last executing test programs: 4m17.503233657s ago: executing program 4 (id=349): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000500006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 4m14.627374694s ago: executing program 4 (id=352): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) madvise(&(0x7f0000229000/0x3000)=nil, 0x3000, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x30901d51018e0bb3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x2, 0x0}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") socket$netlink(0x10, 0x3, 0xc) setgroups(0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) clock_gettime(0x4, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x4, 0x4, 0x1800}, {0x6, 0x6, 0x1000}, {0x4, 0x80, 0x800}, {0x3, 0x3, 0x1000}, {0x3, 0x1ff, 0x1800}, {0x4, 0x6, 0x800}], 0x6, &(0x7f0000000140)) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x46, &(0x7f0000001940)=ANY=[], 0x41, 0xa9d, &(0x7f0000000c00)="$eJzs3UuMHEfdAPCe3Z2113Y+j/PZZHFCbBNIIiC78a4xDwviKL5gxYhbpIiL5TjBwjEIR4JEkbB94kYiy9wQD3HKJQKERC7IyolLJGKJS7gEDhywjBSJAzjYg3a2anbm75n0rPfROzu/n1Rb01PVXdW93T39rCqAkTXW+ltv/b3y1uVj/3j471MLn59o52i0/k50DC3krqXhiTC998cX41sfvHqqV1wr5lp/8/B4x7jbi6K4UOwvrhaNYu+Va6+/M/f0iYvHLx14940j19dg1gEAYOR84+qRQ3v++qf7d91888GjxZb29/n4vJGGd6Tj/qPpwH8hmqjl84el84FaR+g0GfJNpDAW8o33yFd05KvnfFu7x4vlT4bp1vvk21JS/ng4R6mF+sAwy+txo6iNzXQNj43NzCyekxet8/rJ2sy5M2efP19RRYFV9699RVHsz+Fmc+mzIGzm0NzZ3ggqr0t1oWMpAFQq3i+8w4V4ZWFl2lObGKz8G0+O9R6/W30168joWO/1X/lx+t31WO/yy+b/VxfXeP4ZKYOvTVvXtB6rLc9X3o52pOF4HyE+v9R/+0tjhu0/T288TG/QA4B+9xGG5f5Cv3qOr3M97la/+sf1YrP6SorzcvhqSO/cfuL/dFj+x0Bv/95X/TXI7jC1VLny/BPV11cQhjc0q9z5ANUqOa2Pz801k5wen+uL6VtK0reWpE+VpG8rSd9ekg6j7Lcv/bh4rVb0fB+vWDz/b20sg14Pz9fZ7knx/y2zPvF65HLvB8TnfpdrpeXH54lhI/v9yWdOf/G5Z68tPv9fa6//t9P6vj8NN9K2dTVlyNcL43X19rP/je5yxvrkuzfU554e+Vufd3fnq+1emk7RsZ+5ox7T3ePt7Jfvge58jZBvKoV4uBSPT7aF8fLxR96v5uU1Eea3HuZjMtQj71d2pXi47sawUeX1sd/z/3n9nC7qtefPnD39eBrO6+kfx+tbFr4/uM71BlZu0Pd/povu9392pN++6aI+1rlf2NnOv7i/ONieXvf3c32+n0/D+XfuW+NTre9nTn3n7HNrsQBghJ1/+ZVvnzx79vT3fPDBBx/aH6reMwFrbfalF787e/7lVx478+LJF06/cPrc/OHD83Nzh780f2i2dVw/23l0D2wmSz/6VdcEAAAAAAAAAAAAGNT3jx+79ue3v/De4vv/S+//5ff/85O/+f3/H4X3/+N78vk9+Pwe4K4e6a08oYHVyZCvnsL/h/ruDuXsCeN9LMXtfvzS+/+5uNiua67PfeH72H5vzheaE7ijvZTJ0AZJ7C/wkym+lOJfFlCh2k97f53isvat87qe26fQLsVwyv+33J5Jbsckv//dr12nvP/f1XuyP1zterK61uN1wqrnEejtnxuu/e81CUsNflZel44zhsrrImy0cKvZXNc+eJvNj+rFQ19TwPqpuv/PfN0zx+f+8LWtCyFnu/Fk9/4ytl8KK1F1/5eVlZ8vLG7g+b/wl+qX/2r3/9nu/27g/V/oMa9xd+X+52fX3+sottjbt/wtRVf5cf5zO9C7l1f+zVR+nptHin7ld89/8xeh/HhDaEAfhvK3DVh+nP/Lyy04FfjfVH5ebI8+NGj5ixOojXXXI143zvf/4nXj7FaY/9y253Ln/247arydyodRNiz9zC5XV/+/F5ur0P9vMmj/vyvsYSg+h/H5NJx3hPk5h9jfyXLrn5+vyL8De8L0ayW/b/r/HW5fTnHZ9pD7/83rY6PH8FjHcL3Hst2s+xoYVu+v2v2/jifmNsB9lJEIU5b3QqhZBncdms1mpTf53GGsVtXLv+rzhKrLr3r5l4n9/8Zj+Nj/b0yP/f/G9Nj/b0xv/cR9uNRpb1xesf/fmB77/43p94VyY//A0yXpHy9J31uSfn9J+gMl6Z8oST9Qkv5gSfq+kvR7S9IfKkn/VPiPx/RPl4z/cEn6ox+dPv+DkvE3u/w+ymDzv9H3VsByxPfzRm3/B6Ms3//pt/3vLkkHhtdP3jz41LO/+WZj8f3/yfb1kHwf72garqej/3i+FK+fjKe0t9Pw30K6MwjYOGL7GfH3/ZGSdGB45ee8bN8wgmq9W+wZtN2qfsf5DJfPpPizKf5cih9L8UyKZ1N8MMVz61Q/1sZTv/7dkddqS+f7O0P6oM+Tx/eBYjtR8wPWJ14fWO7z7LEdv+Vaafl3+ToYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZcZafw8dmq4VxZW3Lh975sSZ2YVvnmjnaLT+TnQM1dvjFcXjKR5P8c/Th1sfvHqqM76d4loxV9SKWvv74us32iVtL4riQrG/uFo0ir1Xrr3+ztzTJy4ev3Tg3TeOXF+7JQAAAACb3/8CAAD//0uLH1c=") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x44402, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x4842, 0x0) sendfile(r3, r2, 0x0, 0x80000002) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) setsockopt(0xffffffffffffffff, 0xa2a, 0x3, &(0x7f0000d14ffc)="ce", 0x1) listen(0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) 4m7.805150819s ago: executing program 4 (id=360): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) setreuid(r2, 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$watch_queue(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@errors_remount}]}, 0x1, 0x782, &(0x7f0000002200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x3010, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044, 0x1}) io_uring_enter(r7, 0x47b9, 0x3e80, 0xc, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 4m3.222103457s ago: executing program 4 (id=365): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') 3m58.620378193s ago: executing program 4 (id=372): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) madvise(&(0x7f0000229000/0x3000)=nil, 0x3000, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x30901d51018e0bb3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x2, 0x0}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") socket$netlink(0x10, 0x3, 0xc) setgroups(0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) clock_gettime(0x4, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x4, 0x4, 0x1800}, {0x6, 0x6, 0x1000}, {0x3, 0x3, 0x1000}, {0x3, 0x1ff, 0x1800}, {0x4, 0x6, 0x800}], 0x5, &(0x7f0000000140)) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x46, &(0x7f0000001940)=ANY=[], 0x41, 0xa9d, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x44402, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x4842, 0x0) sendfile(r3, r2, 0x0, 0x80000002) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) setsockopt(0xffffffffffffffff, 0xa2a, 0x3, &(0x7f0000d14ffc)="ce", 0x1) listen(0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) 3m53.767776511s ago: executing program 4 (id=376): socket$kcm(0x22, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 3m38.112561204s ago: executing program 32 (id=376): socket$kcm(0x22, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m48.351703189s ago: executing program 0 (id=658): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x21}, 0x1, 0x2}) 1m47.216829255s ago: executing program 0 (id=661): r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40040, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x20000000000000d8, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x662e507d9cf78f0b, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x2d, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) 1m46.460749572s ago: executing program 0 (id=664): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 1m45.039590308s ago: executing program 0 (id=667): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xff80, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x4000000) 1m43.691578061s ago: executing program 0 (id=671): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x999, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x1, 0x4000000004, 0x800000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x767e, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) 1m41.995564158s ago: executing program 0 (id=673): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setns(0xffffffffffffffff, 0x8020000) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) 1m26.549067007s ago: executing program 33 (id=673): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setns(0xffffffffffffffff, 0x8020000) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) 15.123440757s ago: executing program 1 (id=911): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 14.294372167s ago: executing program 1 (id=912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xd8, 0x118, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = openat$incfs(0xffffffffffffffff, 0x0, 0xa80, 0xc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000240)={0xfff, 0x1, {0x0, 0x2, 0x2, 0x0, 0xe}, 0x5}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 12.271677303s ago: executing program 1 (id=920): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 12.058580683s ago: executing program 5 (id=921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) bind$alg(r1, 0x0, 0x0) 11.878380482s ago: executing program 5 (id=924): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020400090a00000000000000fbdbdf250300060000000e00020000007f0000010000000000000000020001000000000003040206000000c0030005000000000002"], 0x50}}, 0x0) 10.708985041s ago: executing program 5 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) 9.983356634s ago: executing program 5 (id=930): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 9.799892216s ago: executing program 2 (id=932): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 8.731321135s ago: executing program 3 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) 7.255678455s ago: executing program 2 (id=935): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) get_mempolicy(0x0, &(0x7f0000000540), 0xc3, &(0x7f0000ffd000/0x2000)=nil, 0x4) 6.43541843s ago: executing program 1 (id=936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r2, 0x2) close(r2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444bf40ddf534ff8c07cb111"], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x2) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 6.288308448s ago: executing program 2 (id=937): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 6.257951436s ago: executing program 3 (id=938): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @none}, 0x8) 5.744991689s ago: executing program 2 (id=941): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000003a80), 0x0, 0x2c000011) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r0, 0xfa206000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.697791929s ago: executing program 6 (id=942): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.759492385s ago: executing program 6 (id=943): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) 4.415321627s ago: executing program 2 (id=944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 3.430231321s ago: executing program 6 (id=945): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 3.311403789s ago: executing program 3 (id=946): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 2.916607431s ago: executing program 3 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x3cfb, 0x400, 0x3fffd, 0x112}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x8aa, 0x0, 0x41, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.592578827s ago: executing program 6 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0xde2e92ecda5c185f, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f04}, @TCA_CTINFO_PARMS_DSCP_MASK={0x1, 0x5, 0x5d4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffff7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 2.228130535s ago: executing program 5 (id=949): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) 1.611461348s ago: executing program 3 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.511947671s ago: executing program 2 (id=951): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpeername(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000180)=0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r6, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000380)=""/7, 0x7}], 0x3) tkill(r7, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 1.28469853s ago: executing program 1 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.231473905s ago: executing program 6 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}}, 0x0) 1.160090357s ago: executing program 3 (id=954): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000003a80), 0x0, 0x2c000011) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r0, 0xfa206000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.102841615s ago: executing program 1 (id=955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff0001000000000000000000040000ffffe0000002fc010000000000000000000000ff00010001071c4e23000200000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d66c0000000a01010100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250000000000000300000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000002350000020001002000000000000000480003006465666c61746500"/232], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) 963.428392ms ago: executing program 5 (id=956): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0xd7, 0x0, 0xe9cc}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 0s ago: executing program 6 (id=957): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40310500000005101c24ed"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [ 186.076348][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.083774][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.091068][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.098536][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.123636][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.131358][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.138901][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.146390][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.154147][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.161587][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.168923][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.176363][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.203107][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.210687][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.218057][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.226346][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.234396][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.241803][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.249109][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.256550][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.283459][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.290994][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.298297][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.305830][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.313205][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.320647][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.328401][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.336506][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.362739][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.370187][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.377573][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.385022][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.392400][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.399967][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.414002][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.421454][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.449510][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.456979][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.465174][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.472611][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.479965][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.487378][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.494841][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.502271][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.527349][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.535771][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.543601][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.551232][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.558929][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.566697][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.574078][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 186.581846][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0] [ 186.608251][ T30] audit: type=1800 audit(1743914924.595:12): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.141" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 186.856078][ T6482] loop2: detected capacity change from 0 to 128 [ 187.919394][ T6482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.196016][ T6496] bio_check_eod: 102 callbacks suppressed [ 188.196038][ T6496] syz.2.143: attempt to access beyond end of device [ 188.196038][ T6496] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 188.261782][ T6496] syz.2.143: attempt to access beyond end of device [ 188.261782][ T6496] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 188.321263][ T6497] loop3: detected capacity change from 0 to 2048 [ 188.348362][ T6496] syz.2.143: attempt to access beyond end of device [ 188.348362][ T6496] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 188.449651][ T6496] syz.2.143: attempt to access beyond end of device [ 188.449651][ T6496] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 189.483336][ T6496] syz.2.143: attempt to access beyond end of device [ 189.483336][ T6496] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 189.498444][ T6504] loop1: detected capacity change from 0 to 512 [ 189.586743][ T6497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.599422][ T6496] syz.2.143: attempt to access beyond end of device [ 189.599422][ T6496] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 189.629954][ T6496] syz.2.143: attempt to access beyond end of device [ 189.629954][ T6496] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 189.644725][ T6496] syz.2.143: attempt to access beyond end of device [ 189.644725][ T6496] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 189.658715][ T6497] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.670707][ T6504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 189.694809][ T6504] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.721602][ T6496] syz.2.143: attempt to access beyond end of device [ 189.721602][ T6496] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 189.743935][ T6496] syz.2.143: attempt to access beyond end of device [ 189.743935][ T6496] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 190.754814][ T6515] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 190.859766][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 190.993850][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.057317][ T6540] loop1: detected capacity change from 0 to 128 [ 193.110250][ T6543] loop2: detected capacity change from 0 to 512 [ 193.183469][ T6543] EXT4-fs: Ignoring removed i_version option [ 193.273516][ T6543] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.296067][ T6547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.385378][ T6546] loop0: detected capacity change from 0 to 8 [ 193.517254][ T6548] bio_check_eod: 101 callbacks suppressed [ 193.523228][ T6548] syz.1.157: attempt to access beyond end of device [ 193.523228][ T6548] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 193.537259][ T6548] syz.1.157: attempt to access beyond end of device [ 193.537259][ T6548] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 193.551306][ T6548] syz.1.157: attempt to access beyond end of device [ 193.551306][ T6548] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 193.565340][ T6548] syz.1.157: attempt to access beyond end of device [ 193.565340][ T6548] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 193.579989][ T6548] syz.1.157: attempt to access beyond end of device [ 193.579989][ T6548] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 193.596206][ T6548] syz.1.157: attempt to access beyond end of device [ 193.596206][ T6548] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 193.610536][ T6548] syz.1.157: attempt to access beyond end of device [ 193.610536][ T6548] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 193.624698][ T6548] syz.1.157: attempt to access beyond end of device [ 193.624698][ T6548] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 193.638984][ T6548] syz.1.157: attempt to access beyond end of device [ 193.638984][ T6548] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 193.653169][ T6548] syz.1.157: attempt to access beyond end of device [ 193.653169][ T6548] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 194.423047][ T6553] loop4: detected capacity change from 0 to 256 [ 194.489449][ T6543] EXT4-fs error (device loop2): ext4_orphan_get:1390: comm syz.2.158: inode #13: comm syz.2.158: iget: illegal inode # [ 194.586785][ T6553] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 194.600417][ T6543] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.158: couldn't read orphan inode 13 (err -117) [ 194.619294][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.655424][ T6553] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 194.693454][ T6553] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 194.740585][ T6553] UDF-fs: Scanning with blocksize 512 failed [ 194.790416][ T6553] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 194.839903][ T6553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.858279][ T6560] loop3: detected capacity change from 0 to 128 [ 196.531692][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.296957][ T6573] loop4: detected capacity change from 0 to 128 [ 197.535163][ T6575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.489258][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.495756][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.135646][ T6588] loop1: detected capacity change from 0 to 2048 [ 201.230393][ T6599] loop0: detected capacity change from 0 to 128 [ 201.279024][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.326516][ T6588] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.559264][ T6603] loop2: detected capacity change from 0 to 2048 [ 202.573007][ T6599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.748134][ T6610] bio_check_eod: 326 callbacks suppressed [ 202.748158][ T6610] syz.0.173: attempt to access beyond end of device [ 202.748158][ T6610] loop0: rw=2049, sector=145, nr_sectors = 80 limit=128 [ 202.768165][ T6610] syz.0.173: attempt to access beyond end of device [ 202.768165][ T6610] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 202.782179][ T6610] syz.0.173: attempt to access beyond end of device [ 202.782179][ T6610] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 202.826085][ T6603] /dev/loop2: Can't open blockdev [ 202.832323][ T6610] syz.0.173: attempt to access beyond end of device [ 202.832323][ T6610] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 202.850193][ T6610] syz.0.173: attempt to access beyond end of device [ 202.850193][ T6610] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 202.865022][ T6610] syz.0.173: attempt to access beyond end of device [ 202.865022][ T6610] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 202.881833][ T6610] syz.0.173: attempt to access beyond end of device [ 202.881833][ T6610] loop0: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 203.096224][ T6610] syz.0.173: attempt to access beyond end of device [ 203.096224][ T6610] loop0: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 204.087980][ T6610] syz.0.173: attempt to access beyond end of device [ 204.087980][ T6610] loop0: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 204.118592][ T6610] syz.0.173: attempt to access beyond end of device [ 204.118592][ T6610] loop0: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 204.511811][ T6621] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 205.122205][ T6604] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 205.260300][ T6628] loop3: detected capacity change from 0 to 128 [ 205.270573][ T6604] EXT4-fs (loop1): Remounting filesystem read-only [ 205.310463][ T6624] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 205.334352][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.892461][ T6453] bio_check_eod: 63 callbacks suppressed [ 209.892476][ T6453] kworker/u8:12: attempt to access beyond end of device [ 209.892476][ T6453] loop0: rw=1, sector=737, nr_sectors = 8 limit=128 [ 209.931764][ T6638] loop1: detected capacity change from 0 to 8 [ 209.938278][ T6453] kworker/u8:12: attempt to access beyond end of device [ 209.938278][ T6453] loop0: rw=1, sector=769, nr_sectors = 8 limit=128 [ 209.968718][ T6453] kworker/u8:12: attempt to access beyond end of device [ 209.968718][ T6453] loop0: rw=1, sector=801, nr_sectors = 8 limit=128 [ 210.051715][ T6453] kworker/u8:12: attempt to access beyond end of device [ 210.051715][ T6453] loop0: rw=1, sector=833, nr_sectors = 8 limit=128 [ 210.086527][ T3507] kworker/u8:6: attempt to access beyond end of device [ 210.086527][ T3507] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 210.115054][ T6640] loop2: detected capacity change from 0 to 128 [ 210.122888][ T6453] kworker/u8:12: attempt to access beyond end of device [ 210.122888][ T6453] loop0: rw=1, sector=865, nr_sectors = 8 limit=128 [ 210.137299][ T3507] kworker/u8:6: attempt to access beyond end of device [ 210.137299][ T3507] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 210.158640][ T6453] kworker/u8:12: attempt to access beyond end of device [ 210.158640][ T6453] loop0: rw=1, sector=897, nr_sectors = 8 limit=128 [ 210.172326][ T3507] kworker/u8:6: attempt to access beyond end of device [ 210.172326][ T3507] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 210.189155][ T6453] kworker/u8:12: attempt to access beyond end of device [ 210.189155][ T6453] loop0: rw=1, sector=929, nr_sectors = 8 limit=128 [ 212.442226][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.4.186'. [ 214.806715][ T6680] loop1: detected capacity change from 0 to 8 [ 215.413197][ T6680] SQUASHFS error: Failed to read block 0x2fc: -5 [ 215.419719][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.427089][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.433941][ T6680] SQUASHFS error: Failed to read block 0xfc: -5 [ 215.440525][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.447892][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.454895][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.463952][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.480998][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.488379][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.495319][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.504650][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.511596][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.518958][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.529642][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.537020][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.543903][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.551355][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.558302][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.565775][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.573054][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.580520][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.593388][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.603139][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.610171][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.617766][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.624672][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.632048][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.639000][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.646401][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.657609][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.664955][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.671878][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.679383][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.686368][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.693798][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.700745][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.714332][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.725605][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.732977][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.739934][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.747294][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.754354][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.761746][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.768760][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.776228][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.787290][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.794669][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.801616][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.811332][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.818326][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.825789][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.832756][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 215.840275][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0] [ 215.896893][ T30] audit: type=1800 audit(1743914954.160:13): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.190" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 217.874227][ T6683] Bluetooth: hci1: command 0x0406 tx timeout [ 217.880328][ T6683] Bluetooth: hci2: command 0x0406 tx timeout [ 217.886790][ T6683] Bluetooth: hci0: command 0x0406 tx timeout [ 217.892844][ T6683] Bluetooth: hci3: command 0x0406 tx timeout [ 217.903596][ T6691] Bluetooth: hci4: command 0x0406 tx timeout [ 220.374335][ T6700] loop0: detected capacity change from 0 to 128 [ 220.503426][ T6702] loop4: detected capacity change from 0 to 256 [ 220.537317][ T6702] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 220.697689][ T6710] bio_check_eod: 244 callbacks suppressed [ 220.703822][ T6710] syz.0.197: attempt to access beyond end of device [ 220.703822][ T6710] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 220.726388][ T6709] loop2: detected capacity change from 0 to 8 [ 220.733371][ T6710] syz.0.197: attempt to access beyond end of device [ 220.733371][ T6710] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 220.747643][ T6710] syz.0.197: attempt to access beyond end of device [ 220.747643][ T6710] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 220.761970][ T6710] syz.0.197: attempt to access beyond end of device [ 220.761970][ T6710] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 220.776391][ T6710] syz.0.197: attempt to access beyond end of device [ 220.776391][ T6710] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 220.790623][ T6710] syz.0.197: attempt to access beyond end of device [ 220.790623][ T6710] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 220.804741][ T6710] syz.0.197: attempt to access beyond end of device [ 220.804741][ T6710] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 220.820824][ T6710] syz.0.197: attempt to access beyond end of device [ 220.820824][ T6710] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 220.835602][ T6710] syz.0.197: attempt to access beyond end of device [ 220.835602][ T6710] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 220.850234][ T6710] syz.0.197: attempt to access beyond end of device [ 220.850234][ T6710] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 221.046981][ T6702] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 221.270876][ T6702] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 221.377867][ T6702] UDF-fs: Scanning with blocksize 512 failed [ 221.959017][ T6706] loop3: detected capacity change from 0 to 128 [ 222.377074][ T6702] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 222.441674][ T6702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.588948][ T6713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.492773][ T6768] loop2: detected capacity change from 0 to 128 [ 230.752240][ T6771] loop3: detected capacity change from 0 to 32768 [ 231.001990][ T6773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.100572][ T6774] bio_check_eod: 153 callbacks suppressed [ 231.100599][ T6774] syz.2.216: attempt to access beyond end of device [ 231.100599][ T6774] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 231.120875][ T6774] syz.2.216: attempt to access beyond end of device [ 231.120875][ T6774] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 231.134820][ T6774] syz.2.216: attempt to access beyond end of device [ 231.134820][ T6774] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 231.148960][ T6774] syz.2.216: attempt to access beyond end of device [ 231.148960][ T6774] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 231.164337][ T6774] syz.2.216: attempt to access beyond end of device [ 231.164337][ T6774] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 231.748824][ T6777] loop0: detected capacity change from 0 to 2048 [ 232.672396][ T3507] kworker/u8:6: attempt to access beyond end of device [ 232.672396][ T3507] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 232.696939][ T3507] kworker/u8:6: attempt to access beyond end of device [ 232.696939][ T3507] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 232.732310][ T6781] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.850352][ T3507] kworker/u8:6: attempt to access beyond end of device [ 232.850352][ T3507] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 232.851758][ T3507] kworker/u8:6: attempt to access beyond end of device [ 232.851758][ T3507] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 232.852613][ T3507] kworker/u8:6: attempt to access beyond end of device [ 232.852613][ T3507] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 233.057024][ T6782] loop4: detected capacity change from 0 to 512 [ 233.141804][ T6782] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 233.475050][ T30] audit: type=1800 audit(1743914972.239:14): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 236.010902][ T6798] loop2: detected capacity change from 0 to 128 [ 236.127542][ T6799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.207065][ T6800] bio_check_eod: 102 callbacks suppressed [ 236.207093][ T6800] syz.2.224: attempt to access beyond end of device [ 236.207093][ T6800] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 236.227044][ T6800] syz.2.224: attempt to access beyond end of device [ 236.227044][ T6800] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 236.241339][ T6800] syz.2.224: attempt to access beyond end of device [ 236.241339][ T6800] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 236.255920][ T6800] syz.2.224: attempt to access beyond end of device [ 236.255920][ T6800] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 236.270468][ T6800] syz.2.224: attempt to access beyond end of device [ 236.270468][ T6800] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 236.285739][ T6800] syz.2.224: attempt to access beyond end of device [ 236.285739][ T6800] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 236.301050][ T6800] syz.2.224: attempt to access beyond end of device [ 236.301050][ T6800] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 236.315244][ T6800] syz.2.224: attempt to access beyond end of device [ 236.315244][ T6800] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 236.329362][ T6800] syz.2.224: attempt to access beyond end of device [ 236.329362][ T6800] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 236.343518][ T6800] syz.2.224: attempt to access beyond end of device [ 236.343518][ T6800] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 238.687234][ T6817] loop1: detected capacity change from 0 to 8 [ 241.004731][ T6826] loop3: detected capacity change from 0 to 512 [ 241.074979][ T6826] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.472408][ T3541] bio_check_eod: 87 callbacks suppressed [ 241.472430][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.472430][ T3541] loop2: rw=1, sector=977, nr_sectors = 8 limit=128 [ 241.522876][ T6826] EXT4-fs (loop3): 1 truncate cleaned up [ 241.530508][ T6826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.562453][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.562453][ T3541] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 241.618429][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.618429][ T3541] loop2: rw=1, sector=369, nr_sectors = 8 limit=128 [ 241.632466][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.632466][ T3541] loop2: rw=1, sector=497, nr_sectors = 8 limit=128 [ 241.646383][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.646383][ T3541] loop2: rw=1, sector=625, nr_sectors = 8 limit=128 [ 241.660155][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.660155][ T3541] loop2: rw=1, sector=753, nr_sectors = 8 limit=128 [ 241.674065][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.674065][ T3541] loop2: rw=1, sector=881, nr_sectors = 8 limit=128 [ 241.695907][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.695907][ T3541] loop2: rw=1, sector=1009, nr_sectors = 8 limit=128 [ 241.727533][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.727533][ T3541] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 241.761785][ T3541] kworker/u8:7: attempt to access beyond end of device [ 241.761785][ T3541] loop2: rw=1, sector=561, nr_sectors = 8 limit=128 [ 241.979415][ T6835] loop4: detected capacity change from 0 to 128 [ 242.035446][ T6837] loop0: detected capacity change from 0 to 128 [ 243.081469][ T6840] loop2: detected capacity change from 0 to 256 [ 243.433983][ T6842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.184786][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.491750][ T6859] loop4: detected capacity change from 0 to 8 [ 245.603543][ T6860] input: syz0 as /devices/virtual/input/input7 [ 245.867936][ T6859] SQUASHFS error: Failed to read block 0x2fc: -5 [ 245.874821][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 245.882259][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 245.889218][ T6859] SQUASHFS error: Failed to read block 0xfc: -5 [ 245.900171][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 245.907592][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 245.914995][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 245.922584][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 245.943870][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 245.951682][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 245.958603][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 245.966082][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 245.973091][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 245.980565][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 245.993269][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.007489][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.014576][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.022027][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.029046][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.037012][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.044276][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.051698][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.065309][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.073413][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.080489][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.087917][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.095584][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.110470][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.117582][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.125452][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.139046][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.146587][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.153687][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.161554][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.168689][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.176118][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.183330][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.190820][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.204098][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.211561][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.218490][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.225912][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.233351][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.240884][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.247805][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 246.255996][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0] [ 246.400233][ T30] audit: type=1800 audit(1743914984.615:15): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.237" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 248.301569][ T6871] loop1: detected capacity change from 0 to 128 [ 248.506587][ T6872] loop3: detected capacity change from 0 to 128 [ 249.287984][ T6875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.661754][ T6879] bio_check_eod: 135 callbacks suppressed [ 249.667701][ T6879] syz.1.241: attempt to access beyond end of device [ 249.667701][ T6879] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 249.695811][ T6879] syz.1.241: attempt to access beyond end of device [ 249.695811][ T6879] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 249.711419][ T6879] syz.1.241: attempt to access beyond end of device [ 249.711419][ T6879] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 249.726115][ T6879] syz.1.241: attempt to access beyond end of device [ 249.726115][ T6879] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 249.740387][ T6879] syz.1.241: attempt to access beyond end of device [ 249.740387][ T6879] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 249.754510][ T6879] syz.1.241: attempt to access beyond end of device [ 249.754510][ T6879] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 249.769025][ T6879] syz.1.241: attempt to access beyond end of device [ 249.769025][ T6879] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 249.799074][ T6879] syz.1.241: attempt to access beyond end of device [ 249.799074][ T6879] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 250.563965][ T6879] syz.1.241: attempt to access beyond end of device [ 250.563965][ T6879] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 250.578785][ T6879] syz.1.241: attempt to access beyond end of device [ 250.578785][ T6879] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 254.454327][ T6904] loop2: detected capacity change from 0 to 512 [ 254.491868][ T6904] EXT4-fs: Ignoring removed i_version option [ 254.540119][ T6904] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.606812][ T6904] EXT4-fs error (device loop2): ext4_orphan_get:1390: comm syz.2.247: inode #13: comm syz.2.247: iget: illegal inode # [ 254.635976][ T6904] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.247: couldn't read orphan inode 13 (err -117) [ 254.672820][ T6911] loop3: detected capacity change from 0 to 512 [ 254.693999][ T6904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.724290][ T6911] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.821033][ T6911] EXT4-fs (loop3): 1 truncate cleaned up [ 254.856612][ T6911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.027441][ T30] audit: type=1800 audit(1743914993.788:16): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 255.129988][ T6923] loop1: detected capacity change from 0 to 256 [ 255.137461][ T6923] vfat: Unknown parameter 'ocharsmt' [ 256.157246][ T5889] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 256.555636][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.740758][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.761999][ T5889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 256.803099][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.846880][ T5889] usb 2-1: config 0 descriptor?? [ 256.894180][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.027404][ T5889] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 257.048220][ T6934] loop2: detected capacity change from 0 to 8 [ 257.692463][ T6940] loop3: detected capacity change from 0 to 8 [ 258.784608][ T6939] SQUASHFS error: Failed to read block 0x2fc: -5 [ 258.791318][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.800175][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.807169][ T6939] SQUASHFS error: Failed to read block 0xfc: -5 [ 258.813683][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.821038][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.827958][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.835385][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.842717][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.850352][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.857291][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.864599][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.871541][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.878970][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.898920][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.906370][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.913340][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.920735][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.927692][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.935001][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.942351][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.949950][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.957755][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.965165][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.972252][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.979655][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 258.986715][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 258.994063][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.002364][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.009770][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.016676][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.024137][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.031130][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.038528][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.045434][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.049604][ T30] audit: type=1800 audit(1743914997.448:17): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.253" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 259.052912][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.080366][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.087792][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.094778][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.104334][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.112348][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.119841][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.126869][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.134277][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.141278][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.148638][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.155539][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.164306][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.171286][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.178816][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.185707][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.193314][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 259.200424][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.210953][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.304857][ T5889] usb 2-1: USB disconnect, device number 4 [ 260.403424][ T6953] loop2: detected capacity change from 0 to 8 [ 260.416685][ T6951] loop0: detected capacity change from 0 to 128 [ 260.623752][ T6953] SQUASHFS error: Failed to read block 0x2fc: -5 [ 260.630755][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.639221][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.646982][ T6953] SQUASHFS error: Failed to read block 0xfc: -5 [ 