last executing test programs: 10.226850852s ago: executing program 0 (id=4382): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 9.987287862s ago: executing program 0 (id=4383): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000340)=0x100, 0x4) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x180000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) socket$kcm(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x83, 0x0, &(0x7f0000001080)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(r2, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x40045010, &(0x7f0000000140)) 8.414005081s ago: executing program 4 (id=4388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2105000000b800000000010000000000000002"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x211b42, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 8.205589818s ago: executing program 0 (id=4389): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 8.17185047s ago: executing program 0 (id=4390): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x6}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x48}}, 0x4044000) 7.407345383s ago: executing program 4 (id=4392): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@minixdf}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="006bff962943882c43a0e6e8a5b3b857261712d82ab5e72b6966c7d77ef626b80fdf55e535523e58c44d3adb4835ce631e9a0d63828c7123909c65a424c36bfeefb29f111eb2d638a2bffe23c723f1d095c044c75eb997225d41baebabe905aec4b577a7ab3e5b2cc3d2628bbc2e0e66b2196d2cd30707cc9f69095c8261594a264f8ba45bab0afb57e3e37a6e916b58cca87e767841f1ca"], 0x1, 0xa22, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x80086c42, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x33f}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x538, &(0x7f0000000fc0)="$eJzs3c9vHFcdAPDvjH82desEeoAKSIBCQFHW8aaNql7aXECoqoSoOCAOrbE3lsluNmTXpTaRcP8GkKjECf4EDkgckHriwI0jEkIIqRyQAligBAmkRTM7drbxLl7q3Z3g/Xyk0cybZ8/3+7KZfTNvknkBTK0LEbEXEfMR8WZELBf7k2KJV7pL9nP39++uP9i/u55Ep/P6X5O8PtsXPb+TebI45mJEfO3LEd9KjsZt7ezeXKvXa3eK8kq7cXultbN7eauxtlnbrN2qVq+tXrvy4tUXqiNr6/nGz+59aevVr//yF598/zd7X/xeltZSUdfbjlHqNn3uME5mNiJeHUewEswU6/mS8+DDSSPiIxHxmfz8X46Z/G8nAHCadTrL0VnuLQMAp12aj4ElaaUYC1iKNK1UumN4z8SZtN5stS/daG7f2uiOlZ2NufTGVr125dzC776TXzHMJVl5Na/L6/Ny9ZHy1Yg4FxE/XHgiL1fWm/WN8i57AGCqPflI//+PhW7/P4Q+T/UAgP8bi2UnAABMnP4fAKaP/h8Aps8Q/X/xsH9v7LkAAJPh/h8Apo/+HwCmj/4fAKbKV197LVs6D4r3X2+8tbN9s/nW5Y1a62alsb1eWW/euV3ZbDY383f2NI47Xr3ZvL36fGy/vdKutdorrZ3dNxrN7VvtN/L3ervQAIDHwbnz7/02iYi9l57Il+iZy2Gu1MyAcUvLTgAozUzZCQClMdsXTK/h7/F/PdY8gPL0fZn3Yt/ND3r3fwji8R88Vi5+fPjxf3M8w+mSj/+/+/uy0wBK8OHG/18eeR7A5Bn/h+nV6SSPzvk/f1gFAJxKJ/g3/p3vj+oiBCjVcZN5j+T5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwySxHx7UjSSjEX+FKkaaUS8VREnI255MZWvXYlIp6O8xExt5CVV8tOGgA4ofTPSTH/18Xl55YerZ1P/rmQryPiuz9+/Udvr7Xbd1az/X873L9wMH1Y9eHvDZpXcH9+TM0AAAbK++9qse65kb+/f3f9YJlkPveux7+LqYjXH+zfzZduzWzM5uvF/FrizN+Totydi/TZiJgZQfy9dyLiY/3an+RjI2eLmU9740cR+6mJxk8/ED/N67rr7OLroyPIBabNe9cj4pV+518aF/J1//N/Mf+GOrl717sHO/jue9AT/+D7b6ZP/OycvzBsjOd/9ZUjOzvL3bp3Ip6d7Rc/OYyfDIj/3JDx//CJT/3g5QF1nZ9EXIz+8XtjrbQbt1daO7uXtxprm7XN2q1q9drqtSsvXn2hupKPUa8cjFQf9ZeXLj09KLes/WcGxF/s2/6HN7CfG7L9P/3Xm9/89H+J/4XP9v/8n+kbvyvrEz8/ZPy1Mz8fOH13Fn9jQPuP+/wvDRn//T/tbgz5owDABLR2dm+u1eu1OyfayO5CR3GcIxtZiiM94DEbf4zJxTp2Y25cf6pj35g9vFYc7ZG/kR1xws1JR96KE23cn1Sscr+XgPF7eNKXnQkAAAAAAAAAAAAAADDIJP7rUtltBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PT6TwAAAP//s5rOOQ==") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000280)='+', 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8937, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000027000100000000000000000001"], 0x50}}, 0x0) sync() execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 7.291460223s ago: executing program 0 (id=4394): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SOUND_MIXER_INFO(r0, 0x400448c9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00ad4da59bd78a248060eb7e05f7e56b446305d49c3e5d3120577c4e2b73c6db3384cc496525aa5a1e3f87e283e57448d56ced36ed336d8f77b350d227"], 0x1, 0x1ce, &(0x7f00000002c0)="$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") r6 = creat(&(0x7f0000000900)='./file0/file0\x00', 0x0) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000940)="bf", 0xfdef}], 0x2, 0x5000000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r10 = socket(0x9, 0x6, 0x3) bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r9, 0x3}, 0x5a) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x6}, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xfffffffffffffeb5, 0xa, '@\x00\x00\x97j\xd3?\xee\xe1&F\x94\xf9\xce\xff\x88\xdfY\xea\x05\xce\x01\"\xcf|\x00\x00_~'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc4c85512, 0x0) 7.166264943s ago: executing program 2 (id=4395): io_uring_setup(0x257c, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_mreq(r5, 0x11a, 0x3, 0x0, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x5}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x30}}, 0x0) 5.963568231s ago: executing program 2 (id=4399): r0 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='{g\xd6\xd9\xdf\x00', &(0x7f0000000100)='c:::\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000005c0)='\x00\x00\x00\x00\x002\xc4d\x8c/\xfcs\xae.\x88\xa3\x9b\xa4\x99\x1a#\x1c\x8e\x92\x91\bO\r\x00\"\x8d\xf4\x18\x85\x14)\x1et\x1a\xe8\xe0R\xff&=\x10?\xb0D\xbc|\x02\xcbJUH\x01\xe2\x1ds\xae\xaa\xd1\xd6s\xe6\x0f\x0f\xd4\x85A\xee\xbf\xe8F\x83\xd0\xd3\xdf\xfb?\nhE\xe2\x856\xfb\xb1X\xef\xd4\xfe6\xb8c\xdc\xea\x95-\xc6q\xc0\x1f\x00\x00\xda\x06\xfcG\xfe~\xd0(j;\xeb\x90\t\xa46R\x16\x10\xa3\x92\x1dv:P\x85t8J[\xa0\x9fL?\xd4>\xd4\x9a\n', &(0x7f00000003c0)='r', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r.\"\x03\xa9\xab\xfa#\x01\xcd\x05\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9\x01\x00\x00\x00\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba[h\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9aZ\x1c\x12Y)\x1e1x\xa1\x87]y\x89>\xc6WO\xae\x95\xdd\xc7Q.\xbf^\xd9\x9d\xe2\a\x01\xb3\x05\xf9\"\xa6h\x8d\xcd\xc5\xf8\x91\x90\x173I\x94\x06\xb9\xe8\xc2\xdd\xc0RI\xda\x8f8\xf9\xd2\x93\xd65@\x1d-B\n\xfb\x92\xfd\xa1j\x8e\xea\xe8\x03\xc3\r\x06', &(0x7f0000000000)='\xf8\xfe\\E\x85;', 0x0) tkill(r3, 0xb) 5.596533902s ago: executing program 1 (id=4401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 4.918285057s ago: executing program 4 (id=4403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a18d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0xa1c2}], 0x1, 0x0, 0x0, 0x0) 4.350215883s ago: executing program 2 (id=4405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = epoll_create1(0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'osx.', ',%\x84:\x00'}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) dup(0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, &(0x7f0000000040)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 3.78019203s ago: executing program 1 (id=4406): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe8, 0x0}, 0x10) 3.747018553s ago: executing program 3 (id=4407): open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 3.530212351s ago: executing program 0 (id=4408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x7b6951291079817b, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8009}, 0x20008080) 3.447378607s ago: executing program 2 (id=4409): io_uring_setup(0x257c, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_mreq(r5, 0x11a, 0x3, 0x0, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x5}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x30}}, 0x0) 3.447177247s ago: executing program 3 (id=4410): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000001c0)="fa", 0xfffffdef, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xc}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.356970075s ago: executing program 1 (id=4411): shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = open(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000240)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0xa4, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0xff47, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x0, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0xc, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x0, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x0, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0xa4}}, 0x0) socket$tipc(0x1e, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) unshare(0x68060200) socket$netlink(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x404000, 0x0) 3.034673941s ago: executing program 4 (id=4412): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 2.786244212s ago: executing program 3 (id=4413): mount(0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.779573672s ago: executing program 4 (id=4414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2105000000b800000000010000000000000002"], 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x211b42, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.83772206s ago: executing program 2 (id=4415): r0 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='{g\xd6\xd9\xdf\x00', &(0x7f0000000100)='c:::\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000005c0)='\x00\x00\x00\x00\x002\xc4d\x8c/\xfcs\xae.\x88\xa3\x9b\xa4\x99\x1a#\x1c\x8e\x92\x91\bO\r\x00\"\x8d\xf4\x18\x85\x14)\x1et\x1a\xe8\xe0R\xff&=\x10?\xb0D\xbc|\x02\xcbJUH\x01\xe2\x1ds\xae\xaa\xd1\xd6s\xe6\x0f\x0f\xd4\x85A\xee\xbf\xe8F\x83\xd0\xd3\xdf\xfb?\nhE\xe2\x856\xfb\xb1X\xef\xd4\xfe6\xb8c\xdc\xea\x95-\xc6q\xc0\x1f\x00\x00\xda\x06\xfcG\xfe~\xd0(j;\xeb\x90\t\xa46R\x16\x10\xa3\x92\x1dv:P\x85t8J[\xa0\x9fL?\xd4>\xd4\x9a\n', &(0x7f00000003c0)='r', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r.\"\x03\xa9\xab\xfa#\x01\xcd\x05\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9\x01\x00\x00\x00\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba[h\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9aZ\x1c\x12Y)\x1e1x\xa1\x87]y\x89>\xc6WO\xae\x95\xdd\xc7Q.\xbf^\xd9\x9d\xe2\a\x01\xb3\x05\xf9\"\xa6h\x8d\xcd\xc5\xf8\x91\x90\x173I\x94\x06\xb9\xe8\xc2\xdd\xc0RI\xda\x8f8\xf9\xd2\x93\xd65@\x1d-B\n\xfb\x92\xfd\xa1j\x8e\xea\xe8\x03\xc3\r\x06', &(0x7f0000000000)='\xf8\xfe\\E\x85;', 0x0) tkill(r3, 0xb) 1.763077106s ago: executing program 1 (id=4416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.661601304s ago: executing program 3 (id=4417): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x6}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6000}]}}]}, 0x40}}, 0x4044000) 1.657023455s ago: executing program 4 (id=4418): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SOUND_MIXER_INFO(r0, 0x400448c9, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00ad4da59bd78a248060eb7e05f7e56b446305d49c3e5d3120577c4e2b73c6db3384cc496525aa5a1e3f87e283e57448d56ced36ed336d8f77b350d227"], 0x1, 0x1ce, &(0x7f00000002c0)="$eJzs20tqU2EUB/B/0qjgEpwq6MQmrQrtsFDf78cGShtLMVWxDmwRrEtxZXYDHbgBr3iLSkOTXF/5KP39INwDJ4dz7uDk+yYJcHJ1klZaWU5SVdWHdxda2S09EzAVVeH+XyugnJnva7hXegpg+vaX6v3PXpLPX96v/vgsNzy/95fa9XN3qP560/qPrfp5rnO4/kaSmw3qq08H9ReH+t/6zf5nh+pvN64/eP9L5w/X30lyN8m9JPeTPEjyMMmjJI+P6L821P9Zw/4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Siuzk/Jjv9DO841Bvzcyf6rOz43Mn67z8xPyV0bmz9T52dVXg7VxYwJHaP/l/s9M2P/OhP0Hytna3nmxMhj03wgEAsHPoPQvE/C/dd9uvu5ube9c3thcWe+v91/OLc73ri4sLPaudeubfXf8/R44vn4d+qUnAQAAAAAAAAD+1JMkT0sPAQAATMU0/k5U+h0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOP6+BQAA///mpdN2") r6 = creat(&(0x7f0000000900)='./file0/file0\x00', 0x0) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000940)="bf", 0xfdef}], 0x2, 0x5000000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r10 = socket(0x9, 0x6, 0x3) bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r9, 0x3}, 0x5a) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x6}, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xfffffffffffffeb5, 0xa, '@\x00\x00\x97j\xd3?\xee\xe1&F\x94\xf9\xce\xff\x88\xdfY\xea\x05\xce\x01\"\xcf|\x00\x00_~'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc4c85512, 0x0) 1.494944418s ago: executing program 3 (id=4419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = epoll_create1(0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'osx.', ',%\x84:\x00'}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) dup(0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000000040)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 1.106561579s ago: executing program 2 (id=4420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40010102, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000025e000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) socket$phonet(0x23, 0x2, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) 584.522432ms ago: executing program 1 (id=4421): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b7070000010000005070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0286e963e533b1f209e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49fcd98b3f7cab02827ca311f5b87e1ca6433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84222000000005335001db43a5c000000000000000024000000000000000000e75a812ded5297d531afbf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f9500800cf9938d6df8600a62e96b7cbc30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2c52b5543f2c1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105868d350000000000000000000000000025902e4a196fb169780000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f62355a4f1d578e661527d000000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea17942c835c7899119ec2c3f4523110c9de2bc837b8b4842caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad39e42a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee0d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b0f121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d0714dc630ad1a9913905849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e80b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d575a83f33e75011ed8b48a2f52a03ec09c277b596d5eb491b6b380533be019894e7fc1a414ae38f1f448a7f6423bb12169d6f416090000003b47acd4d23b826d15711528d7c5a27e1120ca9537c8c8cccbb3ae86a91894372120488b820aae3538899e5367e09b29636ae060b5279683756cffa36844aa515ebdbb1cd69a33b584f8e1c796827703f3894c2bdd5a77607cb6c1191b89b303c1381f3e6016bf6c0e710750b43eb9a8fd0d7d71492ac43baec4994396f0fdfe7cecf248b88ba9406c7b8e5ec4882d52a0cd4b9b1c8327e811e6ba2572ff5a59dc8c5c90c1c323a42ced7272d67b46354497464aa3942b4a256e8a513155fae5b3ebcc47d2e1a8768c2da219f47595f83239688ef9f55937c9e3447fb532cabc44bd5b3297abf2e6411f095888ac1c2fa07ce90b1bbf84b781626ed69509e97dc47589290604bad6dc755c21f7fce3a73811a353addf3323c53945b3d2c58ba85b3a966cdd9692b4054461e19ec776383cea4bb75b942b82c68879181518d6009ee0f4a22959aeef86f2a2e5e81aaea917ee7b1cc9d8a54fa18fa4629a10092b4512da944e81b4b5b02a49d0e56bf69f99acd4242950dc130d90c83998585b8eaea47a6c9cd3696fb96bbf1624eb400cc4c1106911eca3e33a696dbe5a20397f3327289760653666d5c56c94e96ea233602d0d6523771e54060d28aeac1038377e7f1ffadf315e3d545556ebe42bd0283b7c6208d5cd3bf83b559b26f4a3a96ce227bb9dd6ad6f36de1a636c4e35fa9110e991a06de25bdfaa007496e8be140382d9bd16c4fb3df9c3153a83f4c64d578dd644a120b4222baff345390038b6a8e42d8e841a09e71c840867dae673905b0e701246e0e088a97ddb6ffe99ce4db1084ef009514fe9a7ee9f9860115abffb4d2ec05ef6d4009e2130f21ffc461b6545f82bb304c4f755d39f8edab721b93a32abd6dbc4fcfebfe28127d895dfdaa1703f897b05a7a18ee78a3def382d3db38da804293708322ff6a7cb24754f45503192f08ea2d116c3b3ea341a54e784ca532189fc7b2d"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe8, 0x0}, 0x10) 306.247555ms ago: executing program 3 (id=4422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a18d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0xa1c2}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=4423): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write(r0, &(0x7f00000002c0)="4420dab63499bd3157967cc32888d5924f2f77949440ec7e12f534aa015a08dd9f9d97d2bf60374fffffff", 0x2b) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) sendfile(0xffffffffffffffff, r0, 0x0, 0xf56) kernel console output (not intermixed with test programs): B3B... ........ [ 997.351931][T18752] NILFS (loop0): recovery complete [ 997.354821][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 997.354838][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 997.354852][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 997.393830][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 997.402718][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 997.413334][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 997.427066][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 997.436900][T18712] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 997.448368][T18712] XFS (loop1): page discard on page ffffea0001524040, inode 0x506, pos 28672. [ 997.458807][ T3623] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 997.504057][ T3623] XFS (loop1): Unmount and run xfs_repair [ 997.509818][ T3623] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 997.528919][ T3623] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 997.539108][ T3623] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 997.578284][ T3623] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 997.591765][ T3623] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 997.609158][ T3623] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 997.620607][ T3623] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 997.634096][T18754] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 997.640635][T18754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 997.655402][ T3623] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 997.670514][ T3623] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 997.681593][T18754] vhci_hcd vhci_hcd.0: Device attached [ 997.693628][T18712] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 997.705457][T18712] XFS (loop1): page discard on page ffffea00015d2f80, inode 0x506, pos 32768. [ 997.723927][ T3610] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 997.771693][ T3610] XFS (loop1): Unmount and run xfs_repair [ 997.777857][ T3610] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 997.785821][ T3610] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 997.817995][ T3610] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 997.869477][ T3610] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 997.920491][ T3610] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 998.090261][ T3610] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 998.183872][ T3547] Bluetooth: hci4: command tx timeout [ 998.264017][T18757] usbip_core: unknown command [ 998.268841][T18757] vhci_hcd: unknown pdu 67108864 [ 998.276975][ T3610] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 998.326380][T18757] usbip_core: unknown command [ 998.378196][ T3610] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 998.418623][ T35] vhci_hcd: stop threads [ 998.523956][ T35] vhci_hcd: release socket [ 998.544767][ T35] vhci_hcd: disconnect device [ 998.549579][ T3610] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 998.568949][T18712] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 998.580490][T18712] XFS (loop1): page discard on page ffffea00015d2fc0, inode 0x506, pos 36864. [ 998.591998][T10196] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 998.605108][T10196] XFS (loop1): Unmount and run xfs_repair [ 998.610859][T10196] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 998.623937][T10196] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 998.632806][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 998.650467][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 998.661359][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 998.678470][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 998.689066][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 998.705191][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 998.718910][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 998.730432][T18712] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 998.741976][T18712] XFS (loop1): page discard on page ffffea0001534400, inode 0x506, pos 40960. [ 998.765049][ T8787] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.765723][T10749] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 998.792524][T10749] XFS (loop1): Unmount and run xfs_repair [ 998.794370][T18643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.800080][T10749] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 998.816510][T10749] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 998.876403][T10749] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 998.900788][T18643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.945928][T10749] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 999.035931][T10749] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 999.143117][T10749] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 999.224058][T10749] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.243910][ T3547] Bluetooth: hci1: command 0x0406 tx timeout [ 999.335683][T10749] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.427143][T10749] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.437526][T10293] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 999.448621][T10293] XFS (loop1): Unmount and run xfs_repair [ 999.454918][T10293] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 999.462397][T18774] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3869'. [ 999.462404][T10293] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 999.462421][T10293] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 999.500063][T10293] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 999.509255][T10293] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 999.518332][T10293] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 999.580740][T10293] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.610334][T10293] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.627816][T10293] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.643996][ T3623] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 999.673847][ T3623] XFS (loop1): Unmount and run xfs_repair [ 999.679720][ T3623] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 999.684555][T18643] team0: Port device team_slave_0 added [ 999.688000][ T3623] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 999.702352][ T3623] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 999.711576][T18643] team0: Port device team_slave_1 added [ 999.750849][ T3623] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 999.769442][ T3623] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 999.778745][ T3623] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 999.788454][ T3623] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.797484][ T3623] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.806601][ T3623] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 999.835072][ T3630] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 999.866576][ T3630] XFS (loop1): Unmount and run xfs_repair [ 999.886046][ T3630] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 999.909648][ T3630] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 999.930307][ T3630] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 999.940180][ T3630] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 999.956981][ T3630] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 999.969832][ T3630] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1000.685443][ T3630] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1000.694416][ T3630] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1000.703847][ T3630] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1000.713348][T18712] xfs_discard_folio: 3 callbacks suppressed [ 1000.713361][T18712] XFS (loop1): page discard on page ffffea000163d500, inode 0x506, pos 57344. [ 1000.729374][ T3588] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1000.758397][ T3588] XFS (loop1): Unmount and run xfs_repair [ 1000.775958][ T3588] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1000.803911][ T3588] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1000.813402][ T3588] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1000.822515][ T3588] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1000.832567][ T3588] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1000.842745][T18782] loop3: detected capacity change from 0 to 32768 [ 1000.846178][ T3588] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1000.859269][T18782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3872 (18782) [ 1000.864164][ T3588] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1000.884365][ T3588] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1000.893232][ T3588] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1000.902442][T18712] XFS (loop1): page discard on page ffffea000163d540, inode 0x506, pos 61440. [ 1001.016116][T18782] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1001.040322][ T3630] loop1: writeback error on inode 1286, offset 0, sector 5112 [ 1001.048929][T18782] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1001.072643][T18782] BTRFS info (device loop3): use zlib compression, level 3 [ 1001.083646][T18782] BTRFS info (device loop3): using free space tree [ 1001.095685][ T5599] XFS (loop1): Unmounting Filesystem [ 1001.132238][T18643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.141190][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.177481][T18643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.272541][T18643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.279991][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.372646][T18643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.519388][T18782] BTRFS info (device loop3): enabling ssd optimizations [ 1002.581552][T18824] loop1: detected capacity change from 0 to 16384 [ 1002.611885][T18824] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1002.654853][T18824] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1002.664490][T18824] NILFS (loop1): mounting unchecked fs [ 1002.670150][T18824] NILFS (loop1): recovery required for readonly filesystem [ 1002.677420][T18824] NILFS (loop1): write access will be enabled during recovery [ 1002.702623][T18643] device hsr_slave_0 entered promiscuous mode [ 1002.717209][T18824] NILFS (loop1): recovery complete [ 1002.724309][T18643] device hsr_slave_1 entered promiscuous mode [ 1002.766105][T18643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.777013][T18643] Cannot create hsr debugfs directory [ 1002.821378][T18828] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1002.822378][T11270] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1002.827909][T18828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1002.830285][T18828] vhci_hcd vhci_hcd.0: Device attached [ 1002.958242][T18830] usbip_core: unknown command [ 1002.991258][T18830] vhci_hcd: unknown pdu 67108864 [ 1003.020460][ T3550] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1003.033743][T18830] usbip_core: unknown command [ 1003.044421][ T3632] vhci_hcd: stop threads [ 1003.048693][ T3632] vhci_hcd: release socket [ 1003.066284][ T3632] vhci_hcd: disconnect device [ 1003.095501][ T3630] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 1003.959430][T18859] 9pnet_fd: Insufficient options for proto=fd [ 1004.574519][T18856] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1007.677640][T18894] loop1: detected capacity change from 0 to 16384 [ 1007.716312][T18894] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1007.729075][T18894] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1007.738777][T18894] NILFS (loop1): mounting unchecked fs [ 1007.744384][T18894] NILFS (loop1): recovery required for readonly filesystem [ 1007.751662][T18894] NILFS (loop1): write access will be enabled during recovery [ 1007.833536][T18894] NILFS (loop1): recovery complete [ 1008.031923][ T3550] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1008.070390][T18872] loop3: detected capacity change from 0 to 32768 [ 1008.184615][ T3630] vhci_hcd: vhci_device speed not set [ 1008.254282][T18872] XFS (loop3): Mounting V5 Filesystem [ 1008.270174][T18903] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1008.276720][T18903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1008.344633][T18903] vhci_hcd vhci_hcd.0: Device attached [ 1008.391695][T18872] XFS (loop3): Ending clean mount [ 1008.435559][T18886] loop4: detected capacity change from 0 to 32768 [ 1008.464109][T18886] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3890 (18886) [ 1008.576036][T18886] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1008.596101][T18905] usbip_core: unknown command [ 1008.602522][T18905] vhci_hcd: unknown pdu 67108864 [ 1008.604018][T18886] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1008.616261][T18905] usbip_core: unknown command [ 1008.616532][ T3703] vhci_hcd: stop threads [ 1008.667986][ T3703] vhci_hcd: release socket [ 1008.690941][ T3703] vhci_hcd: disconnect device [ 1008.731521][T18886] BTRFS info (device loop4): use zlib compression, level 3 [ 1008.810057][ T3588] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1008.843300][T18886] BTRFS info (device loop4): using free space tree [ 1008.933896][ T3588] XFS (loop3): Unmount and run xfs_repair [ 1008.950418][ T3588] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1008.993903][ T3588] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1009.055277][ T3588] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1009.055859][T18846] vhci_hcd: vhci_device speed not set [ 1009.083969][ T3588] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1009.093100][ T3588] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1009.102532][ T3588] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1009.135605][T18886] BTRFS info (device loop4): enabling ssd optimizations [ 1009.151917][T18943] ubi: mtd0 is already attached to ubi0 [ 1009.153621][ T3588] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1009.210953][ T3588] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1009.400417][ T3588] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1009.409689][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1009.421854][T18920] XFS (loop3): page discard on page ffffea000152d8c0, inode 0x506, pos 4096. [ 1009.435078][T10062] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1009.669163][T10062] XFS (loop3): Unmount and run xfs_repair [ 1009.697430][T10062] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1009.833148][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1010.038986][T18643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1010.140087][T18951] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1010.239068][T17695] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1010.267545][T10062] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1010.276489][T10062] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1010.285414][T10062] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1010.294304][T10062] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1010.303156][T10062] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1010.312060][T10062] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1010.321158][T10062] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1010.375627][T10062] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1010.394048][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1010.405626][T18920] XFS (loop3): page discard on page ffffea00014ca580, inode 0x506, pos 