last executing test programs: 11m24.354169734s ago: executing program 0 (id=211): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4000084) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x5, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000380)={0x0, 0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000140)={r3}) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x2, 0x18a, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) 11m23.360992938s ago: executing program 0 (id=212): openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @private=0xa010100}, 0x10, 0x0}}], 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) fsopen(&(0x7f0000000080)='binder\x00', 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b2c, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @phonet={0x23, 0x40, 0x3}, @xdp={0x2c, 0x4, r8, 0x22}, @tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x4}}, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x100000000, 0xfffffffffffffff8, 0x1000}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) 11m19.098637713s ago: executing program 0 (id=223): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x4a) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x265, 0x26, r6, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000180)=0x400000001, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r8, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) 11m15.874401783s ago: executing program 0 (id=219): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4e24, 0x6, 0x4e22, 0x8000, 0xc, 0xa0, 0xa0, 0x21}, {0x8, 0x3, 0x7, 0x1, 0x2, 0x6, 0x9, 0xf1c}, {0x1a, 0x6, 0x2}, 0x2101, 0x6e6bb5, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d2, 0xff}, 0x2, @in6=@loopback, 0x3504, 0x4, 0x0, 0xff, 0x1, 0x6, 0x9}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000080)='.\x00', 0x0, 0x120) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000002c0)=0x78c2, 0x4) sendmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) fanotify_init(0x200, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f0000000280)=""/53, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) 11m14.577102494s ago: executing program 0 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84054) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="040f0493cf0b08"], 0x7) read$msr(r4, &(0x7f0000002100)=""/102400, 0x19000) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) sched_setscheduler(r2, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3c, 0x3000001, 0x50, 0xffffffffffffffff, 0x0) r5 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$unix(r5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x11) 11m12.555490844s ago: executing program 0 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000004c0)={r5, 0x7, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400"], 0x0) setns(0xc9, 0x0) socket(0x1f, 0x5, 0x8) syz_usb_control_io(r8, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20110c0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4001, 0x8) write(r9, &(0x7f0000000100), 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 10m55.440931505s ago: executing program 32 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000004c0)={r5, 0x7, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400"], 0x0) setns(0xc9, 0x0) socket(0x1f, 0x5, 0x8) syz_usb_control_io(r8, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20110c0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4001, 0x8) write(r9, &(0x7f0000000100), 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 8m33.576198903s ago: executing program 3 (id=465): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) fcntl$getflags(r3, 0xb) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0)=0x78c2, 0x4) sendmmsg(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) fanotify_init(0x200, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000280)=""/53, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) 8m31.821910486s ago: executing program 3 (id=467): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) 8m30.209572515s ago: executing program 3 (id=472): r0 = gettid() ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) epoll_create1(0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000001c0)={0xe000300f}) r3 = getpgid(0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r4, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) accept4(r4, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'macvlan1\x00', 0xa001}) pread64(r1, 0x0, 0x54, 0x8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x4, 0x0, [{0xc0000000, 0x2, 0x3, 0x7, 0x9}, {0x2, 0x6, 0x57, 0x7, 0x1ff}, {0xc0000000, 0x3, 0x9, 0x9, 0x3}, {0x80000001, 0x2, 0x2, 0x10000, 0x2}]}) 8m28.771689491s ago: executing program 3 (id=474): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x40084) connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 8m25.13127483s ago: executing program 3 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x3b, @multicast1, 0x4e23, 0x3, 'lblc\x00', 0x1, 0x7, 0x449}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x9, 0x3a}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r1], 0x58}, 0x1, 0x0, 0x0, 0x24008894}, 0x2000000) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000002700)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r2) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) pipe2$9p(0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61703d6f66662c636865636b3d7374726963740c579c1bf68dcb210d262ed0c13e2c63727566742c646d6f64653d3078303030303030303030303030303030342c756e68696465727365743d63703433372c6d61703d6f66662c6d6f64653d3030303030303030303030"], 0x0, 0x544, &(0x7f0000001000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f3a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) mbind(&(0x7f0000c1b000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) bind$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2008c058) r5 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x8080) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000200)={0x0, "4c590d1de9ab1094e6fd27760d84742f"}) 8m24.76454116s ago: executing program 3 (id=483): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="130000000102", 0x6}, {&(0x7f0000000140)}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fc"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) r3 = syz_open_dev$dmmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x0, 0x82, 0x3ff, 0x1, 0x1}) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0xfea000, 0x2000402) lseek(r4, 0x1, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) 8m9.69939089s ago: executing program 33 (id=483): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="130000000102", 0x6}, {&(0x7f0000000140)}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fc"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) r3 = syz_open_dev$dmmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x0, 0x82, 0x3ff, 0x1, 0x1}) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0xfea000, 0x2000402) lseek(r4, 0x1, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) 3m29.564787387s ago: executing program 4 (id=1506): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)={[{}, {}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@namecase}, {@gid}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0xfd, 0x154a, &(0x7f0000000400)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x49041, 0x1dc) 3m29.304895124s ago: executing program 4 (id=1509): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa090400"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000d0}, 0xffffffffffffff90, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1050}, 0x20008801) 3m26.067597823s ago: executing program 4 (id=1514): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m20.627710487s ago: executing program 4 (id=1533): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x2008802, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=macgreek,errors=remount-ro,iocharset=macturkish,keep_last_dots,iocharset=macinuit,fmask=00000000000000000001774,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303430303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c66756e633d504154485f434845434b2c00d68f80963e992f7a790f2a9437a29f8b4d470ae365120a367f816615bab1a73bcb0b34104466f040377b3f4ab5a9da23044717ccad042e8ceab3e5ee0a02b86bf4f8cd552aad29ee2912615d138189a059cae1a9f0c650f76fbda44cada54fb491e9ccd6856997ae44d04073d95a4780d15efe4ceeca4c12c9682120298580b5e8c054c336f3b7d648880a653348c06c67adacbad7c26ba9e6cb5357"], 0x7, 0x1532, &(0x7f0000004d00)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4020, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=0000000000100000']) 3m20.546273639s ago: executing program 4 (id=1534): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4e24, 0x6, 0x4e22, 0x8000, 0xc, 0xa0, 0xa0, 0x21}, {0x8, 0x3, 0x7, 0x1, 0x2, 0x6, 0x9, 0xf1c}, {0x1a, 0x6, 0x2}, 0x2101, 0x6e6bb5, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d2, 0xff}, 0x2, @in6=@loopback, 0x3504, 0x4, 0x0, 0xff, 0x1, 0x6, 0x9}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) fcntl$getflags(r3, 0xb) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0)=0x78c2, 0x4) sendmmsg(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)}}], 0x1, 0x24044015) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) fanotify_init(0x200, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000280)=""/53, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) 3m20.443655532s ago: executing program 4 (id=1535): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x4000008d, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) 3m20.10800415s ago: executing program 34 (id=1535): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x4000008d, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) 5.015604156s ago: executing program 6 (id=2630): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x6, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x1, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 4.594276407s ago: executing program 6 (id=2637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) 4.091728429s ago: executing program 6 (id=2641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0x8, 0xffffffff, 0x7}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48e, 0x0, 0x40}]}) 3.918480923s ago: executing program 6 (id=2643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000140)={[{@dax_inode}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44c, &(0x7f0000000b40)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 3.590643021s ago: executing program 6 (id=2646): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4e24, 0x6, 0x4e22, 0x8000, 0xc, 0xa0, 0xa0, 0x21}, {0x8, 0x3, 0x7, 0x1, 0x2, 0x6, 0x9, 0xf1c}, {0x1a, 0x6, 0x2}, 0x2101, 0x6e6bb5, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d2, 0xff}, 0x2, @in6=@loopback, 0x3504, 0x4, 0x0, 0xff, 0x1, 0x6, 0x9}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) fcntl$getflags(r3, 0xb) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0)=0x78c2, 0x4) sendmmsg(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x1, 0x24044015) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) fanotify_init(0x200, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000280)=""/53, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) 3.267578859s ago: executing program 1 (id=2650): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040), 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) 3.005496016s ago: executing program 1 (id=2651): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.050577839s ago: executing program 6 (id=2654): ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x402) 1.927673182s ago: executing program 5 (id=2655): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c00000004"], 0xa) 1.791640855s ago: executing program 1 (id=2656): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 1.677774338s ago: executing program 5 (id=2657): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) 1.62577135s ago: executing program 1 (id=2658): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) unlink(&(0x7f0000000300)='./file1\x00') 1.471755563s ago: executing program 5 (id=2659): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file7/file0\x00', 0x840000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 1.317729597s ago: executing program 5 (id=2661): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 1.21420592s ago: executing program 2 (id=2662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.048276844s ago: executing program 5 (id=2663): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x8d, 0xfffffffc, 0x7ffd, 0x1, 0x21, "8cee29ffffffff005d39dfcd0abef2462a5900", 0x0, 0x401}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 1.047148974s ago: executing program 2 (id=2664): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 889.983637ms ago: executing program 5 (id=2665): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 839.820109ms ago: executing program 2 (id=2666): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) 615.797224ms ago: executing program 1 (id=2667): socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) 376.455721ms ago: executing program 1 (id=2668): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xc5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x6a855000) 159.713055ms ago: executing program 2 (id=2669): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r1, 0x4, 0xff, 0x6, 0x5, 0x16, @local, @mcast2, 0x7800, 0x8, 0x800, 0x9}}) 90.654697ms ago: executing program 2 (id=2670): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80071c, &(0x7f0000000000), 0xfb, 0x4ae, &(0x7f0000000540)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=2671): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000880)="131c8700feaa16bca4ac74ab8287", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): lus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 630.922336][T11083] IPVS: length: 28 != 24 [ 630.942457][T11086] loop4: detected capacity change from 0 to 1024 [ 630.984345][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 630.991014][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 631.000959][T11086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.032715][T11088] ceph: No mds server is up or the cluster is laggy [ 631.049535][T11086] EXT4-fs warning (device loop4): ext4_empty_dir:3158: inode #11: comm syz.4.1267: directory missing '..' [ 631.151278][ T6903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.513293][ T5813] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 631.662980][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 631.874933][ T5813] usb 5-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 631.887420][ T5813] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.900779][ T5813] usb 5-1: too many endpoints for config 1 interface 1 altsetting 55: 114, using maximum allowed: 30 [ 631.922959][ T5813] usb 5-1: config 1 interface 1 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 631.936214][ T5813] usb 5-1: config 1 interface 1 has no altsetting 0 [ 631.952453][ T5813] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.963610][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.972051][ T5813] usb 5-1: Product: syz [ 631.977879][ T5813] usb 5-1: Manufacturer: syz [ 631.984070][ T5813] usb 5-1: SerialNumber: syz [ 631.992111][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 632.004145][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 632.011472][ T5813] cdc_mbim 5-1:1.0: skipping garbage [ 632.016948][ T5813] usb 5-1: selecting invalid altsetting 1 [ 632.022687][ T5813] usb 5-1: selecting invalid altsetting 0 [ 632.028599][ T5813] usb 5-1: selecting invalid altsetting 0 [ 632.034847][T11119] ceph: No mds server is up or the cluster is laggy [ 632.042344][ T5813] cdc_mbim 5-1:1.0: bind() failure [ 632.224350][ T5813] usb 5-1: selecting invalid altsetting 0 [ 632.230275][ T5813] usbtest: probe of 5-1:1.1 failed with error -22 [ 632.242442][ T5813] usb 5-1: USB disconnect, device number 19 [ 632.284502][T11128] loop5: detected capacity change from 0 to 512 [ 632.301071][T11128] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 