last executing test programs: 13.787190063s ago: executing program 1 (id=951): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$KDSIGACCEPT(r3, 0x80047456, 0x100000001ffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 12.769584003s ago: executing program 1 (id=953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) listen(r5, 0x4) close_range(0xffffffffffffffff, r5, 0x0) 9.849185779s ago: executing program 0 (id=957): futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 8.381181317s ago: executing program 0 (id=961): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x238958, &(0x7f0000000380), 0x1e, 0x4f9, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="1175074d1dfb2a971174a710714d0d3ba86c985d9393c508250001dc7c3a5fb22320a790a6072780b37a3a3d752f718b27ed90dcc8402498b493062e0c655ac6f7664f4d9b51e6188a57ac7a2b636e9bb5621e246f3eba2a6fefa0ab8b517a5b94bc4cf0daf8da2fa3056e49cad7924958fd5effa05932803907d7ceb8a68cb230c2dc05be77446ae6639faf8b9b6111f046402d2c4b14cdab34c2c60099a7a150cbd453280b64d4b243e1381b77be5b656c0edafd6afb1fe2798e7c3a29362cb0492d867aba7b2a"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf0000000, r0, 0x4}, 0x38) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200810, &(0x7f00000000c0)={[{@user_subvol_rm}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@noacl}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36, 0x6b]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 8.380936938s ago: executing program 3 (id=962): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x12) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x163) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_getattr(r7, &(0x7f0000000200)={0x38}, 0x38, 0x0) 8.302465239s ago: executing program 1 (id=963): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000110000008500000050"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8, @ANYRES32], 0xd, 0x1a4, &(0x7f0000000640)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 8.142931063s ago: executing program 2 (id=964): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080), 0x0, 0x200980) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r4, 0x0, 0x200000000001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) sendfile(r5, r5, 0x0, 0xe0000000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 7.604357503s ago: executing program 2 (id=965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000380), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$hfs(&(0x7f0000000680), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x41, 0x2b4, &(0x7f0000000200)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000640)='.\x00', 0x100643c, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRES8, @ANYRES64, @ANYRES16, @ANYBLOB="718db7b4db9860baf49f56fdbae9ccf3cb80b447c06ddb76c43b99e1bece6e78255d5d9ffb41487b1d657af3c596b7e7c7da6f384a3b53bc6bce361261972298ab94c05d1e5763eb877aa2cb7e1e79cb81495270e83adad6dc8f7e05077fa8e426ac68e5e96e8dbfffbad9568555637d6ea9b8b3775934aab64c1879d9f5fe3c6ca03232611410cca1bad631990c8d8af498c69d225bba2c91d27c9bd5c8630ad91fd36c3333e5b715", @ANYRES32=0x0], 0x0, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f0000002100)=""/4091, 0xffb) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) 6.393778196s ago: executing program 2 (id=966): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) close_range(r3, 0xffffffffffffffff, 0x0) 5.369880006s ago: executing program 2 (id=967): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xe73, &(0x7f0000000480)={0x0, 0xbd29, 0x8, 0x0, 0x35f, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8004745a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x6002}, @void, @ipv6=@generic={0x8, 0x6, "362efa", 0x1e7, 0x32, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@routing={0x2b, 0x6, 0x0, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x15}]}, @srh={0x3a, 0x14, 0x4, 0xa, 0x4, 0x50, 0x6, [@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @empty, @local, @local, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}, @fragment={0x4, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x68}, @dstopts={0x3a, 0x0, '\x00', [@pad1]}, @fragment={0x87, 0x0, 0x81, 0x0, 0x0, 0x18, 0x67}], "6e5d8949bcafed663012cc691920a596b7fa7987d715a4db939cd63300beed70517db71dd1d0dcdf475fcedb17cef071c25ce54eba2fe25f40af5552f5934d3238cef251d37756fff1e2455e301cc2fad7b098c22076cc1deccf017273e0a3d0f0172497581ad259642de2094a3436eb720f1678ab25b6112a445fa4643ae1a88a763cb29cb772227d6e280539c43d3d07f0ad3e3fe6dc7d4c6527c437f1ad30267a53c480969b2b542496a828e9b045d683c4ea7755f30cc29114d4c24d018c8d9e4cc547d4bf856a36322f4c111e8e623861182f12c1149d92cc8bc89690d1c025211db7414c"}}}, 0x213) socket$inet6_sctp(0xa, 0x1, 0x84) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x6}}, 0x30) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.18735732s ago: executing program 0 (id=968): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x238958, &(0x7f0000000380), 0x1e, 0x4f9, &(0x7f0000000a00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="1175074d1dfb2a971174a710714d0d3ba86c985d9393c508250001dc7c3a5fb22320a790a6072780b37a3a3d752f718b27ed90dcc8402498b493062e0c655ac6f7664f4d9b51e6188a57ac7a2b636e9bb5621e246f3eba2a6fefa0ab8b517a5b94bc4cf0daf8da2fa3056e49cad7924958fd5effa05932803907d7ceb8a68cb230c2dc05be77446ae6639faf8b9b6111f046402d2c4b14cdab34c2c60099a7a150cbd453280b64d4b243e1381b77be5b656c0edafd6afb1fe2798e7c3a29362cb0492d867aba7b2a"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 5.034756803s ago: executing program 1 (id=969): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) rename(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000100000000000000000950000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.878423645s ago: executing program 3 (id=970): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r3, 0xffffffffffffffff, 0x0) 4.760485658s ago: executing program 0 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) listen(r5, 0x4) close_range(0xffffffffffffffff, r5, 0x0) 3.824682496s ago: executing program 3 (id=972): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) lseek(r0, 0xa, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 3.63142141s ago: executing program 2 (id=973): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) fcntl$setstatus(r4, 0x4, 0x40800) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r4, &(0x7f0000000640)={0x1d, r5, 0x0, {}, 0x1}, 0x18) sendfile(r4, r3, 0x0, 0x1000000000000a) 3.273159397s ago: executing program 1 (id=974): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d00)={[{@utf8no}, {@uni_xlateno}, {@fat=@errors_remount}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@numtail}, {@numtail}, {@numtail}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}]}, 0x2a, 0x35a, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, r2}, 0x38) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffffd, 0x2) clock_gettime(0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740000000011800068014000400200100"/170], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 3.031034561s ago: executing program 3 (id=975): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 1.730892856s ago: executing program 3 (id=976): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000110000008500000050"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8, @ANYRES32], 0xd, 0x1a4, &(0x7f0000000640)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.01321108s ago: executing program 0 (id=977): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r3, 0xffffffffffffffff, 0x0) 944.772912ms ago: executing program 1 (id=978): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x238958, &(0x7f0000000380), 0x1e, 0x4f9, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="1175074d1dfb2a971174a710714d0d3ba86c985d9393c508250001dc7c3a5fb22320a790a6072780b37a3a3d752f718b27ed90dcc8402498b493062e0c655ac6f7664f4d9b51e6188a57ac7a2b636e9bb5621e246f3eba2a6fefa0ab8b517a5b94bc4cf0daf8da2fa3056e49cad7924958fd5effa05932803907d7ceb8a68cb230c2dc05be77446ae6639faf8b9b6111f046402d2c4b14cdab34c2c60099a7a150cbd453280b64d4b243e1381b77be5b656c0edafd6afb1fe2798e7c3a29362cb0492d867aba7b2a"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf0000000, r0, 0x4}, 0x38) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200810, &(0x7f00000000c0)={[{@user_subvol_rm}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@noacl}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36, 0x6b]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 44.272659ms ago: executing program 2 (id=979): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x12) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x163) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_getattr(r7, &(0x7f0000000200)={0x38}, 0x38, 0x0) 33.672809ms ago: executing program 0 (id=980): socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000680), 0x0, 0x24008804, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=981): r0 = syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f00000015c0)='./file0\x00', 0x1000004, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x35, 0x39, 0x32, 0x70, 0x78, 0x2d, 0x2d, 0x37]}}, {@nossd}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") socket$netlink(0x10, 0x3, 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) kernel console output (not intermixed with test programs): s attempted by "./syz-executor exec"[6735] [ 129.421210][ T6747] 9pnet_virtio: no channels available for device 127.0.0.1 [ 129.448621][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 130.538631][ T6762] ax25_connect(): syz.1.274 uses autobind, please contact jreuter@yaina.de [ 130.756972][ T6754] pim6reg: entered allmulticast mode [ 130.854036][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.033879][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 131.047278][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.059949][ T787] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.081176][ T787] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 131.091763][ T787] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 131.106730][ T787] usb 3-1: Product: syz [ 131.141701][ T787] usb 3-1: SerialNumber: syz [ 131.153500][ T787] usb 3-1: config 0 descriptor?? [ 131.382260][ T787] usb 3-1: USB disconnect, device number 5 [ 131.716755][ T6779] netlink: 272 bytes leftover after parsing attributes in process `syz.3.278'. [ 132.080719][ T6793] ax25_connect(): syz.3.283 uses autobind, please contact jreuter@yaina.de [ 132.210100][ T6799] usb usb8: usbfs: process 6799 (syz.3.285) did not claim interface 0 before use [ 132.244106][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.443967][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 