8192. [ 1010.433528][T10061] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1010.480722][T10061] XFS (loop3): Unmount and run xfs_repair [ 1010.492887][T10061] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1010.501764][T10061] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1010.689911][T10061] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1011.157329][T10061] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1011.169621][T10061] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1011.178863][T10061] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1011.188097][T10061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1011.197350][T10061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1011.206378][T10061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1011.270261][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1011.281683][T18920] XFS (loop3): page discard on page ffffea00015fc940, inode 0x506, pos 12288. [ 1011.292018][T10201] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1011.336065][T10201] XFS (loop3): Unmount and run xfs_repair [ 1011.341840][T10201] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1011.357977][T10201] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1011.381990][T10201] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1011.557682][T10201] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1011.567491][T10201] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1011.576803][T10201] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1011.585961][T10201] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1011.595221][T10201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1011.605776][T10201] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1011.615115][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1011.626874][T18920] XFS (loop3): page discard on page ffffea00015561c0, inode 0x506, pos 16384. [ 1011.658818][T10061] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1011.674113][T10061] XFS (loop3): Unmount and run xfs_repair [ 1011.679868][T10061] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1011.687407][T10061] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1011.696304][T10061] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1011.705627][T10061] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1011.757896][T18643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1012.268857][T18972] loop1: detected capacity change from 0 to 16384 [ 1012.297736][T18972] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1012.311755][T18972] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1012.321485][T18972] NILFS (loop1): mounting unchecked fs [ 1012.327075][T18972] NILFS (loop1): recovery required for readonly filesystem [ 1012.334375][T18972] NILFS (loop1): write access will be enabled during recovery [ 1012.411089][T10061] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1012.420203][T10061] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1012.421749][T18972] NILFS (loop1): recovery complete [ 1012.458833][T18643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1012.481002][T10061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1012.490967][T10061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1012.497055][T18643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1012.630187][T10061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1012.639221][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1012.650692][T18920] XFS (loop3): page discard on page ffffea000164c980, inode 0x506, pos 20480. [ 1012.661921][T10061] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1012.673267][T10061] XFS (loop3): Unmount and run xfs_repair [ 1012.721678][T10061] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1012.751189][T10061] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1012.801114][T10061] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1012.820614][T10061] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1012.850146][T10061] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1012.933514][T10061] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1012.966685][T10061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1012.981432][T10061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1012.991718][T10061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1012.999783][ T3550] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1013.007467][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1013.019078][T18920] XFS (loop3): page discard on page ffffea0001481680, inode 0x506, pos 24576. [ 1013.034030][T18846] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1013.100643][T18846] XFS (loop3): Unmount and run xfs_repair [ 1013.147793][T18846] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1013.161486][T18846] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1013.172010][T18846] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1013.182658][T18846] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1013.191972][T18846] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1013.201322][T18846] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1013.210290][T18846] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.219195][T18846] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.228435][T18846] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.237528][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1013.249255][T18920] XFS (loop3): page discard on page ffffea000163e840, inode 0x506, pos 28672. [ 1013.262161][T10196] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1013.273385][T10196] XFS (loop3): Unmount and run xfs_repair [ 1013.279247][T10196] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1013.287337][T10196] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1013.296318][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1013.336482][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1013.370987][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1013.391217][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1013.421473][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.448049][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.481958][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.503376][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1013.515725][T18920] XFS (loop3): page discard on page ffffea000149bb40, inode 0x506, pos 32768. [ 1013.548578][T10201] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1013.576635][T10201] XFS (loop3): Unmount and run xfs_repair [ 1013.599220][T10201] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1013.607315][T10201] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1013.617783][T10201] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1013.627223][T10201] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1013.636557][T10201] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1013.645884][T10201] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1013.655244][T10201] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.664412][T10201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.673464][T10201] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.682804][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1013.694354][T18920] XFS (loop3): page discard on page ffffea00016d8700, inode 0x506, pos 36864. [ 1013.714157][ T937] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1013.731203][ T937] XFS (loop3): Unmount and run xfs_repair [ 1013.737582][ T937] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1013.745720][ T937] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1013.755478][ T937] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1013.764800][ T937] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1013.774164][ T937] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1013.783121][ T937] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1013.792646][ T937] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.801834][ T937] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.841161][ T937] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1013.853966][T18920] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1013.865841][T18920] XFS (loop3): page discard on page ffffea00014ca500, inode 0x506, pos 40960. [ 1013.876969][T10061] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1013.904035][T10061] XFS (loop3): Unmount and run xfs_repair [ 1013.914333][T10061] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1013.923215][T10061] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1013.933104][T10061] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1013.984815][T10061] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1014.004211][T10061] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1014.029432][T10061] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1014.038924][ T8787] device hsr_slave_0 left promiscuous mode [ 1014.055820][ T8787] device hsr_slave_1 left promiscuous mode [ 1014.076985][T10061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1014.086427][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.095897][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.104548][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.112041][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.119439][T10061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1014.119459][T10061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1014.124071][T18846] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1014.163059][ T8787] device bridge_slave_1 left promiscuous mode [ 1014.180330][T18990] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1014.187050][T18990] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1014.210160][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.240515][T18846] XFS (loop3): Unmount and run xfs_repair [ 1014.251788][T18846] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1014.274031][T18846] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1014.282914][T18846] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1014.315985][T18990] vhci_hcd vhci_hcd.0: Device attached [ 1014.342059][T18846] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1014.386422][T18846] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1014.408427][T18846] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1014.430720][T18846] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1014.539500][T18846] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1014.685952][T18846] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1014.758988][T18993] usbip_core: unknown command [ 1014.771566][T18993] vhci_hcd: unknown pdu 67108864 [ 1014.821645][T18993] usbip_core: unknown command [ 1014.831890][T18920] xfs_discard_folio: 1 callbacks suppressed [ 1014.831927][T18920] XFS (loop3): page discard on page ffffea00014d79c0, inode 0x506, pos 49152. [ 1014.935231][T10064] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1014.965311][ T11] vhci_hcd: stop threads [ 1014.970175][ T11] vhci_hcd: release socket [ 1015.011037][ T11] vhci_hcd: disconnect device [ 1015.073865][T10064] XFS (loop3): Unmount and run xfs_repair [ 1015.084546][T10064] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1015.100796][T10064] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1015.117014][T10064] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1015.133896][T10064] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1015.153155][T10064] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1015.168112][T10064] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1015.182524][T10064] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.191858][T10064] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.201296][T10064] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.210784][T18920] XFS (loop3): page discard on page ffffea00016d8740, inode 0x506, pos 53248. [ 1015.224358][T18846] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1015.243494][T18846] XFS (loop3): Unmount and run xfs_repair [ 1015.250834][T18846] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1015.265497][T18846] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1015.281885][T18846] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1015.293399][T18846] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1015.309508][T18846] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1015.319021][T18846] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1015.334912][T18846] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.346676][T18994] loop1: detected capacity change from 0 to 32768 [ 1015.359184][T18846] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.369639][T18994] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3907 (18994) [ 1015.382054][T18846] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.385375][T18920] XFS (loop3): page discard on page ffffea00014bfb80, inode 0x506, pos 57344. [ 1015.404812][T10064] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1015.416460][ T8787] device bridge_slave_0 left promiscuous mode [ 1015.422681][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.430507][T10064] XFS (loop3): Unmount and run xfs_repair [ 1015.437106][T10064] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1015.444544][T10064] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1015.453708][T10064] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1015.462641][T10064] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1015.471590][T10064] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1015.480503][T10064] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1015.489400][T10064] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.499398][T10064] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.508306][T10064] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1015.517569][T18920] XFS (loop3): page discard on page ffffea000149b880, inode 0x506, pos 61440. [ 1015.545423][T18994] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1015.563253][T18994] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1015.572547][T18994] BTRFS info (device loop1): use zlib compression, level 3 [ 1015.586752][T18994] BTRFS info (device loop1): using free space tree [ 1015.607875][ T3630] loop3: writeback error on inode 1286, offset 0, sector 5112 [ 1015.620958][T11270] XFS (loop3): Unmounting Filesystem [ 1015.686864][ T8787] device veth1_macvtap left promiscuous mode [ 1015.737618][ T8787] device veth0_macvtap left promiscuous mode [ 1015.791487][ T8787] device veth1_vlan left promiscuous mode [ 1015.798130][ T8787] device veth0_vlan left promiscuous mode [ 1015.835073][T18994] BTRFS info (device loop1): enabling ssd optimizations [ 1016.697046][ T5599] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1016.837639][ T3547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1016.865256][ T3547] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1016.873773][ T3547] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1016.881617][ T3547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1016.891990][ T3547] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1016.899372][ T3547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1017.582164][T19048] loop0: detected capacity change from 0 to 16384 [ 1017.712095][T19048] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1017.730403][T19048] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1017.740208][T19048] NILFS (loop0): mounting unchecked fs [ 1017.745801][T19048] NILFS (loop0): recovery required for readonly filesystem [ 1017.757097][T19048] NILFS (loop0): write access will be enabled during recovery [ 1017.761378][ T6049] udevd[6049]: incorrect nilfs2 checksum on /dev/loop0 [ 