632.360336][T11128] EXT4-fs (loop5): 1 truncate cleaned up [ 632.373987][T11128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.438921][T11128] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5972: inode #12: comm syz.5.1282: bad extra_isize 62 (inode size 256) [ 632.490873][T11128] EXT4-fs (loop5): Remounting filesystem read-only [ 632.609782][ T8318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.703027][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 633.226798][T11146] loop5: detected capacity change from 0 to 4096 [ 633.238356][T11146] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 633.286867][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 633.297072][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 633.326748][T11146] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 633.339510][T11149] ceph: No mds server is up or the cluster is laggy [ 633.439366][T11146] ntfs3: loop5: ino=5, mi_enum_attr [ 633.578124][T11146] ntfs3: loop5: ino=5, "/" mi_enum_attr [ 633.743035][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.793036][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 635.832987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 636.692174][ T5816] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 636.863018][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 637.121902][ T5816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.224645][ T5816] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 637.325014][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.903013][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 638.061813][ T5816] usb 6-1: USB disconnect, device number 12 [ 638.143378][ T9806] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 638.332924][ T9806] usb 5-1: Using ep0 maxpacket: 16 [ 638.340918][ T9806] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 638.352150][ T9806] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 638.361308][ T9806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.373311][ T9806] usb 5-1: Product: syz [ 638.377505][ T9806] usb 5-1: Manufacturer: syz [ 638.382151][ T9806] usb 5-1: SerialNumber: syz [ 638.388834][ T9806] r8152-cfgselector 5-1: config 0 descriptor?? [ 638.810627][ T9806] r8152-cfgselector 5-1: Unknown version 0x0000 [ 638.819523][ T9806] r8152-cfgselector 5-1: USB disconnect, device number 20 [ 638.943061][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 639.002952][ T5814] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 639.183676][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 639.192125][ T5814] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 639.201566][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.209705][ T5814] usb 6-1: Product: syz [ 639.214177][ T5814] usb 6-1: Manufacturer: syz [ 639.218795][ T5814] usb 6-1: SerialNumber: syz [ 639.225980][ T5814] usb 6-1: config 0 descriptor?? [ 639.233889][ T5814] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 639.983070][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 640.000081][ T5814] gspca_sonixj: reg_r err -71 [ 640.007584][ T5814] sonixj: probe of 6-1:0.0 failed with error -71 [ 640.033760][ T5814] usb 6-1: USB disconnect, device number 13 [ 640.501630][T11233] loop4: detected capacity change from 0 to 128 [ 641.022961][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 641.457832][ T979] kworker/u4:5: attempt to access beyond end of device [ 641.457832][ T979] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 641.576534][T11250] netlink: 464 bytes leftover after parsing attributes in process `syz.1.1334'. [ 641.676308][T11254] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1335'. [ 641.700620][T11253] loop4: detected capacity change from 0 to 1024 [ 641.748760][T11253] EXT4-fs: Ignoring removed orlov option [ 641.783689][T11253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.060024][T11253] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 642.062977][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 642.072142][T11253] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 642.089558][T11263] loop5: detected capacity change from 0 to 128 [ 642.103679][T11253] EXT4-fs (loop4): orphan cleanup on readonly fs [ 642.127174][T11253] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1331: Invalid inode table block 0 in block_group 0 [ 642.293318][T11253] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 642.311176][T11253] EXT4-fs error (device loop4): ext4_quota_write:7342: inode #3: comm syz.4.1331: mark_inode_dirty error [ 642.773900][T11253] Quota error (device loop4): write_blk: dquota write failed [ 642.891105][T11253] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 642.981650][T11253] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1331: Failed to acquire dquot type 0 [ 642.981904][T11270] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 643.048860][T11253] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1331: Invalid inode table block 0 in block_group 0 [ 643.078825][T11253] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 643.088868][T11253] EXT4-fs error (device loop4): ext4_ext_truncate:4535: inode #15: comm syz.4.1331: mark_inode_dirty error [ 643.102971][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 643.110787][T11253] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1331: Invalid inode table block 0 in block_group 0 [ 643.140436][T11253] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 643.166341][ T2925] kworker/u4:8: attempt to access beyond end of device [ 643.166341][ T2925] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 643.184477][T11253] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 643.205040][T11253] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1331: Invalid inode table block 0 in block_group 0 [ 643.233258][T11253] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 643.269987][T11253] EXT4-fs error (device loop4): ext4_truncate:4314: inode #15: comm syz.4.1331: mark_inode_dirty error [ 643.292640][T11253] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 643.312181][T11253] EXT4-fs (loop4): 1 truncate cleaned up [ 643.320330][T11253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 643.356287][T11253] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.1331: Invalid inode table block 0 in block_group 0 [ 643.455808][ T6903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.142974][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 644.367100][T11285] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 644.448826][T11290] loop4: detected capacity change from 0 to 256 [ 644.560675][ T23] libceph: connect (1)[c::]:6789 error -101 [ 644.568560][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 644.602241][T11293] ceph: No mds server is up or the cluster is laggy [ 644.714393][ T23] libceph: connect (1)[c::]:6789 error -101 [ 644.720578][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 645.008075][ T23] libceph: connect (1)[c::]:6789 error -101 [ 645.182998][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 646.222984][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 646.638278][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 646.645772][T11298] ceph: No mds server is up or the cluster is laggy [ 647.262975][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 647.348392][T11329] loop5: detected capacity change from 0 to 128 [ 647.370499][T11329] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 647.383310][T11329] hpfs: filesystem error: improperly stopped [ 647.390177][T11329] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 647.400709][T11329] hpfs: You really don't want any checks? You are crazy... [ 647.412335][T11329] hpfs: Code page index out of array [ 647.420120][T11329] hpfs: code page support is disabled [ 647.455278][T11329] hpfs: hpfs_map_4sectors(): unaligned read [ 647.472432][T11329] hpfs: hpfs_map_4sectors(): unaligned read [ 647.483242][T11329] hpfs: filesystem error: unable to find root dir [ 647.591019][T11331] SET target dimension over the limit! [ 647.988226][T11351] loop4: detected capacity change from 0 to 128 [ 648.002353][T11351] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 648.020368][T11351] hpfs: filesystem error: improperly stopped [ 648.020432][T11351] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 648.020450][T11351] hpfs: You really don't want any checks? You are crazy... [ 648.020463][T11351] hpfs: Code page index out of array [ 648.020471][T11351] hpfs: code page support is disabled [ 648.020670][T11351] hpfs: hpfs_map_4sectors(): unaligned read [ 648.020772][T11351] hpfs: hpfs_map_4sectors(): unaligned read [ 648.020783][T11351] hpfs: filesystem error: unable to find root dir [ 648.218011][T11361] xt_recent: hitcount (2147483650) is larger than allowed maximum (255) [ 648.302983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 648.563238][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'. [ 649.342977][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 649.508841][T11385] loop5: detected capacity change from 0 to 128 [ 649.728705][T11369] loop4: detected capacity change from 0 to 32768 [ 649.765373][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 649.804112][T11388] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1391'. [ 649.805794][T11369] [ 649.805794][T11369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 649.805794][T11369] [ 650.191287][T11388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.383047][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 650.486184][ T11] kworker/u4:0: attempt to access beyond end of device [ 650.486184][ T11] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 650.635533][ T979] read_mapping_page failed! [ 650.653741][ T979] ERROR: (device loop4): txCommit: [ 650.653741][ T979] [ 650.691924][ T979] jfs_write_inode: jfs_commit_inode failed! [ 650.753827][ T6903] [ 650.753827][ T6903] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 650.753827][ T6903] [ 650.806560][ T6903] [ 650.806560][ T6903] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 650.806560][ T6903] [ 651.423013][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 652.403252][T11399] loop5: detected capacity change from 0 to 32768 [ 652.462984][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 653.354219][T11399] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 653.404393][T11399] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 653.502967][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 653.521392][T11399] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 653.540916][T11399] XFS (loop5): Tail block (0x10) overwrite detected. Updated to 0x30 [ 653.568402][T11399] XFS (loop5): Ending clean mount [ 653.618065][ T8318] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 653.664892][T11409] loop4: detected capacity change from 0 to 32768 [ 653.676525][T11409] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop4 scanned by syz.4.1396 (11409) [ 653.696158][T11409] BTRFS info (device loop4): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 653.708006][T11409] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 653.724597][T11409] BTRFS info (device loop4): using free space tree [ 653.850298][T11409] BTRFS info (device loop4): enabling ssd optimizations [ 653.858527][T11409] BTRFS info (device loop4): auto enabling async discard [ 653.907411][ T6903] BTRFS info (device loop4): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 654.543013][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 655.583000][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 656.623007][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 657.457807][T11481] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1421'. [ 657.524600][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 657.530737][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 657.574043][T11483] ceph: No mds server is up or the cluster is laggy [ 657.662994][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 657.724181][T11491] ceph: No mds server is up or the cluster is laggy [ 657.735210][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 657.741198][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 658.023417][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 658.029555][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 658.702981][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 658.970530][T11507] loop4: detected capacity change from 0 to 256 [ 659.006682][T11507] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 659.457088][T11520] loop5: detected capacity change from 0 to 64 [ 659.742976][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 660.292340][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 660.402359][T11525] loop4: detected capacity change from 0 to 1024 [ 660.782988][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 661.823002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 662.862962][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 663.912990][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 663.974855][T11541] ceph: No mds server is up or the cluster is laggy [ 664.021827][ T23] libceph: connect (1)[c::]:6789 error -101 [ 664.131240][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 664.942985][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 665.028027][T11566] loop5: detected capacity change from 0 to 128 [ 665.983003][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 666.235615][ T9806] libceph: connect (1)[c::]:6789 error -101 [ 666.246767][ T9806] libceph: mon0 (1)[c::]:6789 connect error [ 666.262010][T11578] ceph: No mds server is up or the cluster is laggy [ 666.272242][T11582] jffs2: notice: (11582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 666.379267][ T49] kworker/u4:3: attempt to access beyond end of device [ 666.379267][ T49] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 666.598966][T11590] loop5: detected capacity change from 0 to 16 [ 666.646699][T11590] erofs: (device loop5): mounted with root inode @ nid 36. [ 666.650233][T11586] loop4: detected capacity change from 0 to 4096 [ 666.752643][T11586] ntfs3: loop4: Failed to load $Extend (-22). [ 666.792156][T11586] ntfs3: loop4: Failed to initialize $Extend. [ 667.022974][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 667.960293][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 668.043632][T11607] loop4: detected capacity change from 0 to 128 [ 668.072988][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 668.311683][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 668.322562][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 668.330869][ T9] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.342504][ T9] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.103219][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 669.463573][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.464105][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 669.476692][T11611] ceph: No mds server is up or the cluster is laggy [ 669.485354][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 669.652312][ T9] usb 6-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 669.663052][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.676073][ T9] usb 6-1: config 0 descriptor?? [ 669.702191][ T979] kworker/u4:5: attempt to access beyond end of device [ 669.702191][ T979] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 670.005613][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 670.152996][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 671.182969][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 671.751147][ T9] hid-penmount 0003:14E1:6000.0001: hidraw0: USB HID v0.00 Device [HID 14e1:6000] on usb-dummy_hcd.5-1/input0 [ 671.767279][ T9] usb 6-1: USB disconnect, device number 14 [ 671.902119][T11640] fido_id[11640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 672.222968][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 673.262964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 673.360725][T11653] ceph: No mds server is up or the cluster is laggy [ 673.442026][ T23] libceph: connect (1)[c::]:6789 error -101 [ 673.576046][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 674.302993][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 675.353002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 676.383240][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.423003][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.253075][ T9806] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 678.456492][ T9] libceph: connect (1)[c::]:6789 error -101 [ 678.462740][ T9806] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.472997][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.480967][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 678.488572][T11692] ceph: No mds server is up or the cluster is laggy [ 678.496379][ T9806] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 678.506336][ T9806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.565409][ T9806] ttusb_dec_send_command: command bulk message failed: error -22 [ 678.565767][T11682] loop4: detected capacity change from 0 to 32768 [ 678.573561][ T9806] ttusb-dec: probe of 6-1:1.0 failed with error -22 [ 678.762050][ T9806] usb 6-1: USB disconnect, device number 15 [ 679.502975][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 680.542987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 681.169255][ T5158] libceph: connect (1)[c::]:6789 error -101 [ 681.272017][ T5158] libceph: mon0 (1)[c::]:6789 connect error [ 681.344626][T11721] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1503'. [ 681.383972][T11722] ceph: No mds server is up or the cluster is laggy [ 681.409549][ T5158] libceph: connect (1)[c::]:6789 error -101 [ 681.505193][ T5158] libceph: mon0 (1)[c::]:6789 connect error [ 681.582964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.039446][T11728] loop4: detected capacity change from 0 to 256 [ 682.060222][T11728] exfat: Deprecated parameter 'namecase' [ 682.066473][T11728] exfat: Deprecated parameter 'namecase' [ 682.108122][T11728] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 682.623105][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.663007][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 684.702968][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 685.325596][ T9806] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 685.742969][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 685.829629][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.836126][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.864342][T11762] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1518'. [ 686.286449][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 686.792964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 687.485775][ T9] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 687.499316][ T9] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 687.509685][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.517821][ T9] usb 6-1: Product: syz [ 687.522128][ T9] usb 6-1: Manufacturer: syz [ 687.526873][ T9] usb 6-1: SerialNumber: syz [ 687.544452][ T9] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 687.552334][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 687.596373][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 687.606766][ T9] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 687.615042][ T9] usb 6-1: media controller created [ 687.636405][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 687.685618][ T9] DVB: Unable to find symbol mt352_attach() [ 687.691599][ T9] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 687.701205][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 687.732890][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 687.776721][ T5814] usb 6-1: USB disconnect, device number 16 [ 687.810881][ T5814] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 687.822983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 688.811877][ T9806] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 688.862977][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 689.031546][ T9806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 689.052209][ T9806] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 689.073788][ T9806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 689.094096][ T9806] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 689.117055][ T9806] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 689.133698][ T9806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.151759][ T9806] usb 5-1: Product: syz [ 689.158966][ T9806] usb 5-1: Manufacturer: syz [ 689.166306][ T9806] usb 5-1: SerialNumber: syz [ 689.181506][ T9806] usb 5-1: config 0 descriptor?? [ 689.198188][ T9806] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 689.612922][ T9806] scsi host1: usb-storage 5-1:0.0 [ 689.903082][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 690.011397][ T5833] usb 5-1: USB disconnect, device number 22 [ 690.917580][T11807] loop4: detected capacity change from 0 to 256 [ 690.941758][T11807] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 690.963063][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 691.073481][ T9806] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 691.228953][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.312170][ T9806] usb 6-1: Using ep0 maxpacket: 16 [ 691.348528][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.378148][ T9806] usb 6-1: unable to get BOS descriptor or descriptor too short [ 691.395649][ T9806] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 691.407945][ T9806] usb 6-1: can't read configurations, error -71 [ 691.436710][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.541162][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.982957][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 691.999050][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 692.018815][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 692.028279][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 692.063371][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 692.073231][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 692.081288][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 692.101695][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 692.118069][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 692.126234][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 692.148925][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 692.173061][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 692.183729][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 692.276090][T11820] lo speed is unknown, defaulting to 1000 [ 692.419670][ T9806] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 693.023042][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.475355][ T9806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.487050][ T9806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.509637][ T9806] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 693.530835][T11820] lo speed is unknown, defaulting to 1000 [ 693.540278][ T9806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.987301][ T9806] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 694.003682][ T9806] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 694.020815][ T9806] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 694.062965][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 694.113216][ T9806] hid-picolcd 0003:04D8:C002.0002: unsupported KEY_STATE report [ 694.125626][T11820] chnl_net:caif_netlink_parms(): no params data found [ 694.137037][ T9806] hid-picolcd: probe of 0003:04D8:C002.0002 failed with error -22 [ 694.224308][ T5785] Bluetooth: hci1: command tx timeout [ 694.254751][ T9806] usb 6-1: USB disconnect, device number 18 [ 694.391645][T11820] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.398977][T11820] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.410357][T11820] bridge_slave_0: entered allmulticast mode [ 694.418089][T11820] bridge_slave_0: entered promiscuous mode [ 694.428394][T11820] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.435885][T11820] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.443441][T11820] bridge_slave_1: entered allmulticast mode [ 694.450837][T11820] bridge_slave_1: entered promiscuous mode [ 694.620552][ T49] hsr_slave_0: left promiscuous mode [ 694.630845][ T49] hsr_slave_1: left promiscuous mode [ 694.649455][ T49] bridge_slave_0: left allmulticast mode [ 694.663461][ T49] bridge_slave_0: left promiscuous mode [ 694.669493][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.738109][ T49] veth1_macvtap: left promiscuous mode [ 694.743973][ T49] veth0_macvtap: left promiscuous mode [ 694.753701][ T49] veth1_vlan: left promiscuous mode [ 694.763940][ T49] veth0_vlan: left promiscuous mode [ 694.966680][T11868] loop5: detected capacity change from 0 to 128 [ 695.102986][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 696.152963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 696.363015][ T5785] Bluetooth: hci1: command tx timeout [ 696.467567][ T979] kworker/u4:5: attempt to access beyond end of device [ 696.467567][ T979] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 696.797560][T11878] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 696.891531][ T8790] libceph: connect (1)[c::]:6789 error -101 [ 696.897876][ T8790] libceph: mon0 (1)[c::]:6789 connect error [ 696.916733][T11880] ceph: No mds server is up or the cluster is laggy [ 697.183025][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 698.222972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 699.032960][ T5785] Bluetooth: hci1: command tx timeout [ 699.263009][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 699.312998][ T5813] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 699.510092][ T5813] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.535928][ T5813] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 699.548504][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.572708][ T5813] ttusb_dec_send_command: command bulk message failed: error -22 [ 699.583498][ T5813] ttusb-dec: probe of 6-1:1.0 failed with error -22 [ 699.607092][ T49] team0 (unregistering): Port device team_slave_1 removed [ 699.662538][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.710973][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.781445][ T5813] usb 6-1: USB disconnect, device number 19 [ 700.107241][ T49] bond0 (unregistering): Released all slaves [ 700.206726][ T9] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 700.221981][T11820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.277405][T11820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.302975][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 700.526345][T11820] team0: Port device team_slave_0 added [ 700.549106][T11820] team0: Port device team_slave_1 added [ 700.660885][T11820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.682859][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.783502][T11820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.825732][T11820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.845404][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.968049][T11820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.103404][ T5785] Bluetooth: hci1: command tx timeout [ 701.152027][ T49] IPVS: stop unused estimator thread 0... [ 701.185008][T11820] hsr_slave_0: entered promiscuous mode [ 701.214079][T11820] hsr_slave_1: entered promiscuous mode [ 701.233335][T11820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 701.240948][T11820] Cannot create hsr debugfs directory [ 701.342996][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 701.736226][T11820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 701.756582][T11820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 701.780673][T11820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 701.865792][T11820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 702.392995][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 703.225886][T11820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.316988][T11820] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.397254][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.404490][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.422974][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 703.488125][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.495329][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.933080][ T5833] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 704.088045][T11820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.132521][ T5833] usb 6-1: unable to get BOS descriptor or descriptor too short [ 704.146809][ T5833] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 704.186638][ T5833] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 704.207251][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.231276][ T5833] usb 6-1: Product: syz [ 704.245061][ T5833] usb 6-1: Manufacturer: syz [ 704.250996][ T5833] usb 6-1: SerialNumber: syz [ 704.463315][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 705.503057][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 705.747079][T11820] veth0_vlan: entered promiscuous mode [ 705.787335][T11820] veth1_vlan: entered promiscuous mode [ 705.878698][ T5833] usb 6-1: USB disconnect, device number 20 [ 705.879132][T11820] veth0_macvtap: entered promiscuous mode [ 705.961090][T11820] veth1_macvtap: entered promiscuous mode [ 705.995397][T10735] udevd[10735]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.041189][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.084020][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.107223][T11820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.126698][T11820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.152726][T11820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.210028][T11820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.240522][T11820] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.262159][T11820] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.272874][T11820] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.281601][T11820] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.503553][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.542991][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 706.550667][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.622385][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.654523][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.942958][ T23] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 707.144795][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.168846][ T23] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 707.190591][ T23] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 707.217594][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.290741][ T23] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 707.583177][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 708.623056][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 709.231782][T12107] loop6: detected capacity change from 0 to 128 [ 709.445052][ T5813] usb 6-1: USB disconnect, device number 21 [ 709.495781][ T5813] idmouse 6-1:1.0: disconnected [ 709.521682][T12114] netlink: 'syz.2.1619': attribute type 1 has an invalid length. [ 709.663160][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 710.404919][ T3532] kworker/u4:11: attempt to access beyond end of device [ 710.404919][ T3532] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 710.713210][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.103477][T12142] loop6: detected capacity change from 0 to 1024 [ 711.743114][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 712.337173][T12156] loop6: detected capacity change from 0 to 128 [ 712.360615][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1633'. [ 712.563539][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1633'. [ 712.572515][T12158] netlink: 'syz.5.1633': attribute type 11 has an invalid length. [ 712.589376][T12158] netlink: 'syz.5.1633': attribute type 13 has an invalid length. [ 712.783110][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 713.627319][ T12] kworker/u4:1: attempt to access beyond end of device [ 713.627319][ T12] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 713.822974][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 714.862979][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 715.624149][T12214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.631645][T12214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.843582][T12214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.869554][T12214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.903573][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 716.750789][T12250] loop5: detected capacity change from 0 to 128 [ 716.942967][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 717.879266][T12266] loop6: detected capacity change from 0 to 1024 [ 717.905256][ T11] kworker/u4:0: attempt to access beyond end of device [ 717.905256][ T11] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 717.983049][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 718.112779][T12272] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 718.120775][T12272] team0: Device ipvlan2 is already an upper device of the team interface [ 719.033003][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 720.063128][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.112981][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.742040][T12310] loop5: detected capacity change from 0 to 128 [ 721.755460][T12306] loop6: detected capacity change from 0 to 512 [ 722.142963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 722.741941][T12306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.907533][T12306] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 722.929125][ T3532] kworker/u4:11: attempt to access beyond end of device [ 722.929125][ T3532] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 722.960369][T12322] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 723.125729][T11820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.194073][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 723.307873][T12334] loop6: detected capacity change from 0 to 128 [ 724.146801][T12337] kAFS: unable to lookup cell 'sÕ§K²ùyyµ¬ [ 724.146801][T12337] [ 724.146801][T12337] =6%ñ©*°;¾eÕܲ5ô;ZÑ*ëÜd{ªÀ¿iElÝZS—j—­UF/»�øk!ª�b…�tF\_·Üvf£Vn¯D…ìPʳ¤ý´PÑB1Ú%ÐA)X¥ã‰\YT"8ÏŽŽµd²J_¿�.�ÖÁÐé5d×#ãÛœÒh»Gp6è"±5ͺô�*§ÛÒ,‚š°âI—ÚémÞíIæ-(WÕAž?”¨¹W�ÏZ)nÑ[ÿ®qG jnÚ‡%(„J-ô%�ؘccʵÌÎÅ{|ê6ZØÉûçËA–5Îkó@¥aÀ­’+o­éSŽT;ÅÞò¨]5«Ò !œG3ƒ{âÁK¤ÓÓ,' [ 724.222986][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 724.564862][ T1146] kworker/u4:7: attempt to access beyond end of device [ 724.564862][ T1146] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 724.821827][T12353] netlink: 'syz.6.1683': attribute type 1 has an invalid length. [ 725.272995][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 726.312993][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 727.167656][ T9806] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 727.342960][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 727.385393][ T9806] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.413764][ T9806] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 727.428172][ T9806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.455385][ T9806] ttusb_dec_send_command: command bulk message failed: error -22 [ 727.470799][ T9806] ttusb-dec: probe of 6-1:1.0 failed with error -22 [ 727.655452][ T9] usb 6-1: USB disconnect, device number 22 [ 728.382990][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 728.467642][T12396] loop6: detected capacity change from 0 to 40427 [ 728.500041][T12396] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 728.520316][T12396] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 728.547431][T12396] F2FS-fs (loop6): Image doesn't support compression [ 728.555746][T12396] F2FS-fs (loop6): Image doesn't support compression [ 728.579941][T12396] F2FS-fs (loop6): invalid crc value [ 728.884856][T12396] F2FS-fs (loop6): Start checkpoint disabled! [ 728.992961][T12396] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 729.004266][T12396] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 729.087973][T12421] netem: change failed [ 729.422973][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 730.472999][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 730.899967][ T8790] libceph: connect (1)[c::]:6789 error -101 [ 730.913105][ T8790] libceph: mon0 (1)[c::]:6789 connect error [ 730.941708][T12453] ceph: No mds server is up or the cluster is laggy [ 731.056650][ T27] audit: type=1326 audit(1791220685.958:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 731.126275][ T27] audit: type=1326 audit(1791220685.958:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 731.196184][ T27] audit: type=1326 audit(1791220685.958:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 731.267690][ T27] audit: type=1326 audit(1791220685.968:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 731.360251][ T27] audit: type=1326 audit(1791220685.968:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 731.459965][ T27] audit: type=1326 audit(1791220685.968:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 731.502991][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 731.546783][ T27] audit: type=1326 audit(1791220685.968:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 731.597401][T12481] mkiss: ax0: crc mode is auto. [ 731.761941][ T27] audit: type=1326 audit(1791220685.968:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 732.542303][ T27] audit: type=1326 audit(1791220685.968:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 732.566627][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 732.578197][ T23] libceph: connect (1)[c::]:6789 error -101 [ 732.593104][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 732.623294][ T27] audit: type=1326 audit(1791220685.968:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12457 comm="syz.5.1723" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff5cf59e199 code=0x7ffc0000 [ 732.688602][T12488] ceph: No mds server is up or the cluster is laggy [ 733.114462][ T9806] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 733.150806][T12513] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1739'. [ 733.177525][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1739'. [ 733.315043][ T9806] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 733.346917][ T9806] usb 6-1: config 0 has no interface number 0 [ 733.355891][T12523] loop6: detected capacity change from 0 to 128 [ 733.380673][ T9806] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.427299][ T9806] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 733.446189][ T9806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.582955][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 733.655396][ T9806] usb 6-1: Product: syz [ 733.660183][ T9806] usb 6-1: Manufacturer: syz [ 733.667612][ T9806] usb 6-1: SerialNumber: syz [ 733.679735][ T9806] usb 6-1: config 0 descriptor?? [ 733.693661][ T9806] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 734.197880][ T8790] usb 6-1: USB disconnect, device number 23 [ 734.287925][ T8790] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 734.403436][ T23] libceph: connect (1)[c::]:6789 error -101 [ 734.411992][ T3493] kworker/u4:10: attempt to access beyond end of device [ 734.411992][ T3493] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 734.432420][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 734.440788][T12539] ceph: No mds server is up or the cluster is laggy [ 734.622994][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 735.236964][T12570] loop6: detected capacity change from 0 to 2048 [ 735.302787][T12570] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 735.330913][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 735.345461][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 735.352116][T12570] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 735.385409][T12575] ceph: No mds server is up or the cluster is laggy [ 735.435809][T12570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.589478][T12587] loop5: detected capacity change from 0 to 736 [ 735.662984][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 736.523001][ T9806] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 736.611662][T12612] loop6: detected capacity change from 0 to 8 [ 736.702972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 736.745097][ T9806] usb 6-1: Using ep0 maxpacket: 32 [ 736.756971][ T9806] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 736.805441][ T9806] usb 6-1: config 0 has no interface number 0 [ 736.811615][ T9806] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.921184][ T9806] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 736.961908][ T9806] usb 6-1: config 0 interface 85 has no altsetting 0 [ 736.994547][ T9806] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 737.022913][ T9806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.043244][ T9806] usb 6-1: Product: syz [ 737.047449][ T9806] usb 6-1: Manufacturer: syz [ 737.052493][ T9806] usb 6-1: SerialNumber: syz [ 737.065796][ T9806] usb 6-1: config 0 descriptor?? [ 737.097179][ T23] libceph: connect (1)[c::]:6789 error -101 [ 737.110560][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 737.148302][T12627] ceph: No mds server is up or the cluster is laggy [ 737.304574][ T9806] appletouch 6-1:0.85: Failed to read mode from device. [ 737.322970][ T9806] appletouch: probe of 6-1:0.85 failed with error -5 [ 737.540774][ T9] usb 6-1: USB disconnect, device number 24 [ 737.743238][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 738.793001][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 739.822974][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 740.873838][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 741.902975][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 742.165839][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1780'. [ 742.193184][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 742.345966][ T23] libceph: connect (1)[c::]:6789 error -101 [ 742.352168][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 742.380942][T12686] ceph: No mds server is up or the cluster is laggy [ 742.407158][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.442088][T12695] loop6: detected capacity change from 0 to 128 [ 742.459867][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 742.492359][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.736015][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 742.765381][ T9] ttusb-dec: probe of 6-1:1.0 failed with error -22 [ 742.943000][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 743.817549][ T9] usb 6-1: USB disconnect, device number 25 [ 743.852180][ T12] kworker/u4:1: attempt to access beyond end of device [ 743.852180][ T12] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 743.983176][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 744.429138][T12713] loop6: detected capacity change from 0 to 136 [ 744.456562][T12713] Attempt to read inode for relocated directory [ 745.022990][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 746.062963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 747.103008][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 747.496486][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.503219][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.792612][T12755] loop6: detected capacity change from 0 to 2048 [ 747.826569][T12755] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 747.899068][T10735] udevd[10735]: incorrect nilfs2 checksum on /dev/loop6 [ 747.925119][T12762] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 748.073854][ T5833] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 748.152969][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 748.275331][ T5833] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.296191][ T5833] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 748.323074][ T5833] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 748.348704][ T5833] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 748.384322][ T5833] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 748.402902][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 748.421225][ T5833] usb 6-1: SerialNumber: syz [ 748.656294][ T5833] usb 6-1: 0:2 : does not exist [ 748.671976][ T5833] usb 6-1: unit 5 not found! [ 748.712432][ T5833] usb 6-1: USB disconnect, device number 26 [ 748.753879][T10735] udevd[10735]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.183024][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 749.537259][T12802] lo: entered promiscuous mode [ 749.553256][T12802] bond0: entered promiscuous mode [ 749.565507][T12802] dummy0: entered promiscuous mode [ 749.575301][T12802] eql: entered promiscuous mode [ 749.580976][T12802] ifb0: entered promiscuous mode [ 749.589213][T12802] ifb1: entered promiscuous mode [ 749.595051][T12802] virtio_net virtio1 eth0: entered promiscuous mode [ 749.605817][T12802] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 749.623965][T12802] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 749.631891][T12802] hwsim0: entered promiscuous mode [ 749.645221][T12802] ieee802154 phy0 wpan0: entered promiscuous mode [ 749.652754][T12802] ieee802154 phy1 wpan1: entered promiscuous mode [ 749.659990][T12802] teql0: entered promiscuous mode [ 749.665431][T12802] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 749.907181][T12816] loop5: detected capacity change from 0 to 256 [ 749.921503][T12816] exfat: Unknown parameter '³MvMÈU%x¥—<(|#Ó�[]ÈŠ“ƒ3Q‘/ƒ ›ýhutH3'c”ˆ ' [ 750.222990][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 750.392856][ C1] hrtimer: interrupt took 49784 ns [ 751.262981][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 752.302965][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 752.378822][T12847] loop5: detected capacity change from 0 to 128 [ 752.549627][T12851] loop6: detected capacity change from 0 to 128 [ 753.342974][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 753.498447][ T49] kworker/u4:3: attempt to access beyond end of device [ 753.498447][ T49] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 754.382966][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 754.536059][T12869] loop6: detected capacity change from 0 to 256 [ 754.554026][T12869] exfat: Unknown parameter '³MvMÈU%x¥—<(|#Ó�[]ÈŠ“ƒ3Q‘/ƒ ›ýhutH3'c”ˆ ' [ 755.422982][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 756.415229][ T12] kworker/u4:1: attempt to access beyond end of device [ 756.415229][ T12] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 756.462956][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 756.592218][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 757.143029][ T23] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 757.333018][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 757.502993][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 757.898179][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 758.063191][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 758.100267][ T23] usb 6-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 758.122955][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.155165][ T23] usb 6-1: config 0 descriptor?? [ 758.542984][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 758.558649][T12914] loop6: detected capacity change from 0 to 32768 [ 758.600176][ T23] wacom 0003:056A:00F4.0003: unknown main item tag 0x0 [ 758.627811][T12914] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 758.632974][ T23] wacom 0003:056A:00F4.0003: unknown main item tag 0x0 [ 758.652980][ T23] wacom 0003:056A:00F4.0003: unknown main item tag 0x0 [ 758.677314][ T23] wacom 0003:056A:00F4.0003: unknown main item tag 0x0 [ 758.694866][ T23] wacom 0003:056A:00F4.0003: unknown main item tag 0x0 [ 758.705084][ T23] wacom 0003:056A:00F4.0003: unknown main item tag 0x0 [ 758.724489][ T23] wacom 0003:056A:00F4.0003: unknown main item tag 0x0 [ 758.733049][ T23] wacom 0003:056A:00F4.0003: unknown main item tag 