132.453492][ T8] usb 1-1: config 0 has no interfaces? [ 132.462511][ T8] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 132.475540][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.486594][ T8] usb 1-1: Product: syz [ 132.507447][ T8] usb 1-1: Manufacturer: syz [ 132.525777][ T8] usb 1-1: SerialNumber: syz [ 132.568867][ T8] usb 1-1: config 0 descriptor?? [ 132.967998][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.975869][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.404856][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.544291][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.716085][ T6819] netlink: 'syz.2.289': attribute type 5 has an invalid length. [ 134.135336][ T788] usb 1-1: USB disconnect, device number 4 [ 137.629394][ T6848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.882646][ T6848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.186855][ T6848] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.196745][ T6848] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.205763][ T6848] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.215222][ T6848] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.422456][ T6854] veth0_to_team: entered promiscuous mode [ 138.496786][ T6868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.305'. [ 138.699120][ T6897] netlink: 64 bytes leftover after parsing attributes in process `syz.2.309'. [ 141.320842][ T6878] IPVS: starting estimator thread 0... [ 141.434094][ T6927] IPVS: using max 34 ests per chain, 81600 per kthread [ 141.473871][ T27] audit: type=1326 audit(1758414248.906:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb438ec29 code=0x7ffc0000 [ 141.515569][ T27] audit: type=1326 audit(1758414248.906:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb438ec29 code=0x7ffc0000 [ 141.625755][ T27] audit: type=1326 audit(1758414248.906:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cb432ae09 code=0x7ffc0000 [ 141.668445][ T27] audit: type=1326 audit(1758414248.906:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb438ec29 code=0x7ffc0000 [ 141.716172][ T27] audit: type=1326 audit(1758414248.906:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cb432ae09 code=0x7ffc0000 [ 141.764039][ T27] audit: type=1326 audit(1758414248.906:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb438ec29 code=0x7ffc0000 [ 141.816101][ T27] audit: type=1326 audit(1758414248.906:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb438ec29 code=0x7ffc0000 [ 141.863870][ T27] audit: type=1326 audit(1758414248.906:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb438ec29 code=0x7ffc0000 [ 141.922203][ T27] audit: type=1326 audit(1758414248.906:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb438ec29 code=0x7ffc0000 [ 141.993639][ T27] audit: type=1326 audit(1758414248.936:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb438ec29 code=0x7ffc0000 [ 144.287376][ T6954] usb usb8: usbfs: process 6954 (syz.3.323) did not claim interface 0 before use [ 144.543905][ T6889] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.896056][ T6889] usb 3-1: Using ep0 maxpacket: 8 [ 144.918739][ T6889] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 144.928768][ T6889] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 144.942502][ T6965] input: syz1 as /devices/virtual/input/input8 [ 144.966374][ T6889] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.012601][ T6889] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 145.051948][ T6889] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 145.100400][ T6889] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.154355][ T6889] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.163679][ T6889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.383706][ T6889] usb 3-1: GET_CAPABILITIES returned 0 [ 145.407114][ T6889] usbtmc 3-1:16.0: can't read capabilities [ 145.622829][ T6889] usb 3-1: USB disconnect, device number 6 [ 147.192771][ T6997] CUSE: info not properly terminated [ 147.220065][ T7002] trusted_key: syz.1.339 sent an empty control message without MSG_MORE. [ 149.413470][ T6887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.598085][ T6887] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.620241][ T6887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.642363][ T6887] usb 3-1: Product: syz [ 149.656417][ T6887] usb 3-1: Manufacturer: syz [ 149.669043][ T6887] usb 3-1: SerialNumber: syz [ 149.689219][ T6887] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 149.717760][ T6889] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.747752][ T7043] CUSE: info not properly terminated [ 151.054087][ T6889] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 151.068842][ T6889] ath9k_htc: Failed to initialize the device [ 151.116135][ T6889] usb 3-1: ath9k_htc: USB layer deinitialized [ 151.842862][ T6887] usb 3-1: USB disconnect, device number 7 [ 152.016318][ T7062] loop2: detected capacity change from 0 to 8 [ 152.025348][ T7062] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 152.253871][ T7065] loop0: detected capacity change from 0 to 8 [ 152.261773][ T7065] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 152.888005][ T7079] cramfs: Error -5 while decompressing! [ 152.917586][ T7079] cramfs: ffffffff96fe0308(26)->ffff888055d6e000(4096) [ 153.010943][ T7079] cramfs: Error -3 while decompressing! [ 153.137677][ T7079] cramfs: ffffffff96fe0322(26)->ffff888055d6f000(4096) [ 153.188356][ T7079] cramfs: Error -3 while decompressing! [ 153.231858][ T7079] cramfs: ffffffff96fe033c(16)->ffff888055d70000(4096) [ 153.281065][ T7079] cramfs: Error -5 while decompressing! [ 153.323322][ T7079] cramfs: ffffffff96fe0308(26)->ffff888055d6e000(4096) [ 153.370636][ T27] kauditd_printk_skb: 386 callbacks suppressed [ 153.371050][ T27] audit: type=1800 audit(1758414260.806:432): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.360" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 153.796785][ T7076] CUSE: info not properly terminated [ 154.106283][ T7095] loop0: detected capacity change from 0 to 8 [ 154.113668][ T7095] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 154.323883][ T6887] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.604776][ T7104] cramfs: Error -5 while decompressing! [ 154.627873][ T7104] cramfs: ffffffff96fdc308(26)->ffff888059c76000(4096) [ 154.649645][ T7104] cramfs: Error -3 while decompressing! [ 154.665734][ T7104] cramfs: ffffffff96fdc322(26)->ffff888059c77000(4096) [ 154.671562][ T6887] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 154.681926][ T6887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.690448][ T6887] usb 3-1: Product: syz [ 154.694790][ T6887] usb 3-1: Manufacturer: syz [ 154.699512][ T6887] usb 3-1: SerialNumber: syz [ 154.710206][ T7104] cramfs: Error -3 while decompressing! [ 154.711325][ T6887] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 154.728047][ T7104] cramfs: ffffffff96fdc33c(16)->ffff88805bac8000(4096) [ 154.732901][ T6889] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 154.749384][ T7104] cramfs: Error -5 while decompressing! [ 154.875480][ T7104] cramfs: ffffffff96fdc308(26)->ffff888059c76000(4096) [ 155.344078][ T27] audit: type=1800 audit(1758414262.786:433): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.369" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 155.773987][ T6889] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 155.774816][ T7111] 9pnet: Could not find request transport: rdm [ 155.781151][ T6889] ath9k_htc: Failed to initialize the device [ 155.869575][ T6889] usb 3-1: ath9k_htc: USB layer deinitialized [ 155.954222][ T6881] usb 3-1: USB disconnect, device number 8 [ 156.170542][ T7123] loop0: detected capacity change from 0 to 8 [ 156.205996][ T7123] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 156.280142][ T7125] loop3: detected capacity change from 0 to 256 [ 156.365452][ T7125] FAT-fs (loop3): Directory bread(block 64) failed [ 156.382655][ T7125] FAT-fs (loop3): Directory bread(block 65) failed [ 156.392880][ T7125] FAT-fs (loop3): Directory bread(block 66) failed [ 156.413069][ T7125] FAT-fs (loop3): Directory bread(block 67) failed [ 156.434119][ T7125] FAT-fs (loop3): Directory bread(block 68) failed [ 156.440720][ T7125] FAT-fs (loop3): Directory bread(block 69) failed [ 156.463948][ T7125] FAT-fs (loop3): Directory bread(block 70) failed [ 156.470508][ T7125] FAT-fs (loop3): Directory bread(block 71) failed [ 156.483076][ T7125] FAT-fs (loop3): Directory bread(block 72) failed [ 156.495813][ T7125] FAT-fs (loop3): Directory bread(block 73) failed [ 157.165659][ T7138] cramfs: Error -5 while decompressing! [ 157.171356][ T7138] cramfs: ffffffff96fe0308(26)->ffff88805b38e000(4096) [ 157.178367][ T7138] cramfs: Error -3 while decompressing! [ 157.191822][ T7138] cramfs: ffffffff96fe0322(26)->ffff88805b390000(4096) [ 157.215104][ T7138] cramfs: Error -3 while decompressing! [ 157.227722][ T7138] cramfs: ffffffff96fe033c(16)->ffff88805b391000(4096) [ 157.239371][ T7138] cramfs: Error -5 while decompressing! [ 157.246821][ T7138] cramfs: ffffffff96fe0308(26)->ffff88805b38e000(4096) [ 157.277669][ T27] audit: type=1800 audit(1758414264.706:434): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.378" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 157.498446][ T7143] loop1: detected capacity change from 0 to 8 [ 157.511248][ T7143] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 157.655187][ T7146] 9pnet: Could not find request transport: rdm [ 158.045645][ T7155] cramfs: Error -5 while decompressing! [ 158.051257][ T7155] cramfs: ffffffff96fdc308(26)->ffff88805676e000(4096) [ 158.159898][ T7155] cramfs: Error -3 while decompressing! [ 158.198648][ T7155] cramfs: ffffffff96fdc322(26)->ffff888057c93000(4096) [ 158.224065][ T7155] cramfs: Error -3 while decompressing! [ 158.239184][ T7155] cramfs: ffffffff96fdc33c(16)->ffff888059fe2000(4096) [ 158.276598][ T7155] cramfs: Error -5 while decompressing! [ 158.318873][ T7155] cramfs: ffffffff96fdc308(26)->ffff88805676e000(4096) [ 158.384770][ T27] audit: type=1800 audit(1758414265.796:435): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.386" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 158.564140][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.803483][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.912478][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.029866][ T8] usb 3-1: Product: syz [ 159.083319][ T8] usb 3-1: Manufacturer: syz [ 159.148255][ T8] usb 3-1: SerialNumber: syz [ 159.287416][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.355367][ T6878] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.388559][ T7163] loop0: detected capacity change from 0 to 32768 [ 159.398526][ T7163] ======================================================= [ 159.398526][ T7163] WARNING: The mand mount option has been deprecated and [ 159.398526][ T7163] and is ignored by this kernel. Remove the mand [ 159.398526][ T7163] option from the mount to silence this warning. [ 159.398526][ T7163] ======================================================= [ 159.433384][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.538231][ T7174] 9pnet: Could not find request transport: rdm [ 159.547851][ T7163] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.467680][ T6878] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 160.485385][ T7180] (syz.0.393,7180,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 160.576494][ T6878] ath9k_htc: Failed to initialize the device [ 160.635018][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 160.642687][ T6878] usb 3-1: ath9k_htc: USB layer deinitialized [ 160.923500][ T7187] loop1: detected capacity change from 0 to 8 [ 160.946986][ T7187] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 161.232764][ T6889] usb 3-1: USB disconnect, device number 9 [ 162.075675][ T7204] netlink: 68 bytes leftover after parsing attributes in process `syz.2.406'. [ 162.268045][ T7210] cramfs: Error -5 while decompressing! [ 162.293715][ T7210] cramfs: ffffffff96fe0308(26)->ffff88805ba61000(4096) [ 162.322854][ T7210] cramfs: Error -3 while decompressing! [ 162.502141][ T7210] cramfs: ffffffff96fe0322(26)->ffff88805ba62000(4096) [ 162.625899][ T7214] (null): rxe_set_mtu: Set mtu to 256 [ 162.637774][ T7214] vxcan1 speed is unknown, defaulting to 1000 [ 162.658701][ T7214] vxcan1 speed is unknown, defaulting to 1000 [ 162.678499][ T7214] vxcan1 speed is unknown, defaulting to 1000 [ 163.250797][ T7214] infiniband syz2: set active [ 163.255728][ T7214] infiniband syz2: added vxcan1 [ 163.262111][ T7214] syz2: rxe_create_cq: returned err = -12 [ 163.268140][ T7214] infiniband syz2: Couldn't create ib_mad CQ [ 163.274304][ T7214] infiniband syz2: Couldn't open port 1 [ 163.293174][ T7214] RDS/IB: syz2: added [ 163.297524][ T7214] smc: adding ib device syz2 with port count 1 [ 163.303848][ T7214] smc: ib device syz2 port 1 has pnetid [ 163.312270][ T7214] vxcan1 speed is unknown, defaulting to 1000 [ 163.393676][ T7214] vxcan1 speed is unknown, defaulting to 1000 [ 163.475651][ T7214] vxcan1 speed is unknown, defaulting to 1000 [ 163.557609][ T7214] vxcan1 speed is unknown, defaulting to 1000 [ 163.695323][ T8] vxcan1 speed is unknown, defaulting to 1000 [ 163.702167][ T8] vxcan1 speed is unknown, defaulting to 1000 [ 163.783380][ T7210] cramfs: Error -3 while decompressing! [ 163.841570][ T7210] cramfs: ffffffff96fe033c(16)->ffff88805ba63000(4096) [ 163.893560][ T7210] cramfs: Error -5 while decompressing! [ 163.917238][ T7210] cramfs: ffffffff96fe0308(26)->ffff88805ba61000(4096) [ 163.944476][ T27] audit: type=1800 audit(1758414271.386:436): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.401" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 164.032909][ T7207] loop3: detected capacity change from 0 to 32768 [ 164.169415][ T7207] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.480387][ T7224] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 164.488449][ T7224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.496126][ T7224] IPv6: NLM_F_CREATE should be set when creating new route [ 164.503345][ T7224] IPv6: NLM_F_CREATE should be set when creating new route [ 164.512763][ T7224] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 164.520536][ T7224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.827599][ T7224] (syz.3.407,7224,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 165.007021][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 165.327382][ T7232] loop0: detected capacity change from 0 to 8 [ 165.348947][ T7232] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 165.441981][ T7239] netlink: 68 bytes leftover after parsing attributes in process `syz.3.416'. [ 165.602000][ T7241] cramfs: Error -5 while decompressing! [ 165.607914][ T7241] cramfs: ffffffff96fdc308(26)->ffff88805c448000(4096) [ 165.614987][ T7241] cramfs: Error -3 while decompressing! [ 165.620550][ T7241] cramfs: ffffffff96fdc322(26)->ffff88805c449000(4096) [ 165.627515][ T7241] cramfs: Error -3 while decompressing! [ 165.633079][ T7241] cramfs: ffffffff96fdc33c(16)->ffff88805c44a000(4096) [ 165.640219][ T7241] cramfs: Error -5 while decompressing! [ 165.645920][ T7241] cramfs: ffffffff96fdc308(26)->ffff88805c448000(4096) [ 165.653118][ T27] audit: type=1800 audit(1758414273.086:437): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.413" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 165.755968][ T6889] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.954833][ T6889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.964366][ T6889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.972550][ T6889] usb 2-1: Product: syz [ 165.979262][ T6889] usb 2-1: Manufacturer: syz [ 165.984075][ T6889] usb 2-1: SerialNumber: syz [ 165.996742][ T6889] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.012870][ T6887] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.652718][ T7255] ax25_connect(): syz.0.419 uses autobind, please contact jreuter@yaina.de [ 167.045929][ T6887] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 167.387119][ T6887] ath9k_htc: Failed to initialize the device [ 167.434057][ T6887] usb 2-1: ath9k_htc: USB layer deinitialized [ 167.478675][ T7263] loop0: detected capacity change from 0 to 512 [ 167.943208][ T7274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.425'. [ 168.071354][ T7276] loop3: detected capacity change from 0 to 256 [ 168.206658][ T7276] FAT-fs (loop3): Directory bread(block 64) failed [ 168.213580][ T7276] FAT-fs (loop3): Directory bread(block 65) failed [ 168.228140][ T7276] FAT-fs (loop3): Directory bread(block 66) failed [ 168.238024][ T7276] FAT-fs (loop3): Directory bread(block 67) failed [ 168.282393][ T7276] FAT-fs (loop3): Directory bread(block 68) failed [ 168.299943][ T7276] FAT-fs (loop3): Directory bread(block 69) failed [ 168.310120][ T7276] FAT-fs (loop3): Directory bread(block 70) failed [ 168.317115][ T7276] FAT-fs (loop3): Directory bread(block 71) failed [ 168.317336][ T7280] loop2: detected capacity change from 0 to 8 [ 168.324134][ T7276] FAT-fs (loop3): Directory bread(block 72) failed [ 168.336797][ T7276] FAT-fs (loop3): Directory bread(block 73) failed [ 168.384850][ T7280] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 168.579105][ T6889] usb 2-1: USB disconnect, device number 5 [ 168.627983][ T7281] cramfs: Error -5 while decompressing! [ 168.633575][ T7281] cramfs: ffffffff96fe0308(26)->ffff88805c6ba000(4096) [ 168.640580][ T7281] cramfs: Error -3 while decompressing! [ 168.646421][ T7281] cramfs: ffffffff96fe0322(26)->ffff88806e00e000(4096) [ 168.653874][ T7281] cramfs: Error -3 while decompressing! [ 168.659431][ T7281] cramfs: ffffffff96fe033c(16)->ffff88807df24000(4096) [ 168.667417][ T7281] cramfs: Error -5 while decompressing! [ 168.673016][ T7281] cramfs: ffffffff96fe0308(26)->ffff88805c6ba000(4096) [ 168.740353][ T27] audit: type=1800 audit(1758414276.116:438): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.428" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 169.414090][ T7289] ax25_connect(): syz.1.429 uses autobind, please contact jreuter@yaina.de [ 170.383892][ T6889] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.615568][ T6889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.629050][ T6889] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.638481][ T6889] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 170.659376][ T6889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.670942][ T6889] usb 4-1: config 0 descriptor?? [ 172.736056][ T6889] usb 4-1: USB disconnect, device number 7 [ 172.980172][ T7314] loop1: detected capacity change from 0 to 1764 [ 174.053600][ T7330] loop1: detected capacity change from 0 to 256 [ 174.124565][ T7331] ax25_connect(): syz.2.441 uses autobind, please contact jreuter@yaina.de [ 174.864618][ T7330] FAT-fs (loop1): Directory bread(block 64) failed [ 174.871185][ T7330] FAT-fs (loop1): Directory bread(block 65) failed [ 174.905547][ T7330] FAT-fs (loop1): Directory bread(block 66) failed [ 174.940792][ T7330] FAT-fs (loop1): Directory bread(block 67) failed [ 174.968041][ T7330] FAT-fs (loop1): Directory bread(block 68) failed [ 174.997245][ T7330] FAT-fs (loop1): Directory bread(block 69) failed [ 175.028401][ T7330] FAT-fs (loop1): Directory bread(block 70) failed [ 175.032592][ T7328] block device autoloading is deprecated and will be removed. [ 175.046528][ T7328] syz.3.439: attempt to access beyond end of device [ 175.046528][ T7328] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 175.059671][ T7330] FAT-fs (loop1): Directory bread(block 71) failed [ 175.078814][ T7330] FAT-fs (loop1): Directory bread(block 72) failed [ 175.109895][ T7330] FAT-fs (loop1): Directory bread(block 73) failed [ 175.923496][ T7344] loop1: detected capacity change from 0 to 512 [ 176.186242][ T7345] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 176.537465][ T7352] loop0: detected capacity change from 0 to 8 [ 176.606013][ T7352] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 177.112654][ T7356] cramfs: Error -5 while decompressing! [ 177.118403][ T7356] cramfs: ffffffff96fdc308(26)->ffff8880584f3000(4096) [ 177.125993][ T7356] cramfs: Error -3 while decompressing! [ 177.131601][ T7356] cramfs: ffffffff96fdc322(26)->ffff888056756000(4096) [ 177.138777][ T7356] cramfs: Error -3 while decompressing! [ 177.144372][ T7356] cramfs: ffffffff96fdc33c(16)->ffff888056757000(4096) [ 177.151794][ T7356] cramfs: Error -5 while decompressing! [ 177.157412][ T7356] cramfs: ffffffff96fdc308(26)->ffff8880584f3000(4096) [ 177.166958][ T27] audit: type=1800 audit(1758414284.606:439): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.449" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 177.703996][ T6878] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.895847][ T7362] ax25_connect(): syz.2.452 uses autobind, please contact jreuter@yaina.de [ 178.603896][ T6878] usb 4-1: Using ep0 maxpacket: 16 [ 178.610823][ T7345] loop1: detected capacity change from 0 to 32768 [ 178.627774][ T7345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.447 (7345) [ 178.641982][ T6878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.652271][ T6878] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.699504][ T6878] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 