1017.802172][T19048] NILFS (loop0): recovery complete [ 1018.095695][ T8787] team0 (unregistering): Port device vlan1 removed [ 1018.984161][ T48] Bluetooth: hci2: command tx timeout [ 1019.067100][ T8787] team0 (unregistering): Port device team_slave_1 removed [ 1019.111429][ T8787] team0 (unregistering): Port device team_slave_0 removed [ 1019.166211][ T8787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.253919][ T8787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.714011][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 1020.184442][ T8787] bond0 (unregistering): Released all slaves [ 1020.279617][T19008] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3908'. [ 1020.487693][T18643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.513980][T19070] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1020.520531][T19070] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1020.534347][T19070] vhci_hcd vhci_hcd.0: Device attached [ 1020.598784][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1020.609101][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1020.617687][T19073] usbip_core: unknown command [ 1020.622387][T19073] vhci_hcd: unknown pdu 67108864 [ 1020.629018][T18643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.643260][T19073] usbip_core: unknown command [ 1020.652168][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1020.665242][ T3616] vhci_hcd: stop threads [ 1020.674112][ T3616] vhci_hcd: release socket [ 1020.686149][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.695317][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.702461][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.720594][ T3616] vhci_hcd: disconnect device [ 1020.738182][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1020.747131][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1020.756573][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.765409][ T937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.772707][ T937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.781561][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.821365][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.885758][T10749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.900943][T10749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.910510][T10749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.935314][T10749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.959997][T18643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1020.994866][T18643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.044434][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1021.052776][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1021.062129][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1021.073919][ T48] Bluetooth: hci2: command tx timeout [ 1021.075891][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1021.090751][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1021.185445][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1022.034052][T19043] chnl_net:caif_netlink_parms(): no params data found [ 1022.084186][T19104] loop0: detected capacity change from 0 to 16384 [ 1022.092008][T19104] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1022.102595][T19104] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1022.112845][T19104] NILFS (loop0): mounting unchecked fs [ 1022.118432][T19104] NILFS (loop0): recovery required for readonly filesystem [ 1022.125684][T19104] NILFS (loop0): write access will be enabled during recovery [ 1022.148514][T19104] NILFS (loop0): recovery complete [ 1022.935562][T19043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.046392][T19043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.188736][T19043] device bridge_slave_0 entered promiscuous mode [ 1023.213844][ T48] Bluetooth: hci2: command tx timeout [ 1023.223494][T19085] loop1: detected capacity change from 0 to 32768 [ 1023.254993][T19043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.291150][T19085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3919 (19085) [ 1023.315601][T19043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.323679][T19043] device bridge_slave_1 entered promiscuous mode [ 1023.377757][T19085] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1023.484042][T19085] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1023.514056][T19085] BTRFS info (device loop1): use zlib compression, level 3 [ 1023.521310][T19085] BTRFS info (device loop1): using free space tree [ 1023.555029][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1023.584433][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1023.611077][T19125] loop4: detected capacity change from 0 to 4096 [ 1023.628803][T19125] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1023.796037][T19043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.889528][T18643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.951725][T19043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.029855][ T3547] Bluetooth: hci1: command 0x0406 tx timeout [ 1024.103573][T19085] BTRFS error (device loop1): open_ctree failed [ 1024.148108][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1024.170851][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1024.221654][T19043] team0: Port device team_slave_0 added [ 1024.301690][T19043] team0: Port device team_slave_1 added [ 1024.429441][T18643] device veth0_vlan entered promiscuous mode [ 1024.614457][T19043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.621461][T19043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.678400][T19043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.696849][T19154] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1024.703392][T19154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1024.715136][T19154] vhci_hcd vhci_hcd.0: Device attached [ 1024.722896][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1024.777695][T19155] usbip_core: unknown command [ 1024.784007][T19155] vhci_hcd: unknown pdu 67108864 [ 1024.795591][T19155] usbip_core: unknown command [ 1024.813001][ T3703] vhci_hcd: stop threads [ 1024.820500][ T3703] vhci_hcd: release socket [ 1024.830603][ T3703] vhci_hcd: disconnect device [ 1024.890552][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1024.899826][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1024.908273][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1024.919353][T19043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.933218][T19043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.111865][T19043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.233545][T19163] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3926'. [ 1025.246433][ T3547] Bluetooth: hci2: command tx timeout [ 1025.273213][T18643] device veth1_vlan entered promiscuous mode [ 1025.909120][T19043] device hsr_slave_0 entered promiscuous mode [ 1025.924660][T19043] device hsr_slave_1 entered promiscuous mode [ 1025.931379][T19043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1025.943887][T19043] Cannot create hsr debugfs directory [ 1025.952453][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1026.027704][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1026.632658][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 1026.718218][T18643] device veth0_macvtap entered promiscuous mode [ 1026.729433][T18643] device veth1_macvtap entered promiscuous mode [ 1026.856419][T18643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.893863][T18643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.923195][T18643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.947409][T18643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.958251][T18643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.979487][T18643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.989870][T18643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.018191][T19184] ubi: mtd0 is already attached to ubi0 [ 1027.019258][T18643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.052956][T18643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.100887][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.113555][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.122778][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.134885][T18643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.146783][T18643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.157423][T18643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.168361][T18643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.178680][T18643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.190241][T18643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.200902][T18643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.211921][T18643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.254240][T18643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.340370][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1027.359226][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1027.392707][T18643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.409796][T18643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.419318][T18643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.436561][T18643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.632453][T19043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.678819][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.700523][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.786332][T19043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.813854][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1027.838472][ T8787] tipc: Disabling bearer [ 1027.848737][ T8787] tipc: Left network mode [ 1027.867139][T19182] loop1: detected capacity change from 0 to 32768 [ 1027.881898][T19182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3934 (19182) [ 1027.924572][T19043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.943711][T19182] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1027.965698][T19182] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1027.980881][T19182] BTRFS info (device loop1): use zlib compression, level 3 [ 1027.988598][T19182] BTRFS info (device loop1): using free space tree [ 1028.125693][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.144246][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.195042][T19043] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.232926][T19201] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1028.239493][T19201] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1028.301518][T19201] vhci_hcd vhci_hcd.0: Device attached [ 1028.331865][T19203] usbip_core: unknown command [ 1028.341125][T19203] vhci_hcd: unknown pdu 67108864 [ 1028.377120][T19203] usbip_core: unknown command [ 1028.390646][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1028.392331][T19182] BTRFS info (device loop1): enabling ssd optimizations [ 1028.425886][ T11] vhci_hcd: stop threads [ 1028.430224][ T11] vhci_hcd: release socket [ 1028.435989][ T11] vhci_hcd: disconnect device [ 1029.124556][T19215] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3938'. [ 1029.508223][ T5599] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1029.814788][T19230] netlink: 'syz.2.3844': attribute type 1 has an invalid length. [ 1030.498539][T19242] ubi: mtd0 is already attached to ubi0 [ 1030.524270][T19241] loop4: detected capacity change from 0 to 4096 [ 1030.530759][T19043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1030.534887][T19241] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1030.553543][T19043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1030.655559][T19043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1030.851515][T19248] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1030.858182][T19248] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1030.901203][T19248] vhci_hcd vhci_hcd.0: Device attached [ 1030.916183][T19043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1030.926972][T19249] vhci_hcd: connection closed [ 1030.927280][ T11] vhci_hcd: stop threads [ 1030.945970][ T11] vhci_hcd: release socket [ 1030.962546][ T11] vhci_hcd: disconnect device [ 1031.053480][T19043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.074749][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1031.082844][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1031.093119][T19043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.124462][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1031.133432][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.142067][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.149198][T10062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.216588][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1031.230949][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1031.254470][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1031.263314][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.270480][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.320056][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1031.388100][T19043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1031.418617][T19043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1031.535420][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1031.560480][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1031.682083][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1031.819337][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1031.971214][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1032.141974][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1032.191726][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1032.212842][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1032.230312][T10065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1032.253357][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1032.261747][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1032.343540][T19266] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3949'. [ 1033.575881][T19285] ubi: mtd0 is already attached to ubi0 [ 1033.987867][T19294] loop2: detected capacity change from 0 to 64 [ 1034.172868][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1034.309718][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1034.509541][T19043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.010270][ T8787] device hsr_slave_0 left promiscuous mode [ 1035.017331][ T8787] device hsr_slave_1 left promiscuous mode [ 1035.024439][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.031866][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.040013][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.047767][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.072401][ T8787] device bridge_slave_1 left promiscuous mode [ 1035.099271][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.127852][ T8787] device bridge_slave_0 left promiscuous mode [ 1035.148864][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.331383][ T8787] device veth1_macvtap left promiscuous mode [ 1035.398926][ T8787] device veth0_macvtap left promiscuous mode [ 1035.457545][ T8787] device veth1_vlan left promiscuous mode [ 1035.511712][ T8787] device veth0_vlan left promiscuous mode [ 1037.181941][ T8787] team0 (unregistering): Port device team_slave_1 removed [ 1037.280419][ T8787] team0 (unregistering): Port device team_slave_0 removed [ 1037.309781][T19328] ubi: mtd0 is already attached to ubi0 [ 1037.340134][ T8787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.422308][ T8787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.558581][T19340] netlink: 'syz.0.3968': attribute type 1 has an invalid length. [ 1039.003092][ T8787] bond0 (unregistering): Released all slaves [ 