0x0 [ 758.763661][ T23] wacom 0003:056A:00F4.0003: hidraw0: USB HID v0.00 Device [HID 056a:00f4] on usb-dummy_hcd.5-1/input0 [ 758.812759][T12914] XFS (loop6): Ending clean mount [ 758.817687][ T23] usb 6-1: USB disconnect, device number 27 [ 758.891635][T12914] XFS (loop6): Quotacheck needed: Please wait. [ 758.987137][T12925] fido_id[12925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 759.070432][T12914] XFS (loop6): Quotacheck: Done. [ 759.095293][T12914] XFS (loop6): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 759.135580][T11820] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 759.396934][T12937] loop5: detected capacity change from 0 to 256 [ 759.432402][T12937] FAT-fs (loop5): Directory bread(block 64) failed [ 759.439413][T12937] FAT-fs (loop5): Directory bread(block 65) failed [ 759.446486][T12937] FAT-fs (loop5): Directory bread(block 66) failed [ 759.455142][T12937] FAT-fs (loop5): Directory bread(block 67) failed [ 759.461792][T12937] FAT-fs (loop5): Directory bread(block 68) failed [ 759.469325][T12937] FAT-fs (loop5): Directory bread(block 69) failed [ 759.477744][T12937] FAT-fs (loop5): Directory bread(block 70) failed [ 759.486743][T12937] FAT-fs (loop5): Directory bread(block 71) failed [ 759.494355][T12937] FAT-fs (loop5): Directory bread(block 72) failed [ 759.500902][T12937] FAT-fs (loop5): Directory bread(block 73) failed [ 759.582985][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 759.635537][T12939] loop5: detected capacity change from 0 to 256 [ 759.647138][T12939] exfat: Unknown parameter '³MvMÈU%x¥—<(|#Ó�[]ÈŠ“ƒ3Q‘/ƒ ›ýhutH3'c”ˆ ' [ 760.622970][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 761.272750][T12951] loop5: detected capacity change from 0 to 64 [ 761.315919][T12951] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 761.662990][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 761.943398][T12959] loop5: detected capacity change from 0 to 32768 [ 761.963318][T12959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1872 (12959) [ 762.012914][T12959] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 762.033450][T12959] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 762.056091][T12959] BTRFS info (device loop5): setting nodatasum [ 762.062325][T12959] BTRFS info (device loop5): force zlib compression, level 3 [ 762.087723][T12959] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 762.108653][T12959] BTRFS info (device loop5): use lzo compression, level 0 [ 762.122257][T12959] BTRFS info (device loop5): turning on flush-on-commit [ 762.139714][T12959] BTRFS info (device loop5): enabling auto defrag [ 762.156815][T12959] BTRFS info (device loop5): max_inline at 4096 [ 762.174049][T12959] BTRFS info (device loop5): using free space tree [ 762.305721][T12959] BTRFS info (device loop5): enabling ssd optimizations [ 762.611961][ T8318] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 762.702987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 763.250566][T13003] team0: entered promiscuous mode [ 763.285045][T13003] team_slave_0: entered promiscuous mode [ 763.311265][T13003] team_slave_1: entered promiscuous mode [ 763.352685][T13002] team0: left promiscuous mode [ 763.358554][T13002] team_slave_0: left promiscuous mode [ 763.370653][T13002] team_slave_1: left promiscuous mode [ 763.742968][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 763.891232][T13018] loop5: detected capacity change from 0 to 512 [ 763.915729][T13018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 763.964607][T13018] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 764.015234][T13018] EXT4-fs (loop5): orphan cleanup on readonly fs [ 764.033569][T13018] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.1891: bad orphan inode 15 [ 764.075231][T13018] ext4_test_bit(bit=14, block=5) = 0 [ 764.081852][T13018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 764.144914][T13018] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 764.272583][ T8318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.464923][T13031] loop5: detected capacity change from 0 to 164 [ 764.694520][T13033] netlink: 'syz.1.1895': attribute type 28 has an invalid length. [ 764.782985][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 764.821998][T13021] loop6: detected capacity change from 0 to 32768 [ 765.387306][T13056] loop6: detected capacity change from 0 to 128 [ 765.838676][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 766.756952][T13051] loop5: detected capacity change from 0 to 32768 [ 766.862981][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 766.921004][T13075] loop6: detected capacity change from 0 to 128 [ 766.981664][T13075] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 767.043044][T13075] hpfs: filesystem error: improperly stopped [ 767.043835][T13079] loop5: detected capacity change from 0 to 512 [ 767.059382][T13075] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 767.093120][T13075] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 767.115977][T13079] FAT-fs (loop5): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 767.127325][T13075] hpfs: You really don't want any checks? You are crazy... [ 767.153513][T13075] hpfs: hpfs_map_sector(): read error [ 767.172077][T13075] hpfs: code page support is disabled [ 767.191163][T13075] hpfs: hpfs_map_4sectors(): unaligned read [ 767.211669][T13075] hpfs: hpfs_map_4sectors(): unaligned read [ 767.226098][T13075] hpfs: filesystem error: unable to find root dir [ 767.363179][ T3493] FAT-fs (loop5): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 767.902998][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 768.942976][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 768.955032][T13098] loop5: detected capacity change from 0 to 128 [ 768.997245][T13098] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 769.028305][T13098] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 769.040865][T13102] loop6: detected capacity change from 0 to 512 [ 769.070471][T13102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 769.114237][T13102] System zones: 1-12 [ 769.138764][T13102] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #15: comm syz.6.1922: corrupted inode contents [ 769.192202][T13102] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 769.218285][ T8318] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.228771][T13102] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #15: comm syz.6.1922: corrupted inode contents [ 769.273878][T13102] EXT4-fs error (device loop6): ext4_evict_inode:302: inode #15: comm syz.6.1922: mark_inode_dirty error [ 769.302738][T13102] EXT4-fs (loop6): 1 orphan inode deleted [ 769.335809][T13102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.505574][T11820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.567455][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 769.635484][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 769.731416][T13110] ceph: No mds server is up or the cluster is laggy [ 769.742488][ T23] libceph: connect (1)[c::]:6789 error -101 [ 769.820930][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 769.983096][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 770.577390][T13120] loop6: detected capacity change from 0 to 1024 [ 770.707899][T13120] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 770.742619][T13126] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 770.771710][T13126] hfsplus: xattr searching failed [ 770.913332][ T2925] hfsplus: b-tree write err: -5, ino 25 [ 770.922242][ T2925] hfsplus: b-tree write err: -5, ino 4 [ 770.953824][ T2925] hfsplus: b-tree write err: -5, ino 2 [ 770.974241][ T2925] hfsplus: b-tree write err: -5, ino 20 [ 771.022976][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 771.377408][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 771.536311][T13149] ceph: No mds server is up or the cluster is laggy [ 771.668655][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 772.063090][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 772.222646][T13155] loop5: detected capacity change from 0 to 4096 [ 772.467652][T13155] overlayfs: upper fs does not support tmpfile. [ 772.508437][T13155] overlayfs: workdir/#13 already exists [ 772.754733][T13166] loop5: detected capacity change from 0 to 1024 [ 772.875692][ T11] hfsplus: b-tree write err: -5, ino 25 [ 772.881677][ T11] hfsplus: b-tree write err: -5, ino 4 [ 772.912021][ T11] hfsplus: b-tree write err: -5, ino 2 [ 772.919488][ T11] hfsplus: b-tree write err: -5, ino 26 [ 773.063191][T13174] loop5: detected capacity change from 0 to 128 [ 773.102986][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 774.143689][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 774.358604][ T3493] kworker/u4:10: attempt to access beyond end of device [ 774.358604][ T3493] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 774.721061][T13185] loop5: detected capacity change from 0 to 32768 [ 774.748004][T13185] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 774.808320][T13185] XFS (loop5): Ending clean mount [ 774.828293][T13185] XFS (loop5): Quotacheck needed: Please wait. [ 774.884672][T13185] XFS (loop5): Quotacheck: Done. [ 774.921097][T13185] XFS (loop5): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 774.966360][ T8318] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 774.977686][T13195] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1961'. [ 775.182998][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 775.423719][T13207] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 775.480278][T13214] netlink: 'syz.1.1960': attribute type 3 has an invalid length. [ 775.488371][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'. [ 775.742772][T13226] loop5: detected capacity change from 0 to 128 [ 775.773851][T13226] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 775.818044][T13226] hpfs: filesystem error: improperly stopped [ 775.836075][T13226] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 775.858015][T13226] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 775.890653][T13226] hpfs: You really don't want any checks? You are crazy... [ 775.919597][T13226] hpfs: hpfs_map_sector(): read error [ 775.943837][T13226] hpfs: code page support is disabled [ 775.949455][T13226] hpfs: hpfs_map_4sectors(): unaligned read [ 775.963779][T13226] hpfs: hpfs_map_4sectors(): unaligned read [ 775.974890][T13226] hpfs: filesystem error: unable to find root dir [ 776.004812][T13232] program syz.6.1970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.222987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 776.334821][T13245] rtc_cmos 00:00: Alarms can be up to one day in the future [ 776.578009][ T9806] libceph: connect (1)[c::]:6789 error -101 [ 776.608977][T13251] ceph: No mds server is up or the cluster is laggy [ 776.629680][ T9806] libceph: mon0 (1)[c::]:6789 connect error [ 776.988520][ T9806] rtc_cmos 00:00: Alarms can be up to one day in the future [ 777.117745][ T9806] rtc_cmos 00:00: Alarms can be up to one day in the future [ 777.242076][ T9806] rtc_cmos 00:00: Alarms can be up to one day in the future [ 777.262980][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 777.375382][ T9806] rtc_cmos 00:00: Alarms can be up to one day in the future [ 777.382703][ T9806] rtc rtc0: __rtc_set_alarm: err=-22 [ 777.854268][T13272] fuse: Bad value for 'fd' [ 777.956906][T13276] fuse: Bad value for 'fd' [ 778.071668][ T5158] libceph: connect (1)[c::]:6789 error -101 [ 778.077917][ T5158] libceph: mon0 (1)[c::]:6789 connect error [ 778.131611][T13280] ceph: No mds server is up or the cluster is laggy [ 778.302986][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 778.777426][T13299] loop6: detected capacity change from 0 to 256 [ 778.894257][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 778.894343][ T27] audit: type=1800 audit(1791220733.808:68): pid=13299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1995" name="file1" dev="loop6" ino=1048966 res=0 errno=0 [ 778.965534][T13301] loop5: detected capacity change from 0 to 128 [ 779.181031][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1997'. [ 779.342953][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 779.366405][ T9806] libceph: connect (1)[c::]:6789 error -101 [ 779.386222][ T9806] libceph: mon0 (1)[c::]:6789 connect error [ 779.868668][ T9806] libceph: connect (1)[c::]:6789 error -101 [ 779.924156][ T9806] libceph: mon0 (1)[c::]:6789 connect error [ 780.097478][T13306] ceph: No mds server is up or the cluster is laggy [ 780.116104][T13312] loop6: detected capacity change from 0 to 128 [ 780.116737][ T49] kworker/u4:3: attempt to access beyond end of device [ 780.116737][ T49] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 780.223677][T13312] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 780.267718][T13312] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 780.369312][T11820] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.382983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 780.422387][T13318] loop5: detected capacity change from 0 to 512 [ 780.453847][T13318] EXT4-fs: inline encryption not supported [ 780.510306][T13318] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 780.559037][T13318] System zones: 1-12 [ 780.572335][T13318] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2000: missing EA_INODE flag [ 780.611052][T13318] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2000: error while reading EA inode 12 err=-117 [ 780.656341][T13318] EXT4-fs (loop5): 1 orphan inode deleted [ 780.672646][T13323] loop6: detected capacity change from 0 to 8192 [ 780.720088][T13323] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 780.731802][T13318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.432978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 782.068728][ T8318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.463110][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 782.707293][T13333] loop6: detected capacity change from 0 to 32768 [ 782.848408][T13333] UFO tlock:0xffffc9000287a168 [ 782.889929][T13356] loop5: detected capacity change from 0 to 512 [ 782.906004][T13333] MetaData crosses page boundary!! [ 782.929391][T13333] lblock = 6300000010, size = -820051968 [ 782.941166][T13333] CPU: 0 PID: 13333 Comm: syz.6.2007 Not tainted syzkaller #0 [ 782.944715][T13356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.948663][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 782.971193][T13333] Call Trace: [ 782.974574][T13333] [ 782.977593][T13333] dump_stack_lvl+0x18c/0x250 [ 782.982415][T13333] ? show_regs_print_info+0x20/0x20 [ 782.987701][T13333] ? load_image+0x420/0x420 [ 782.992273][T13333] ? folio_unlock+0x118/0x2f0 [ 782.997009][T13333] __get_metapage+0xaac/0xfa0 [ 783.001732][T13333] dtSearch+0x58d/0x21a0 [ 783.006029][T13333] ? rcu_is_watching+0x15/0xb0 [ 783.010849][T13333] jfs_lookup+0x1b1/0x420 [ 783.015219][T13333] ? jfs_get_parent+0xb0/0xb0 [ 783.019963][T13333] ? __lock_acquire+0x7eb0/0x7eb0 [ 783.025022][T13333] ? __rwlock_init+0x150/0x150 [ 783.027244][T13356] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 783.029796][T13333] ? d_set_d_op+0x25f/0x370 [ 783.029866][T13333] ? do_raw_spin_unlock+0x121/0x230 [ 783.029896][T13333] ? _raw_spin_unlock+0x28/0x40 [ 783.030013][T13333] ? d_alloc+0x1eb/0x250 [ 783.030036][T13333] lookup_one_qstr_excl+0x112/0x250 [ 783.030068][T13333] filename_create+0x246/0x450 [ 783.030097][T13333] ? kern_path_create+0x50/0x50 [ 783.030120][T13333] ? __virt_addr_valid+0x10c/0x380 [ 783.030155][T13333] do_mkdirat+0xa9/0x450 [ 783.030181][T13333] ? vfs_mkdir+0x470/0x470 [ 783.030211][T13333] __x64_sys_mkdirat+0x89/0xa0 [ 783.030232][T13333] do_syscall_64+0x55/0xb0 [ 783.030260][T13333] ? clear_bhb_loop+0x40/0x90 [ 783.030315][T13333] ? clear_bhb_loop+0x40/0x90 [ 783.030333][T13333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.030384][T13333] RIP: 0033:0x7fe179b9d007 [ 783.030437][T13333] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.136467][T13333] RSP: 002b:00007fe17ab2fe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 783.144932][T13333] RAX: ffffffffffffffda RBX: 00007fe17ab2fee0 RCX: 00007fe179b9d007 [ 783.152945][T13333] RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c [ 783.160948][T13333] RBP: 0000200000000080 R08: 0000200000000d40 R09: 0000000000000000 [ 783.168952][T13333] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680 [ 783.176963][T13333] R13: 00007fe17ab2fea0 R14: 0000000000000000 R15: 0000000000000000 [ 783.184982][T13333] [ 783.194411][T13333] bread failed! [ 783.198173][T13333] jfs_lookup: dtSearch returned -5 [ 783.207815][T13356] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #2: comm syz.5.2017: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 783.236456][T13356] EXT4-fs (loop5): Remounting filesystem read-only [ 783.281192][ T8318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.502977][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 784.552988][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 785.165149][T13388] loop6: detected capacity change from 0 to 128 [ 785.592970][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 786.181001][ T2925] kworker/u4:8: attempt to access beyond end of device [ 786.181001][ T2925] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 786.440026][T13395] loop6: detected capacity change from 0 to 1024 [ 786.495962][T13395] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 786.622988][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 786.722286][T13400] loop6: detected capacity change from 0 to 164 [ 786.891407][T13404] loop6: detected capacity change from 0 to 128 [ 787.078524][T13407] loop5: detected capacity change from 0 to 4096 [ 787.150562][T13407] NILFS (loop5): invalid segment: Checksum error in segment payload [ 787.173300][T13407] NILFS (loop5): trying rollback from an earlier position [ 787.245056][T13407] NILFS (loop5): recovery complete [ 787.283443][T13411] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 787.317770][T13410] loop6: detected capacity change from 0 to 4096 [ 787.386522][T13410] ntfs3: loop6: Failed to load $Extend (-22). [ 787.392684][T13410] ntfs3: loop6: Failed to initialize $Extend. [ 787.532541][ T27] audit: type=1800 audit(1791220742.438:69): pid=13410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2040" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 787.662966][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 787.833199][ T5158] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 787.969413][T13421] loop6: detected capacity change from 0 to 4096 [ 788.023240][ T5158] usb 6-1: Using ep0 maxpacket: 32 [ 788.040954][ T5158] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 788.070232][ T5158] usb 6-1: config 0 has no interface number 0 [ 788.086958][ T5158] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.111490][ T5158] usb 6-1: config 0 interface 85 has no altsetting 0 [ 788.123418][ T5158] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 788.134974][ T5158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.147370][ T5158] usb 6-1: Product: syz [ 788.152253][ T5158] usb 6-1: Manufacturer: syz [ 788.157933][ T5158] usb 6-1: SerialNumber: syz [ 788.193791][ T5158] usb 6-1: config 0 descriptor?? [ 788.216688][T13421] overlayfs: upper fs does not support tmpfile. [ 788.254168][T13421] overlayfs: workdir/#15 already exists [ 788.702966][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 788.869017][ T5158] appletouch 6-1:0.85: Geyser mode initialized. [ 788.898403][ T5158] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input21 [ 789.129707][ T5816] usb 6-1: USB disconnect, device number 28 [ 789.164831][ T5816] appletouch 6-1:0.85: input: appletouch disconnected [ 789.446639][T13443] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2053'. [ 789.742983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 790.782999][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 791.823115][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 792.863008][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 793.787048][T13481] loop6: detected capacity change from 0 to 128 [ 793.902996][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 794.065692][ T9806] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 794.272944][ T9806] usb 6-1: Using ep0 maxpacket: 8 [ 794.285154][ T9806] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 794.302912][ T9806] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.322946][ T9806] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 794.342946][ T9806] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 794.363412][ T9806] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.387082][ T9806] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 794.407168][ T9806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.658707][ T9806] usb 6-1: GET_CAPABILITIES returned 0 [ 794.664351][ T9806] usbtmc 6-1:16.0: can't read capabilities [ 794.905277][ T5158] usb 6-1: USB disconnect, device number 29 [ 794.943551][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 795.982978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 796.261910][T13517] loop5: detected capacity change from 0 to 32768 [ 796.283399][T13517] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2083 (13517) [ 796.318446][T13517] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 796.338675][T13517] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 796.363211][T13517] BTRFS info (device loop5): using free space tree [ 796.444104][T13517] BTRFS info (device loop5): enabling ssd optimizations [ 796.494460][T13517] BTRFS info (device loop5): auto enabling async discard [ 796.717496][ T8318] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 797.022970][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 798.063004][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.103093][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 800.143022][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 800.616187][T13577] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2099'. [ 801.182978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 801.551861][T13604] loop6: detected capacity change from 0 to 1024 [ 801.639467][T13604] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 801.649809][T13604] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 801.661092][T13604] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2111: Failed to acquire dquot type 0 [ 801.680632][T13604] EXT4-fs error (device loop6): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 801.710477][T13604] EXT4-fs (loop6): 1 truncate cleaned up [ 801.718750][T13604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.760920][T13604] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 801.774147][T13604] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 801.793000][T13604] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.2111: Failed to acquire dquot type 0 [ 802.222989][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 802.289176][T11820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.438351][T13614] erspan0: entered promiscuous mode [ 803.263019][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 804.303013][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 805.353018][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.383094][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 807.407778][T13672] ceph: No mds server is up or the cluster is laggy [ 807.415669][ T9] libceph: connect (1)[c::]:6789 error -101 [ 807.421722][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 807.427891][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 807.624687][T13686] loop6: detected capacity change from 0 to 256 [ 807.643813][T13686] exfat: Unknown parameter '³MvMÈU%x¥—<(|#Ó�[]ÈŠ“ƒ3Q‘/ƒ ›ýhutH3'c”ˆ ' [ 808.472974][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.675204][T13692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2146'. [ 808.711293][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.722949][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.766126][T13696] loop6: detected capacity change from 0 to 512 [ 808.850626][T13696] EXT4-fs (loop6): 1 truncate cleaned up [ 808.902115][T13696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.028218][T13696] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2145: invalid indirect mapped block 234881024 (level 0) [ 809.174322][T11820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.387659][ T5158] libceph: connect (1)[c::]:6789 error -101 [ 809.446805][T13711] ceph: No mds server is up or the cluster is laggy [ 809.466064][ T5158] libceph: mon0 (1)[c::]:6789 connect error [ 809.512981][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 810.543007][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 811.587113][ T9806] libceph: connect (1)[c::]:6789 error -101 [ 811.593235][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 811.611863][ T9806] libceph: mon0 (1)[c::]:6789 connect error [ 811.634001][T13740] ceph: No mds server is up or the cluster is laggy [ 811.648591][T13724] loop6: detected capacity change from 0 to 32768 [ 811.724351][T13725] loop5: detected capacity change from 0 to 32768 [ 811.734049][T13725] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2158 (13725) [ 811.761750][T13724] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 811.766242][T13725] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 811.780911][T13725] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 811.793808][T13725] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 811.804312][T13725] BTRFS info (device loop5): use zstd compression, level 3 [ 811.811577][T13725] BTRFS info (device loop5): using free space tree [ 811.874081][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2164'. [ 811.910190][T13724] XFS (loop6): Ending clean mount [ 811.952200][T13725] BTRFS info (device loop5): enabling ssd optimizations [ 811.965168][T13725] BTRFS info (device loop5): auto enabling async discard [ 812.110641][T11820] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 812.213991][ T27] audit: type=1326 audit(1791220767.108:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.248494][ T27] audit: type=1326 audit(1791220767.108:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.300485][ T27] audit: type=1326 audit(1791220767.128:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.446297][ T8318] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 812.462948][ T27] audit: type=1326 audit(1791220767.128:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.563221][ T27] audit: type=1326 audit(1791220767.128:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.591257][ T27] audit: type=1326 audit(1791220767.128:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.616988][ T27] audit: type=1326 audit(1791220767.128:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.641190][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 812.651015][ T27] audit: type=1326 audit(1791220767.128:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.676806][ T27] audit: type=1326 audit(1791220767.128:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 812.710218][ T27] audit: type=1326 audit(1791220767.128:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.1.2168" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 813.663041][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 814.193450][T13794] loop6: detected capacity change from 0 to 4096 [ 814.234430][T13794] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 814.440263][T13794] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 814.466944][T13794] ntfs3: loop6: Failed to initialize $Extend/$Reparse. [ 814.546440][T13794] ntfs3: loop6: ino=1c, mi_enum_attr [ 814.640358][ T12] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22. [ 814.658624][T11820] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 814.678788][T11820] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 814.691687][T11820] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 814.701593][ T12] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22. [ 814.708579][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 815.752987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 816.063103][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 816.086556][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2177'. [ 816.792976][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 817.822972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 817.958376][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2185'. [ 817.981980][T13825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2185'. [ 818.427226][T13821] loop5: detected capacity change from 0 to 40427 [ 818.441459][T13821] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 818.454361][T13821] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 818.476482][T13821] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x7ffff [ 818.504246][T13821] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x6 [ 818.537326][T13821] F2FS-fs (loop5): invalid crc value [ 818.588301][T13821] F2FS-fs (loop5): Found nat_bits in checkpoint [ 818.708752][T13821] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 818.723339][T13821] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 818.862972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 818.953116][T13821] syz.5.2183: attempt to access beyond end of device [ 818.953116][T13821] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 818.998662][T13847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.006431][T13847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.902993][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 819.938011][T13847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.945826][T13847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.991934][T13821] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 820.942964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 821.983000][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 823.003555][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'. [ 823.022984][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 823.044229][T13866] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2201'. [ 824.065421][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 825.102971][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 826.143362][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 827.182956][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 827.582728][T13912] macvtap0: entered promiscuous mode [ 827.595943][T13911] macvtap0: left promiscuous mode [ 828.223024][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 828.646827][T13936] loop5: detected capacity change from 0 to 32768 [ 828.747832][T13936] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 828.963790][ T8318] ocfs2: Unmounting device (7,5) on (node local) [ 829.166946][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2246'. [ 829.272968][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 829.744149][T13996] loop5: detected capacity change from 0 to 128 [ 829.910365][T14000] overlayfs: failed to clone upperpath [ 830.191337][T14005] loop6: detected capacity change from 0 to 512 [ 830.303110][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 830.597544][T14005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.817930][ T2925] kworker/u4:8: attempt to access beyond end of device [ 830.817930][ T2925] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 830.867000][T11820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.153943][ T9] libceph: connect (1)[c::]:6789 error -101 [ 831.238103][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 831.334000][T14025] ceph: No mds server is up or the cluster is laggy [ 831.343504][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 831.941637][T14036] loop5: detected capacity change from 0 to 256 [ 831.955421][T14036] exfat: Deprecated parameter 'utf8' [ 831.966504][T14036] exfat: Deprecated parameter 'namecase' [ 831.972439][T14036] exfat: Deprecated parameter 'utf8' [ 832.112926][T14036] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 832.374320][T14048] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2271'. [ 832.393041][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 833.432979][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 833.886423][T14086] loop6: detected capacity change from 0 to 128 [ 834.462969][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 834.846236][ T3493] kworker/u4:10: attempt to access beyond end of device [ 834.846236][ T3493] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 835.427186][T14120] loop5: detected capacity change from 0 to 128 [ 835.511245][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 836.411459][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'. [ 836.553006][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 836.572596][ T1146] kworker/u4:7: attempt to access beyond end of device [ 836.572596][ T1146] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 836.697857][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 837.582991][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 838.516572][T14191] ceph: No mds server is up or the cluster is laggy [ 838.559420][ T5158] libceph: connect (1)[c::]:6789 error -101 [ 838.623356][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 838.701231][ T5158] libceph: mon0 (1)[c::]:6789 connect error [ 839.449034][T14203] loop6: detected capacity change from 0 to 16 [ 839.464951][T14203] erofs: (device loop6): mounted with root inode @ nid 36. [ 839.548060][T14203] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 839.662972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 840.703057][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 841.093300][T14223] loop6: detected capacity change from 0 to 32768 [ 841.119624][T14223] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2341 (14223) [ 841.159539][T14223] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 841.171577][T14223] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 841.185687][T14223] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 841.196520][T14223] BTRFS info (device loop6): use zstd compression, level 3 [ 841.204070][T14223] BTRFS info (device loop6): using free space tree [ 841.310864][T14223] BTRFS info (device loop6): enabling ssd optimizations [ 841.318194][T14223] BTRFS info (device loop6): auto enabling async discard [ 841.449399][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 841.449413][ T27] audit: type=1800 audit(1791220796.358:89): pid=14223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2341" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 841.544695][T11820] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 841.753016][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 841.817305][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 841.834074][T14269] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 842.792973][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 843.401075][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 843.832970][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 844.872969][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 845.912979][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 846.421190][T14334] mmap: syz.1.2379 (14334) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 846.942977][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 847.243432][T14337] loop6: detected capacity change from 0 to 40427 [ 847.261737][T14337] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 847.279615][T14337] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 847.298891][T14337] F2FS-fs (loop6): Unrecognized mount option "whint_mode=user-based" or missing value [ 847.982966][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 849.033002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 850.062990][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 850.716607][ T9] IPVS: starting estimator thread 0... [ 850.722568][T14377] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 850.813249][T14381] IPVS: using max 24 ests per chain, 57600 per kthread [ 851.103016][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 851.477319][T14399] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2407'. [ 852.142978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 852.512715][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'. [ 852.944461][T14430] loop5: detected capacity change from 0 to 8192 [ 853.182972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 853.359020][T14453] loop5: detected capacity change from 0 to 512 [ 853.380990][T14453] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 853.444428][T14453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.482660][T14453] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.713564][ T8318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.223076][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 854.279216][T14487] input: syz1 as /devices/virtual/input/input22 [ 855.262999][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 855.484730][T14522] FAULT_INJECTION: forcing a failure. [ 855.484730][T14522] name fail_futex, interval 1, probability 0, space 0, times 1 [ 855.510867][T14522] CPU: 0 PID: 14522 Comm: syz.5.2459 Not tainted syzkaller #0 [ 855.518392][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 855.528477][T14522] Call Trace: [ 855.531785][T14522] [ 855.534739][T14522] dump_stack_lvl+0x18c/0x250 [ 855.539462][T14522] ? show_regs_print_info+0x20/0x20 [ 855.544778][T14522] ? load_image+0x420/0x420 [ 855.549317][T14522] ? __kernel_text_address+0xd/0x30 [ 855.554552][T14522] ? unwind_get_return_address+0x91/0xc0 [ 855.560211][T14522] ? stack_trace_save+0x100/0x100 [ 855.565265][T14522] ? arch_stack_walk+0x160/0x190 [ 855.570234][T14522] should_fail_ex+0x394/0x4c0 [ 855.575002][T14522] get_futex_key+0x136/0x1030 [ 855.579708][T14522] ? stack_trace_snprint+0xf0/0xf0 [ 855.584863][T14522] ? futex_setup_timer+0xc0/0xc0 [ 855.589844][T14522] ? kasan_set_track+0x5f/0x70 [ 855.594671][T14522] futex_wake+0x127/0x4f0 [ 855.599033][T14522] ? futex_wake_mark+0x150/0x150 [ 855.604015][T14522] do_futex+0x35d/0x3e0 [ 855.608199][T14522] ? __ia32_sys_get_robust_list+0x110/0x110 [ 855.614125][T14522] __se_sys_futex+0x3a9/0x440 [ 855.618836][T14522] ? __x64_sys_futex+0xf0/0xf0 [ 855.623630][T14522] ? __x64_sys_futex+0x21/0xf0 [ 855.628419][T14522] do_syscall_64+0x55/0xb0 [ 855.632863][T14522] ? clear_bhb_loop+0x40/0x90 [ 855.637558][T14522] ? clear_bhb_loop+0x40/0x90 [ 855.642249][T14522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.648174][T14522] RIP: 0033:0x7ff5cf59e199 [ 855.652610][T14522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.672253][T14522] RSP: 002b:00007ff5d04160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 855.680696][T14522] RAX: ffffffffffffffda RBX: 00007ff5cf825fa8 RCX: 00007ff5cf59e199 [ 855.688691][T14522] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5cf825fac [ 855.696689][T14522] RBP: 00007ff5cf825fa0 R08: 0000000000745a0f R09: 0000000000000000 [ 855.704678][T14522] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 855.712672][T14522] R13: 00007ff5cf826038 R14: 00007ffd271ca7f0 R15: 00007ffd271ca8d8 [ 855.720680][T14522] [ 856.124854][T14542] Invalid argument reading file caps for ./file0 [ 856.302957][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 856.416963][T14550] lo speed is unknown, defaulting to 1000 [ 857.343221][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 857.462078][T14559] loop5: detected capacity change from 0 to 128 [ 858.383008][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 858.419347][ T1146] kworker/u4:7: attempt to access beyond end of device [ 858.419347][ T1146] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 858.933041][ T9806] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 859.271733][ T9806] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 859.280036][ T9806] usb 6-1: config 0 has no interface number 0 [ 859.300025][ T9806] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 859.422974][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 859.938149][ T9806] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 859.949327][ T9806] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 859.984313][ T9806] usb 6-1: config 0 interface 2 has no altsetting 0 [ 860.141312][ T9806] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 860.174081][ T9806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.182488][ T9806] usb 6-1: Product: syz [ 860.211114][ T9806] usb 6-1: Manufacturer: syz [ 860.239600][ T9806] usb 6-1: SerialNumber: syz [ 860.274080][ T9806] usb 6-1: config 0 descriptor?? [ 860.295758][T14573] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 860.339541][T14573] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 860.462960][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 860.595936][ T9806] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 860.954309][ T9] usb 6-1: USB disconnect, device number 30 [ 861.503022][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 861.548511][T14610] syzkaller1: entered promiscuous mode [ 861.554644][T14610] syzkaller1: entered allmulticast mode [ 862.542973][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 863.375358][T14636] fuse: Bad value for 'fd' [ 863.582977][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 863.783584][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2509'. [ 863.812304][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2509'. [ 864.622990][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 865.303064][T14655] loop6: detected capacity change from 0 to 131072 [ 865.313193][T14655] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 865.321316][T14655] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 865.344333][T14655] F2FS-fs (loop6): invalid crc value [ 865.368081][T14655] F2FS-fs (loop6): Found nat_bits in checkpoint [ 865.443305][T14655] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 865.450398][T14655] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 865.663575][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 865.833551][ T5833] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 866.063804][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 866.119827][ T5833] usb 6-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 866.137956][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 866.149834][ T5833] usb 6-1: Product: syz [ 866.155793][ T5833] usb 6-1: SerialNumber: syz [ 866.181030][ T5833] usb 6-1: config 0 descriptor?? [ 866.222763][ T5833] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 866.282236][ T5833] usb 6-1: Detected FT2232C/D [ 866.424365][ T5833] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 866.465188][ T5833] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 866.518338][ T5833] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 866.526720][T14682] lo speed is unknown, defaulting to 1000 [ 866.582065][ T5833] usb 6-1: USB disconnect, device number 31 [ 866.656656][ T5833] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 866.670622][ T5833] ftdi_sio 6-1:0.0: device disconnected [ 866.702959][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 867.334590][ T9806] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 867.531293][ T9806] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 867.554772][ T9806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.575916][ T9806] usb 6-1: config 0 descriptor?? [ 867.597489][ T9806] cp210x 6-1:0.0: cp210x converter detected [ 867.660551][T14706] input: syz0 as /devices/virtual/input/input23 [ 867.752978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 868.010706][ T9806] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 868.263306][ T9806] usb 6-1: cp210x converter now attached to ttyUSB0 [ 868.498024][ T5813] usb 6-1: USB disconnect, device number 32 [ 868.515213][ T5813] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 868.550873][ T5813] cp210x 6-1:0.0: device disconnected [ 868.782978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 868.830962][T14719] fuse: Bad value for 'fd' [ 868.948694][T14722] loop6: detected capacity change from 0 to 256 [ 869.271937][T14728] loop6: detected capacity change from 0 to 4096 [ 869.421748][T14728] ntfs: volume version 3.1. [ 869.833479][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 870.149757][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.159265][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.798425][T14770] loop6: detected capacity change from 0 to 256 [ 870.862957][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 870.876063][T14770] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 871.876089][T14783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2564'. [ 871.902995][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 872.881416][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'. [ 872.942995][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 872.949805][T14815] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2579'. [ 872.973527][T14815] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2579'. [ 873.993192][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 874.242177][T14830] loop6: detected capacity change from 0 to 32768 [ 874.263974][T14830] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2585 (14830) [ 874.361123][T14830] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 874.396988][T14830] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 874.421207][T14830] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 874.446529][T14830] BTRFS info (device loop6): use zstd compression, level 3 [ 874.473202][T14830] BTRFS info (device loop6): using free space tree [ 874.813836][T14830] BTRFS info (device loop6): enabling ssd optimizations [ 874.834374][T14830] BTRFS info (device loop6): auto enabling async discard [ 875.022978][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 875.766601][T14830] BTRFS error (device loop6: state M): unrecognized mount option '0000000000000000000400000000000000000000003½|ï÷ÛØìl®ëÕ›&Ìf FD3×.