260.654375][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.661818][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.669558][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.677247][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.752847][ T30] audit: type=1800 audit(1743914999.308:18): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.257" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 260.753035][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.779977][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.787197][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.794821][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.802248][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.809673][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.883322][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.890974][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.904634][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.912632][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.920448][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.928206][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.936021][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.944714][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.970343][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.978235][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 260.985960][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 260.993654][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 261.001229][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 261.009126][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 261.016593][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 261.024456][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0] [ 261.098108][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.105003][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.707604][ T6958] loop3: detected capacity change from 0 to 8 [ 261.844953][ T6962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.001291][ T6964] bio_check_eod: 214 callbacks suppressed [ 262.001439][ T6964] syz.0.259: attempt to access beyond end of device [ 262.001439][ T6964] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 262.021918][ T6964] syz.0.259: attempt to access beyond end of device [ 262.021918][ T6964] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 262.036490][ T6964] syz.0.259: attempt to access beyond end of device [ 262.036490][ T6964] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 262.133795][ T6964] syz.0.259: attempt to access beyond end of device [ 262.133795][ T6964] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 262.148716][ T6964] syz.0.259: attempt to access beyond end of device [ 262.148716][ T6964] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 262.163426][ T6964] syz.0.259: attempt to access beyond end of device [ 262.163426][ T6964] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 262.186498][ T6964] syz.0.259: attempt to access beyond end of device [ 262.186498][ T6964] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 263.080683][ T30] audit: type=1800 audit(1743915000.548:19): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.258" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 263.174895][ T6967] loop2: detected capacity change from 0 to 1024 [ 263.507414][ T63] kworker/u8:4: attempt to access beyond end of device [ 263.507414][ T63] loop0: rw=1, sector=256, nr_sectors = 1 limit=128 [ 263.534338][ T6974] loop4: detected capacity change from 0 to 512 [ 263.561395][ T6974] ext4: Unknown parameter 'defcontext' [ 263.580279][ T63] Buffer I/O error on dev loop0, logical block 256, lost async page write [ 264.570596][ T63] kworker/u8:4: attempt to access beyond end of device [ 264.570596][ T63] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 265.583184][ T63] kworker/u8:4: attempt to access beyond end of device [ 265.583184][ T63] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 265.603432][ T36] hfsplus: b-tree write err: -5, ino 4 [ 267.691081][ T6993] input: syz0 as /devices/virtual/input/input8 [ 269.257564][ T6997] loop0: detected capacity change from 0 to 32768 [ 271.628773][ T7009] input: syz0 as /devices/virtual/input/input9 [ 272.110315][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 272.521983][ T5886] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 272.595724][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.996648][ T7014] loop4: detected capacity change from 0 to 32768 [ 273.068393][ T5886] usb 1-1: config 0 descriptor?? [ 273.427820][ T5886] usb 1-1: can't set config #0, error -71 [ 273.700404][ T5886] usb 1-1: USB disconnect, device number 3 [ 273.881803][ T7019] loop2: detected capacity change from 0 to 2048 [ 273.937363][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 273.953396][ T7022] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.030206][ T7024] loop1: detected capacity change from 0 to 8 [ 274.366840][ T7024] SQUASHFS error: Failed to read block 0x2fc: -5 [ 274.373375][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.380901][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.388105][ T7024] SQUASHFS error: Failed to read block 0xfc: -5 [ 274.395053][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.402581][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.409896][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.417384][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.495019][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.503334][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.510659][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.518107][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.525388][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.532842][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.560561][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.569241][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.580720][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.588169][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.595504][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.602960][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.610454][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 274.617913][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0] [ 274.657740][ T30] audit: type=1800 audit(1743915013.048:20): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.279" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 274.736985][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.950469][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.967207][ T30] audit: type=1800 audit(1743915013.728:21): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.278" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 275.001388][ T9] usb 5-1: config 0 descriptor?? [ 275.069070][ T9] cp210x 5-1:0.0: cp210x converter detected [ 275.422919][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 275.641045][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 275.751577][ T7032] input: syz0 as /devices/virtual/input/input10 [ 276.461094][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 276.547598][ T9] usb 5-1: USB disconnect, device number 4 [ 276.736987][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.757915][ T7033] loop0: detected capacity change from 0 to 2048 [ 276.765948][ T9] cp210x 5-1:0.0: device disconnected [ 276.832947][ T7036] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.932775][ T7037] loop1: detected capacity change from 0 to 256 [ 277.014776][ T30] audit: type=1800 audit(1743915015.788:22): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.277" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 278.055714][ T7048] loop2: detected capacity change from 0 to 512 [ 278.124722][ T7045] loop4: detected capacity change from 0 to 512 [ 278.125551][ T7045] ext4: Unknown parameter 'defcontext' [ 278.135685][ T7048] ext4: Unknown parameter 'defcontext' [ 278.290561][ T7050] loop2: detected capacity change from 0 to 256 [ 278.291262][ T7050] vfat: Unknown parameter 'tf8' [ 282.488043][ T7058] loop0: detected capacity change from 0 to 32768 [ 282.534677][ T7060] input: syz0 as /devices/virtual/input/input11 [ 284.677304][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 284.865362][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 284.940191][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.013469][ T7070] loop4: detected capacity change from 0 to 2048 [ 285.025778][ T9] usb 1-1: config 0 descriptor?? [ 285.033972][ T7075] loop2: detected capacity change from 0 to 16 [ 285.790624][ T9] cp210x 1-1:0.0: cp210x converter detected [ 285.797252][ T7075] erofs (device loop2): mounted with root inode @ nid 36. [ 285.821689][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 285.942751][ T7070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.967845][ T9] cp210x 1-1:0.0: querying part number failed [ 285.978666][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 286.007674][ T7070] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.147505][ T9] usb 1-1: USB disconnect, device number 4 [ 286.157584][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 286.166192][ T9] cp210x 1-1:0.0: device disconnected [ 286.220498][ T7075] erofs (device loop2): read error -117 @ 123 of nid 36 [ 286.707297][ T30] audit: type=1326 audit(1743915025.478:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 286.758434][ T30] audit: type=1326 audit(1743915025.478:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 286.995951][ T30] audit: type=1326 audit(1743915025.478:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 287.077224][ T30] audit: type=1326 audit(1743915025.478:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 287.139295][ T7089] erofs (device loop2): read error -117 @ 0 of nid 36 [ 287.162320][ T7089] erofs (device loop2): failed to readdir of logical block 0 of nid 36 [ 287.181283][ T30] audit: type=1326 audit(1743915025.478:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 287.288721][ T7092] loop1: detected capacity change from 0 to 8 [ 287.764727][ T7092] SQUASHFS error: Failed to read block 0x2fc: -5 [ 287.771263][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 287.780216][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 287.787222][ T7092] SQUASHFS error: Failed to read block 0xfc: -5 [ 287.794366][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 287.801825][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 287.809626][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 287.817143][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.011462][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.019439][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.026945][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.034361][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.042348][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.049786][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.092753][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.100317][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.107945][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.115311][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.122574][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.129985][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.139332][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.146707][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.190575][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.197969][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.204950][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.212521][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.219884][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.227268][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.234301][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 288.241846][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0] [ 288.252005][ T30] audit: type=1326 audit(1743915025.478:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 288.274586][ T30] audit: type=1326 audit(1743915025.478:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 288.298796][ T30] audit: type=1326 audit(1743915025.478:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 288.475317][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.506696][ T30] audit: type=1326 audit(1743915025.478:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 288.530084][ T30] audit: type=1326 audit(1743915025.478:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000 [ 290.483780][ T7103] loop1: detected capacity change from 0 to 512 [ 291.457835][ T7103] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 292.780099][ T7111] input: syz0 as /devices/virtual/input/input12 [ 292.875925][ T7114] loop2: detected capacity change from 0 to 128 [ 293.399445][ T7118] bio_check_eod: 103 callbacks suppressed [ 293.399470][ T7118] syz.2.299: attempt to access beyond end of device [ 293.399470][ T7118] loop2: rw=2049, sector=145, nr_sectors = 32 limit=128 [ 293.421077][ T7118] syz.2.299: attempt to access beyond end of device [ 293.421077][ T7118] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 293.434738][ T7118] syz.2.299: attempt to access beyond end of device [ 293.434738][ T7118] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 293.448315][ T7118] syz.2.299: attempt to access beyond end of device [ 293.448315][ T7118] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 293.501536][ T7118] syz.2.299: attempt to access beyond end of device [ 293.501536][ T7118] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 293.522190][ T7118] syz.2.299: attempt to access beyond end of device [ 293.522190][ T7118] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 293.595823][ T7121] loop0: detected capacity change from 0 to 512 [ 293.623616][ T7118] syz.2.299: attempt to access beyond end of device [ 293.623616][ T7118] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 293.660279][ T7121] EXT4-fs: Ignoring removed i_version option [ 293.660318][ T7121] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.672519][ T7121] EXT4-fs error (device loop0): ext4_orphan_get:1390: comm syz.0.303: inode #13: comm syz.0.303: iget: illegal inode # [ 293.693591][ T7121] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.303: couldn't read orphan inode 13 (err -117) [ 293.866839][ T7118] syz.2.299: attempt to access beyond end of device [ 293.866839][ T7118] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 293.866984][ T7118] syz.2.299: attempt to access beyond end of device [ 293.866984][ T7118] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 293.880735][ T7118] syz.2.299: attempt to access beyond end of device [ 293.880735][ T7118] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 293.911794][ T7121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.103573][ T7137] loop3: detected capacity change from 0 to 512 [ 295.589665][ T7137] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 296.052790][ T7141] loop1: detected capacity change from 0 to 512 [ 296.080559][ T7141] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 296.102868][ T7139] loop2: detected capacity change from 0 to 2048 [ 296.536744][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.388197][ T7139] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.065890][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.182356][ T7126] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 298.222685][ T7126] EXT4-fs (loop2): Remounting filesystem read-only [ 298.299932][ T7160] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 299.550872][ T7168] loop0: detected capacity change from 0 to 512 [ 299.618034][ T7168] ext4: Unknown parameter 'defcontext' [ 303.603153][ T7178] loop1: detected capacity change from 0 to 512 [ 303.780517][ T7178] ext4: Unknown parameter 'defcontext' [ 303.903265][ T7180] fuse: Bad value for 'fd' [ 305.451755][ T7190] input: syz0 as /devices/virtual/input/input13 [ 308.879368][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.886134][ T7192] overlayfs: missing 'lowerdir' [ 309.386640][ T7196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 311.066006][ T7199] loop2: detected capacity change from 0 to 512 [ 311.076790][ T7199] EXT4-fs: Ignoring removed i_version option [ 311.083284][ T7199] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.279814][ T7199] EXT4-fs error (device loop2): ext4_orphan_get:1390: comm syz.2.322: inode #13: comm syz.2.322: iget: illegal inode # [ 311.319554][ T7199] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.322: couldn't read orphan inode 13 (err -117) [ 311.402164][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.650118][ T7225] loop0: detected capacity change from 0 to 128 [ 314.978925][ T7227] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 314.996664][ T7227] loop3: detected capacity change from 0 to 16 [ 316.692657][ T7229] bio_check_eod: 99 callbacks suppressed [ 316.698625][ T7229] syz.0.331: attempt to access beyond end of device [ 316.698625][ T7229] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 316.713024][ T7229] syz.0.331: attempt to access beyond end of device [ 316.713024][ T7229] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 316.727355][ T7229] syz.0.331: attempt to access beyond end of device [ 316.727355][ T7229] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 316.800219][ T7229] syz.0.331: attempt to access beyond end of device [ 316.800219][ T7229] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 316.815093][ T7229] syz.0.331: attempt to access beyond end of device [ 316.815093][ T7229] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 316.829357][ T7229] syz.0.331: attempt to access beyond end of device [ 316.829357][ T7229] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 316.843480][ T7229] syz.0.331: attempt to access beyond end of device [ 316.843480][ T7229] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 316.863204][ T7229] syz.0.331: attempt to access beyond end of device [ 316.863204][ T7229] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 316.877787][ T7229] syz.0.331: attempt to access beyond end of device [ 316.877787][ T7229] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 316.892074][ T7229] syz.0.331: attempt to access beyond end of device [ 316.892074][ T7229] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 317.337937][ T7227] erofs (device loop3): mounted with root inode @ nid 36. [ 317.528978][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.833844][ T7241] loop0: detected capacity change from 0 to 128 [ 318.877032][ T7243] loop4: detected capacity change from 0 to 512 [ 318.888287][ T7243] ext4: Unknown parameter 'defcontext' [ 319.045665][ T7248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.144322][ T7255] loop2: detected capacity change from 0 to 512 [ 320.567750][ T7255] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 321.633029][ T7260] loop1: detected capacity change from 0 to 512 [ 322.121429][ T7260] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 322.499868][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.506433][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.868713][ T7275] loop2: detected capacity change from 0 to 2048 [ 324.882292][ T7277] loop4: detected capacity change from 0 to 128 [ 324.890438][ T7277] /dev/loop4: Can't open blockdev [ 324.972462][ T7275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.286258][ T7275] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.398450][ T7281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 325.906135][ T7284] loop1: detected capacity change from 0 to 64 [ 327.147969][ T7273] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 327.282865][ T7281] EXT4-fs (loop2): Remounting filesystem read-only [ 327.522294][ T7287] loop0: detected capacity change from 0 to 32768 [ 327.529893][ T7287] btrfs: Deprecated parameter 'usebackuproot' [ 327.536569][ T7287] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 327.565461][ T7287] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.345 (7287) [ 327.596054][ T7287] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 327.610893][ T7287] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 328.253197][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.754759][ T7309] loop2: detected capacity change from 0 to 128 [ 329.616496][ T7287] BTRFS info (device loop0): rebuilding free space tree [ 329.667226][ T7287] BTRFS info (device loop0): disabling free space tree [ 329.674386][ T7287] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 329.684547][ T7287] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 329.725395][ T7287] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 330.355272][ T7319] bio_check_eod: 214 callbacks suppressed [ 330.355303][ T7319] syz.2.346: attempt to access beyond end of device [ 330.355303][ T7319] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 330.377479][ T7319] syz.2.346: attempt to access beyond end of device [ 330.377479][ T7319] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 330.391864][ T7319] syz.2.346: attempt to access beyond end of device [ 330.391864][ T7319] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 330.526237][ T7319] syz.2.346: attempt to access beyond end of device [ 330.526237][ T7319] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 330.541109][ T7319] syz.2.346: attempt to access beyond end of device [ 330.541109][ T7319] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 330.555951][ T7319] syz.2.346: attempt to access beyond end of device [ 330.555951][ T7319] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 330.570569][ T7319] syz.2.346: attempt to access beyond end of device [ 330.570569][ T7319] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 330.586060][ T7319] syz.2.346: attempt to access beyond end of device [ 330.586060][ T7319] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 330.601241][ T7319] syz.2.346: attempt to access beyond end of device [ 330.601241][ T7319] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 330.615485][ T7319] syz.2.346: attempt to access beyond end of device [ 330.615485][ T7319] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 331.364049][ T7326] loop4: detected capacity change from 0 to 512 [ 337.575032][ T7326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.731950][ T7326] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.105517][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.114836][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 338.352109][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 338.496979][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 338.641608][ T5888] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 338.727884][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.801738][ T5888] usb 4-1: Product: syz [ 338.829728][ T5888] usb 4-1: Manufacturer: syz [ 338.859491][ T5888] usb 4-1: SerialNumber: syz [ 338.939349][ T5888] usb 4-1: config 0 descriptor?? [ 338.946832][ T7360] loop4: detected capacity change from 0 to 2048 [ 338.971426][ T5888] gs_usb 4-1:0.0: Required endpoints not found [ 339.045216][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.125361][ T7360] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.237402][ T7378] Bluetooth: MGMT ver 1.23 [ 342.458992][ T7375] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 342.620275][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.190166][ T7383] loop2: detected capacity change from 0 to 32768 [ 343.301371][ T7380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.757248][ T5886] usb 4-1: USB disconnect, device number 5 [ 347.109772][ T7396] Process accounting resumed [ 347.728322][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 348.028922][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 348.046173][ T7406] loop4: detected capacity change from 0 to 512 [ 348.053747][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.088454][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 348.108488][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.116612][ T9] usb 2-1: Product: syz [ 348.221156][ T7406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.238468][ T7411] loop2: detected capacity change from 0 to 512 [ 348.245638][ T7411] ext4: Unknown parameter 'defcontext' [ 348.252097][ T9] usb 2-1: Manufacturer: syz [ 348.277345][ T9] usb 2-1: SerialNumber: syz [ 348.302990][ T7406] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.387967][ T9] usb 2-1: config 0 descriptor?? [ 348.580709][ T9] gs_usb 2-1:0.0: Required endpoints not found [ 349.473882][ T7416] loop0: detected capacity change from 0 to 32768 [ 350.625266][ T7422] loop3: detected capacity change from 0 to 4096 [ 350.700827][ T7422] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 351.317153][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 351.757937][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 351.757959][ T30] audit: type=1800 audit(1743915090.308:45): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.372" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 351.802990][ T30] audit: type=1800 audit(1743915090.338:46): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.372" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 351.881099][ T5889] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 351.933366][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.954916][ T5889] usb 1-1: config 0 descriptor?? [ 351.960495][ T5889] usb 1-1: can't set config #0, error -71 [ 352.080949][ T5889] usb 1-1: USB disconnect, device number 5 [ 352.094478][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.101701][ T7428] syzkaller0: entered allmulticast mode [ 353.598652][ T7439] loop0: detected capacity change from 0 to 64 [ 354.612065][ T24] usb 2-1: USB disconnect, device number 5 [ 355.928788][ T7457] libceph: resolve '0.0' (ret=-3): failed [ 356.803983][ T7470] xt_limit: Overflow, try lower: 0/0 [ 357.543890][ T7469] loop2: detected capacity change from 0 to 8 [ 357.849735][ T30] audit: type=1800 audit(1743915096.618:47): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.383" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 358.241273][ T7469] SQUASHFS error: Failed to read block 0x2fc: -5 [ 358.409906][ T7469] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 358.664160][ T7480] loop0: detected capacity change from 0 to 32768 [ 358.847935][ T7469] SQUASHFS error: read_indexes: reading block [2fa:0] [ 358.854930][ T7469] SQUASHFS error: Failed to read block 0xfc: -5 [ 358.864353][ T7478] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 358.872827][ T7478] SQUASHFS error: read_indexes: reading block [2fa:0] [ 359.307278][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 359.579566][ T7469] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 359.626373][ T7469] SQUASHFS error: read_indexes: reading block [2fa:0] [ 359.763673][ T5886] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.785815][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.825606][ T5886] usb 1-1: config 0 descriptor?? [ 359.852851][ T5886] cp210x 1-1:0.0: cp210x converter detected [ 361.474748][ T5886] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 361.485441][ T5886] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 361.513862][ T5886] usb 1-1: cp210x converter now attached to ttyUSB0 [ 361.585761][ T7494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.664140][ T7494] loop1: detected capacity change from 0 to 4096 [ 361.671621][ T7494] ntfs3: Unknown parameter 'H' [ 361.699684][ T5886] usb 1-1: USB disconnect, device number 6 [ 361.713071][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 361.721834][ T5886] cp210x 1-1:0.0: device disconnected [ 362.729248][ T7500] loop0: detected capacity change from 0 to 512 [ 362.806383][ T7500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.833792][ T7500] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.957233][ T30] audit: type=1800 audit(1743915101.698:48): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.391" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 363.015049][ T30] audit: type=1800 audit(1743915101.698:49): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.391" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 363.821122][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.270041][ T7527] Process accounting resumed [ 366.627746][ T7529] loop0: detected capacity change from 0 to 32768 [ 367.795736][ T7535] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[7535] [ 367.838337][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 367.839506][ T7535] syz.2.398 (7535): /proc/7535/oom_adj is deprecated, please use /proc/7535/oom_score_adj instead. [ 368.439376][ T5888] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 368.583188][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.628469][ T7540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.631126][ T5888] usb 1-1: config 0 descriptor?? [ 368.670374][ T5888] cp210x 1-1:0.0: cp210x converter detected [ 368.718032][ T7540] loop3: detected capacity change from 0 to 4096 [ 368.725465][ T7540] ntfs3: Unknown parameter 'H' [ 369.461151][ T7544] libceph: resolve '0.0' (ret=-3): failed [ 370.156796][ T5888] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 370.188480][ T5888] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 370.905156][ T5888] usb 1-1: cp210x converter now attached to ttyUSB0 [ 371.312300][ T5888] usb 1-1: USB disconnect, device number 7 [ 371.334615][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 372.228082][ T5888] cp210x 1-1:0.0: device disconnected [ 373.248176][ T7564] loop3: detected capacity change from 0 to 32768 [ 373.255624][ T7564] btrfs: Deprecated parameter 'usebackuproot' [ 373.261799][ T7564] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 373.522243][ T7564] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.407 (7564) [ 374.028879][ T7564] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 374.039175][ T7564] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 374.118345][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.130091][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.140209][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.152356][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.161972][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.358003][ T7564] BTRFS info (device loop3): rebuilding free space tree [ 374.394847][ T7564] BTRFS info (device loop3): disabling free space tree [ 374.401998][ T7564] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 374.413561][ T7564] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 374.453289][ T7591] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 374.461590][ T5838] syz-executor (5838) used greatest stack depth: 19192 bytes left [ 374.670664][ T7564] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.924425][ T7568] chnl_net:caif_netlink_parms(): no params data found [ 376.268277][ T5844] Bluetooth: hci5: command tx timeout [ 378.407468][ T7621] xt_limit: Overflow, try lower: 0/0 [ 378.418956][ T5844] Bluetooth: hci5: command tx timeout [ 379.694089][ T7625] loop1: detected capacity change from 0 to 32768 [ 380.497317][ T5844] Bluetooth: hci5: command tx timeout [ 380.727255][ T5886] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 381.145350][ T7635] loop3: detected capacity change from 0 to 64 [ 381.169648][ T5886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 381.187548][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.211949][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.227365][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.241503][ T5886] usb 2-1: config 0 descriptor?? [ 381.257293][ T7568] bridge_slave_0: entered allmulticast mode [ 381.270317][ T5886] cp210x 2-1:0.0: cp210x converter detected [ 381.279923][ T7568] bridge_slave_0: entered promiscuous mode [ 381.300392][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.317572][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.335398][ T7568] bridge_slave_1: entered allmulticast mode [ 381.358023][ T7568] bridge_slave_1: entered promiscuous mode [ 382.587234][ T5844] Bluetooth: hci5: command tx timeout [ 383.967233][ T5886] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 383.967658][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.974830][ T5886] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 384.001096][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.040209][ T5886] usb 2-1: cp210x converter now attached to ttyUSB0 [ 384.105212][ T5886] usb 2-1: USB disconnect, device number 6 [ 384.178462][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 384.187002][ T5886] cp210x 2-1:0.0: device disconnected [ 384.221776][ T7568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.314254][ T7568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.445785][ T7665] loop3: detected capacity change from 0 to 512 [ 385.474204][ T7665] ext4: Unknown parameter 'defcontext' [ 385.480169][ T7568] team0: Port device team_slave_0 added [ 385.510976][ T7568] team0: Port device team_slave_1 added [ 385.893673][ T7667] loop0: detected capacity change from 0 to 2048 [ 386.152976][ T7671] loop1: detected capacity change from 0 to 32768 [ 386.185726][ T7667] /dev/loop0: Can't open blockdev [ 388.076871][ T7678] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 389.757269][ T976] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 390.939840][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.946881][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.024891][ T7568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.062091][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.321504][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.351109][ T7568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.490045][ T7568] hsr_slave_0: entered promiscuous mode [ 393.513617][ T7698] loop2: detected capacity change from 0 to 64 [ 393.523656][ T7568] hsr_slave_1: entered promiscuous mode [ 393.560882][ T7568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.588676][ T7568] Cannot create hsr debugfs directory [ 396.648253][ T7711] loop3: detected capacity change from 0 to 4096 [ 397.435409][ T7711] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 399.383334][ T7568] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.663048][ T7731] loop0: detected capacity change from 0 to 32768 [ 399.913639][ T7568] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.970147][ T7568] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.979410][ T5889] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 401.043177][ T7568] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 401.202713][ T5889] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 401.284564][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.369317][ T5889] usb 1-1: config 0 descriptor?? [ 401.380235][ T7743] loop1: detected capacity change from 0 to 32768 [ 401.405734][ T5889] cp210x 1-1:0.0: cp210x converter detected [ 401.465835][ T7568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.688242][ T7747] loop3: detected capacity change from 0 to 8 [ 402.736584][ T7568] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.812993][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.820443][ T7561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.905969][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.913222][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.967340][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 403.076667][ T7754] loop2: detected capacity change from 0 to 512 [ 403.130573][ T7754] ext4: Unknown parameter 'defcontext' [ 403.276260][ T7755] loop3: detected capacity change from 0 to 32768 [ 403.569676][ T5889] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 404.219951][ T9] usb 2-1: unable to read config index 0 descriptor/all [ 404.299383][ T5889] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 404.372927][ T5889] usb 1-1: cp210x converter now attached to ttyUSB0 [ 404.382260][ T5889] usb 1-1: USB disconnect, device number 8 [ 404.390847][ T9] usb 2-1: can't read configurations, error -71 [ 404.795734][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.867932][ T5889] cp210x 1-1:0.0: device disconnected [ 405.147792][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 405.253801][ T7568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.309677][ T5890] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 405.335859][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.373836][ T5890] usb 4-1: config 0 descriptor?? [ 405.526170][ T5890] cp210x 4-1:0.0: cp210x converter detected [ 407.533623][ T5890] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 407.633154][ T5890] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 407.645317][ T5890] usb 4-1: cp210x converter now attached to ttyUSB0 [ 407.657838][ T5890] usb 4-1: USB disconnect, device number 6 [ 407.670372][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 407.679794][ T5890] cp210x 4-1:0.0: device disconnected [ 409.161456][ T7568] veth0_vlan: entered promiscuous mode [ 409.180766][ T7568] veth1_vlan: entered promiscuous mode [ 409.360851][ T7568] veth0_macvtap: entered promiscuous mode [ 409.495265][ T7568] veth1_macvtap: entered promiscuous mode [ 409.539178][ T7792] loop0: detected capacity change from 0 to 512 [ 409.546367][ T7792] ext4: Unknown parameter 'defcontext' [ 409.611264][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.635707][ T7790] loop2: detected capacity change from 0 to 4096 [ 409.639781][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.670570][ T7790] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 409.680209][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.711441][ T7795] loop0: detected capacity change from 0 to 256 [ 409.722046][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.741360][ T7795] vfat: Unknown parameter 'tf8' [ 409.761298][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.807175][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.743556][ T7807] loop3: detected capacity change from 0 to 4096 [ 410.786411][ T7807] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 411.006520][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.024617][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.035270][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.053879][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.074524][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.891774][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.925127][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.954149][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.990185][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.000239][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.010766][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.021125][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.042196][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.052180][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.077110][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.103736][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.170127][ T7568] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.201845][ T7568] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.230253][ T7568] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.266046][ T7568] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.667292][ T7831] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[7831] [ 415.733421][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.799612][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.395276][ T7833] loop2: detected capacity change from 0 to 32768 [ 416.403596][ T7833] btrfs: Deprecated parameter 'usebackuproot' [ 416.409800][ T7833] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 416.436756][ T7833] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.468 (7833) [ 416.457413][ T7833] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 416.468076][ T7833] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 416.469165][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.572452][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.810974][ T7843] loop1: detected capacity change from 0 to 32768 [ 416.851321][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 416.898109][ T7833] BTRFS info (device loop2): rebuilding free space tree [ 416.957414][ T7833] BTRFS info (device loop2): disabling free space tree [ 416.964402][ T7833] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 416.974193][ T7833] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 417.000223][ T7833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 418.262467][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 418.770875][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 418.885945][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.408403][ T24] usb 2-1: config 0 descriptor?? [ 419.469018][ T24] cp210x 2-1:0.0: cp210x converter detected [ 419.594784][ T24] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 419.759835][ T24] cp210x 2-1:0.0: querying part number failed [ 420.912904][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 420.952795][ T24] usb 2-1: USB disconnect, device number 10 [ 420.994260][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 421.082432][ T24] cp210x 2-1:0.0: device disconnected [ 421.106493][ T7881] loop0: detected capacity change from 0 to 8 [ 423.503148][ T7903] loop3: detected capacity change from 0 to 2048 [ 423.578105][ T7903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.688539][ T7903] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.327982][ T7915] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 428.367185][ T7907] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 428.550404][ T7907] EXT4-fs (loop3): Remounting filesystem read-only [ 428.590086][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.966652][ T7917] loop2: detected capacity change from 0 to 32768 [ 429.322469][ T7923] input: syz0 as /devices/virtual/input/input14 [ 431.410450][ T5888] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 432.666166][ T7938] loop5: detected capacity change from 0 to 1024 [ 432.702053][ T7938] hfsplus: Unknown parameter 'f>Cce' [ 433.401901][ T7952] loop1: detected capacity change from 0 to 8 [ 434.985429][ T7961] loop5: detected capacity change from 0 to 128 [ 435.426292][ T7962] loop2: detected capacity change from 0 to 512 [ 435.842415][ T7961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.919552][ T7963] bio_check_eod: 102 callbacks suppressed [ 435.919576][ T7963] syz.5.497: attempt to access beyond end of device [ 435.919576][ T7963] loop5: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 435.939536][ T7963] syz.5.497: attempt to access beyond end of device [ 435.939536][ T7963] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 435.965269][ T7962] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 436.010643][ T7963] syz.5.497: attempt to access beyond end of device [ 436.010643][ T7963] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 436.024837][ T7963] syz.5.497: attempt to access beyond end of device [ 436.024837][ T7963] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 436.038499][ T7963] syz.5.497: attempt to access beyond end of device [ 436.038499][ T7963] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 436.079619][ T7963] syz.5.497: attempt to access beyond end of device [ 436.079619][ T7963] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 436.259770][ T7963] syz.5.497: attempt to access beyond end of device [ 436.259770][ T7963] loop5: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 436.274226][ T7963] syz.5.497: attempt to access beyond end of device [ 436.274226][ T7963] loop5: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 436.483073][ T7963] syz.5.497: attempt to access beyond end of device [ 436.483073][ T7963] loop5: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 436.499268][ T7963] syz.5.497: attempt to access beyond end of device [ 436.499268][ T7963] loop5: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 436.805598][ T7975] input: syz0 as /devices/virtual/input/input15 [ 437.340877][ T7979] loop3: detected capacity change from 0 to 8 [ 437.930132][ T7988] input: syz0 as /devices/virtual/input/input16 [ 439.514874][ T7993] libceph: resolve '0.0' (ret=-3): failed [ 440.034440][ T7998] netlink: 'syz.2.506': attribute type 4 has an invalid length. [ 443.646575][ T8022] loop2: detected capacity change from 0 to 2048 [ 443.737953][ T8022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.817256][ T8022] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.996520][ T8032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.954141][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.379580][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.424082][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.634626][ T8032] loop0: detected capacity change from 0 to 4096 [ 445.643718][ T8032] ntfs3: Unknown parameter 'H' [ 445.696515][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 446.556088][ T8057] input: syz0 as /devices/virtual/input/input17 [ 448.461758][ T8064] libceph: resolve '0.0' (ret=-3): failed [ 451.329588][ T8080] input: syz0 as /devices/virtual/input/input18 [ 454.689442][ T8094] xt_limit: Overflow, try lower: 0/0 [ 456.264123][ T8109] ptrace attach of "./syz-executor exec"[7568] was attempted by "./syz-executor exec"[8109] [ 457.932339][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.531'. [ 458.094283][ T8120] loop3: detected capacity change from 0 to 512 [ 458.145774][ T8120] ext4: Unknown parameter 'defcontext' [ 458.340551][ T8125] loop3: detected capacity change from 0 to 256 [ 458.448185][ T8125] vfat: Unknown parameter 'tf8' [ 463.296092][ T8281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.357123][ T3582] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 464.685135][ T8302] vlan3: entered promiscuous mode [ 464.690381][ T8302] vlan2: entered promiscuous mode [ 464.695441][ T8302] gretap0: entered promiscuous mode [ 464.810798][ T8304] 9pnet_fd: Insufficient options for proto=fd [ 464.863791][ T3582] usb 4-1: Using ep0 maxpacket: 8 [ 465.070445][ T3582] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.217714][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 465.362426][ T3582] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.401660][ T3582] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.468767][ T3582] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.542524][ T3582] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.567118][ T3582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.898736][ T3582] usb 4-1: GET_CAPABILITIES returned 0 [ 465.931873][ T3582] usbtmc 4-1:16.0: can't read capabilities [ 466.250573][ T3582] usb 4-1: USB disconnect, device number 7 [ 466.270744][ T8311] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 466.324242][ T8311] overlayfs: failed to set xattr on upper [ 466.344776][ T8311] overlayfs: ...falling back to redirect_dir=nofollow. [ 466.378830][ T8311] overlayfs: ...falling back to index=off. [ 466.395090][ T8311] overlayfs: ...falling back to uuid=null. [ 470.061544][ T8354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.636'. [ 472.074892][ T8373] ubi31: attaching mtd0 [ 472.111963][ T8373] ubi31: scanning is finished [ 472.133017][ T8373] ubi31: empty MTD device detected [ 472.272835][ T8382] atomic_op ffff8880327a5198 conn xmit_atomic 0000000000000000 [ 472.396416][ T8384] netlink: 173 bytes leftover after parsing attributes in process `syz.0.644'. [ 474.735887][ T8373] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 476.277660][ T8412] netlink: 80 bytes leftover after parsing attributes in process `syz.1.652'. [ 476.302275][ T8412] netlink: 80 bytes leftover after parsing attributes in process `syz.1.652'. [ 477.338215][ T8422] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 477.345941][ T8422] netlink: 216 bytes leftover after parsing attributes in process `syz.1.656'. [ 478.794378][ T976] IPVS: starting estimator thread 0... [ 478.892573][ T8443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.933080][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 478.947401][ T8442] IPVS: using max 28 ests per chain, 67200 per kthread [ 479.387140][ T976] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 479.603248][ T976] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.611908][ T976] usb 4-1: config 0 has no interface number 0 [ 479.805832][ T976] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 479.846283][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.910016][ T976] usb 4-1: config 0 descriptor?? [ 480.985279][ T976] usb 4-1: selecting invalid altsetting 1 [ 481.058299][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 481.169328][ T8464] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 481.242865][ T8464] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 481.785120][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.667'. [ 481.830162][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 481.960174][ T976] DVB: Unable to find symbol cx22700_attach() [ 482.097964][ T8472] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 482.191180][ T54] Bluetooth: hci0: Frame reassembly failed (-84) [ 483.211552][ T976] DVB: Unable to find symbol tda10046_attach() [ 483.287800][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 483.692368][ T976] usb 4-1: USB disconnect, device number 8 [ 484.414943][ T5152] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 498.500748][ T5152] Bluetooth: hci5: command 0x0406 tx timeout [ 499.368846][ T8488] syz.0.673 (8488): drop_caches: 1 [ 500.537124][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 500.669569][ T8571] libceph: resolve '0' (ret=-3): failed [ 500.837531][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.373658][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.431721][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 501.937039][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.958140][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.006018][ T8580] ALSA: mixer_oss: invalid OSS volume 'P}VIN' [ 502.012486][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.037350][ T8580] ALSA: mixer_oss: invalid OSS volume 'X#*N߈l͏Я u\Qa{k' [ 502.050134][ T9] usb 3-1: config 0 descriptor?? [ 503.361191][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 503.719077][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.780825][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.790974][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.807750][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.816162][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 503.915528][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 504.217296][ T8599] netlink: 92 bytes leftover after parsing attributes in process `syz.1.707'. [ 504.872624][ T9] usb 3-1: USB disconnect, device number 6 [ 505.858470][ T5152] Bluetooth: hci0: command tx timeout [ 506.248060][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 506.457656][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.715'. [ 506.599828][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 506.628669][ T8630] program syz.1.714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.677906][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.686215][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.753024][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 506.893149][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.024004][ T9] usb 3-1: Product: syz [ 507.077300][ T9] usb 3-1: Manufacturer: syz [ 507.145226][ T9] usb 3-1: SerialNumber: syz [ 507.223871][ T9] usb 3-1: config 0 descriptor?? [ 507.269162][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 507.291675][ T9] usb 3-1: setting power ON [ 507.306556][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 507.456651][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.497796][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 507.525457][ T8609] dvb-usb: bulk message failed: -22 (3/0) [ 507.533227][ T9] usb 3-1: media controller created [ 507.599632][ T8609] usb 3-1: gpio_write failed. [ 507.605457][ T8609] dvb-usb: bulk message failed: -22 (6/0) [ 507.645607][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.651287][ T8586] chnl_net:caif_netlink_parms(): no params data found [ 507.669713][ T8640] dvb-usb: bulk message failed: -22 (4/0) [ 507.684031][ T8639] fuse: blksize only supported for fuseblk [ 507.707340][ T8640] cxusb: i2c read failed [ 507.741166][ T9] usb 3-1: selecting invalid altsetting 6 [ 507.768781][ T9] usb 3-1: digital interface selection failed (-22) [ 507.807519][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 507.848609][ T9] usb 3-1: setting power OFF [ 507.853626][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 507.877462][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 507.887050][ T9] (NULL device *): no alternate interface [ 507.939967][ T5152] Bluetooth: hci0: command tx timeout [ 507.973950][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 508.005448][ T9] usb 3-1: USB disconnect, device number 7 [ 508.283272][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.297273][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.327567][ T8586] bridge_slave_0: entered allmulticast mode [ 508.362782][ T8586] bridge_slave_0: entered promiscuous mode [ 508.407533][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.414740][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.488030][ T8586] bridge_slave_1: entered allmulticast mode [ 508.508191][ T8586] bridge_slave_1: entered promiscuous mode [ 509.581609][ T8680] virtio-fs: tag <(null)> not found [ 509.607694][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 509.945341][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.987467][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.673050][ T5152] Bluetooth: hci0: command tx timeout [ 511.064853][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.082318][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.096207][ T9] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 511.127385][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.146867][ T9] usb 3-1: config 0 descriptor?? [ 511.190126][ T5152] Bluetooth: Wrong link type (-22) [ 511.295058][ T8586] team0: Port device team_slave_0 added [ 511.435457][ T8586] team0: Port device team_slave_1 added [ 511.734422][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 511.918959][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.934189][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.966528][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.018046][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.038814][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.146788][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.550879][ T8586] hsr_slave_0: entered promiscuous mode [ 512.574073][ T8586] hsr_slave_1: entered promiscuous mode [ 512.596762][ T8586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.621244][ T8586] Cannot create hsr debugfs directory [ 512.766882][ T5152] Bluetooth: hci0: command tx timeout [ 513.715677][ T8671] sctp: failed to load transform for md5: -2 [ 514.197393][ T5918] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 514.367405][ T5886] usb 3-1: USB disconnect, device number 8 [ 514.487885][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 514.495483][ T5918] usb 2-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 514.527324][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.554840][ T8725] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 514.573956][ T5918] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 514.603125][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.639851][ T5918] usb 2-1: config 0 descriptor?? [ 514.669692][ T5918] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 515.791453][ T8586] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 516.491110][ T8586] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 516.640940][ T8586] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 516.665029][ T8586] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 516.799696][ T24] usb 2-1: USB disconnect, device number 11 [ 518.341819][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.425882][ T8586] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.513583][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.520832][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.567097][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.574358][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.691432][ T8779] netlink: 14144 bytes leftover after parsing attributes in process `syz.1.759'. [ 521.370893][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.762'. [ 524.818121][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.831498][ T8586] veth0_vlan: entered promiscuous mode [ 525.978710][ T8586] veth1_vlan: entered promiscuous mode [ 526.047796][ T8586] veth0_macvtap: entered promiscuous mode [ 526.089909][ T8586] veth1_macvtap: entered promiscuous mode [ 526.145305][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.206225][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.269237][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.316420][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.327804][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.338692][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.349293][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.364283][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.722948][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.000222][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.031215][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.063541][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.117365][ T5933] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 527.162468][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.385033][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.396608][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 527.461461][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.492733][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.523374][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 527.535153][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.547266][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 527.571310][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.585458][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 527.597174][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.609831][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.622915][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.637255][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.648539][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.661757][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.662074][ T5933] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 527.690414][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.702967][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.727035][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.743506][ T5933] usb 3-1: Product: syz [ 527.757381][ T5933] usb 3-1: Manufacturer: syz [ 527.762489][ T5933] usb 3-1: SerialNumber: syz [ 527.774570][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.821712][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.854071][ T5933] usb 3-1: config 0 descriptor?? [ 527.908117][ T5933] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 528.124608][ T8586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.135844][ T5933] usb 3-1: USB disconnect, device number 9 [ 529.344062][ T8853] tty tty27: ldisc open failed (-12), clearing slot 26 [ 529.360054][ T8586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.624563][ T8586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.677235][ T8586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.443518][ T30] audit: type=1326 audit(1743915269.128:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.2.782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x0 [ 530.847919][ T7561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.855812][ T7561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.029457][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.103846][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.970556][ T8896] netlink: 452 bytes leftover after parsing attributes in process `syz.6.790'. [ 535.296400][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 536.952586][ T8930] @: renamed from vlan0 (while UP) [ 537.929465][ T8939] netlink: 'syz.5.803': attribute type 4 has an invalid length. [ 540.242789][ T8953] syzkaller1: entered promiscuous mode [ 540.242817][ T8953] syzkaller1: entered allmulticast mode [ 540.470009][ T8956] netlink: 277 bytes leftover after parsing attributes in process `syz.5.809'. [ 541.171297][ T8970] netlink: 'syz.5.814': attribute type 10 has an invalid length. [ 541.276787][ T8971] netlink: 'syz.1.815': attribute type 4 has an invalid length. [ 541.359330][ T8973] netlink: 'syz.2.816': attribute type 10 has an invalid length. [ 541.518496][ T8970] team0: Device veth1_macvtap failed to register rx_handler [ 542.072224][ T8973] team0: Device veth1_macvtap failed to register rx_handler [ 542.121995][ T8970] syz.5.814 (8970) used greatest stack depth: 18696 bytes left [ 542.446261][ T8982] netlink: 'syz.1.819': attribute type 4 has an invalid length. [ 542.471305][ T5886] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 543.174976][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 543.202326][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.223736][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.299000][ T5886] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 543.326225][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.376436][ T5886] usb 7-1: config 0 descriptor?? [ 544.097682][ T5886] steelseries 0003:1038:1410.0002: item fetching failed at offset 0/2 [ 544.147869][ T5886] steelseries 0003:1038:1410.0002: parse failed [ 544.179287][ T5886] steelseries 0003:1038:1410.0002: probe with driver steelseries failed with error -22 [ 544.287714][ T976] usb 7-1: USB disconnect, device number 2 [ 545.554296][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 545.606105][ T9011] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 546.018723][ T9015] overlayfs: conflicting lowerdir path [ 546.140363][ T5889] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 546.150798][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.159750][ T5889] usb 7-1: Product: syz [ 546.164785][ T5889] usb 7-1: Manufacturer: syz [ 546.170919][ T5889] usb 7-1: SerialNumber: syz [ 546.506659][ T5889] usb 7-1: config 0 descriptor?? [ 546.617772][ T5889] comedi comedi0: Wrong number of endpoints [ 546.857014][ T5889] dt9812 7-1:0.0: driver 'dt9812' failed to auto-configure device. [ 547.238969][ T5889] usb 7-1: USB disconnect, device number 3 [ 548.365602][ T9035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.467302][ T5889] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 549.898703][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 549.905249][ T5152] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 549.922029][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.933369][ T5889] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 549.944838][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.957922][ T5889] usb 7-1: config 0 