1039.302724][T19346] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1039.928666][T19043] device veth0_vlan entered promiscuous mode [ 1039.947654][T19043] device veth1_vlan entered promiscuous mode [ 1039.990657][T19043] device veth0_macvtap entered promiscuous mode [ 1040.017558][T19316] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3962'. [ 1040.041611][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1040.096181][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1040.115962][T19352] loop4: detected capacity change from 0 to 64 [ 1040.158910][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1040.162633][T19357] ubi: mtd0 is already attached to ubi0 [ 1040.184682][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1040.231793][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1040.253351][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1040.354922][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1040.949986][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1040.961715][T19043] device veth1_macvtap entered promiscuous mode [ 1041.103381][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1041.111494][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1041.290926][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1041.299709][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1041.318665][T19043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.336599][T19043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.347501][T19043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.384065][T19043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.437469][T19043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.780720][T19043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.790756][T19043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.801334][T19043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.830688][T19043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.876297][T19043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.924149][T19043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.943827][T19043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.061609][T19043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.093830][T19043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.153820][T19043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.164235][T19043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.175021][T19043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.241230][T19378] netlink: 'syz.1.3980': attribute type 1 has an invalid length. [ 1042.293982][T19043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.527588][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1042.546301][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1042.741695][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1042.750851][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1042.763019][T19043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.844924][T19389] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3983'. [ 1043.426180][T19043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.434957][T19043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.443648][T19043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.480009][T19392] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1043.795472][T19400] ubi: mtd0 is already attached to ubi0 [ 1043.884133][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.064495][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.412166][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1044.584012][T10749] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1044.652858][T19413] loop2: detected capacity change from 0 to 64 [ 1044.685891][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.721912][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.774505][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1045.014476][T10749] usb 1-1: config 0 has no interfaces? [ 1045.028685][T10749] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1045.331479][T10749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.472836][T10749] usb 1-1: config 0 descriptor?? [ 1045.538037][T10749] usb 1-1: can't set config #0, error -71 [ 1045.577941][T10749] usb 1-1: USB disconnect, device number 25 [ 1045.862427][T19422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'. [ 1046.792309][T19433] netlink: 'syz.4.3994': attribute type 1 has an invalid length. [ 1047.007808][T19435] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3996'. [ 1047.485675][T19437] ubi: mtd0 is already attached to ubi0 [ 1048.410961][T19451] capability: warning: `syz.3.4003' uses deprecated v2 capabilities in a way that may be insecure [ 1048.572462][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4006'. [ 1048.955735][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4007'. [ 1049.890016][T19476] netlink: 'syz.4.4010': attribute type 1 has an invalid length. [ 1050.143913][T19478] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.4011'. [ 1050.783868][ T3547] Bluetooth: hci3: command 0x0406 tx timeout [ 1050.831586][T19481] ubi: mtd0 is already attached to ubi0 [ 1051.812858][T19490] loop1: detected capacity change from 0 to 4096 [ 1051.916396][T19490] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1052.551338][T19514] netlink: 'syz.4.4023': attribute type 1 has an invalid length. [ 1053.351573][T19525] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.4024'. [ 1053.511241][T19526] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4025'. [ 1054.155813][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.162530][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.436093][T19536] ubi: mtd0 is already attached to ubi0 [ 1055.489860][T19549] loop4: detected capacity change from 0 to 4096 [ 1055.547312][T19549] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1056.253344][T19557] loop2: detected capacity change from 0 to 128 [ 1056.570707][T19563] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1056.604370][ T27] audit: type=1804 audit(1720216338.644:145): pid=19557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4036" name="/newroot/22/file0/file0/file0" dev="loop2" ino=1048641 res=1 errno=0 [ 1057.074574][T19557] Process accounting resumed [ 1057.874763][T19579] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1057.961539][T19573] tipc: Started in network mode [ 1057.969153][T19573] tipc: Node identity 4, cluster identity 4711 [ 1057.975674][T19573] tipc: Node number set to 4 [ 1059.362212][T19600] loop1: detected capacity change from 0 to 128 [ 1059.601989][ T27] audit: type=1804 audit(1720216341.714:146): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4049" name="/newroot/701/file0/file0/file0" dev="loop1" ino=1048643 res=1 errno=0 [ 1059.693046][T19612] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.4051'. [ 1060.165095][T19609] Process accounting resumed [ 1062.524129][T19655] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1063.119170][T19663] loop4: detected capacity change from 0 to 128 [ 1063.216392][ T27] audit: type=1804 audit(1720216345.334:147): pid=19663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4068" name="/newroot/89/file0/file0/file0" dev="loop4" ino=1048645 res=1 errno=0 [ 1063.303499][T19668] Process accounting resumed [ 1064.625291][T19667] loop1: detected capacity change from 0 to 2048 [ 1064.770474][T19667] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1065.586589][T19667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1065.754596][T19689] xt_hashlimit: max too large, truncated to 1048576 [ 1065.761483][T19689] xt_hashlimit: overflow, try lower: 0/0 [ 1066.140379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1066.148962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1066.352884][T19699] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.4079'. [ 1066.625395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1066.635119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1066.664052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1066.950167][T19706] tipc: Started in network mode [ 1066.966397][T19706] tipc: Node identity 4, cluster identity 4711 [ 1066.972596][T19706] tipc: Node number set to 4 [ 1068.848998][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4092'. [ 1069.519832][T19753] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1069.594827][T19755] fuse: Unknown parameter '0x0000000000000004' [ 1073.087462][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1073.203814][T10063] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1073.487184][T19803] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1073.595031][T10063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.706602][T10063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.759005][T10063] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1074.772514][T10063] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1074.781892][T10063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.814600][T10063] usb 3-1: config 0 descriptor?? [ 1076.110614][T10063] acrux 0003:1A34:0802.0006: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 1076.396474][T10063] acrux 0003:1A34:0802.0006: no inputs found [ 1076.491027][T10063] acrux 0003:1A34:0802.0006: Failed to enable force feedback support, error: -19 [ 1076.620754][T10063] usb 3-1: USB disconnect, device number 21 [ 1077.528919][T19828] loop0: detected capacity change from 0 to 2048 [ 1077.576738][T19828] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1077.639451][T19828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1077.734774][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4119'. [ 1078.700391][T19844] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1081.745981][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'. [ 1082.298385][T19893] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1084.908004][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'. [ 1085.603222][T19925] loop3: detected capacity change from 0 to 4096 [ 1085.628417][T19925] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1086.854678][T19959] fuse: Unknown parameter 'fd0x0000000000000004' [ 1088.175787][T19980] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4161'. [ 1088.908319][T19983] loop4: detected capacity change from 0 to 4096 [ 1088.979921][T19983] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1090.068271][T20002] fuse: Unknown parameter 'fd0x0000000000000004' [ 1091.402020][T20024] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1091.624726][T20025] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1092.276543][T20030] loop4: detected capacity change from 0 to 4096 [ 1092.713968][T20030] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1093.254797][T20049] fuse: Unknown parameter 'fd0x0000000000000004' [ 1093.297396][T20047] loop3: detected capacity change from 0 to 1024 [ 1093.439930][T20047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1093.555948][ T27] audit: type=1800 audit(1720216375.664:148): pid=20047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4185" name="file1" dev="loop3" ino=818 res=0 errno=0 [ 1093.589548][T20056] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1094.302925][T20062] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1094.927409][T20082] netlink: 'syz.0.4195': attribute type 1 has an invalid length. [ 1095.212535][T20087] loop2: detected capacity change from 0 to 4096 [ 1095.227683][T20087] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1095.466131][T20068] loop4: detected capacity change from 0 to 40427 [ 1095.487815][T20068] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1095.509071][T20068] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1095.662296][T20068] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1095.855517][T20101] 9pnet_fd: Insufficient options for proto=fd [ 1095.902002][T20068] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1095.969641][T20104] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1096.075134][T20068] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1096.554516][T20068] device batadv0 entered promiscuous mode [ 1096.723124][T20068] syz.4.4187: attempt to access beyond end of device [ 1096.723124][T20068] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1096.780788][T20107] syz.4.4187: attempt to access beyond end of device [ 1096.780788][T20107] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1096.810765][T20061] device batadv0 left promiscuous mode [ 1097.091478][T20122] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4206'. [ 1098.098898][T20133] netlink: 'syz.0.4211': attribute type 1 has an invalid length. [ 1098.845521][T20141] loop2: detected capacity change from 0 to 4096 [ 1098.896833][T20141] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1099.576640][T20148] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.4215'. [ 1099.686678][T20156] overlayfs: failed to resolve './file1': -2 [ 1100.836179][T20183] loop3: detected capacity change from 0 to 1024 [ 1100.855340][T20184] netlink: 'syz.2.4225': attribute type 1 has an invalid length. [ 1100.931137][T20183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1101.031272][ T27] audit: type=1800 audit(1720216383.144:149): pid=20183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4228" name="file1" dev="loop3" ino=818 res=0 errno=0 [ 1101.322340][T20189] loop3: detected capacity change from 0 to 4096 [ 1101.332403][T20160] loop0: detected capacity change from 0 to 32768 [ 1101.341458][T20189] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1101.390532][T20160] XFS (loop0): Mounting V5 Filesystem [ 1101.537983][T20199] overlayfs: failed to resolve './file1': -2 [ 1101.603208][T20160] XFS (loop0): Ending clean mount [ 1102.215675][T20210] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4231'. [ 1102.281893][T10196] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1102.297033][T10196] XFS (loop0): Unmount and run xfs_repair [ 1102.302850][T10196] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1102.321005][T10196] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1102.344051][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1102.356413][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1102.366485][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1102.385659][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1102.401297][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.412838][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.458525][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.475545][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1102.487021][T20206] XFS (loop0): page discard on page ffffea00016b0640, inode 0x506, pos 4096. [ 1102.525271][T10201] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1102.559503][T10201] XFS (loop0): Unmount and run xfs_repair [ 1102.576098][T10201] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1102.595957][T10201] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1102.621950][T10201] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1102.648960][T10201] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1102.720945][T10201] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1102.789489][T10201] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1102.836630][T10201] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.875557][T10201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.915783][T10201] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1102.948329][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1102.959999][T20206] XFS (loop0): page discard on page ffffea000165c4c0, inode 0x506, pos 8192. [ 1102.979104][T10196] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1102.994135][T10196] XFS (loop0): Unmount and run xfs_repair [ 1102.999940][T10196] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1103.013617][T10196] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1103.023984][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1103.033411][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1103.054500][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1103.068481][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1103.086025][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.100535][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.110702][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.125100][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1103.136602][T20206] XFS (loop0): page discard on page ffffea0001ff64c0, inode 0x506, pos 12288. [ 1103.145190][T20219] loop3: detected capacity change from 0 to 32768 [ 1103.149643][T10201] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1103.173310][T10201] XFS (loop0): Unmount and run xfs_repair [ 1103.181124][T10201] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1103.189055][T10201] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1103.199351][T10201] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1103.210423][T10201] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1103.230369][T10201] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1103.245013][T10201] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1103.254658][T10201] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.264025][T10201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.280581][T10201] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.351334][T20219] XFS (loop3): Mounting V5 Filesystem [ 1103.455467][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1103.466891][T20206] XFS (loop0): page discard on page ffffea0001475700, inode 0x506, pos 16384. [ 1103.486864][T10201] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1103.571753][T10201] XFS (loop0): Unmount and run xfs_repair [ 1103.577951][T10201] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1103.585899][T20245] netlink: 'syz.1.4241': attribute type 1 has an invalid length. [ 1103.615196][T10201] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1103.636832][T10201] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1103.645850][T10201] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1103.654838][T10201] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1103.661521][T20219] XFS (loop3): Ending clean mount [ 1103.669341][T10201] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1103.679422][T10201] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.679770][T20219] XFS (loop3): Quotacheck needed: Please wait. [ 1103.691339][T10201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.703941][T10201] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.712885][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1103.725107][T20206] XFS (loop0): page discard on page ffffea000152c1c0, inode 0x506, pos 20480. [ 1103.739681][ T3590] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1103.751184][ T3590] XFS (loop0): Unmount and run xfs_repair [ 1103.757023][ T3590] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1103.764533][ T3590] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1103.773442][ T3590] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1103.782679][ T3590] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1103.791668][ T3590] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1103.800610][ T3590] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1103.809580][ T3590] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.818628][ T3590] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.828276][ T3590] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.837260][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1103.848751][T20206] XFS (loop0): page discard on page ffffea00014ad580, inode 0x506, pos 24576. [ 1103.862181][T10201] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1103.875396][T10201] XFS (loop0): Unmount and run xfs_repair [ 1103.881200][T10201] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1103.888757][T10201] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1103.897743][T10201] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1103.907076][T20219] XFS (loop3): Quotacheck: Done. [ 1103.907833][T10201] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1103.927783][T10201] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1103.940757][T10201] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1103.953262][T10201] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.968341][T10201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.978765][T10201] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1103.992528][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1104.004036][T20206] XFS (loop0): page discard on page ffffea00014ad540, inode 0x506, pos 28672. [ 1104.023582][T10196] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1104.035993][T10196] XFS (loop0): Unmount and run xfs_repair [ 1104.041766][T10196] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1104.049592][T10196] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1104.064612][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1104.082121][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1104.091824][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1104.102022][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1104.111442][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1104.120386][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1104.129943][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1104.147384][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1104.158850][T20206] XFS (loop0): page discard on page ffffea00015c78c0, inode 0x506, pos 32768. [ 1104.189256][T10196] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1104.208045][T10196] XFS (loop0): Unmount and run xfs_repair [ 1104.234103][T10196] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1104.269127][T10196] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1104.323087][T19043] XFS (loop3): Unmounting Filesystem [ 1104.333764][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1104.352227][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1104.361860][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1104.378235][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1104.389644][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1104.402925][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1104.428369][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1104.458966][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1104.470344][T20206] XFS (loop0): page discard on page ffffea000153ce40, inode 0x506, pos 36864. [ 1104.497139][ T3590] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1104.526144][ T3590] XFS (loop0): Unmount and run xfs_repair [ 1104.547035][ T3590] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1104.561113][T20256] loop1: detected capacity change from 0 to 4096 [ 1104.571052][ T3590] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1104.582414][ T3590] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1104.648054][T20260] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.4247'. [ 1104.673617][T20256] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1104.762434][ T3590] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1104.885811][ T3590] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1104.970269][ T3590] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1105.047286][ T3590] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1105.129848][ T3590] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1105.214933][ T3590] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1105.235205][T20206] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1105.246762][T20206] XFS (loop0): page discard on page ffffea0001657300, inode 0x506, pos 40960. [ 1105.266398][ T7082] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1105.341728][ T7082] XFS (loop0): Unmount and run xfs_repair [ 1105.355741][ T7082] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1105.384133][ T7082] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1105.393020][ T7082] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1105.430323][ T7082] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1105.450815][ T7082] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1105.496335][ T7082] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1105.529405][ T7082] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1105.538666][ T7082] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1105.711868][ T7082] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1105.745121][ T3589] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1105.960872][ T3589] XFS (loop0): Unmount and run xfs_repair [ 1106.080233][ T3589] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1106.247581][ T3589] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1106.416571][ T3589] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1106.457027][ T3589] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1106.553785][ T3589] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1106.582670][ T3589] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1106.780974][T20280] netlink: 'syz.2.4255': attribute type 1 has an invalid length. [ 1106.803189][ T3589] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1106.813005][ T3589] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1106.822340][ T3589] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1106.832367][T10196] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1106.848581][T10196] XFS (loop0): Unmount and run xfs_repair [ 1106.854483][T10196] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1106.861958][T10196] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1106.902643][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1106.949795][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1106.960141][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1106.974242][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1106.999935][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.018466][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.040054][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.058873][ T3610] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1107.071073][ T3610] XFS (loop0): Unmount and run xfs_repair [ 1107.084367][ T3610] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1107.109764][ T3610] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1107.135614][ T3610] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1107.154506][ T3610] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1107.172914][ T3610] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1107.191985][ T3610] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1107.217973][ T3610] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.242819][ T3610] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.258050][ T3610] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.268417][T10201] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1107.297558][T10201] XFS (loop0): Unmount and run xfs_repair [ 1107.318098][T10201] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1107.341441][T10201] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1107.369252][T10201] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1107.479654][T10201] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1107.504056][T10201] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1107.513578][T10201] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1107.716548][T10201] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.726155][T10201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.735153][T10201] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1107.744715][T20206] xfs_discard_folio: 4 callbacks suppressed [ 1107.744730][T20206] XFS (loop0): page discard on page ffffea00016dd100, inode 0x506, pos 61440. [ 1108.111283][T20292] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4259'. [ 1108.244333][T12471] XFS (loop0): Unmounting Filesystem [ 1108.260329][T10196] loop0: writeback error on inode 1286, offset 0, sector 5112 [ 1108.562563][T10201] libceph: connect (1)[c::]:6789 error -101 [ 1108.621160][T20301] loop4: detected capacity change from 0 to 2048 [ 1108.627823][T10201] libceph: mon0 (1)[c::]:6789 connect error [ 1108.701101][T20301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1108.767406][ T27] audit: type=1800 audit(1720216390.884:150): pid=20301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4261" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 1108.855561][ T48] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 1108.914286][T10201] libceph: connect (1)[c::]:6789 error -101 [ 1108.920324][T10201] libceph: mon0 (1)[c::]:6789 connect error [ 1108.949990][T20286] loop1: detected capacity change from 0 to 32768 [ 1109.039731][T20286] XFS (loop1): Mounting V5 Filesystem [ 1109.134182][T20298] ceph: No mds server is up or the cluster is laggy [ 1109.296904][T20286] XFS (loop1): Ending clean mount [ 1109.325539][T20286] XFS (loop1): Quotacheck needed: Please wait. [ 1109.611290][T20286] XFS (loop1): Quotacheck: Done. [ 1109.686023][T20339] netlink: 'syz.0.4269': attribute type 1 has an invalid length. [ 1109.830340][ T5599] XFS (loop1): Unmounting Filesystem [ 1110.216563][T20328] loop2: detected capacity change from 0 to 40427 [ 1110.224630][T20328] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1110.232509][T20328] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1110.268252][T20328] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1110.322140][T20342] loop4: detected capacity change from 0 to 8192 [ 1110.410375][T20338] loop3: detected capacity change from 0 to 32768 [ 1110.425122][T20342] loop4: p2 p3 p4 [ 1110.438114][T20342] loop4: p2 size 64000 extends beyond EOD, truncated [ 1110.455646][T20328] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1110.462806][T20328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1110.471648][T20342] loop4: p3 start 458496 is beyond EOD, truncated [ 1110.478833][T20342] loop4: p4 size 50331648 extends beyond EOD, truncated [ 1110.513003][T20338] XFS (loop3): Mounting V5 Filesystem [ 1110.533158][T20328] device batadv0 entered promiscuous mode [ 1110.539064][T10061] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1110.589670][T20338] XFS (loop3): Ending clean mount [ 1110.817621][T20328] syz.2.4266: attempt to access beyond end of device [ 1110.817621][T20328] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1110.904449][T10061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.975032][T10061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.111893][T10061] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1111.137706][T20326] device batadv0 left promiscuous mode [ 1111.172717][T10061] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1111.250634][T10061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.300921][T10061] usb 2-1: config 0 descriptor?? [ 1111.328421][T10064] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1111.338939][T20363] syz.2.4266: attempt to access beyond end of device [ 1111.338939][T20363] loop2: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 1111.360630][T10064] XFS (loop3): Unmount and run xfs_repair [ 1111.392089][T10064] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1111.407665][T20363] syz.2.4266: attempt to access beyond end of device [ 1111.407665][T20363] loop2: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 1111.423505][T10064] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1111.433408][T10064] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1111.447202][T20363] syz.2.4266: attempt to access beyond end of device [ 1111.447202][T20363] loop2: rw=2049, sector=49152, nr_sectors = 648 limit=40427 [ 1111.447964][T10064] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1111.477325][T10064] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1111.488860][T10064] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1111.501945][T10064] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1111.512587][T10064] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1111.521933][T10064] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1111.531348][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1111.542810][T20368] XFS (loop3): page discard on page ffffea00015b5180, inode 0x506, pos 4096. [ 1111.552184][ T7082] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1111.567667][T18643] syz-executor: attempt to access beyond end of device [ 1111.567667][T18643] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1111.603960][ T7082] XFS (loop3): Unmount and run xfs_repair [ 1111.610344][ T7082] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1111.664205][ T7082] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1111.673120][ T7082] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1111.700214][ T7082] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1111.716753][ T7082] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1111.728783][ T7082] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1111.742052][ T7082] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1111.757074][ T7082] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1111.768920][ T7082] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1111.781450][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1111.793895][T20368] XFS (loop3): page discard on page ffffea00015b51c0, inode 0x506, pos 8192. [ 1111.804132][ T7082] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1111.832227][ T7082] XFS (loop3): Unmount and run xfs_repair [ 1111.844918][ T7082] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1111.852792][ T7082] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1111.863921][T10061] usbhid 2-1:0.0: can't add hid device: -71 [ 1111.869916][T10061] usbhid: probe of 2-1:0.0 failed with error -71 [ 1111.872278][ T7082] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1111.898505][ T7082] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1111.903964][T10061] usb 2-1: USB disconnect, device number 23 [ 1111.923633][ T7082] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1111.932981][ T7082] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1111.954970][ T7082] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1111.970632][ T7082] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1111.982964][ T7082] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.000505][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1112.013767][T20368] XFS (loop3): page discard on page ffffea00015b5200, inode 0x506, pos 12288. [ 1112.023648][ T7082] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1112.044702][ T7082] XFS (loop3): Unmount and run xfs_repair [ 1112.053974][ T7082] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1112.071706][ T7082] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1112.089843][ T7082] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1112.118957][ T7082] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1112.134630][ T7082] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1112.153813][ T7082] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1112.162686][ T7082] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.183808][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1112.191481][ T7082] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.208734][ T7082] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.210800][T10061] libceph: connect (1)[c::]:6789 error -101 [ 1112.226000][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1112.237493][T20368] XFS (loop3): page discard on page ffffea00015b5240, inode 0x506, pos 16384. [ 1112.259795][T10061] libceph: mon0 (1)[c::]:6789 connect error [ 1112.269534][T10061] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1112.286103][T10061] XFS (loop3): Unmount and run xfs_repair [ 1112.291854][T10061] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1112.317096][T10061] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1112.371055][T10061] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1112.425496][T10061] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1112.450636][T10061] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1112.454683][T20377] loop4: detected capacity change from 0 to 32768 [ 1112.490908][T20389] netlink: 'syz.0.4283': attribute type 1 has an invalid length. [ 1112.512336][T10061] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1112.529065][T10061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.541497][T10061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.558144][T10061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.567642][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1112.579328][T20368] XFS (loop3): page discard on page ffffea00015b5280, inode 0x506, pos 20480. [ 1112.628302][T10061] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1112.660293][T10061] XFS (loop3): Unmount and run xfs_repair [ 1112.670246][T10061] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1112.679144][T10061] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1112.689097][T10061] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1112.698400][T10061] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1112.724018][T10061] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1112.733609][T10061] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1112.743640][T10061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.752776][T10061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.778600][T10061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.787936][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1112.790208][T20377] XFS (loop4): Mounting V5 Filesystem [ 1112.799597][T20368] XFS (loop3): page discard on page ffffea00015b52c0, inode 0x506, pos 24576. [ 1112.817676][T10061] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1112.829675][T10061] XFS (loop3): Unmount and run xfs_repair [ 1112.837112][T10061] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1112.844779][T10061] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1112.854227][T10061] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1112.863322][T10061] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1112.872842][T10061] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1112.881957][T10061] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1112.891028][T10061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.901244][T10061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.913925][ T3547] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1112.920025][T20377] XFS (loop4): Ending clean mount [ 1112.925585][ T3547] Bluetooth: hci3: Injecting HCI hardware error event [ 1112.929454][T20377] XFS (loop4): Quotacheck needed: Please wait. [ 1112.937178][ T3547] Bluetooth: hci3: hardware error 0x00 [ 1112.964852][T10061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1112.985324][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1112.987822][T10064] libceph: connect (1)[c::]:6789 error -101 [ 1112.996878][T20368] XFS (loop3): page discard on page ffffea00015b5300, inode 0x506, pos 28672. [ 1113.006034][T20381] ceph: No mds server is up or the cluster is laggy [ 1113.018361][T10064] libceph: mon0 (1)[c::]:6789 connect error [ 1113.019617][ T7082] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1113.047017][ T7082] XFS (loop3): Unmount and run xfs_repair [ 1113.052778][ T7082] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1113.066244][ T7082] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1113.078487][ T7082] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1113.165720][ T7082] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1113.174943][ T7082] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1113.184178][ T7082] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1113.197751][ T7082] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.207537][ T7082] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.223787][ T7082] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.232706][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1113.244912][T20368] XFS (loop3): page discard on page ffffea00015b5340, inode 0x506, pos 32768. [ 1113.254451][T10064] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1113.258835][T20377] XFS (loop4): Quotacheck: Done. [ 1113.298412][T10064] XFS (loop3): Unmount and run xfs_repair [ 1113.310162][T10064] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1113.327900][T10064] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1113.342779][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4292'. [ 1113.361763][T10064] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1113.392814][T10064] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1113.407650][T10064] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1113.432508][T20409] loop1: detected capacity change from 0 to 40427 [ 1113.434797][T10064] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1113.460099][T20409] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1113.462480][T10064] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.478566][T10064] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.481084][T20409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1113.503567][T10064] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.513355][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1113.525565][T20368] XFS (loop3): page discard on page ffffea00015b5380, inode 0x506, pos 36864. [ 1113.539081][T10062] libceph: connect (1)[c::]:6789 error -101 [ 1113.545401][T10062] libceph: mon0 (1)[c::]:6789 connect error [ 1113.557867][T10062] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1113.573784][T10062] XFS (loop3): Unmount and run xfs_repair [ 1113.579528][T10062] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1113.593495][T10062] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1113.602631][T10062] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1113.611773][T10062] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1113.620832][T10062] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1113.629909][T10062] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1113.648319][T10062] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.659139][T10062] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.672681][T10062] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.683132][T20368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 1113.694653][T20368] XFS (loop3): page discard on page ffffea00015b53c0, inode 0x506, pos 40960. [ 1113.710867][ T3590] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1113.723568][T20409] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1113.743791][ T3590] XFS (loop3): Unmount and run xfs_repair [ 1113.749571][ T3590] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1113.764081][ T3590] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1113.772954][ T3590] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1113.796960][ T3590] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1113.803553][T20409] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1113.813803][ T3590] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1113.818825][T20409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1113.824038][ T3590] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1113.859309][ T3590] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.869107][ T3590] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.878468][ T3590] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1113.888280][T20368] XFS (loop3): page discard on page ffffea00015fd480, inode 0x506, pos 45056. [ 1113.901185][T10196] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1113.928524][T10196] XFS (loop3): Unmount and run xfs_repair [ 1113.934692][T10196] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1113.942088][T10196] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1113.951718][T10196] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1113.961322][T10196] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1113.972453][T10196] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1113.990591][T10196] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1114.001706][T10196] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.014671][T10196] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.024014][T10196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.033124][T20368] XFS (loop3): page discard on page ffffea00015fd4c0, inode 0x506, pos 49152. [ 1114.042656][T10062] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1114.044742][T20430] syz.1.4290: attempt to access beyond end of device [ 1114.044742][T20430] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1114.065495][T10062] XFS (loop3): Unmount and run xfs_repair [ 1114.084337][T10062] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1114.091860][T10062] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1114.092971][T17695] XFS (loop4): Unmounting Filesystem [ 1114.105907][T10062] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1114.117488][T10062] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1114.128124][T10062] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1114.129632][T20431] syz.1.4290: attempt to access beyond end of device [ 1114.129632][T20431] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1114.140082][T10062] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1114.161096][T10062] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.171046][T10062] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.186047][T10062] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.198712][T20368] XFS (loop3): page discard on page ffffea00015fd500, inode 0x506, pos 53248. [ 1114.208570][ T3590] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1114.212084][T20409] device batadv0 entered promiscuous mode [ 1114.222348][ T3590] XFS (loop3): Unmount and run xfs_repair [ 1114.234017][ T3590] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1114.241530][ T3590] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1114.255117][ T3590] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1114.270960][T20408] device batadv0 left promiscuous mode [ 1114.277589][ T3590] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1114.294250][ T3590] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1114.303220][ T3590] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1114.325528][ T3590] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.340335][ T3590] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.341277][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1114.358403][ T3590] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.358614][T20368] XFS (loop3): page discard on page ffffea00015fd540, inode 0x506, pos 57344. [ 1114.380650][T10201] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 1114.424410][T10201] XFS (loop3): Unmount and run xfs_repair [ 1114.433938][T10201] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1114.456207][T10201] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 1114.467722][T10201] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 1114.481975][T10201] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 1114.498574][T10201] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 1114.511154][T10201] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 1114.523612][T10201] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.536498][T10201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.545868][T10201] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1114.563992][T20368] XFS (loop3): page discard on page ffffea00015fd580, inode 0x506, pos 61440. [ 1114.656596][ T3590] loop3: writeback error on inode 1286, offset 0, sector 5112 [ 1114.696495][T19043] XFS (loop3): Unmounting Filesystem [ 1115.234017][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.247416][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.449230][T10201] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1115.507970][T20461] netlink: 'syz.3.4301': attribute type 1 has an invalid length. [ 1115.783893][ T3547] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1115.819642][T20443] loop2: detected capacity change from 0 to 32768 [ 1115.826564][T10201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.847716][T10201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.887434][T10201] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.927438][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1115.953914][T10201] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1115.992946][T10201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.032705][T20443] XFS (loop2): Mounting V5 Filesystem [ 1116.049057][T10201] usb 5-1: config 0 descriptor?? [ 1116.242367][T20443] XFS (loop2): Ending clean mount [ 1116.285047][T20443] XFS (loop2): Quotacheck needed: Please wait. [ 1116.301121][T20462] loop1: detected capacity change from 0 to 40427 [ 1116.323880][T20462] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1116.360802][T20462] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1116.388821][T20443] XFS (loop2): Quotacheck: Done. [ 1116.429672][T20462] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1116.490360][T20462] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1116.500153][T20462] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1116.544619][T20462] device batadv0 entered promiscuous mode [ 1116.617833][T20462] syz.1.4308: attempt to access beyond end of device [ 1116.617833][T20462] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1116.644312][T18643] XFS (loop2): Unmounting Filesystem [ 1116.690004][T10201] usbhid 5-1:0.0: can't add hid device: -71 [ 1116.694218][T20485] syz.1.4308: attempt to access beyond end of device [ 1116.694218][T20485] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1116.696292][T10201] usbhid: probe of 5-1:0.0 failed with error -71 [ 1116.733159][T10201] usb 5-1: USB disconnect, device number 17 [ 1116.734398][T20460] device batadv0 left promiscuous mode [ 1118.540774][T20509] loop2: detected capacity change from 0 to 32768 [ 1118.675655][T20511] loop1: detected capacity change from 0 to 40427 [ 1118.740408][T20511] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1118.783530][T20509] XFS (loop2): Mounting V5 Filesystem [ 1118.794910][T20511] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1118.867919][T20511] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1118.948911][T20509] XFS (loop2): Ending clean mount [ 1118.957990][T20509] XFS (loop2): Quotacheck needed: Please wait. [ 1118.966250][T20511] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1118.973342][T20511] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1119.023228][T20509] XFS (loop2): Quotacheck: Done. [ 1119.039067][T20511] device batadv0 entered promiscuous mode [ 1119.085626][T20511] syz.1.4323: attempt to access beyond end of device [ 1119.085626][T20511] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1119.130358][T20511] syz.1.4323: attempt to access beyond end of device [ 1119.130358][T20511] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1119.162609][T20510] device batadv0 left promiscuous mode [ 1119.208092][T20549] 9pnet_fd: Insufficient options for proto=fd [ 1119.233808][T10064] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1119.251775][T18643] XFS (loop2): Unmounting Filesystem [ 1120.350501][T20563] loop1: detected capacity change from 0 to 16384 [ 1120.368656][T20563] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1120.379306][T20563] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1120.389026][T20563] NILFS (loop1): mounting unchecked fs [ 1120.394572][T20563] NILFS (loop1): recovery required for readonly filesystem [ 1120.401849][T20563] NILFS (loop1): write access will be enabled during recovery [ 1120.429231][T10064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.434471][T20563] NILFS (loop1): recovery complete [ 1120.440534][T10064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.455215][T10064] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1120.468088][T10064] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1120.477181][T10064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.514773][T10064] usb 5-1: config 0 descriptor?? [ 1120.696755][T20568] loop2: detected capacity change from 0 to 64 [ 1120.952664][T20584] 9pnet_fd: Insufficient options for proto=fd [ 1121.054002][T10064] usbhid 5-1:0.0: can't add hid device: -71 [ 1121.222865][T10064] usbhid: probe of 5-1:0.0 failed with error -71 [ 1121.231152][T10064] usb 5-1: USB disconnect, device number 18 [ 1122.372797][T20586] loop3: detected capacity change from 0 to 40427 [ 1122.430534][T20586] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1122.455784][T20586] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1122.549647][T20586] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1122.845018][T20586] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1122.858998][T20586] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1123.416944][T20586] device batadv0 entered promiscuous mode [ 1123.583177][T20586] syz.3.4345: attempt to access beyond end of device [ 1123.583177][T20586] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1123.630875][T20586] syz.3.4345: attempt to access beyond end of device [ 1123.630875][T20586] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1123.674098][T20585] device batadv0 left promiscuous mode [ 1123.823507][T20638] 9pnet_fd: Insufficient options for proto=fd [ 1125.527443][T20664] netlink: 'syz.2.4363': attribute type 10 has an invalid length. [ 1126.656210][T20677] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1129.233573][T20669] loop3: detected capacity change from 0 to 40427 [ 1129.308437][T20669] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1129.402501][T20669] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1129.454054][T20669] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 1132.163446][T20754] loop4: detected capacity change from 0 to 1024 [ 1132.225041][T20754] EXT4-fs: quotafile must be on filesystem root [ 1132.304717][ T6049] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1132.443799][T20754] loop4: detected capacity change from 0 to 1024 [ 1132.532784][T20754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1132.772463][T20764] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4397'. [ 1133.084506][ T27] audit: type=1800 audit(1720216415.194:151): pid=20754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4392" name="bus" dev="loop4" ino=840 res=0 errno=0 [ 1133.938636][T10061] libceph: connect (1)[c::]:6789 error -101 [ 1133.947943][T10061] libceph: mon0 (1)[c::]:6789 connect error [ 1134.135154][T20777] ceph: No mds server is up or the cluster is laggy [ 1134.214243][T10061] libceph: connect (1)[c::]:6789 error -101 [ 1134.220302][T10061] libceph: mon0 (1)[c::]:6789 connect error [ 1136.399341][T20817] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4411'. [ 1137.856029][ T3610] libceph: connect (1)[c::]:6789 error -101 [ 1137.862076][ T3610] libceph: mon0 (1)[c::]:6789 connect error [ 1137.982098][T20831] ceph: No mds server is up or the cluster is laggy [ 1139.175165][T20853] loop2: detected capacity change from 0 to 32768 [ 1139.467571][T20853] ================================================================================ [ 1139.467821][T20858] ================================================================================ [ 1139.477408][T20853] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:9 [ 1139.477480][T20853] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 1139.477493][T20853] CPU: 0 PID: 20853 Comm: syz.2.4420 Not tainted 6.1.97-syzkaller #0 [ 1139.477513][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1139.477524][T20853] Call Trace: [ 1139.477530][T20853] [ 1139.477540][T20853] dump_stack_lvl+0x1e3/0x2cb [ 1139.477571][T20853] ? __get_metapage+0x9ae/0x1040 [ 1139.477602][T20853] ? nf_tcp_handle_invalid+0x642/0x642 [ 1139.477630][T20853] ? panic+0x764/0x764 [ 1139.477676][T20853] __ubsan_handle_out_of_bounds+0x118/0x140 [ 1139.477712][T20853] xtInsert+0xf41/0xfa0 [ 1139.477748][T20853] ? xtSearch+0x1ca0/0x1ca0 [ 1139.477798][T20853] ? mark_lock+0x9a/0x340 [ 1139.565547][T20853] ? __dquot_drop+0x420/0x420 [ 1139.570240][T20853] ? rcu_is_watching+0x11/0xb0 [ 1139.574999][T20853] ? __mark_inode_dirty+0x430/0xf80 [ 1139.580200][T20853] extAlloc+0xa70/0x1000 [ 1139.584458][T20853] ? jfs_ioc_trim+0x660/0x660 [ 1139.589145][T20853] jfs_get_block+0x417/0xe50 [ 1139.593729][T20853] ? create_page_buffers+0x1d2/0x4b0 [ 1139.599017][T20853] ? jfs_dirty_inode+0x230/0x230 [ 1139.603953][T20853] ? create_page_buffers+0x24e/0x4b0 [ 1139.609247][T20853] __block_write_begin_int+0x544/0x1a30 [ 1139.614811][T20853] ? jfs_dirty_inode+0x230/0x230 [ 1139.619742][T20853] ? page_zero_new_buffers+0x650/0x650 [ 1139.625200][T20853] ? jfs_dirty_inode+0x230/0x230 [ 1139.630129][T20853] block_write_begin+0x98/0x1f0 [ 1139.634969][T20853] ? jfs_write_begin+0x16/0x60 [ 1139.639728][T20853] jfs_write_begin+0x2d/0x60 [ 1139.644312][T20853] generic_perform_write+0x2fc/0x5e0 [ 1139.649605][T20853] ? generic_file_direct_write+0x460/0x460 [ 1139.655490][T20853] ? __file_remove_privs+0x640/0x640 [ 1139.660776][T20853] ? generic_write_checks+0x15c/0x1c0 [ 1139.666141][T20853] ? clear_nonspinnable+0x60/0x60 [ 1139.671171][T20853] __generic_file_write_iter+0x176/0x400 [ 1139.676801][T20853] generic_file_write_iter+0xab/0x310 [ 1139.682167][T20853] vfs_write+0x7ae/0xba0 [ 1139.686415][T20853] ? file_end_write+0x250/0x250 [ 1139.691260][T20853] ? __fget_files+0x28/0x4a0 [ 1139.695840][T20853] ? __fget_files+0x435/0x4a0 [ 1139.700512][T20853] ? __fdget_pos+0x2ba/0x360 [ 1139.705090][T20853] ? ksys_write+0x77/0x2c0 [ 1139.709499][T20853] ksys_write+0x19c/0x2c0 [ 1139.713818][T20853] ? print_irqtrace_events+0x210/0x210 [ 1139.719283][T20853] ? __ia32_sys_read+0x80/0x80 [ 1139.724038][T20853] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1139.730032][T20853] ? lockdep_hardirqs_on+0x94/0x130 [ 1139.735278][T20853] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1139.741274][T20853] do_syscall_64+0x3b/0xb0 [ 1139.745694][T20853] ? clear_bhb_loop+0x45/0xa0 [ 1139.750378][T20853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.756272][T20853] RIP: 0033:0x7fef03f75bd9 [ 1139.760692][T20853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.780376][T20853] RSP: 002b:00007fef04cd7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1139.788784][T20853] RAX: ffffffffffffffda RBX: 00007fef04103f60 RCX: 00007fef03f75bd9 [ 1139.796747][T20853] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005 [ 1139.804711][T20853] RBP: 00007fef03fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1139.812681][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.820644][T20853] R13: 000000000000000b R14: 00007fef04103f60 R15: 00007ffd1b97d088 [ 1139.828627][T20853] [ 1139.832517][T20853] ================================================================================ [ 1139.841990][T20853] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1139.849191][T20853] CPU: 0 PID: 20853 Comm: syz.2.4420 Not tainted 6.1.97-syzkaller #0 [ 1139.857273][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1139.867338][T20853] Call Trace: [ 1139.870634][T20853] [ 1139.873575][T20853] dump_stack_lvl+0x1e3/0x2cb [ 1139.878285][T20853] ? nf_tcp_handle_invalid+0x642/0x642 [ 1139.883769][T20853] ? panic+0x764/0x764 [ 1139.887863][T20853] ? vscnprintf+0x59/0x80 [ 1139.892207][T20853] panic+0x318/0x764 [ 1139.896117][T20853] ? check_panic_on_warn+0x1d/0xa0 [ 1139.901245][T20853] ? memcpy_page_flushcache+0xfc/0xfc [ 1139.906634][T20853] ? dump_stack_lvl+0x24f/0x2cb [ 1139.911526][T20853] check_panic_on_warn+0x7e/0xa0 [ 1139.913960][T20858] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:270:11 [ 1139.913978][T20858] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 1139.932493][T20853] __ubsan_handle_out_of_bounds+0x138/0x140 [ 1139.938420][T20853] xtInsert+0xf41/0xfa0 [ 1139.942615][T20853] ? xtSearch+0x1ca0/0x1ca0 [ 1139.947160][T20853] ? mark_lock+0x9a/0x340 [ 1139.951516][T20853] ? __dquot_drop+0x420/0x420 [ 1139.956220][T20853] ? rcu_is_watching+0x11/0xb0 [ 1139.960992][T20853] ? __mark_inode_dirty+0x430/0xf80 [ 1139.966217][T20853] extAlloc+0xa70/0x1000 [ 1139.970548][T20853] ? jfs_ioc_trim+0x660/0x660 [ 1139.975261][T20853] jfs_get_block+0x417/0xe50 [ 1139.979868][T20853] ? create_page_buffers+0x1d2/0x4b0 [ 1139.985176][T20853] ? jfs_dirty_inode+0x230/0x230 [ 1139.990141][T20853] ? create_page_buffers+0x24e/0x4b0 [ 1139.995445][T20853] __block_write_begin_int+0x544/0x1a30 [ 1140.001030][T20853] ? jfs_dirty_inode+0x230/0x230 [ 1140.005984][T20853] ? page_zero_new_buffers+0x650/0x650 [ 1140.011557][T20853] ? jfs_dirty_inode+0x230/0x230 [ 1140.016519][T20853] block_write_begin+0x98/0x1f0 [ 1140.021381][T20853] ? jfs_write_begin+0x16/0x60 [ 1140.026167][T20853] jfs_write_begin+0x2d/0x60 [ 1140.030781][T20853] generic_perform_write+0x2fc/0x5e0 [ 1140.036100][T20853] ? generic_file_direct_write+0x460/0x460 [ 1140.042269][T20853] ? __file_remove_privs+0x640/0x640 [ 1140.047576][T20853] ? generic_write_checks+0x15c/0x1c0 [ 1140.052969][T20853] ? clear_nonspinnable+0x60/0x60 [ 1140.058013][T20853] __generic_file_write_iter+0x176/0x400 [ 1140.063657][T20853] generic_file_write_iter+0xab/0x310 [ 1140.069045][T20853] vfs_write+0x7ae/0xba0 [ 1140.073306][T20853] ? file_end_write+0x250/0x250 [ 1140.078178][T20853] ? __fget_files+0x28/0x4a0 [ 1140.082780][T20853] ? __fget_files+0x435/0x4a0 [ 1140.087477][T20853] ? __fdget_pos+0x2ba/0x360 [ 1140.092082][T20853] ? ksys_write+0x77/0x2c0 [ 1140.096509][T20853] ksys_write+0x19c/0x2c0 [ 1140.100861][T20853] ? print_irqtrace_events+0x210/0x210 [ 1140.106341][T20853] ? __ia32_sys_read+0x80/0x80 [ 1140.111132][T20853] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1140.117126][T20853] ? lockdep_hardirqs_on+0x94/0x130 [ 1140.122346][T20853] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1140.128351][T20853] do_syscall_64+0x3b/0xb0 [ 1140.132788][T20853] ? clear_bhb_loop+0x45/0xa0 [ 1140.137484][T20853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1140.143389][T20853] RIP: 0033:0x7fef03f75bd9 [ 1140.147809][T20853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.167440][T20853] RSP: 002b:00007fef04cd7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1140.175889][T20853] RAX: ffffffffffffffda RBX: 00007fef04103f60 RCX: 00007fef03f75bd9 [ 1140.183879][T20853] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005 [ 1140.191867][T20853] RBP: 00007fef03fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1140.199853][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.207837][T20853] R13: 000000000000000b R14: 00007fef04103f60 R15: 00007ffd1b97d088 [ 1140.215840][T20853] [ 1140.219133][T20853] Kernel Offset: disabled [ 1140.223527][T20853] Rebooting in 86400 seconds..