í~G-J.3?w ç [ 875.766601][T14830] V0“ø¤»Ùs‘&ëÜ' [ 875.907104][T11820] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 876.063540][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 876.216342][T14874] lo speed is unknown, defaulting to 1000 [ 876.577974][ T27] audit: type=1326 audit(1791220831.488:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 876.723236][ T27] audit: type=1326 audit(1791220831.488:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 876.752105][ T27] audit: type=1326 audit(1791220831.488:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 876.857107][ T27] audit: type=1326 audit(1791220831.488:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 876.878087][T14884] loop6: detected capacity change from 0 to 512 [ 876.934149][T14846] loop5: detected capacity change from 0 to 32768 [ 876.961093][T14884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 876.969998][ T27] audit: type=1326 audit(1791220831.488:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 876.993174][T14884] System zones: 1-12 [ 877.017854][T14884] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.2595: corrupted in-inode xattr: e_value size too large [ 877.037229][T14846] JBD2: Ignoring recovery information on journal [ 877.102990][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 877.118388][T14884] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.2595: couldn't read orphan inode 15 (err -117) [ 877.143932][ T27] audit: type=1326 audit(1791220831.488:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 877.184302][T14846] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 877.205916][T14884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.227929][ T27] audit: type=1326 audit(1791220831.488:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 877.262385][ T27] audit: type=1326 audit(1791220831.488:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 877.296492][ T27] audit: type=1326 audit(1791220831.488:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 877.335977][ T27] audit: type=1326 audit(1791220831.488:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.1.2596" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd4e0b9e199 code=0x7ffc0000 [ 877.888975][T11820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.102419][ T8318] ocfs2: Unmounting device (7,5) on (node local) [ 878.142987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 879.182963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 879.435638][T14913] FAULT_INJECTION: forcing a failure. [ 879.435638][T14913] name failslab, interval 1, probability 0, space 0, times 0 [ 879.479741][T14913] CPU: 0 PID: 14913 Comm: syz.5.2605 Not tainted syzkaller #0 [ 879.487279][T14913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 879.497367][T14913] Call Trace: [ 879.500668][T14913] [ 879.503616][T14913] dump_stack_lvl+0x18c/0x250 [ 879.508339][T14913] ? show_regs_print_info+0x20/0x20 [ 879.513576][T14913] ? load_image+0x420/0x420 [ 879.518116][T14913] ? __lock_acquire+0x7eb0/0x7eb0 [ 879.523178][T14913] should_fail_ex+0x394/0x4c0 [ 879.527904][T14913] should_failslab+0x9/0x20 [ 879.532447][T14913] slab_pre_alloc_hook+0x59/0x300 [ 879.537507][T14913] kmem_cache_alloc+0x5a/0x2c0 [ 879.542306][T14913] ? security_inode_alloc+0x34/0x110 [ 879.547675][T14913] security_inode_alloc+0x34/0x110 [ 879.552824][T14913] inode_init_always+0x914/0xc90 [ 879.557799][T14913] new_inode_pseudo+0x95/0x1d0 [ 879.562605][T14913] new_inode+0x22/0x1d0 [ 879.566795][T14913] shmem_get_inode+0x34d/0xcd0 [ 879.571589][T14913] ? mas_destroy+0x20a0/0x20a0 [ 879.576472][T14913] __shmem_file_setup+0x167/0x2c0 [ 879.581529][T14913] shmem_zero_setup+0x8d/0x130 [ 879.586329][T14913] mmap_region+0x1225/0x2090 [ 879.590966][T14913] ? file_mmap_ok+0x170/0x170 [ 879.595676][T14913] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 879.601243][T14913] ? cap_mmap_addr+0x213/0x2b0 [ 879.606049][T14913] do_mmap+0x98f/0x10a0 [ 879.610245][T14913] ? mlock_future_ok+0xf0/0xf0 [ 879.615039][T14913] ? down_write+0x200/0x200 [ 879.619580][T14913] vm_mmap_pgoff+0x1c4/0x3f0 [ 879.624225][T14913] ? account_locked_vm+0x200/0x200 [ 879.629385][T14913] ? ksys_mmap_pgoff+0xf3/0x720 [ 879.634268][T14913] ? __x64_sys_mmap+0x7a/0x130 [ 879.639058][T14913] do_syscall_64+0x55/0xb0 [ 879.643502][T14913] ? clear_bhb_loop+0x40/0x90 [ 879.648205][T14913] ? clear_bhb_loop+0x40/0x90 [ 879.652910][T14913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.658850][T14913] RIP: 0033:0x7ff5cf59e199 [ 879.663292][T14913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.682930][T14913] RSP: 002b:00007ff5d0416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 879.691374][T14913] RAX: ffffffffffffffda RBX: 00007ff5cf825fa0 RCX: 00007ff5cf59e199 [ 879.699380][T14913] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 879.707377][T14913] RBP: 00007ff5cf6350b8 R08: ffffffffffffffff R09: 0000000000000000 [ 879.715379][T14913] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 879.723388][T14913] R13: 00007ff5cf826038 R14: 00007ff5cf825fa0 R15: 00007ffd271ca8d8 [ 879.731406][T14913] [ 880.232987][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 880.403333][T14929] netlink: 'syz.6.2612': attribute type 3 has an invalid length. [ 880.453692][T14929] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2612'. [ 881.262968][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 882.101789][T14964] FAULT_INJECTION: forcing a failure. [ 882.101789][T14964] name failslab, interval 1, probability 0, space 0, times 0 [ 882.166656][T14964] CPU: 0 PID: 14964 Comm: syz.5.2624 Not tainted syzkaller #0 [ 882.174179][T14964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 882.184252][T14964] Call Trace: [ 882.187554][T14964] [ 882.190497][T14964] dump_stack_lvl+0x18c/0x250 [ 882.195226][T14964] ? show_regs_print_info+0x20/0x20 [ 882.200477][T14964] ? load_image+0x420/0x420 [ 882.205022][T14964] ? __lock_acquire+0x7eb0/0x7eb0 [ 882.210086][T14964] should_fail_ex+0x394/0x4c0 [ 882.214808][T14964] should_failslab+0x9/0x20 [ 882.219344][T14964] slab_pre_alloc_hook+0x59/0x300 [ 882.224397][T14964] ? __lock_acquire+0x7eb0/0x7eb0 [ 882.229449][T14964] ? security_sk_alloc+0x4b/0x130 [ 882.234497][T14964] ? security_sk_alloc+0x4b/0x130 [ 882.239537][T14964] __kmem_cache_alloc_node+0x53/0x250 [ 882.244948][T14964] ? security_sk_alloc+0x4b/0x130 [ 882.249994][T14964] __kmalloc+0xa7/0x240 [ 882.254183][T14964] security_sk_alloc+0x4b/0x130 [ 882.259062][T14964] sk_prot_alloc+0x101/0x210 [ 882.263786][T14964] sk_alloc+0x3a/0x350 [ 882.267873][T14964] ? phonet_proto_get+0x252/0x2a0 [ 882.273032][T14964] pn_socket_create+0xf5/0x510 [ 882.277827][T14964] __sock_create+0x49e/0x940 [ 882.282502][T14964] __sys_socket+0xd7/0x1b0 [ 882.286946][T14964] __x64_sys_socket+0x7a/0x90 [ 882.291644][T14964] do_syscall_64+0x55/0xb0 [ 882.296089][T14964] ? clear_bhb_loop+0x40/0x90 [ 882.300794][T14964] ? clear_bhb_loop+0x40/0x90 [ 882.305488][T14964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 882.311411][T14964] RIP: 0033:0x7ff5cf59e199 [ 882.315848][T14964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.335478][T14964] RSP: 002b:00007ff5d0416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 882.343931][T14964] RAX: ffffffffffffffda RBX: 00007ff5cf825fa0 RCX: 00007ff5cf59e199 [ 882.351937][T14964] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 882.359936][T14964] RBP: 00007ff5cf6350b8 R08: 0000000000000000 R09: 0000000000000000 [ 882.367929][T14964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.375921][T14964] R13: 00007ff5cf826038 R14: 00007ff5cf825fa0 R15: 00007ffd271ca8d8 [ 882.383926][T14964] [ 882.388595][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 882.506219][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'. [ 883.422980][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 884.462989][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 885.503732][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 886.542995][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 886.949412][T14987] 9pnet: p9_errstr2errno: server reported unknown error � [ 887.263180][ T5158] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 887.473131][ T5158] usb 6-1: Using ep0 maxpacket: 16 [ 887.490974][ T5158] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 887.553039][ T5158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.582972][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 887.603742][ T5158] usb 6-1: Product: syz [ 887.609676][ T5158] usb 6-1: Manufacturer: syz [ 887.632555][ T5158] usb 6-1: SerialNumber: syz [ 887.744403][T15008] loop6: detected capacity change from 0 to 512 [ 887.762712][T15008] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 887.821406][T15008] EXT4-fs warning (device loop6): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 888.058795][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2644'. [ 888.128392][T15016] loop6: detected capacity change from 0 to 128 [ 888.622988][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 889.116802][ T5158] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 889.128980][ T5158] usb 6-1: USB disconnect, device number 33 [ 889.496954][ T1146] kworker/u4:7: attempt to access beyond end of device [ 889.496954][ T1146] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 889.662985][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 889.765783][ T9] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 890.006486][T15040] fido_id[15040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 890.638734][T15059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 890.702983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 890.938293][T15061] loop5: detected capacity change from 0 to 4096 [ 891.126949][T15061] EXT4-fs: Ignoring removed orlov option [ 891.134585][T15061] EXT4-fs (loop5): Test dummy encryption mode enabled [ 891.149225][T15061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.366142][T15074] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 891.633820][T15061] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 891.655469][T15061] ------------[ cut here ]------------ [ 891.661516][T15061] WARNING: CPU: 0 PID: 15061 at fs/ext4/ext4_jbd2.c:73 ext4_journal_check_start+0x1eb/0x250 [ 891.672160][T15061] Modules linked in: [ 891.677747][T15061] CPU: 0 PID: 15061 Comm: syz.5.2665 Not tainted syzkaller #0 [ 891.686096][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 891.696784][T15061] RIP: 0010:ext4_journal_check_start+0x1eb/0x250 [ 891.703766][T15061] Code: 48 83 c4 08 41 bf e2 ff ff ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 b8 59 ff 41 bf fb ff ff ff eb e5 e8 b5 b8 59 ff <0f> 0b eb d6 e8 ac b8 59 ff 0f 0b 43 80 7c 25 00 00 0f 85 0b ff ff [ 891.723987][T15061] RSP: 0018:ffffc9000475f658 EFLAGS: 00010287 [ 891.730364][T15061] RAX: ffffffff822dd7fb RBX: ffff88804f098000 RCX: 0000000000080000 [ 891.739204][T15061] RDX: ffffc9000d482000 RSI: 000000000006c71c RDI: 000000000006c71d [ 891.747373][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 891.755317][T15061] RBP: 0000000000000bfe R08: ffff88801d736417 R09: 1ffff11003ae6c82 [ 891.763694][T15061] R10: dffffc0000000000 R11: ffffed1003ae6c83 R12: dffffc0000000000 [ 891.772199][T15061] R13: 1ffff11009e130c6 R14: ffff88804f098630 R15: 0000000000000001 [ 891.780394][T15061] FS: 00007ff5d04166c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 891.790439][T15061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 891.797739][T15061] CR2: 00007f8aafcb6000 CR3: 00000000289db000 CR4: 00000000003506f0 [ 891.806308][T15061] Call Trace: [ 891.809621][T15061] [ 891.812578][T15061] __ext4_journal_start_sb+0x147/0x560 [ 891.818131][T15061] __ext4_new_inode+0x13c7/0x3aa0 [ 891.823500][T15061] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 891.829268][T15061] ? dquot_initialize+0x20/0x20 [ 891.834497][T15061] ext4_mkdir+0x40b/0xc90 [ 891.838917][T15061] ? ext4_symlink+0x940/0x940 [ 891.843790][T15061] ? inode_permission+0xf3/0x480 [ 891.848759][T15061] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 891.854202][T15061] ? security_inode_mkdir+0xb7/0x100 [ 891.859532][T15061] vfs_mkdir+0x2a5/0x470 [ 891.863885][T15061] cachefiles_get_directory+0x231/0xa70 [ 891.869511][T15061] ? cachefiles_unmark_inode_in_use+0x1a0/0x1a0 [ 891.875834][T15061] ? vfs_statfs+0x195/0x2c0 [ 891.881162][T15061] cachefiles_add_cache+0xa88/0xd50 [ 891.887887][T15061] ? init_once+0x20/0x20 [ 891.892192][T15061] ? __asan_memcpy+0x40/0x70 [ 891.896987][T15061] ? kstrdup+0x65/0x80 [ 891.901093][T15061] ? cachefiles_daemon_bind+0x272/0x3a0 [ 891.907091][T15061] cachefiles_daemon_write+0x5f9/0x6b0 [ 891.912600][T15061] ? cachefiles_daemon_read+0x450/0x450 [ 891.918550][T15061] vfs_write+0x299/0x9a0 [ 891.922875][T15061] ? file_end_write+0x250/0x250 [ 891.927761][T15061] ? __fget_files+0x28/0x460 [ 891.932387][T15061] ? __fget_files+0x3fc/0x460 [ 891.937420][T15061] ? __fdget_pos+0x1d8/0x330 [ 891.942047][T15061] ? ksys_write+0x74/0x260 [ 891.946967][T15061] ksys_write+0x151/0x260 [ 891.951340][T15061] ? __ia32_sys_read+0x90/0x90 [ 891.956177][T15061] ? lockdep_hardirqs_on+0x98/0x150 [ 891.961411][T15061] do_syscall_64+0x55/0xb0 [ 891.966423][T15061] ? clear_bhb_loop+0x40/0x90 [ 891.971132][T15061] ? clear_bhb_loop+0x40/0x90 [ 891.976130][T15061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.982585][T15061] RIP: 0033:0x7ff5cf59e199 [ 891.987960][T15061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.008247][T15061] RSP: 002b:00007ff5d0416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 892.016753][T15061] RAX: ffffffffffffffda RBX: 00007ff5cf825fa0 RCX: 00007ff5cf59e199 [ 892.024826][T15061] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000004 [ 892.033212][T15061] RBP: 00007ff5cf6350b8 R08: 0000000000000000 R09: 0000000000000000 [ 892.041508][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.050202][T15061] R13: 00007ff5cf826038 R14: 00007ff5cf825fa0 R15: 00007ffd271ca8d8 [ 892.058279][T15061] [ 892.061323][T15061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 892.068614][T15061] CPU: 0 PID: 15061 Comm: syz.5.2665 Not tainted syzkaller #0 [ 892.076091][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 892.086163][T15061] Call Trace: [ 892.089459][T15061] [ 892.092407][T15061] dump_stack_lvl+0x18c/0x250 [ 892.097124][T15061] ? show_regs_print_info+0x20/0x20 [ 892.102359][T15061] ? load_image+0x420/0x420 [ 892.106903][T15061] panic+0x2ca/0x720 [ 892.110835][T15061] ? bpf_jit_dump+0xd0/0xd0 [ 892.115383][T15061] __warn+0x2e0/0x470 [ 892.119389][T15061] ? ext4_journal_check_start+0x1eb/0x250 [ 892.125143][T15061] ? ext4_journal_check_start+0x1eb/0x250 [ 892.130894][T15061] report_bug+0x2be/0x4f0 [ 892.135250][T15061] ? ext4_journal_check_start+0x1eb/0x250 [ 892.141001][T15061] ? ext4_journal_check_start+0x1eb/0x250 [ 892.146756][T15061] ? ext4_journal_check_start+0x1ed/0x250 [ 892.152510][T15061] handle_bug+0xcf/0x120 [ 892.156811][T15061] exc_invalid_op+0x1a/0x50 [ 892.161342][T15061] asm_exc_invalid_op+0x1a/0x20 [ 892.166223][T15061] RIP: 0010:ext4_journal_check_start+0x1eb/0x250 [ 892.172595][T15061] Code: 48 83 c4 08 41 bf e2 ff ff ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 b8 59 ff 41 bf fb ff ff ff eb e5 e8 b5 b8 59 ff <0f> 0b eb d6 e8 ac b8 59 ff 0f 0b 43 80 7c 25 00 00 0f 85 0b ff ff [ 892.192751][T15061] RSP: 0018:ffffc9000475f658 EFLAGS: 00010287 [ 892.198865][T15061] RAX: ffffffff822dd7fb RBX: ffff88804f098000 RCX: 0000000000080000 [ 892.206871][T15061] RDX: ffffc9000d482000 RSI: 000000000006c71c RDI: 000000000006c71d [ 892.214876][T15061] RBP: 0000000000000bfe R08: ffff88801d736417 R09: 1ffff11003ae6c82 [ 892.222887][T15061] R10: dffffc0000000000 R11: ffffed1003ae6c83 R12: dffffc0000000000 [ 892.230891][T15061] R13: 1ffff11009e130c6 R14: ffff88804f098630 R15: 0000000000000001 [ 892.238906][T15061] ? ext4_journal_check_start+0x1eb/0x250 [ 892.244679][T15061] ? ext4_journal_check_start+0x1eb/0x250 [ 892.250442][T15061] __ext4_journal_start_sb+0x147/0x560 [ 892.255944][T15061] __ext4_new_inode+0x13c7/0x3aa0 [ 892.261020][T15061] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 892.266789][T15061] ? dquot_initialize+0x20/0x20 [ 892.271691][T15061] ext4_mkdir+0x40b/0xc90 [ 892.276070][T15061] ? ext4_symlink+0x940/0x940 [ 892.280781][T15061] ? inode_permission+0xf3/0x480 [ 892.285736][T15061] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 892.290777][T15061] ? security_inode_mkdir+0xb7/0x100 [ 892.296105][T15061] vfs_mkdir+0x2a5/0x470 [ 892.300376][T15061] cachefiles_get_directory+0x231/0xa70 [ 892.305962][T15061] ? cachefiles_unmark_inode_in_use+0x1a0/0x1a0 [ 892.312233][T15061] ? vfs_statfs+0x195/0x2c0 [ 892.316766][T15061] cachefiles_add_cache+0xa88/0xd50 [ 892.322001][T15061] ? init_once+0x20/0x20 [ 892.326300][T15061] ? __asan_memcpy+0x40/0x70 [ 892.330932][T15061] ? kstrdup+0x65/0x80 [ 892.335036][T15061] ? cachefiles_daemon_bind+0x272/0x3a0 [ 892.340621][T15061] cachefiles_daemon_write+0x5f9/0x6b0 [ 892.346110][T15061] ? cachefiles_daemon_read+0x450/0x450 [ 892.351678][T15061] vfs_write+0x299/0x9a0 [ 892.355950][T15061] ? file_end_write+0x250/0x250 [ 892.360820][T15061] ? __fget_files+0x28/0x460 [ 892.365427][T15061] ? __fget_files+0x3fc/0x460 [ 892.370128][T15061] ? __fdget_pos+0x1d8/0x330 [ 892.374734][T15061] ? ksys_write+0x74/0x260 [ 892.379172][T15061] ksys_write+0x151/0x260 [ 892.383525][T15061] ? __ia32_sys_read+0x90/0x90 [ 892.388310][T15061] ? lockdep_hardirqs_on+0x98/0x150 [ 892.393529][T15061] do_syscall_64+0x55/0xb0 [ 892.398055][T15061] ? clear_bhb_loop+0x40/0x90 [ 892.402741][T15061] ? clear_bhb_loop+0x40/0x90 [ 892.407432][T15061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.413346][T15061] RIP: 0033:0x7ff5cf59e199 [ 892.417779][T15061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.437405][T15061] RSP: 002b:00007ff5d0416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 892.445852][T15061] RAX: ffffffffffffffda RBX: 00007ff5cf825fa0 RCX: 00007ff5cf59e199 [ 892.453849][T15061] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000004 [ 892.461838][T15061] RBP: 00007ff5cf6350b8 R08: 0000000000000000 R09: 0000000000000000 [ 892.469824][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.477812][T15061] R13: 00007ff5cf826038 R14: 00007ff5cf825fa0 R15: 00007ffd271ca8d8 [ 892.485902][T15061] [ 892.489309][T15061] Kernel Offset: disabled [ 892.493719][T15061] Rebooting in 86400 seconds..