178.713445][ T7345] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.724493][ T7345] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 178.733516][ T7345] BTRFS info (device loop1): setting nodatacow, compression disabled [ 178.751955][ T6878] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 178.763916][ T6878] usb 4-1: Product: syz [ 178.768119][ T6878] usb 4-1: SerialNumber: syz [ 178.805258][ T6878] usb 4-1: config 0 descriptor?? [ 178.946834][ T7364] loop2: detected capacity change from 0 to 32768 [ 178.953931][ T7364] XFS: ikeep mount option is deprecated. [ 178.963593][ T7345] BTRFS info (device loop1): max_inline at 0 [ 178.971073][ T7345] BTRFS info (device loop1): using free space tree [ 179.002691][ T7364] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.042347][ T7345] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 179.126897][ T7364] XFS (loop2): Ending clean mount [ 179.149267][ T7364] XFS (loop2): Quotacheck needed: Please wait. [ 179.193140][ T7364] XFS (loop2): Quotacheck: Done. [ 179.214312][ T7345] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 179.236102][ T7345] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 179.684253][ T7345] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 179.743972][ T7345] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 179.797522][ T27] audit: type=1800 audit(1758414287.236:440): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.453" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 179.846411][ T7345] BTRFS error (device loop1): open_ctree failed: -12 [ 179.965543][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.152856][ T7413] ax25_connect(): syz.2.461 uses autobind, please contact jreuter@yaina.de [ 181.442527][ T6887] usb 4-1: USB disconnect, device number 8 [ 182.649653][ T7423] random: crng reseeded on system resumption [ 183.252339][ T7420] sched: RT throttling activated [ 183.579285][ T7424] (null): rxe_set_mtu: Set mtu to 256 [ 183.586544][ T7424] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 184.143742][ T7437] loop1: detected capacity change from 0 to 32768 [ 184.151269][ T7437] XFS: ikeep mount option is deprecated. [ 184.243078][ T7437] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.328789][ T7437] XFS (loop1): Ending clean mount [ 184.478594][ T7437] XFS (loop1): Quotacheck needed: Please wait. [ 184.512544][ T7437] XFS (loop1): Quotacheck: Done. [ 184.579256][ T7452] ax25_connect(): syz.3.470 uses autobind, please contact jreuter@yaina.de [ 185.556567][ T5779] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.665906][ T6879] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.913892][ T6879] usb 4-1: Using ep0 maxpacket: 16 [ 185.926022][ T6879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.943995][ T6879] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.568369][ T7465] random: crng reseeded on system resumption [ 188.631888][ T6879] usb 4-1: string descriptor 0 read error: -71 [ 188.648471][ T6879] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 188.701035][ T6879] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 188.791308][ T6879] usb 4-1: config 0 descriptor?? [ 188.843421][ T7470] loop3: detected capacity change from 0 to 512 [ 188.850243][ T6879] usb 4-1: can't set config #0, error -71 [ 188.880573][ T6879] usb 4-1: USB disconnect, device number 9 [ 189.261191][ T7483] ax25_connect(): syz.0.479 uses autobind, please contact jreuter@yaina.de [ 191.367033][ T7495] loop0: detected capacity change from 0 to 47 [ 191.718294][ T7502] random: crng reseeded on system resumption [ 192.531018][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 192.531018][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 192.531073][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 192.537104][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 192.945042][ T6879] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 193.249385][ T6879] usb 3-1: Using ep0 maxpacket: 16 [ 193.305838][ T6879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.331309][ T6879] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.183756][ T6879] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 194.192911][ T6879] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 194.221751][ T6879] usb 3-1: Product: syz [ 194.226055][ T6879] usb 3-1: SerialNumber: syz [ 194.237967][ T6879] usb 3-1: config 0 descriptor?? [ 194.418080][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425747][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.590608][ T7522] ax25_connect(): syz.3.488 uses autobind, please contact jreuter@yaina.de [ 196.106910][ T7536] vxcan1 speed is unknown, defaulting to 1000 [ 196.207427][ T7531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.491'. [ 196.357692][ T7541] random: crng reseeded on system resumption [ 196.876191][ T6879] usb 3-1: USB disconnect, device number 10 [ 197.120182][ T7545] loop2: detected capacity change from 0 to 512 [ 197.150827][ T7547] loop1: detected capacity change from 0 to 8 [ 197.157954][ T7547] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 197.192646][ T7549] loop0: detected capacity change from 0 to 64 [ 197.210371][ T7549] hfs: unable to locate alternate MDB [ 197.216588][ T7549] hfs: continuing without an alternate MDB [ 197.343193][ T7551] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 197.373650][ T7549] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 197.462953][ T7555] cramfs: Error -5 while decompressing! [ 197.468815][ T7555] cramfs: ffffffff96fe0308(26)->ffff88805b8f0000(4096) [ 197.475922][ T7555] cramfs: Error -3 while decompressing! [ 197.481514][ T7555] cramfs: ffffffff96fe0322(26)->ffff88805b8f1000(4096) [ 197.488524][ T7555] cramfs: Error -3 while decompressing! [ 197.494253][ T7555] cramfs: ffffffff96fe033c(16)->ffff88805b8f2000(4096) [ 197.501397][ T7555] cramfs: Error -5 while decompressing! [ 197.507145][ T7555] cramfs: ffffffff96fe0308(26)->ffff88805b8f0000(4096) [ 197.518794][ T27] audit: type=1800 audit(1758414304.956:441): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.493" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 199.672259][ T7566] ax25_connect(): syz.0.498 uses autobind, please contact jreuter@yaina.de [ 200.017365][ T7558] loop1: detected capacity change from 0 to 32768 [ 200.043664][ T7558] XFS: noikeep mount option is deprecated. [ 200.057211][ T7558] XFS: noikeep mount option is deprecated. [ 200.073587][ T7558] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.319403][ T7580] loop2: detected capacity change from 0 to 8 [ 200.327008][ T7580] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 200.334111][ T7558] XFS (loop1): Ending clean mount [ 200.378668][ T7558] XFS (loop1): Quotacheck needed: Please wait. [ 200.519341][ T7558] XFS (loop1): Quotacheck: Done. [ 200.691986][ T7585] cramfs: Error -5 while decompressing! [ 200.697755][ T7585] cramfs: ffffffff96fdc308(26)->ffff88806e774000(4096) [ 200.705149][ T7585] cramfs: Error -3 while decompressing! [ 200.710711][ T7585] cramfs: ffffffff96fdc322(26)->ffff88806e775000(4096) [ 200.717669][ T7585] cramfs: Error -3 while decompressing! [ 200.723225][ T7585] cramfs: ffffffff96fdc33c(16)->ffff88806e776000(4096) [ 200.730534][ T7585] cramfs: Error -5 while decompressing! [ 200.736140][ T7585] cramfs: ffffffff96fdc308(26)->ffff88806e774000(4096) [ 200.785101][ T27] audit: type=1800 audit(1758414308.176:442): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.501" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 200.814149][ T6887] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 200.930356][ T7587] random: crng reseeded on system resumption [ 201.846235][ T6887] usb 1-1: Using ep0 maxpacket: 16 [ 201.875376][ T6887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.876706][ T5779] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.893829][ T6887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 201.905251][ T6887] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 201.924193][ T6887] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 201.932743][ T6887] usb 1-1: Product: syz [ 201.953945][ T6887] usb 1-1: SerialNumber: syz [ 201.961411][ T6887] usb 1-1: config 0 descriptor?? [ 202.599472][ T7589] loop2: detected capacity change from 0 to 32768 [ 202.636991][ T7589] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.710809][ T7589] XFS (loop2): Ending clean mount [ 202.754645][ T7589] XFS (loop2): Quotacheck needed: Please wait. [ 202.757738][ T6890] usb 1-1: USB disconnect, device number 5 [ 202.831375][ T7589] XFS (loop2): Quotacheck: Done. [ 203.330217][ T5788] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.607238][ T7615] ax25_connect(): syz.3.508 uses autobind, please contact jreuter@yaina.de [ 204.425580][ T7619] loop3: detected capacity change from 0 to 1764 [ 204.653074][ T7624] loop1: detected capacity change from 0 to 8 [ 204.670351][ T7624] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 205.143602][ T7626] cramfs: Error -5 while decompressing! [ 205.149582][ T7626] cramfs: ffffffff96fe0308(26)->ffff888055e83000(4096) [ 205.156785][ T7626] cramfs: Error -3 while decompressing! [ 205.162416][ T7626] cramfs: ffffffff96fe0322(26)->ffff888055e84000(4096) [ 205.169446][ T7626] cramfs: Error -3 while decompressing! [ 205.175394][ T7626] cramfs: ffffffff96fe033c(16)->ffff888055e85000(4096) [ 205.182415][ T7626] cramfs: Error -5 while decompressing! [ 205.188149][ T7626] cramfs: ffffffff96fe0308(26)->ffff888055e83000(4096) [ 205.278411][ T27] audit: type=1800 audit(1758414312.636:443): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.513" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 205.451310][ T7629] vxcan1 speed is unknown, defaulting to 1000 [ 205.836826][ T7636] loop1: detected capacity change from 0 to 8 [ 205.855835][ T7636] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 206.719385][ T7640] cramfs: Error -5 while decompressing! [ 206.725132][ T7640] cramfs: ffffffff96fdc308(26)->ffff8880586d2000(4096) [ 206.732118][ T7640] cramfs: Error -3 while decompressing! [ 206.737748][ T7640] cramfs: ffffffff96fdc322(26)->ffff8880586d3000(4096) [ 206.745117][ T7640] cramfs: Error -3 while decompressing! [ 206.750715][ T7640] cramfs: ffffffff96fdc33c(16)->ffff8880586d4000(4096) [ 206.757970][ T7640] cramfs: Error -5 while decompressing! [ 206.763869][ T7640] cramfs: ffffffff96fdc308(26)->ffff8880586d2000(4096) [ 207.196168][ T27] audit: type=1800 audit(1758414314.206:444): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.514" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 207.264085][ T7622] loop2: detected capacity change from 0 to 32768 [ 207.322894][ T7644] loop0: detected capacity change from 0 to 512 [ 207.528056][ T7642] loop1: detected capacity change from 0 to 40427 [ 207.543885][ T7622] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 207.555501][ T7642] F2FS-fs (loop1): invalid crc value [ 207.571513][ T7642] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.597578][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 207.635858][ T7642] F2FS-fs (loop1): Start checkpoint disabled! [ 207.656752][ T7642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 207.710888][ T7642] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 207.717846][ T7642] PKCS7: Only support pkcs7_signedData type [ 207.724021][ T6881] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.814047][ T27] audit: type=1800 audit(1758414315.246:445): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.517" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 207.940992][ T7653] syz.1.517: attempt to access beyond end of device [ 207.940992][ T7653] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 207.959340][ T7653] syz.1.517: attempt to access beyond end of device [ 207.959340][ T7653] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.976259][ T7653] syz.1.517: attempt to access beyond end of device [ 207.976259][ T7653] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.991525][ T7653] syz.1.517: attempt to access beyond end of device [ 207.991525][ T7653] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.007036][ T7653] syz.1.517: attempt to access beyond end of device [ 208.007036][ T7653] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.028093][ T7653] syz.1.517: attempt to access beyond end of device [ 208.028093][ T7653] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 208.042951][ T7653] syz.1.517: attempt to access beyond end of device [ 208.042951][ T7653] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.058815][ T7653] syz.1.517: attempt to access beyond end of device [ 208.058815][ T7653] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 208.074863][ T7653] syz.1.517: attempt to access beyond end of device [ 208.074863][ T7653] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 208.089919][ T7653] syz.1.517: attempt to access beyond end of device [ 208.089919][ T7653] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 209.903866][ T6881] usb 4-1: Using ep0 maxpacket: 16 [ 209.911487][ T6881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.937417][ T6881] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.963563][ T6881] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 209.972688][ T6881] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 209.980883][ T6881] usb 4-1: Product: syz [ 209.985181][ T6881] usb 4-1: SerialNumber: syz [ 210.045861][ T6881] usb 4-1: config 0 descriptor?? [ 210.102757][ T78] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 210.124075][ T78] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 210.629863][ T7662] ax25_connect(): syz.2.521 uses autobind, please contact jreuter@yaina.de [ 211.118961][ T6879] usb 4-1: USB disconnect, device number 10 [ 211.466797][ T7666] loop1: detected capacity change from 0 to 256 [ 211.529194][ T7666] FAT-fs (loop1): Directory bread(block 64) failed [ 211.562768][ T7666] FAT-fs (loop1): Directory bread(block 65) failed [ 211.585979][ T7666] FAT-fs (loop1): Directory bread(block 66) failed [ 211.592522][ T7666] FAT-fs (loop1): Directory bread(block 67) failed [ 211.605108][ T7666] FAT-fs (loop1): Directory bread(block 68) failed [ 211.611684][ T7666] FAT-fs (loop1): Directory bread(block 69) failed [ 211.621223][ T7666] FAT-fs (loop1): Directory bread(block 70) failed [ 211.628739][ T7666] FAT-fs (loop1): Directory bread(block 71) failed [ 211.638758][ T7666] FAT-fs (loop1): Directory bread(block 72) failed [ 211.648182][ T7666] FAT-fs (loop1): Directory bread(block 73) failed [ 211.649384][ T7669] loop2: detected capacity change from 0 to 8 [ 211.680902][ T7669] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 211.994156][ T7672] cramfs: Error -5 while decompressing! [ 211.999747][ T7672] cramfs: ffffffff96fe0308(26)->ffff88805aba9000(4096) [ 212.006721][ T7672] cramfs: Error -3 while decompressing! [ 212.012273][ T7672] cramfs: ffffffff96fe0322(26)->ffff88805662a000(4096) [ 213.215089][ T7673] random: crng reseeded on system resumption [ 213.291259][ T7672] cramfs: Error -3 while decompressing! [ 213.297850][ T7672] cramfs: ffffffff96fe033c(16)->ffff88805662b000(4096) [ 213.304999][ T7672] cramfs: Error -5 while decompressing! [ 213.312197][ T7672] cramfs: ffffffff96fe0308(26)->ffff88805aba9000(4096) [ 213.430417][ T27] audit: type=1800 audit(1758414320.766:446): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.523" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 214.630835][ T7691] vxcan1 speed is unknown, defaulting to 1000 [ 215.183242][ T7698] (null): rxe_set_mtu: Set mtu to 256 [ 215.190978][ T7698] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 216.023979][ T6889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 216.254128][ T6889] usb 1-1: Using ep0 maxpacket: 16 [ 216.270586][ T6889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.304005][ T6889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.325814][ T6889] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 216.353887][ T6889] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 216.362015][ T6889] usb 1-1: Product: syz [ 216.383849][ T6889] usb 1-1: SerialNumber: syz [ 216.387514][ T7707] loop2: detected capacity change from 0 to 1764 [ 216.405845][ T6889] usb 1-1: config 0 descriptor?? [ 216.441908][ T7703] loop1: detected capacity change from 0 to 32768 [ 216.457569][ T7703] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 216.774017][ T6877] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.094434][ T6877] usb 4-1: Using ep0 maxpacket: 8 [ 218.189407][ T7714] (syz.1.533,7714,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 218.381670][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 218.415469][ T6887] usb 1-1: USB disconnect, device number 6 [ 218.602592][ T7720] loop1: detected capacity change from 0 to 8 [ 218.613474][ T7720] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 218.643629][ T6877] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 218.652970][ T6877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.661018][ T6877] usb 4-1: Product: syz [ 218.665252][ T6877] usb 4-1: Manufacturer: syz [ 218.669879][ T6877] usb 4-1: SerialNumber: syz [ 218.695961][ T6877] usb 4-1: config 0 descriptor?? [ 218.716082][ T6877] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 218.768317][ T7722] loop2: detected capacity change from 0 to 8 [ 218.781082][ T7722] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 219.031419][ T7724] cramfs: Error -5 while decompressing! [ 219.037231][ T7724] cramfs: ffffffff96fdc308(26)->ffff88805abc2000(4096) [ 219.044949][ T7724] cramfs: Error -3 while decompressing! [ 219.050743][ T7724] cramfs: ffffffff96fdc322(26)->ffff88805b0ca000(4096) [ 219.058221][ T7724] cramfs: Error -3 while decompressing! [ 219.064118][ T7724] cramfs: ffffffff96fdc33c(16)->ffff88805b0cd000(4096) [ 219.072842][ T7724] cramfs: Error -5 while decompressing! [ 219.078661][ T7724] cramfs: ffffffff96fdc308(26)->ffff88805abc2000(4096) [ 219.103382][ T27] audit: type=1800 audit(1758414326.526:447): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.536" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 219.161833][ T7725] cramfs: Error -5 while decompressing! [ 219.167626][ T7725] cramfs: ffffffff96fe0308(26)->ffff88805b0c9000(4096) [ 219.174802][ T7725] cramfs: Error -3 while decompressing! [ 219.180506][ T7725] cramfs: ffffffff96fe0322(26)->ffff88805ba87000(4096) [ 219.187759][ T7725] cramfs: Error -3 while decompressing! [ 219.193448][ T7725] cramfs: ffffffff96fe033c(16)->ffff88805b887000(4096) [ 219.201008][ T7725] cramfs: Error -5 while decompressing! [ 219.206741][ T7725] cramfs: ffffffff96fe0308(26)->ffff88805b0c9000(4096) [ 219.236696][ T27] audit: type=1800 audit(1758414326.656:448): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.537" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 219.256664][ T6877] gspca_sonixj: reg_w1 err -110 [ 219.261955][ T6877] sonixj: probe of 4-1:0.0 failed with error -110 [ 220.598237][ T6889] usb 4-1: USB disconnect, device number 11 [ 220.977428][ T7740] syz2: rxe_newlink: already configured on vxcan1 [ 221.201030][ T7742] (null): rxe_set_mtu: Set mtu to 256 [ 221.209195][ T7742] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 223.031487][ T7761] tipc: Can't bind to reserved service type 0 [ 223.942291][ T7766] loop0: detected capacity change from 0 to 8 [ 223.950169][ T7766] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 225.153619][ T7782] cramfs: Error -5 while decompressing! [ 225.277823][ T7777] loop3: detected capacity change from 0 to 40427 [ 225.290397][ T7782] cramfs: ffffffff96fe0308(26)->ffff88805ba5d000(4096) [ 225.297363][ T7782] cramfs: Error -3 while decompressing! [ 225.303390][ T7782] cramfs: ffffffff96fe0322(26)->ffff88805ba5e000(4096) [ 225.314397][ T7777] F2FS-fs (loop3): invalid crc value [ 225.323684][ T7777] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.354046][ T7782] cramfs: Error -3 while decompressing! [ 225.367576][ T7782] cramfs: ffffffff96fe033c(16)->ffff88805ba5f000(4096) [ 225.375578][ T7782] cramfs: Error -5 while decompressing! [ 225.383991][ T7777] F2FS-fs (loop3): Start checkpoint disabled! [ 225.391438][ T7782] cramfs: ffffffff96fe0308(26)->ffff88805ba5d000(4096) [ 225.399542][ T27] audit: type=1800 audit(1758414332.836:449): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.551" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 226.362462][ T7777] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 226.494438][ T7777] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 226.501177][ T7777] PKCS7: Only support pkcs7_signedData type [ 226.526747][ T7777] bio_check_eod: 182 callbacks suppressed [ 226.526758][ T7777] syz.3.553: attempt to access beyond end of device [ 226.526758][ T7777] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 226.546953][ T7777] syz.3.553: attempt to access beyond end of device [ 226.546953][ T7777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.560916][ T7777] syz.3.553: attempt to access beyond end of device [ 226.560916][ T7777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.574869][ T7777] syz.3.553: attempt to access beyond end of device [ 226.574869][ T7777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.588869][ T7777] syz.3.553: attempt to access beyond end of device [ 226.588869][ T7777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.602999][ T7777] syz.3.553: attempt to access beyond end of device [ 226.602999][ T7777] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 226.617181][ T7777] syz.3.553: attempt to access beyond end of device [ 226.617181][ T7777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.631270][ T7777] syz.3.553: attempt to access beyond end of device [ 226.631270][ T7777] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 226.645455][ T7777] syz.3.553: attempt to access beyond end of device [ 226.645455][ T7777] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 226.659459][ T7777] syz.3.553: attempt to access beyond end of device [ 226.659459][ T7777] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 226.721539][ T27] audit: type=1800 audit(1758414333.956:450): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.553" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 226.967545][ T1307] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 226.977133][ T1307] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 227.508570][ T7801] loop2: detected capacity change from 0 to 128 [ 227.585535][ T7801] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.663660][ T7801] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.695769][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.025866][ T7806] loop1: detected capacity change from 0 to 8 [ 228.034921][ T7806] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 228.306276][ T7810] cramfs: Error -5 while decompressing! [ 228.311869][ T7810] cramfs: ffffffff96fdc308(26)->ffff8880561f9000(4096) [ 228.319045][ T7810] cramfs: Error -3 while decompressing! [ 228.324833][ T7810] cramfs: ffffffff96fdc322(26)->ffff8880561fa000(4096) [ 228.331743][ T7810] cramfs: Error -3 while decompressing! [ 228.337334][ T7810] cramfs: ffffffff96fdc33c(16)->ffff8880561fb000(4096) [ 228.344253][ T7810] cramfs: Error -5 while decompressing! [ 228.350257][ T7810] cramfs: ffffffff96fdc308(26)->ffff8880561f9000(4096) [ 228.384104][ T27] audit: type=1800 audit(1758414335.796:451): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.561" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 228.539904][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.635970][ T7799] loop3: detected capacity change from 0 to 32768 [ 228.787683][ T7799] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 228.985740][ T7819] random: crng reseeded on system resumption [ 230.208571][ T7826] (syz.3.558,7826,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 230.419785][ T7832] loop0: detected capacity change from 0 to 8 [ 230.444786][ T7832] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 230.937221][ T7825] loop1: detected capacity change from 0 to 32768 [ 230.952384][ T7825] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.965199][ T7837] cramfs: Error -5 while decompressing! [ 230.970777][ T7837] cramfs: ffffffff96fe0308(26)->ffff88805a26f000(4096) [ 230.980373][ T7837] cramfs: Error -3 while decompressing! [ 230.988974][ T7837] cramfs: ffffffff96fe0322(26)->ffff88805a270000(4096) [ 231.000685][ T7837] cramfs: Error -3 while decompressing! [ 231.006316][ T7837] cramfs: ffffffff96fe033c(16)->ffff88805a271000(4096) [ 231.013748][ T7837] cramfs: Error -5 while decompressing! [ 231.019341][ T7825] XFS (loop1): Ending clean mount [ 231.024669][ T7837] cramfs: ffffffff96fe0308(26)->ffff88805a26f000(4096) [ 231.031817][ T27] audit: type=1800 audit(1758414338.466:452): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.567" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 231.037560][ T7825] XFS (loop1): Quotacheck needed: Please wait. [ 231.106839][ T7825] XFS (loop1): Quotacheck: Done. [ 231.207989][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 231.305297][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.001314][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d020400: rx timeout, send abort [ 233.013327][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d020400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 233.029835][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d020800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 233.527742][ T7872] loop2: detected capacity change from 0 to 8 [ 233.550667][ T7872] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 233.754318][ T7873] loop1: detected capacity change from 0 to 47 [ 233.835820][ T7875] cramfs: Error -5 while decompressing! [ 233.841440][ T7875] cramfs: ffffffff96fdc308(26)->ffff888056794000(4096) [ 233.848443][ T7875] cramfs: Error -3 while decompressing! [ 233.854045][ T7875] cramfs: ffffffff96fdc322(26)->ffff88807cb1c000(4096) [ 233.860910][ T7875] cramfs: Error -3 while decompressing! [ 233.866524][ T7875] cramfs: ffffffff96fdc33c(16)->ffff88805617d000(4096) [ 233.873413][ T7875] cramfs: Error -5 while decompressing! [ 233.879894][ T7875] cramfs: ffffffff96fdc308(26)->ffff888056794000(4096) [ 233.997914][ T27] audit: type=1800 audit(1758414341.326:453): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.574" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 234.306416][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021381000: rx timeout, send abort [ 234.315229][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021381000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 234.329707][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029790c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 234.623641][ T7878] loop2: detected capacity change from 0 to 1764 [ 236.050636][ T7889] vxcan1 speed is unknown, defaulting to 1000 [ 237.762254][ T7919] loop3: detected capacity change from 0 to 256 [ 237.819405][ T7919] FAT-fs (loop3): Directory bread(block 64) failed [ 237.826447][ T7919] FAT-fs (loop3): Directory bread(block 65) failed [ 237.833199][ T7919] FAT-fs (loop3): Directory bread(block 66) failed [ 237.844492][ T7919] FAT-fs (loop3): Directory bread(block 67) failed [ 237.851186][ T7919] FAT-fs (loop3): Directory bread(block 68) failed [ 237.861652][ T7919] FAT-fs (loop3): Directory bread(block 69) failed [ 237.871519][ T7919] FAT-fs (loop3): Directory bread(block 70) failed [ 237.881561][ T7919] FAT-fs (loop3): Directory bread(block 71) failed [ 237.889427][ T7919] FAT-fs (loop3): Directory bread(block 72) failed [ 237.899355][ T7919] FAT-fs (loop3): Directory bread(block 73) failed [ 238.202505][ T7931] random: crng reseeded on system resumption [ 238.303268][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d5cc000: rx timeout, send abort [ 238.313908][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d5cc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.328449][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d5cd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 239.174644][ T7933] vxcan1 speed is unknown, defaulting to 1000 [ 239.624612][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801eec0c00: rx timeout, send abort [ 239.633015][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eec0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 239.647511][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eec2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 239.938182][ T7941] loop1: detected capacity change from 0 to 8 [ 239.954734][ T7941] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 240.265009][ T7948] cramfs: Error -5 while decompressing! [ 240.270650][ T7948] cramfs: ffffffff96fe0308(26)->ffff88805a995000(4096) [ 240.277696][ T7948] cramfs: Error -3 while decompressing! [ 240.283322][ T7948] cramfs: ffffffff96fe0322(26)->ffff88805a996000(4096) [ 240.290332][ T7948] cramfs: Error -3 while decompressing! [ 240.295976][ T7948] cramfs: ffffffff96fe033c(16)->ffff88805a997000(4096) [ 240.303174][ T7948] cramfs: Error -5 while decompressing! [ 240.308802][ T7948] cramfs: ffffffff96fe0308(26)->ffff88805a995000(4096) [ 240.317056][ T27] audit: type=1800 audit(1758414347.756:454): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.592" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 242.045866][ T7957] loop1: detected capacity change from 0 to 512 [ 242.275874][ T7962] loop3: detected capacity change from 0 to 8 [ 242.297130][ T7963] random: crng reseeded on system resumption [ 243.037826][ T7962] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 243.236758][ T7964] netlink: 'syz.1.598': attribute type 3 has an invalid length. [ 243.366063][ T7969] loop2: detected capacity change from 0 to 8 [ 243.415393][ T7971] cramfs: Error -5 while decompressing! [ 243.420551][ T7969] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 243.421013][ T7971] cramfs: ffffffff96fdc308(26)->ffff88806e055000(4096) [ 243.441054][ T7967] vxcan1 speed is unknown, defaulting to 1000 [ 243.467228][ T7971] cramfs: Error -3 while decompressing! [ 243.472916][ T7971] cramfs: ffffffff96fe0322(26)->ffff88806e056000(4096) [ 243.480465][ T7971] cramfs: Error -3 while decompressing! [ 243.486630][ T7971] cramfs: ffffffff96fe033c(16)->ffff88806e057000(4096) [ 243.494147][ T7971] cramfs: Error -5 while decompressing! [ 243.500275][ T7971] cramfs: ffffffff96fe0308(26)->ffff88806e055000(4096) [ 243.546800][ T27] audit: type=1800 audit(1758414350.946:455): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.600" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 243.856692][ T7976] cramfs: Error -5 while decompressing! [ 243.862392][ T7976] cramfs: ffffffff96fdc308(26)->ffff88806e7ae000(4096) [ 243.869444][ T7976] cramfs: Error -3 while decompressing! [ 243.875084][ T7976] cramfs: ffffffff96fdc322(26)->ffff88805a996000(4096) [ 243.882031][ T7976] cramfs: Error -3 while decompressing! [ 243.887708][ T7976] cramfs: ffffffff96fdc33c(16)->ffff88805b256000(4096) [ 243.894998][ T7976] cramfs: Error -5 while decompressing! [ 243.900696][ T7976] cramfs: ffffffff96fdc308(26)->ffff88806e7ae000(4096) [ 243.910062][ T27] audit: type=1800 audit(1758414351.346:456): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.602" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 244.527384][ T7985] loop2: detected capacity change from 0 to 256 [ 244.590026][ T7985] FAT-fs (loop2): Directory bread(block 64) failed [ 244.606206][ T7985] FAT-fs (loop2): Directory bread(block 65) failed [ 244.612813][ T7985] FAT-fs (loop2): Directory bread(block 66) failed [ 244.623580][ T7985] FAT-fs (loop2): Directory bread(block 67) failed [ 244.634746][ T7985] FAT-fs (loop2): Directory bread(block 68) failed [ 244.647718][ T7985] FAT-fs (loop2): Directory bread(block 69) failed [ 244.667405][ T7985] FAT-fs (loop2): Directory bread(block 70) failed [ 244.674154][ T7985] FAT-fs (loop2): Directory bread(block 71) failed [ 244.709979][ T7985] FAT-fs (loop2): Directory bread(block 72) failed [ 244.779692][ T7985] FAT-fs (loop2): Directory bread(block 73) failed [ 245.354072][ T7989] loop0: detected capacity change from 0 to 32768 [ 245.361021][ T7989] XFS: noikeep mount option is deprecated. [ 245.384541][ T7989] XFS: noikeep mount option is deprecated. [ 245.468216][ T7989] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 245.799924][ T7989] XFS (loop0): Ending clean mount [ 245.840243][ T7989] XFS (loop0): Quotacheck needed: Please wait. [ 245.962310][ T7989] XFS (loop0): Quotacheck: Done. [ 246.778827][ T8013] loop1: detected capacity change from 0 to 512 [ 246.819776][ T8015] loop3: detected capacity change from 0 to 512 [ 247.881762][ T8024] netlink: 'syz.3.612': attribute type 3 has an invalid length. [ 249.127683][ T8032] syz2: rxe_newlink: already configured on vxcan1 [ 249.781059][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 249.849536][ T8034] vxcan1 speed is unknown, defaulting to 1000 [ 251.324882][ T8046] loop0: detected capacity change from 0 to 8 [ 251.369982][ T8046] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 251.725127][ T8053] cramfs: Error -5 while decompressing! [ 251.730766][ T8053] cramfs: ffffffff96fe0308(26)->ffff88806e5c3000(4096) [ 251.737855][ T8053] cramfs: Error -3 while decompressing! [ 251.743455][ T8053] cramfs: ffffffff96fe0322(26)->ffff888017476000(4096) [ 251.750532][ T8053] cramfs: Error -3 while decompressing! [ 251.756292][ T8053] cramfs: ffffffff96fe033c(16)->ffff888017477000(4096) [ 251.763447][ T8053] cramfs: Error -5 while decompressing! [ 251.769195][ T8053] cramfs: ffffffff96fe0308(26)->ffff88806e5c3000(4096) [ 251.854191][ T27] audit: type=1800 audit(1758414359.216:457): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.618" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 252.544668][ T8060] loop1: detected capacity change from 0 to 512 [ 252.651934][ T8065] (null): rxe_set_mtu: Set mtu to 256 [ 252.658602][ T8065] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 253.672026][ T8075] (null): rxe_set_mtu: Set mtu to 256 [ 253.678781][ T8075] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 254.393564][ T8076] loop0: detected capacity change from 0 to 47 [ 255.737864][ T8089] loop3: detected capacity change from 0 to 8 [ 255.782759][ T8089] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 255.856294][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.949238][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.063938][ T8091] cramfs: Error -5 while decompressing! [ 256.069582][ T8091] cramfs: ffffffff96fdc308(26)->ffff88807cb72000(4096) [ 256.076744][ T8091] cramfs: Error -3 while decompressing! [ 256.082340][ T8091] cramfs: ffffffff96fdc322(26)->ffff8880b4d92000(4096) [ 256.089500][ T8091] cramfs: Error -3 while decompressing! [ 256.095126][ T8091] cramfs: ffffffff96fdc33c(16)->ffff888059c8f000(4096) [ 256.102669][ T8091] cramfs: Error -5 while decompressing! [ 256.108373][ T8091] cramfs: ffffffff96fdc308(26)->ffff88807cb72000(4096) [ 256.408920][ T27] audit: type=1800 audit(1758414363.556:458): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.630" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 256.942183][ T8095] loop2: detected capacity change from 0 to 512 [ 257.212734][ T8097] vxcan1 speed is unknown, defaulting to 1000 [ 257.477666][ T8098] netlink: 'syz.2.632': attribute type 3 has an invalid length. [ 258.440810][ T8112] loop0: detected capacity change from 0 to 128 [ 258.487198][ T8112] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.537970][ T8112] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.569765][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.708474][ T8117] loop1: detected capacity change from 0 to 256 [ 258.783162][ T8117] FAT-fs (loop1): Directory bread(block 64) failed [ 258.813055][ T8117] FAT-fs (loop1): Directory bread(block 65) failed [ 258.851313][ T8117] FAT-fs (loop1): Directory bread(block 66) failed [ 258.868259][ T8117] FAT-fs (loop1): Directory bread(block 67) failed [ 258.888741][ T8117] FAT-fs (loop1): Directory bread(block 68) failed [ 258.913983][ T8117] FAT-fs (loop1): Directory bread(block 69) failed [ 258.917325][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.920627][ T8117] FAT-fs (loop1): Directory bread(block 70) failed [ 258.988837][ T8117] FAT-fs (loop1): Directory bread(block 71) failed [ 259.017554][ T8117] FAT-fs (loop1): Directory bread(block 72) failed [ 259.054174][ T8117] FAT-fs (loop1): Directory bread(block 73) failed [ 261.569685][ T8138] loop1: detected capacity change from 0 to 8 [ 261.584870][ T8138] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 262.030735][ T8142] cramfs: Error -5 while decompressing! [ 262.037151][ T8142] cramfs: ffffffff96fe0308(26)->ffff8880550bb000(4096) [ 262.044552][ T8142] cramfs: Error -3 while decompressing! [ 262.050153][ T8142] cramfs: ffffffff96fe0322(26)->ffff8880550bc000(4096) [ 262.057227][ T8142] cramfs: Error -3 while decompressing! [ 262.062854][ T8142] cramfs: ffffffff96fe033c(16)->ffff8880550bd000(4096) [ 262.070200][ T8142] cramfs: Error -5 while decompressing! [ 262.075901][ T8142] cramfs: ffffffff96fe0308(26)->ffff8880550bb000(4096) [ 262.084468][ T27] audit: type=1800 audit(1758414369.516:459): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.642" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 262.928351][ T8140] loop0: detected capacity change from 0 to 32768 [ 263.210082][ T8152] (null): rxe_set_mtu: Set mtu to 256 [ 263.216828][ T8152] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 263.435095][ T8154] syz2: rxe_newlink: already configured on vxcan1 [ 263.805488][ T8140] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 263.972794][ T8161] loop2: detected capacity change from 0 to 8 [ 263.979969][ T8161] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 264.275629][ T8163] cramfs: Error -5 while decompressing! [ 264.281231][ T8163] cramfs: ffffffff96fdc308(26)->ffff888056cf4000(4096) [ 264.288308][ T8163] cramfs: Error -3 while decompressing! [ 264.294951][ T8163] cramfs: ffffffff96fdc322(26)->ffff888056cf5000(4096) [ 265.284849][ T8163] cramfs: Error -3 while decompressing! [ 265.290505][ T8163] cramfs: ffffffff96fdc33c(16)->ffff888056cf6000(4096) [ 265.297510][ T8163] cramfs: Error -5 while decompressing! [ 265.303064][ T8163] cramfs: ffffffff96fdc308(26)->ffff888056cf4000(4096) [ 266.029198][ T27] audit: type=1800 audit(1758414372.756:460): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.649" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 266.062113][ T8166] (syz.0.643,8166,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 266.601376][ T8171] loop2: detected capacity change from 0 to 8 [ 266.610002][ T8171] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 266.653159][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 266.945039][ T8175] cramfs: Error -5 while decompressing! [ 266.950635][ T8175] cramfs: ffffffff96fe0308(26)->ffff88807df3d000(4096) [ 266.958257][ T8175] cramfs: Error -3 while decompressing! [ 266.964038][ T8175] cramfs: ffffffff96fe0322(26)->ffff88807cc6c000(4096) [ 266.971297][ T8175] cramfs: Error -3 while decompressing! [ 266.977044][ T8175] cramfs: ffffffff96fe033c(16)->ffff888059e09000(4096) [ 266.983970][ T8175] cramfs: Error -5 while decompressing! [ 266.989519][ T8175] cramfs: ffffffff96fe0308(26)->ffff88807df3d000(4096) [ 266.999617][ T27] audit: type=1800 audit(1758414374.436:461): pid=8175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.652" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 267.198610][ T8183] loop0: detected capacity change from 0 to 512 [ 268.834394][ T8194] loop3: detected capacity change from 0 to 40427 [ 268.903163][ T8194] F2FS-fs (loop3): invalid crc value [ 268.939755][ T8194] F2FS-fs (loop3): Found nat_bits in checkpoint [ 268.972689][ T8194] F2FS-fs (loop3): Start checkpoint disabled! [ 268.988963][ T8194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 269.177563][ T8196] bio_check_eod: 182 callbacks suppressed [ 269.177595][ T8196] syz.3.657: attempt to access beyond end of device [ 269.177595][ T8196] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 269.198053][ T8196] syz.3.657: attempt to access beyond end of device [ 269.198053][ T8196] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.216284][ T8196] syz.3.657: attempt to access beyond end of device [ 269.216284][ T8196] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.231310][ T8196] syz.3.657: attempt to access beyond end of device [ 269.231310][ T8196] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.248790][ T8196] syz.3.657: attempt to access beyond end of device [ 269.248790][ T8196] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.265980][ T8196] syz.3.657: attempt to access beyond end of device [ 269.265980][ T8196] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 269.280397][ T8196] syz.3.657: attempt to access beyond end of device [ 269.280397][ T8196] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.295859][ T8196] syz.3.657: attempt to access beyond end of device [ 269.295859][ T8196] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 269.314096][ T8196] syz.3.657: attempt to access beyond end of device [ 269.314096][ T8196] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 269.331450][ T8196] syz.3.657: attempt to access beyond end of device [ 269.331450][ T8196] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 270.363222][ T27] audit: type=1800 audit(1758414376.576:462): pid=8196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.657" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 271.190262][ T8200] vxcan1 speed is unknown, defaulting to 1000 [ 271.562997][ T78] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 271.724516][ T78] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 273.136971][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a548800: rx timeout, send abort [ 273.153907][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a548800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 273.168325][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a549000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 273.194692][ T8208] loop3: detected capacity change from 0 to 32768 [ 273.202539][ T8208] XFS: ikeep mount option is deprecated. [ 273.230386][ T8208] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.283481][ T8208] XFS (loop3): Ending clean mount [ 273.292145][ T8208] XFS (loop3): Quotacheck needed: Please wait. [ 273.342049][ T8208] XFS (loop3): Quotacheck: Done. [ 274.313164][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.451564][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805db0dc00: rx timeout, send abort [ 274.460029][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db0dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 274.474545][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db0f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 275.272357][ T8233] loop1: detected capacity change from 0 to 128 [ 275.471085][ T8233] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.787636][ T8233] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 275.819459][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.909696][ T8223] loop0: detected capacity change from 0 to 32768 [ 275.945304][ T8223] XFS: ikeep mount option is deprecated. [ 276.000319][ T8223] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.207049][ T8248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.667'. [ 276.328969][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.357543][ T8223] XFS (loop0): Ending clean mount [ 276.400470][ T8223] XFS (loop0): Quotacheck needed: Please wait. [ 276.504911][ T8250] loop1: detected capacity change from 0 to 8 [ 276.527355][ T8250] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 276.577431][ T8223] XFS (loop0): Quotacheck: Done. [ 276.821949][ T8252] cramfs: Error -5 while decompressing! [ 276.827668][ T8252] cramfs: ffffffff96fdc308(26)->ffff888055099000(4096) [ 276.834668][ T8252] cramfs: Error -3 while decompressing! [ 276.840215][ T8252] cramfs: ffffffff96fdc322(26)->ffff88805509a000(4096) [ 276.847147][ T8252] cramfs: Error -3 while decompressing! [ 276.852750][ T8252] cramfs: ffffffff96fdc33c(16)->ffff88805509b000(4096) [ 276.859768][ T8252] cramfs: Error -5 while decompressing! [ 276.865372][ T8252] cramfs: ffffffff96fdc308(26)->ffff888055099000(4096) [ 276.894556][ T27] audit: type=1800 audit(1758414384.306:463): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.668" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 277.506214][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.209272][ T8266] (null): rxe_set_mtu: Set mtu to 256 [ 278.216141][ T8266] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 280.049072][ T8280] loop3: detected capacity change from 0 to 256 [ 280.215027][ T8281] vxcan1 speed is unknown, defaulting to 1000 [ 280.300299][ T8280] FAT-fs (loop3): Directory bread(block 64) failed [ 280.317740][ T8280] FAT-fs (loop3): Directory bread(block 65) failed [ 280.345655][ T8280] FAT-fs (loop3): Directory bread(block 66) failed [ 280.352237][ T8280] FAT-fs (loop3): Directory bread(block 67) failed [ 280.396186][ T8280] FAT-fs (loop3): Directory bread(block 68) failed [ 280.422877][ T8280] FAT-fs (loop3): Directory bread(block 69) failed [ 280.458975][ T8280] FAT-fs (loop3): Directory bread(block 70) failed [ 280.470400][ T8280] FAT-fs (loop3): Directory bread(block 71) failed [ 280.516500][ T8280] FAT-fs (loop3): Directory bread(block 72) failed [ 280.558992][ T8280] FAT-fs (loop3): Directory bread(block 73) failed [ 280.840749][ T8289] loop1: detected capacity change from 0 to 8 [ 280.849256][ T8289] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 281.143025][ T8295] cramfs: Error -5 while decompressing! [ 281.148820][ T8295] cramfs: ffffffff96fe0308(26)->ffff8880586b5000(4096) [ 281.155765][ T8295] cramfs: Error -3 while decompressing! [ 281.161324][ T8295] cramfs: ffffffff96fe0322(26)->ffff88805c600000(4096) [ 281.168280][ T8295] cramfs: Error -3 while decompressing! [ 281.173902][ T8295] cramfs: ffffffff96fe033c(16)->ffff88805c601000(4096) [ 281.180808][ T8295] cramfs: Error -5 while decompressing! [ 281.187302][ T8295] cramfs: ffffffff96fe0308(26)->ffff8880586b5000(4096) [ 281.444926][ T27] audit: type=1800 audit(1758414388.636:464): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.678" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 282.685141][ T8294] loop2: detected capacity change from 0 to 32768 [ 282.747836][ T8294] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 282.990463][ T8305] loop0: detected capacity change from 0 to 40427 [ 283.025621][ T8305] F2FS-fs (loop0): invalid crc value [ 283.034936][ T8305] F2FS-fs (loop0): Found nat_bits in checkpoint [ 283.087302][ T8305] F2FS-fs (loop0): Start checkpoint disabled! [ 283.178591][ T8305] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 283.457224][ T8294] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 283.465492][ T8294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.472868][ T8294] IPv6: NLM_F_CREATE should be set when creating new route [ 283.480131][ T8294] IPv6: NLM_F_CREATE should be set when creating new route [ 283.499939][ T8294] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 283.508048][ T8294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.537048][ T27] audit: type=1800 audit(1758414390.956:465): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.681" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 283.581898][ T8309] bio_check_eod: 182 callbacks suppressed [ 283.581944][ T8309] syz.0.681: attempt to access beyond end of device [ 283.581944][ T8309] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 283.602546][ T8309] syz.0.681: attempt to access beyond end of device [ 283.602546][ T8309] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.617784][ T8309] syz.0.681: attempt to access beyond end of device [ 283.617784][ T8309] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.633010][ T8309] syz.0.681: attempt to access beyond end of device [ 283.633010][ T8309] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.648952][ T8309] syz.0.681: attempt to access beyond end of device [ 283.648952][ T8309] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.666199][ T8309] syz.0.681: attempt to access beyond end of device [ 283.666199][ T8309] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 283.680724][ T8309] syz.0.681: attempt to access beyond end of device [ 283.680724][ T8309] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.696113][ T8309] syz.0.681: attempt to access beyond end of device [ 283.696113][ T8309] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 283.711467][ T8309] syz.0.681: attempt to access beyond end of device [ 283.711467][ T8309] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 283.727218][ T8309] syz.0.681: attempt to access beyond end of device [ 283.727218][ T8309] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 283.863347][ T8294] (syz.2.679,8294,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 284.651983][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 284.712693][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 284.725157][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 285.173443][ T8320] loop1: detected capacity change from 0 to 256 [ 285.202678][ T8320] FAT-fs (loop1): Directory bread(block 64) failed [ 285.216147][ T8320] FAT-fs (loop1): Directory bread(block 65) failed [ 285.222877][ T8320] FAT-fs (loop1): Directory bread(block 66) failed [ 285.233965][ T8320] FAT-fs (loop1): Directory bread(block 67) failed [ 285.243339][ T8320] FAT-fs (loop1): Directory bread(block 68) failed [ 285.251346][ T8320] FAT-fs (loop1): Directory bread(block 69) failed [ 285.260052][ T8320] FAT-fs (loop1): Directory bread(block 70) failed [ 285.267689][ T8320] FAT-fs (loop1): Directory bread(block 71) failed [ 285.277368][ T8320] FAT-fs (loop1): Directory bread(block 72) failed [ 285.286340][ T8320] FAT-fs (loop1): Directory bread(block 73) failed [ 285.302599][ T8324] loop0: detected capacity change from 0 to 1764 [ 286.468541][ T8335] loop2: detected capacity change from 0 to 256 [ 286.512215][ T8335] FAT-fs (loop2): Directory bread(block 64) failed [ 286.531738][ T8335] FAT-fs (loop2): Directory bread(block 65) failed [ 286.542517][ T8335] FAT-fs (loop2): Directory bread(block 66) failed [ 286.562189][ T8335] FAT-fs (loop2): Directory bread(block 67) failed [ 286.572021][ T8335] FAT-fs (loop2): Directory bread(block 68) failed [ 286.591027][ T8335] FAT-fs (loop2): Directory bread(block 69) failed [ 286.612422][ T8335] FAT-fs (loop2): Directory bread(block 70) failed [ 286.632900][ T8335] FAT-fs (loop2): Directory bread(block 71) failed [ 286.651821][ T8335] FAT-fs (loop2): Directory bread(block 72) failed [ 286.669354][ T8335] FAT-fs (loop2): Directory bread(block 73) failed [ 286.812557][ T8333] loop3: detected capacity change from 0 to 32768 [ 286.820915][ T8333] XFS: noikeep mount option is deprecated. [ 286.826894][ T8333] XFS: noikeep mount option is deprecated. [ 286.872361][ T8333] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.003583][ T8333] XFS (loop3): Ending clean mount [ 287.015182][ T8333] XFS (loop3): Quotacheck needed: Please wait. [ 287.097422][ T8333] XFS (loop3): Quotacheck: Done. [ 288.291725][ T8353] loop0: detected capacity change from 0 to 32768 [ 288.352953][ T8353] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 290.223685][ T8373] (syz.0.693,8373,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 290.826222][ T8379] loop2: detected capacity change from 0 to 8 [ 290.854922][ T8379] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 291.199155][ T8382] cramfs: Error -5 while decompressing! [ 291.205152][ T8382] cramfs: ffffffff96fdc308(26)->ffff888054e4a000(4096) [ 291.212214][ T8382] cramfs: Error -3 while decompressing! [ 291.217911][ T8382] cramfs: ffffffff96fdc322(26)->ffff888054e4b000(4096) [ 291.225393][ T8382] cramfs: Error -3 while decompressing! [ 291.231117][ T8382] cramfs: ffffffff96fdc33c(16)->ffff888054e4c000(4096) [ 291.238409][ T8382] cramfs: Error -5 while decompressing! [ 291.244106][ T8382] cramfs: ffffffff96fdc308(26)->ffff888054e4a000(4096) [ 291.303923][ T27] audit: type=1800 audit(1758414398.686:466): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.699" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 291.393972][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.774572][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 291.890699][ T8391] loop2: detected capacity change from 0 to 256 [ 291.950530][ T8391] FAT-fs (loop2): Directory bread(block 64) failed [ 291.972258][ T8391] FAT-fs (loop2): Directory bread(block 65) failed [ 292.014144][ T8391] FAT-fs (loop2): Directory bread(block 66) failed [ 292.020859][ T8391] FAT-fs (loop2): Directory bread(block 67) failed [ 292.334182][ T8391] FAT-fs (loop2): Directory bread(block 68) failed [ 292.477204][ T8391] FAT-fs (loop2): Directory bread(block 69) failed [ 292.491929][ T8391] FAT-fs (loop2): Directory bread(block 70) failed [ 292.498599][ T8391] FAT-fs (loop2): Directory bread(block 71) failed [ 292.505316][ T8391] FAT-fs (loop2): Directory bread(block 72) failed [ 292.511894][ T8391] FAT-fs (loop2): