T29] audit: type=1800 audit(1728467820.077:966): pid=20307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2037" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 804.893774][T17683] BTRFS info (device loop0): last unmount of filesystem 3262c35f-d354-4e87-8afe-c2ae76bb48b6 [ 808.202518][T20426] lo speed is unknown, defaulting to 1000 [ 808.858679][T20435] random: crng reseeded on system resumption [ 808.929713][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.938234][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.037355][T20454] loop3: detected capacity change from 0 to 32768 [ 811.109962][T20454] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2069 (20454) [ 811.196406][T20454] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 811.686685][T20454] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 811.715153][T20454] BTRFS info (device loop3): using free-space-tree [ 812.318922][ T29] audit: type=1800 audit(1728467827.627:967): pid=20454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2069" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 812.928472][T17453] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 813.004463][T20503] lo speed is unknown, defaulting to 1000 [ 814.307269][T20518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2082'. [ 814.322869][T20518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2082'. [ 814.700131][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'. [ 814.722434][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'. [ 815.966585][T20537] loop2: detected capacity change from 0 to 32768 [ 815.983729][T20537] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2088 (20537) [ 816.007705][T20537] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 816.020335][T20537] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 816.057869][T20537] BTRFS info (device loop2): using free-space-tree [ 816.170055][ T29] audit: type=1800 audit(1728467831.477:968): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2088" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 816.293547][T19231] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 817.427994][T20591] random: crng reseeded on system resumption [ 818.606945][ T5279] libceph: connect (1)[c::]:6789 error -101 [ 818.613798][ T5279] libceph: mon0 (1)[c::]:6789 connect error [ 818.736847][T20599] ceph: No mds server is up or the cluster is laggy [ 819.696810][T20625] lo speed is unknown, defaulting to 1000 [ 820.371630][T20629] loop3: detected capacity change from 0 to 32768 [ 820.386337][T20629] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2111 (20629) [ 820.750453][T20629] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 820.772089][T20629] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 820.781555][T20629] BTRFS info (device loop3): using free-space-tree [ 820.920567][ T29] audit: type=1800 audit(1728467836.227:969): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2111" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 820.944629][T20648] random: crng reseeded on system resumption [ 820.972262][T17453] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 822.028971][T20674] ceph: No mds server is up or the cluster is laggy [ 822.046563][ T5279] libceph: connect (1)[c::]:6789 error -101 [ 822.052724][ T5279] libceph: mon0 (1)[c::]:6789 connect error [ 822.489432][T20694] lo speed is unknown, defaulting to 1000 [ 823.974256][T20715] ceph: No mds server is up or the cluster is laggy [ 823.983498][ T25] libceph: connect (1)[c::]:6789 error -101 [ 824.005346][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 824.389877][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 825.383628][T20736] ceph: No mds server is up or the cluster is laggy [ 825.391372][T20739] ceph: No mds server is up or the cluster is laggy [ 825.399264][ T25] libceph: connect (1)[c::]:6789 error -101 [ 825.405654][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 825.496095][ T25] libceph: connect (1)[c::]:6789 error -101 [ 825.503430][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 826.022361][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 826.678495][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 826.820962][T20765] ceph: No mds server is up or the cluster is laggy [ 826.841673][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 826.867630][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 827.032000][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 827.043755][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 827.054281][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 827.064355][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.077392][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 827.086524][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.711082][ T9] usb 5-1: usb_control_msg returned -71 [ 827.716756][ T9] usbtmc 5-1:16.0: can't read capabilities [ 827.730086][ T9] usb 5-1: USB disconnect, device number 5 [ 828.218820][T20778] loop0: detected capacity change from 0 to 32768 [ 828.230257][T20778] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2146 (20778) [ 828.552644][T20778] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 828.611139][T20778] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 828.652215][T20778] BTRFS info (device loop0): using free-space-tree [ 830.330641][ T29] audit: type=1800 audit(1728467845.637:970): pid=20778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2146" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 830.441205][T17683] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 830.999642][T20836] ceph: No mds server is up or the cluster is laggy [ 831.033886][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 831.040023][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 831.049531][T20840] tipc: Started in network mode [ 831.067502][T20840] tipc: Node identity 861f6f00c1aa, cluster identity 4711 [ 831.075384][T20840] tipc: Enabled bearer , priority 0 [ 831.087087][T20835] tipc: Disabling bearer [ 833.153087][ T25] libceph: connect (1)[c::]:6789 error -101 [ 833.159395][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 833.171381][T20870] ceph: No mds server is