descriptor?? [ 551.051878][ T9059] netlink: 173 bytes leftover after parsing attributes in process `syz.1.844'. [ 551.095073][ T5889] nintendo 0003:057E:2019.0003: hidraw0: USB HID v80.03 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 551.178265][ T5889] nintendo 0003:057E:2019.0003: Failed to get joycon info; ret=-38 [ 551.189384][ T5889] nintendo 0003:057E:2019.0003: Failed to retrieve controller info; ret=-38 [ 551.201193][ T5889] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-38 [ 551.268878][ T5889] nintendo 0003:057E:2019.0003: probe - fail = -38 [ 551.275615][ T5889] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -38 [ 551.371222][ T5889] usb 7-1: USB disconnect, device number 4 [ 552.518948][ T9075] wg1: entered promiscuous mode [ 552.524067][ T9075] wg1: entered allmulticast mode [ 553.943710][ T5152] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 553.952544][ T5152] Bluetooth: hci4: Injecting HCI hardware error event [ 553.962091][ T5152] Bluetooth: hci4: hardware error 0x00 [ 554.839564][ T9097] pimreg: entered allmulticast mode [ 555.897084][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 555.909927][ T9104] netlink: 173 bytes leftover after parsing attributes in process `syz.3.859'. [ 556.007052][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 556.098653][ T5152] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 556.167118][ T5888] usb 2-1: device descriptor read/64, error -71 [ 556.227668][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 556.234760][ T5918] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 556.244837][ T5918] usb 6-1: config 0 has no interface number 0 [ 556.251786][ T5918] usb 6-1: config 0 interface 196 has no altsetting 0 [ 556.274797][ T5918] usb 6-1: New USB device found, idVendor=04cb, idProduct=0115, bcdDevice=56.6c [ 556.304452][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.342495][ T5918] usb 6-1: Product: syz [ 556.375510][ T5918] usb 6-1: Manufacturer: syz [ 556.397546][ T5918] usb 6-1: SerialNumber: syz [ 556.433535][ T5918] usb 6-1: config 0 descriptor?? [ 556.438775][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 556.648957][ T5918] gspca_main: finepix-2.14.0 probing 04cb:0115 [ 557.616292][ T976] usb 6-1: USB disconnect, device number 2 [ 557.654198][ T5888] usb 2-1: device descriptor read/64, error -71 [ 557.791854][ T5888] usb usb2-port1: attempt power cycle [ 558.127085][ T5886] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 558.167150][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 558.329203][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.353890][ T5886] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 558.448832][ T9137] netlink: 'syz.2.868': attribute type 4 has an invalid length. [ 558.953342][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.006782][ T5886] usb 7-1: config 0 descriptor?? [ 559.055361][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 559.265419][ T5888] usb 2-1: device descriptor read/8, error -71 [ 559.467138][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 559.500584][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 559.520351][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 559.537533][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 559.562386][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 559.794129][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 559.842125][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 560.431166][ T5886] pwc: recv_control_msg error -32 req 02 val 2100 [ 560.598853][ T5886] pwc: recv_control_msg error -32 req 04 val 1500 [ 560.635930][ T5886] pwc: recv_control_msg error -32 req 02 val 2500 [ 560.740648][ T5886] pwc: recv_control_msg error -32 req 02 val 2400 [ 561.177118][ T5886] pwc: recv_control_msg error -32 req 02 val 2600 [ 561.361619][ T5886] pwc: recv_control_msg error -32 req 02 val 2900 [ 562.368165][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 562.408252][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 562.444149][ T5886] pwc: Registered as video103. [ 562.461747][ T9181] overlayfs: failed to resolve './file1': -2 [ 562.478806][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 562.514888][ T5886] usb 7-1: USB disconnect, device number 5 [ 562.678580][ T9178] input: syz1 as /devices/virtual/input/input23 [ 562.912935][ T9189] netlink: 'syz.6.882': attribute type 4 has an invalid length. [ 562.939990][ T9185] netlink: 'syz.1.881': attribute type 13 has an invalid length. [ 562.960198][ T9185] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.881'. [ 565.158146][ T9221] netlink: 'syz.6.894': attribute type 4 has an invalid length. [ 565.207156][ T976] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 566.217201][ T976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.233786][ T976] usb 3-1: config 0 has no interface number 0 [ 566.249023][ T976] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 566.259078][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.452240][ T976] usb 3-1: config 0 descriptor?? [ 567.196672][ T976] usb 3-1: selecting invalid altsetting 1 [ 567.206647][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 567.214655][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 567.557848][ T976] DVB: Unable to find symbol cx22700_attach() [ 567.834876][ T976] DVB: Unable to find symbol tda10046_attach() [ 567.867548][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 567.893138][ T976] usb 3-1: USB disconnect, device number 10 [ 568.107656][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.117385][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.433474][ T5918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 569.637181][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 569.667241][ T5918] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 569.703825][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.724253][ T9261] netlink: 'syz.6.905': attribute type 4 has an invalid length. [ 569.734444][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 569.756263][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 569.781479][ T5918] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.841336][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 569.852151][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.556224][ T5918] usb 6-1: usb_control_msg returned -32 [ 570.571024][ T5918] usbtmc 6-1:16.0: can't read capabilities [ 571.020210][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.083517][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.563440][ T5933] usb 6-1: USB disconnect, device number 3 [ 571.675511][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 571.803614][ T9289] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 571.873673][ T9288] IPVS: stopping master sync thread 9289 ... [ 572.339478][ T9298] netlink: 'syz.2.918': attribute type 4 has an invalid length. [ 575.625932][ T9325] netlink: 161716 bytes leftover after parsing attributes in process `syz.6.926'. [ 575.688884][ T9325] netlink: zone id is out of range [ 575.726432][ T9325] netlink: zone id is out of range [ 575.765223][ T9325] netlink: zone id is out of range [ 575.793175][ T9325] netlink: zone id is out of range [ 575.798663][ T9325] netlink: zone id is out of range [ 575.803931][ T9325] netlink: zone id is out of range [ 575.809247][ T9325] netlink: zone id is out of range [ 575.814460][ T9325] netlink: zone id is out of range [ 575.828229][ T9325] netlink: zone id is out of range [ 575.833435][ T9325] netlink: zone id is out of range [ 580.200565][ T9373] netlink: 'syz.6.942': attribute type 10 has an invalid length. [ 580.347084][ T5933] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 580.529484][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 580.899340][ T9373] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 581.683638][ T9381] netlink: 452 bytes leftover after parsing attributes in process `syz.6.943'. [ 582.565464][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 584.329137][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.6.948'. [ 584.496088][ T5933] usb 2-1: unable to get BOS descriptor or descriptor too short [ 584.505095][ T5933] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 584.535746][ T5933] usb 2-1: can't read configurations, error -71 [ 585.226748][ T9419] netlink: 452 bytes leftover after parsing attributes in process `syz.1.955'. [ 585.978981][ T9414] ------------[ cut here ]------------ [ 585.984673][ T9414] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait_event+0x3ac/0x460 [ 585.997210][ T9414] WARNING: CPU: 1 PID: 9414 at kernel/sched/core.c:8745 __might_sleep+0xb9/0xe0 [ 586.006292][ T9414] Modules linked in: [ 586.010606][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.2.951 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 586.022908][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 586.033090][ T9414] RIP: 0010:__might_sleep+0xb9/0xe0 [ 586.038395][ T9414] Code: b7 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 3e 13 9b 00 48 8b 4d 00 48 c7 c7 e0 33 4a 8c 44 89 ee 48 89 ca e8 18 11 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 586.059170][ T9414] RSP: 0018:ffffc9000449f988 EFLAGS: 00010246 [ 586.066692][ T9414] RAX: f586a12113af8000 RBX: 1ffff110040fd6b1 RCX: 0000000000080000 [ 586.074783][ T9414] RDX: ffffc9000ea20000 RSI: 0000000000016e98 RDI: 0000000000016e99 [ 586.083019][ T9414] RBP: ffff8880207eb588 R08: ffffffff81828012 R09: fffffbfff1d7a980 [ 586.091080][ T9414] R10: dffffc0000000000 R11: fffffbfff1d7a980 R12: dffffc0000000000 [ 586.099291][ T9414] R13: 0000000000000001 R14: 0000000000000242 R15: ffffffff8c4ad740 [ 586.107333][ T9414] FS: 00007fb9d45d56c0(0000) GS:ffff88812508f000(0000) knlGS:0000000000000000 [ 586.116295][ T9414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.123074][ T9414] CR2: 00007f297a777d38 CR3: 000000006d1aa000 CR4: 00000000003526f0 [ 586.131131][ T9414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 586.139347][ T9414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 586.148304][ T9414] Call Trace: [ 586.151628][ T9414] [ 586.154589][ T9414] __mutex_lock+0x12c/0x10c0 [ 586.159348][ T9414] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 586.165296][ T9414] ? __ceph_open_session+0x471/0xa30 [ 586.172044][ T9414] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 586.178041][ T9414] ? __pfx___mutex_lock+0x10/0x10 [ 586.183154][ T9414] ? __up_read+0x2c4/0x6b0 [ 586.187673][ T9414] ? prepare_to_wait_event+0x3ac/0x460 [ 586.193168][ T9414] ? prepare_to_wait_event+0x40c/0x460 [ 586.198716][ T9414] __ceph_open_session+0x471/0xa30 [ 586.204047][ T9414] ? bdi_register_va+0x593/0x770 [ 586.209100][ T9414] ? __pfx___ceph_open_session+0x10/0x10 [ 586.214864][ T9414] ? __pfx_autoremove_wake_function+0x10/0x10 [ 586.221158][ T9414] ? shrinker_register+0x160/0x230 [ 586.226366][ T9414] ceph_get_tree+0xac4/0x17b0 [ 586.231215][ T9414] vfs_get_tree+0x90/0x2b0 [ 586.235765][ T9414] vfs_cmd_create+0xa0/0x1f0 [ 586.240525][ T9414] ? __se_sys_fsconfig+0xa14/0xf40 [ 586.246601][ T9414] __se_sys_fsconfig+0xa20/0xf40 [ 586.251632][ T9414] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 586.257199][ T9414] ? __x64_sys_fsconfig+0x20/0xc0 [ 586.262365][ T9414] do_syscall_64+0xf3/0x230 [ 586.266917][ T9414] ? clear_bhb_loop+0x45/0xa0 [ 586.273041][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.279053][ T9414] RIP: 0033:0x7fb9d678d169 [ 586.283515][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.303233][ T9414] RSP: 002b:00007fb9d45d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 586.311726][ T9414] RAX: ffffffffffffffda RBX: 00007fb9d69a6160 RCX: 00007fb9d678d169 [ 586.319787][ T9414] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 586.327821][ T9414] RBP: 00007fb9d680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 586.335824][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.343909][ T9414] R13: 0000000000000000 R14: 00007fb9d69a6160 R15: 00007ffd9fd6fe88 [ 586.352885][ T9414] [ 586.355956][ T9414] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 586.363281][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.2.951 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 586.374340][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 586.384431][ T9414] Call Trace: [ 586.387740][ T9414] [ 586.390698][ T9414] dump_stack_lvl+0x241/0x360 [ 586.395425][ T9414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.400665][ T9414] ? __pfx__printk+0x10/0x10 [ 586.405302][ T9414] ? vscnprintf+0x5d/0x90 [ 586.409666][ T9414] panic+0x349/0x880 [ 586.413607][ T9414] ? __warn+0x174/0x4d0 [ 586.417800][ T9414] ? __pfx_panic+0x10/0x10 [ 586.422276][ T9414] __warn+0x344/0x4d0 [ 586.426298][ T9414] ? __might_sleep+0xb9/0xe0 [ 586.430937][ T9414] report_bug+0x2b3/0x500 [ 586.435300][ T9414] ? __might_sleep+0xb9/0xe0 [ 586.439934][ T9414] ? __might_sleep+0xb9/0xe0 [ 586.444571][ T9414] ? __might_sleep+0xbb/0xe0 [ 586.449221][ T9414] handle_bug+0x89/0x170 [ 586.453607][ T9414] exc_invalid_op+0x1a/0x50 [ 586.458421][ T9414] asm_exc_invalid_op+0x1a/0x20 [ 586.463303][ T9414] RIP: 0010:__might_sleep+0xb9/0xe0 [ 586.468544][ T9414] Code: b7 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 3e 13 9b 00 48 8b 4d 00 48 c7 c7 e0 33 4a 8c 44 89 ee 48 89 ca e8 18 11 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 586.488508][ T9414] RSP: 0018:ffffc9000449f988 EFLAGS: 00010246 [ 586.495251][ T9414] RAX: f586a12113af8000 RBX: 1ffff110040fd6b1 RCX: 0000000000080000 [ 586.503352][ T9414] RDX: ffffc9000ea20000 RSI: 0000000000016e98 RDI: 0000000000016e99 [ 586.511529][ T9414] RBP: ffff8880207eb588 R08: ffffffff81828012 R09: fffffbfff1d7a980 [ 586.519530][ T9414] R10: dffffc0000000000 R11: fffffbfff1d7a980 R12: dffffc0000000000 [ 586.527529][ T9414] R13: 0000000000000001 R14: 0000000000000242 R15: ffffffff8c4ad740 [ 586.535543][ T9414] ? __warn_printk+0x2a2/0x360 [ 586.540379][ T9414] ? __might_sleep+0xb8/0xe0 [ 586.545015][ T9414] __mutex_lock+0x12c/0x10c0 [ 586.549653][ T9414] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 586.555840][ T9414] ? __ceph_open_session+0x471/0xa30 [ 586.561160][ T9414] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 586.567198][ T9414] ? __pfx___mutex_lock+0x10/0x10 [ 586.572273][ T9414] ? __up_read+0x2c4/0x6b0 [ 586.576735][ T9414] ? prepare_to_wait_event+0x3ac/0x460 [ 586.582239][ T9414] ? prepare_to_wait_event+0x40c/0x460 [ 586.587748][ T9414] __ceph_open_session+0x471/0xa30 [ 586.592987][ T9414] ? bdi_register_va+0x593/0x770 [ 586.597979][ T9414] ? __pfx___ceph_open_session+0x10/0x10 [ 586.603654][ T9414] ? __pfx_autoremove_wake_function+0x10/0x10 [ 586.609772][ T9414] ? shrinker_register+0x160/0x230 [ 586.614924][ T9414] ceph_get_tree+0xac4/0x17b0 [ 586.619642][ T9414] vfs_get_tree+0x90/0x2b0 [ 586.624096][ T9414] vfs_cmd_create+0xa0/0x1f0 [ 586.628719][ T9414] ? __se_sys_fsconfig+0xa14/0xf40 [ 586.633871][ T9414] __se_sys_fsconfig+0xa20/0xf40 [ 586.638856][ T9414] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 586.644359][ T9414] ? __x64_sys_fsconfig+0x20/0xc0 [ 586.649428][ T9414] do_syscall_64+0xf3/0x230 [ 586.653969][ T9414] ? clear_bhb_loop+0x45/0xa0 [ 586.658678][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.664597][ T9414] RIP: 0033:0x7fb9d678d169 [ 586.669040][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.689031][ T9414] RSP: 002b:00007fb9d45d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 586.697492][ T9414] RAX: ffffffffffffffda RBX: 00007fb9d69a6160 RCX: 00007fb9d678d169 [ 586.705517][ T9414] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 586.713617][ T9414] RBP: 00007fb9d680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 586.721631][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.729640][ T9414] R13: 0000000000000000 R14: 00007fb9d69a6160 R15: 00007ffd9fd6fe88 [ 586.737865][ T9414] [ 586.741325][ T9414] Kernel Offset: disabled [ 586.745661][ T9414] Rebooting in 86400 seconds..