up or the cluster is laggy [ 834.912245][T20907] random: crng reseeded on system resumption [ 835.980237][T20917] lo speed is unknown, defaulting to 1000 [ 836.446540][T20921] siw: device registration error -23 [ 836.478945][T20918] ceph: No mds server is up or the cluster is laggy [ 836.486309][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 836.492403][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 836.695024][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 836.704540][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 836.721723][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 837.393506][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 837.403515][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 837.410698][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 837.439594][T20930] lo speed is unknown, defaulting to 1000 [ 837.681030][T20942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2187'. [ 837.838593][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 838.266498][T20955] random: crng reseeded on system resumption [ 838.806932][T20930] chnl_net:caif_netlink_parms(): no params data found [ 839.387333][T20963] ceph: No mds server is up or the cluster is laggy [ 839.394434][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 839.400483][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 839.450556][T20930] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.460835][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.469433][T20930] bridge_slave_0: entered allmulticast mode [ 839.484793][ T5232] Bluetooth: hci3: command tx timeout [ 839.502750][T20930] bridge_slave_0: entered promiscuous mode [ 839.513527][T20930] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.520691][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.529091][T20930] bridge_slave_1: entered allmulticast mode [ 839.537468][T20930] bridge_slave_1: entered promiscuous mode [ 839.643963][ T8510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.789696][ T8510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.803224][T20985] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2193'. [ 839.917845][T20930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.226092][ T8510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.633435][T20930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.709968][ T8510] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.768151][T20930] team0: Port device team_slave_0 added [ 840.789466][T20930] team0: Port device team_slave_1 added [ 840.862715][T20930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.889670][T20930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.989523][T20930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.022249][T20930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.112070][T20930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.208560][T21006] random: crng reseeded on system resumption [ 841.572062][ T5232] Bluetooth: hci3: command tx timeout [ 841.618681][T20930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.741341][T20930] hsr_slave_0: entered promiscuous mode [ 841.961058][T20930] hsr_slave_1: entered promiscuous mode [ 842.291433][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 842.298303][T20930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 842.306131][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 842.311962][T20930] Cannot create hsr debugfs directory [ 842.614074][ T8521] libceph: connect (1)[c::]:6789 error -101 [ 842.743836][T21015] ceph: No mds server is up or the cluster is laggy [ 842.772112][ T8521] libceph: mon0 (1)[c::]:6789 connect error [ 842.793251][T21022] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 843.000993][ T8510] team0: left allmulticast mode [ 843.146134][ T8510] team_slave_0: left allmulticast mode [ 843.155675][ T8510] team_slave_1: left allmulticast mode [ 843.161621][ T8510] team0: left promiscuous mode [ 843.169966][ T8510] team_slave_0: left promiscuous mode [ 843.616062][ T8510] team_slave_1: left promiscuous mode [ 843.622150][ T8510] bridge0: port 3(team0) entered disabled state [ 843.637458][ T8510] bridge_slave_1: left allmulticast mode [ 843.645350][ T8510] bridge_slave_1: left promiscuous mode [ 843.651066][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.652389][ T5232] Bluetooth: hci3: command tx timeout [ 843.664562][ T8510] bridge_slave_0: left allmulticast mode [ 843.670311][ T8510] bridge_slave_0: left promiscuous mode [ 843.680850][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.935838][ T8510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.949646][ T8510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.973581][ T8510] bond0 (unregistering): Released all slaves [ 844.083015][ T8510] tipc: Left network mode [ 844.520931][ T8510] hsr_slave_0: left promiscuous mode [ 844.542554][ T8510] hsr_slave_1: left promiscuous mode [ 844.556132][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.582466][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.608748][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.661010][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.694463][ T8510] veth1_macvtap: left promiscuous mode [ 844.713419][ T8510] veth0_macvtap: left promiscuous mode [ 844.728960][ T8510] veth1_vlan: left promiscuous mode [ 844.748287][ T8510] veth0_vlan: left promiscuous mode [ 844.980817][T21065] loop2: detected capacity change from 0 to 32768 [ 845.281560][T21065] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2213 (21065) [ 845.356079][T21065] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 845.383176][T21065] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 845.422064][T21065] BTRFS info (device loop2): using free-space-tree [ 845.656541][ T29] audit: type=1800 audit(1728467860.897:971): pid=21065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2213" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 845.705769][T19231] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 845.730524][ T5232] Bluetooth: hci3: command tx timeout [ 845.754492][T21093] loop1: detected capacity change from 0 to 32768 [ 845.796851][T21093] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2218 (21093) [ 845.845536][T21093] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 845.856108][T21093] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 845.866052][T21093] BTRFS info (device loop1): using free-space-tree [ 845.939038][ T8510] team0 (unregistering): Port device team_slave_1 removed [ 845.958875][ T8510] team0 (unregistering): Port device team_slave_0 removed [ 845.994094][ T29] audit: type=1800 audit(1728467861.307:972): pid=21093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2218" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 846.077156][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 846.289560][T21141] siw: device registration error -23 [ 846.336593][T21139] lo speed is unknown, defaulting to 1000 [ 846.377925][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 846.384076][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 846.438315][T21140] tipc: Enabled bearer , priority 0 [ 846.471639][T21137] ceph: No mds server is up or the cluster is laggy [ 846.712457][T20930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 846.732297][T20930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 846.741161][T20930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 846.754187][T20930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 846.870012][ T25] libceph: connect (1)[c::]:6789 error -101 [ 846.902466][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 846.964406][T21162] ceph: No mds server is up or the cluster is laggy [ 847.394599][T21111] tipc: Disabling bearer [ 847.435102][ T5279] tipc: Node number set to 1203072768 [ 847.483925][T21153] loop1: detected capacity change from 0 to 32768 [ 847.505064][T21153] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2225 (21153) [ 847.577404][T21153] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 847.604423][T21153] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 847.634795][T21153] BTRFS info (device loop1): using free-space-tree [ 847.740457][T20930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.755729][T20930] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.766443][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.773595][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.999424][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.006582][ T5855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.160334][T21202] ceph: No mds server is up or the cluster is laggy [ 848.188167][ T5279] libceph: connect (1)[c::]:6789 error -101 [ 848.194717][ T5279] libceph: mon0 (1)[c::]:6789 connect error [ 848.244200][T20930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 848.294434][ T29] audit: type=1800 audit(1728467863.597:973): pid=21153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2225" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 848.377389][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 848.705324][T21222] loop0: detected capacity change from 0 to 32768 [ 848.722291][T21222] BTRFS: device /dev/loop0 (7:0) using temp-fsid cb633450-22d5-47ef-92c4-a5443fc74451 [ 848.741766][T21222] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2232 (21222) [ 848.808401][T20930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.828177][T21222] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 848.871626][T21222] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 848.903032][T21222] BTRFS info (device loop0): using free-space-tree [ 848.926993][T20930] veth0_vlan: entered promiscuous mode [ 848.965567][T20930] veth1_vlan: entered promiscuous mode [ 849.014341][T20930] veth0_macvtap: entered promiscuous mode [ 849.028861][ T29] audit: type=1800 audit(1728467864.337:974): pid=21222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2232" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 849.069745][T20930] veth1_macvtap: entered promiscuous mode [ 849.469616][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.492872][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.509848][T17683] BTRFS info (device loop0): last unmount of filesystem cb633450-22d5-47ef-92c4-a5443fc74451 [ 849.520251][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.552354][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.610698][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.633844][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.755477][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.907116][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.917156][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.927737][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.941965][T20930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.978824][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.989500][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.999522][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.010108][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.020121][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.030698][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.042076][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.052848][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.074600][T20930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.098055][T20930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.108840][T20930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.127261][T20930] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.151978][T20930] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.169012][T20930] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.180865][T20930] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.194428][T21279] ceph: No mds server is up or the cluster is laggy [ 850.201390][T21260] libceph: connect (1)[c::]:6789 error -101 [ 850.210143][T21260] libceph: mon0 (1)[c::]:6789 connect error [ 850.386825][ T1830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.393748][T21290] lo speed is unknown, defaulting to 1000 [ 850.408783][ T1830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.522905][T19411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.530808][T19411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.290437][T21316] ceph: No mds server is up or the cluster is laggy [ 852.297411][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 852.303436][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 852.750728][T21313] loop1: detected capacity change from 0 to 32768 [ 852.764991][T21313] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2246 (21313) [ 852.814236][T21313] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 852.867750][T21313] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 852.900072][T21313] BTRFS info (device loop1): using free-space-tree [ 853.495671][ T29] audit: type=1800 audit(1728467868.807:975): pid=21313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2246" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 853.587458][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 854.855086][T21377] ceph: No mds server is up or the cluster is laggy [ 854.862537][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 854.868552][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 855.999393][T21395] lo speed is unknown, defaulting to 1000 [ 856.310787][T21393] loop3: detected capacity change from 0 to 32768 [ 856.325590][T21393] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2263 (21393) [ 856.340621][T21393] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 856.351027][T21393] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 856.361556][T21393] BTRFS info (device loop3): using free-space-tree [ 856.497823][ T29] audit: type=1800 audit(1728467871.797:976): pid=21393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2263" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 856.538639][T20930] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 857.257513][T21400] loop2: detected capacity change from 0 to 32768 [ 857.270644][T21400] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2264 (21400) [ 857.342087][T21400] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 857.356360][T21400] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 857.366095][T21400] BTRFS info (device loop2): using free-space-tree [ 857.468352][ T29] audit: type=1800 audit(1728467872.777:977): pid=21400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2264" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 857.592895][T19231] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 857.642137][ T5320] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 857.802204][ T5320] usb 5-1: Using ep0 maxpacket: 32 [ 857.808507][ T5320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 857.820861][ T5320] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 857.842315][ T5320] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 857.872606][ T5320] usb 5-1: Product: syz [ 857.901074][ T5320] usb 5-1: Manufacturer: syz [ 857.910250][ T5320] usb 5-1: SerialNumber: syz [ 857.919804][ T5320] usb 5-1: config 0 descriptor?? [ 857.976359][T21430] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 857.989636][ T5320] chaoskey 5-1:0.0: Unable to register with hwrng [ 857.997967][ T25] libceph: connect (1)[c::]:6789 error -101 [ 858.007054][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 858.078104][T21455] ceph: No mds server is up or the cluster is laggy [ 858.272843][T21430] [U]  [ 858.738464][T21475] ceph: No mds server is up or the cluster is laggy [ 858.746895][ T6433] libceph: connect (1)[c::]:6789 error -101 [ 858.753081][ T6433] libceph: mon0 (1)[c::]:6789 connect error [ 858.783309][ T6433] usb 5-1: USB disconnect, device number 6 [ 859.913119][T21497] bridge0: port 3(team0) entered blocking state [ 859.921059][T21497] bridge0: port 3(team0) entered disabled state [ 859.928512][T21497] team0: entered allmulticast mode [ 859.944769][T21497] team_slave_0: entered allmulticast mode [ 859.963692][T21497] team_slave_1: entered allmulticast mode [ 859.993954][T21497] team0: entered promiscuous mode [ 859.999185][T21497] team_slave_0: entered promiscuous mode [ 860.093004][T21497] team_slave_1: entered promiscuous mode [ 860.127816][T21497] bridge0: port 3(team0) entered blocking state [ 860.134258][T21497] bridge0: port 3(team0) entered forwarding state [ 860.349664][T21505] lo speed is unknown, defaulting to 1000 [ 860.647108][T21506] ceph: No mds server is up or the cluster is laggy [ 860.656067][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 860.785855][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 860.796748][T21511] siw: device registration error -23 [ 861.176398][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 861.182522][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 861.247536][T21514] loop1: detected capacity change from 0 to 32768 [ 861.261306][T21514] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2286 (21514) [ 861.275100][T21516] ceph: No mds server is up or the cluster is laggy [ 861.324897][T21514] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 861.358175][T21514] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 861.382440][T21514] BTRFS info (device loop1): using free-space-tree [ 861.651401][ T29] audit: type=1800 audit(1728467876.937:978): pid=21514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2286" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 861.706813][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 861.714519][T21532] loop2: detected capacity change from 0 to 32768 [ 861.734623][T21532] BTRFS: device /dev/loop2 (7:2) using temp-fsid 9d0ac4aa-92c6-4bda-81b2-ae5979803f9e [ 861.793964][T21532] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2291 (21532) [ 861.879252][T21532] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 861.950684][T21532] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 861.980234][T21532] BTRFS info (device loop2): using free-space-tree [ 862.796649][ T29] audit: type=1800 audit(1728467878.097:979): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2291" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 863.015591][T21581] lo speed is unknown, defaulting to 1000 [ 863.047985][T21582] siw: device registration error -23 [ 863.066405][T19231] BTRFS info (device loop2): last unmount of filesystem 9d0ac4aa-92c6-4bda-81b2-ae5979803f9e [ 863.199205][T21588] random: crng reseeded on system resumption [ 864.488708][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 864.495791][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 864.576681][T21602] ceph: No mds server is up or the cluster is laggy [ 866.775238][T21624] loop2: detected capacity change from 0 to 32768 [ 866.856711][T21624] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2305 (21624) [ 867.099720][T21624] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 867.110160][T21624] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 867.119902][T21624] BTRFS info (device loop2): using free-space-tree [ 867.308009][ T29] audit: type=1800 audit(1728467882.617:980): pid=21624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2305" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 867.328911][ T4626] Bluetooth: hci2: command 0x0406 tx timeout [ 867.341801][T19231] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 867.377895][T21637] tipc: Enabled bearer , priority 0 [ 867.428649][T21651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2309'. [ 867.583555][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 867.590251][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 867.669387][T21654] ceph: No mds server is up or the cluster is laggy [ 867.836921][ T4626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.871242][ T4626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 867.901419][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 867.912614][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 867.939880][ T4626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 867.970295][T21630] tipc: Disabling bearer [ 867.976435][ T4626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 867.985215][ T4626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 867.993893][ T4626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 868.096541][T21663] lo speed is unknown, defaulting to 1000 [ 868.487090][T21663] chnl_net:caif_netlink_parms(): no params data found [ 868.510862][T21662] loop2: detected capacity change from 0 to 32768 [ 868.530684][T21662] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2313 (21662) [ 868.563358][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 868.570465][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 868.669214][T21681] ceph: No mds server is up or the cluster is laggy [ 868.680697][T21662] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 868.691191][T21662] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 868.723856][T21662] BTRFS info (device loop2): using free-space-tree [ 868.856912][ T25] libceph: connect (1)[c::]:6789 error -101 [ 868.863404][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 868.872638][T21680] loop0: detected capacity change from 0 to 32768 [ 868.888167][T21698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2320'. [ 868.889457][T21680] BTRFS: device /dev/loop0 (7:0) using temp-fsid 9481433c-067d-4cf8-930b-7e59b9646544 [ 868.938497][T21663] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.953591][T21663] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.960895][T21680] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2318 (21680) [ 868.977256][T21663] bridge_slave_0: entered allmulticast mode [ 868.988468][T21663] bridge_slave_0: entered promiscuous mode [ 869.023682][T21680] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 869.063208][T21680] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 869.073215][T21680] BTRFS info (device loop0): using free-space-tree [ 869.076196][T21663] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.089709][ T29] audit: type=1800 audit(1728467884.367:981): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2313" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 869.141967][T21663] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.149213][T21663] bridge_slave_1: entered allmulticast mode [ 869.185693][T21663] bridge_slave_1: entered promiscuous mode [ 869.293843][T19231] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 869.352790][ T29] audit: type=1800 audit(1728467884.667:982): pid=21680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2318" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 869.379886][T21663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.573584][T21663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.698630][T21663] team0: Port device team_slave_0 added [ 869.707725][T21663] team0: Port device team_slave_1 added [ 869.740705][T21663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.769442][T21663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.801174][T21734] ceph: No mds server is up or the cluster is laggy [ 869.808628][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 869.819474][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 869.851787][T21663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.859531][T17683] BTRFS info (device loop0): last unmount of filesystem 9481433c-067d-4cf8-930b-7e59b9646544 [ 869.864421][T21663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.879824][T21663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.907860][T21663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.984676][T21745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2326'. [ 870.029821][T21663] hsr_slave_0: entered promiscuous mode [ 870.045589][ T5232] Bluetooth: hci0: command tx timeout [ 870.064582][T21663] hsr_slave_1: entered promiscuous mode [ 870.161963][T21663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.170030][T21663] Cannot create hsr debugfs directory [ 870.366064][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.374426][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.438012][T21742] loop1: detected capacity change from 0 to 32768 [ 870.458667][T21742] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2325 (21742) [ 870.519917][T21742] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 870.581184][T21663] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.650243][T21663] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.715058][T21742] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 870.761367][T21663] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.897253][T21742] BTRFS info (device loop1): using free-space-tree [ 871.390612][T21663] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.450982][ T29] audit: type=1800 audit(1728467886.757:983): pid=21742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2325" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 871.502197][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 871.559480][T21663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 871.593898][T21663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 871.718676][T21663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 871.757706][T21663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 871.937847][T21663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.994168][T21663] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.030684][T19411] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.037816][T19411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.125217][ T5232] Bluetooth: hci0: command tx timeout [ 872.375501][T19357] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.382637][T19357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.579612][T21785] loop1: detected capacity change from 0 to 32768 [ 872.616392][T21785] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2334 (21785) [ 872.734439][T21785] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 872.746937][T21785] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 872.786074][T21785] BTRFS info (device loop1): using free-space-tree [ 873.262492][T21663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.704716][ T5232] Bluetooth: hci0: command tx timeout [ 874.799274][ T29] audit: type=1800 audit(1728467890.107:984): pid=21785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2334" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 874.912859][T21663] veth0_vlan: entered promiscuous mode [ 874.934051][T21663] veth1_vlan: entered promiscuous mode [ 874.976833][T21663] veth0_macvtap: entered promiscuous mode [ 874.985633][T21663] veth1_macvtap: entered promiscuous mode [ 875.010747][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 875.024282][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.034939][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.045029][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.055708][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.066141][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.077004][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.090111][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.100685][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.112043][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.124011][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.134715][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.163741][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.210724][T21663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.237084][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.285101][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.298205][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.316668][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.331918][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.347325][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.357907][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.408179][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.422456][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.435659][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.447636][T21663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.460071][T21663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.476076][T21663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.492068][T21663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.504966][T21663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.514520][T21663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.525116][T21663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.183282][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.191696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.234454][ T5855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.277355][ T5855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.552685][T21846] random: crng reseeded on system resumption [ 876.762938][ T5232] Bluetooth: hci0: command tx timeout [ 877.263218][T21850] loop1: detected capacity change from 0 to 32768 [ 877.289674][T21850] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2344 (21850) [ 877.346217][T21850] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 877.489776][T21850] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 877.722972][T21862] ceph: No mds server is up or the cluster is laggy [ 877.732585][ T5281] libceph: connect (1)[c::]:6789 error -101 [ 877.744600][ T5281] libceph: mon0 (1)[c::]:6789 connect error [ 877.914857][T21850] BTRFS info (device loop1): using free-space-tree [ 878.060327][ T29] audit: type=1800 audit(1728467893.367:985): pid=21850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2344" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 878.236520][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 878.525040][T21895] bridge0: port 3(team0) entered blocking state [ 878.535479][T21895] bridge0: port 3(team0) entered disabled state [ 878.544226][T21895] team0: entered allmulticast mode [ 878.549658][T21895] team_slave_0: entered allmulticast mode [ 879.011986][T21895] team_slave_1: entered allmulticast mode [ 879.042147][T21895] team0: entered promiscuous mode [ 879.067169][T21895] team_slave_0: entered promiscuous mode [ 879.075980][T21895] team_slave_1: entered promiscuous mode [ 879.139656][T21895] bridge0: port 3(team0) entered blocking state [ 879.146080][T21895] bridge0: port 3(team0) entered forwarding state [ 879.632971][T21904] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 880.302007][T21916] ceph: No mds server is up or the cluster is laggy [ 880.318400][ T5320] libceph: connect (1)[c::]:6789 error -101 [ 880.330483][ T5320] libceph: mon0 (1)[c::]:6789 connect error [ 881.104107][T21945] random: crng reseeded on system resumption [ 881.684222][T21933] loop2: detected capacity change from 0 to 32768 [ 881.710930][T21933] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2361 (21933) [ 881.764376][T21933] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 881.792041][T21933] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 881.822041][T21933] BTRFS info (device loop2): using free-space-tree [ 882.170365][ T29] audit: type=1800 audit(1728467897.477:986): pid=21933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2361" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 882.255003][T19231] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 883.088098][ T5279] libceph: connect (1)[c::]:6789 error -101 [ 883.116367][ T5279] libceph: mon0 (1)[c::]:6789 connect error [ 883.179607][T21986] ceph: No mds server is up or the cluster is laggy [ 883.435035][T21999] tipc: Started in network mode [ 883.469386][T21999] tipc: Node identity 468a204de2a3, cluster identity 4711 [ 883.507122][T21999] tipc: Enabled bearer , priority 0 [ 883.964146][T21975] tipc: Disabling bearer [ 885.431017][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 885.448592][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 885.693767][ T5320] libceph: connect (1)[c::]:6789 error -101 [ 885.699820][ T5320] libceph: mon0 (1)[c::]:6789 connect error [ 885.845415][T22064] ceph: No mds server is up or the cluster is laggy [ 886.237138][T22059] loop1: detected capacity change from 0 to 32768 [ 886.263805][T22059] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2398 (22059) [ 886.320482][T22059] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 886.374702][T22059] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 886.413304][T22059] BTRFS info (device loop1): using free-space-tree [ 886.548779][ T29] audit: type=1800 audit(1728467901.857:987): pid=22059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2398" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 886.737309][T17669] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 886.936277][T22110] capability: warning: `syz.0.2411' uses deprecated v2 capabilities in a way that may be insecure [ 888.922562][ T30] INFO: task syz.2.1765:18968 blocked for more than 143 seconds. [ 888.931124][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 888.962101][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 888.990341][ T30] task:syz.2.1765 state:D stack:26128 pid:18968 tgid:18966 ppid:17696 flags:0x00004006 [ 889.026649][ T30] Call Trace: [ 889.036681][ T30] [ 889.047721][ T30] __schedule+0x1895/0x4b30 [ 889.072910][ T30] ? __pfx___schedule+0x10/0x10 [ 889.087565][ T30] ? __pfx_lock_release+0x10/0x10 [ 889.149896][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 889.170280][ T30] ? mutex_spin_on_owner+0x26c/0x330 [ 889.185940][ T30] ? schedule+0x90/0x320 [ 889.217940][ T30] schedule+0x14b/0x320 [ 889.334561][ T30] schedule_preempt_disabled+0x13/0x30 [ 889.348420][ T30] __mutex_lock+0x6a7/0xd70 [ 889.551384][ T30] ? __mutex_lock+0x52a/0xd70 [ 889.580756][ T30] ? chaoskey_release+0x169/0x2f0 [ 889.605005][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 889.668552][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 889.680439][ T30] chaoskey_release+0x169/0x2f0 [ 889.690429][ T30] ? __pfx_chaoskey_release+0x10/0x10 [ 889.713417][ T30] __fput+0x23f/0x880 [ 889.717542][ T30] task_work_run+0x24f/0x310 [ 889.726570][ T30] ? __pfx_task_work_run+0x10/0x10 [ 889.731738][ T30] ? switch_task_namespaces+0xe4/0x110 [ 889.767475][ T30] do_exit+0xa2f/0x28e0 [ 889.771794][ T30] ? rcu_is_watching+0x15/0xb0 [ 889.777514][ T30] ? __pfx_do_exit+0x10/0x10 [ 889.782407][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 889.787827][ T30] ? __pfx_lock_release+0x10/0x10 [ 889.796300][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 889.804034][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 889.810958][ T30] do_group_exit+0x207/0x2c0 [ 889.818241][ T30] get_signal+0x16a3/0x1740 [ 889.823131][ T30] ? __pfx_get_signal+0x10/0x10 [ 889.828066][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 889.835663][ T30] arch_do_signal_or_restart+0x96/0x860 [ 889.841424][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 889.847936][ T30] ? rcu_is_watching+0x15/0xb0 [ 889.853047][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 889.858715][ T30] do_syscall_64+0x100/0x230 [ 889.863783][ T30] ? clear_bhb_loop+0x35/0x90 [ 889.868564][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.875003][ T30] RIP: 0033:0x7f19ecb7dff9 [ 889.879539][ T30] RSP: 002b:00007f19ed95f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 889.888198][ T30] RAX: fffffffffffffe00 RBX: 00007f19ecd35f80 RCX: 00007f19ecb7dff9 [ 889.896822][ T30] RDX: 000000000000009b RSI: 0000000020000580 RDI: 0000000000000009 [ 889.905171][ T30] RBP: 00007f19ecbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 889.913997][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.922325][ T30] R13: 0000000000000000 R14: 00007f19ecd35f80 R15: 00007ffe8c35c508 [ 889.930455][ T30] [ 889.933922][ T30] INFO: lockdep is turned off. [ 889.938803][ T30] NMI backtrace for cpu 1 [ 889.943156][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 889.953168][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 889.963246][ T30] Call Trace: [ 889.966536][ T30] [ 889.969481][ T30] dump_stack_lvl+0x241/0x360 [ 889.974178][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 889.979396][ T30] ? __pfx__printk+0x10/0x10 [ 889.984010][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 889.988969][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 889.995322][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 890.000781][ T30] ? rcu_is_watching+0x15/0xb0 [ 890.005547][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 890.011522][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 890.017506][ T30] watchdog+0xff4/0x1040 [ 890.021747][ T30] ? watchdog+0x1ea/0x1040 [ 890.026160][ T30] ? __pfx_watchdog+0x10/0x10 [ 890.030831][ T30] kthread+0x2f0/0x390 [ 890.034893][ T30] ? __pfx_watchdog+0x10/0x10 [ 890.039563][ T30] ? __pfx_kthread+0x10/0x10 [ 890.044148][ T30] ret_from_fork+0x4b/0x80 [ 890.048562][ T30] ? __pfx_kthread+0x10/0x10 [ 890.053146][ T30] ret_from_fork_asm+0x1a/0x30 [ 890.057914][ T30] [ 890.061701][ T30] Sending NMI from CPU 1 to CPUs 0: [ 890.067292][ C0] NMI backtrace for cpu 0 [ 890.067307][ C0] CPU: 0 UID: 0 PID: 5320 Comm: kworker/0:5 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 890.067327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 890.067338][ C0] Workqueue: events purge_vmap_node [ 890.067361][ C0] RIP: 0010:kasan_check_range+0x82/0x290 [ 890.067383][ C0] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 890.067397][ C0] RSP: 0018:ffffc90004cef400 EFLAGS: 00000282 [ 890.067410][ C0] RAX: ffffc90004cef801 RBX: 1ffff9200099deae RCX: ffffffff8141732b [ 890.067423][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90004cef570 [ 890.067434][ C0] RBP: fffffffffffffffe R08: ffffc90004cef57f R09: 1ffff9200099deaf [ 890.067446][ C0] R10: dffffc0000000000 R11: fffff5200099deae R12: ffffc90004cf0000 [ 890.067458][ C0] R13: ffffc90004cef520 R14: dffffc0000000001 R15: fffff5200099deb0 [ 890.067469][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 890.067483][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 890.067495][ C0] CR2: 00007f208550a338 CR3: 000000002f618000 CR4: 00000000003526f0 [ 890.067510][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 890.067520][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 890.067530][ C0] Call Trace: [ 890.067536][ C0] [ 890.067545][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 890.067565][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 890.067582][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 890.067608][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 890.067628][ C0] ? nmi_handle+0x14f/0x5a0 [ 890.067644][ C0] ? nmi_handle+0x2a/0x5a0 [ 890.067660][ C0] ? kasan_check_range+0x82/0x290 [ 890.067678][ C0] ? default_do_nmi+0x63/0x160 [ 890.067699][ C0] ? exc_nmi+0x123/0x1f0 [ 890.067716][ C0] ? end_repeat_nmi+0xf/0x53 [ 890.067740][ C0] ? unwind_next_frame+0xcfb/0x22d0 [ 890.067756][ C0] ? kasan_check_range+0x82/0x290 [ 890.067775][ C0] ? kasan_check_range+0x82/0x290 [ 890.067794][ C0] ? kasan_check_range+0x82/0x290 [ 890.067812][ C0] [ 890.067818][ C0] [ 890.067825][ C0] __asan_memset+0x23/0x50 [ 890.067841][ C0] ? kasan_depopulate_vmalloc_pte+0x74/0x90 [ 890.067856][ C0] unwind_next_frame+0xcfb/0x22d0 [ 890.067875][ C0] ? free_unref_page+0xcfb/0xf20 [ 890.067892][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 890.067911][ C0] arch_stack_walk+0x11c/0x150 [ 890.067929][ C0] ? kasan_depopulate_vmalloc_pte+0x74/0x90 [ 890.067948][ C0] stack_trace_save+0x118/0x1d0 [ 890.067965][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 890.067987][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 890.068006][ C0] ? rcu_is_watching+0x15/0xb0 [ 890.068023][ C0] ? lock_acquire+0xe3/0x550 [ 890.068039][ C0] save_stack+0xfb/0x1f0 [ 890.068064][ C0] ? __pfx_save_stack+0x10/0x10 [ 890.068080][ C0] ? free_unref_page+0xcfb/0xf20 [ 890.068101][ C0] ? page_ext_get+0x20/0x2a0 [ 890.068118][ C0] ? rcu_read_lock_held+0xa/0x50 [ 890.068137][ C0] __reset_page_owner+0x76/0x430 [ 890.068153][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 890.068174][ C0] free_unref_page+0xcfb/0xf20 [ 890.068193][ C0] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 890.068210][ C0] __apply_to_page_range+0x806/0xde0 [ 890.068234][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 890.068253][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 890.068272][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 890.068290][ C0] ? rcu_is_watching+0x15/0xb0 [ 890.068311][ C0] kasan_release_vmalloc+0xa5/0xd0 [ 890.068327][ C0] purge_vmap_node+0x22f/0x8d0 [ 890.068346][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 890.068367][ C0] ? __pfx_lock_release+0x10/0x10 [ 890.068381][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 890.068402][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 890.068423][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 890.068442][ C0] ? rcu_is_watching+0x15/0xb0 [ 890.068459][ C0] ? process_scheduled_works+0x976/0x1850 [ 890.068479][ C0] process_scheduled_works+0xa63/0x1850 [ 890.068509][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 890.068530][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 890.068547][ C0] ? assign_work+0x364/0x3d0 [ 890.068568][ C0] worker_thread+0x870/0xd30 [ 890.068593][ C0] ? __kthread_parkme+0x169/0x1d0 [ 890.068615][ C0] ? __pfx_worker_thread+0x10/0x10 [ 890.068635][ C0] kthread+0x2f0/0x390 [ 890.068650][ C0] ? __pfx_worker_thread+0x10/0x10 [ 890.068669][ C0] ? __pfx_kthread+0x10/0x10 [ 890.068685][ C0] ret_from_fork+0x4b/0x80 [ 890.068704][ C0] ? __pfx_kthread+0x10/0x10 [ 890.068719][ C0] ret_from_fork_asm+0x1a/0x30 [ 890.068744][ C0] [ 890.552308][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 890.559203][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 890.569181][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 890.579230][ T30] Call Trace: [ 890.582501][ T30] [ 890.585426][ T30] dump_stack_lvl+0x241/0x360 [ 890.590101][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 890.595295][ T30] ? __pfx__printk+0x10/0x10 [ 890.599879][ T30] ? vscnprintf+0x5d/0x90 [ 890.604206][ T30] panic+0x349/0x880 [ 890.608099][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 890.614324][ T30] ? __pfx_panic+0x10/0x10 [ 890.618757][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 890.624139][ T30] ? __irq_work_queue_local+0x137/0x410 [ 890.629685][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 890.635053][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 890.641203][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 890.647357][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 890.653503][ T30] watchdog+0x1033/0x1040 [ 890.657829][ T30] ? watchdog+0x1ea/0x1040 [ 890.662241][ T30] ? __pfx_watchdog+0x10/0x10 [ 890.666911][ T30] kthread+0x2f0/0x390 [ 890.670971][ T30] ? __pfx_watchdog+0x10/0x10 [ 890.675639][ T30] ? __pfx_kthread+0x10/0x10 [ 890.680226][ T30] ret_from_fork+0x4b/0x80 [ 890.684639][ T30] ? __pfx_kthread+0x10/0x10 [ 890.689222][ T30] ret_from_fork_asm+0x1a/0x30 [ 890.693984][ T30] [ 890.697139][ T30] Kernel Offset: disabled [ 890.701448][ T30] Rebooting in 86400 seconds..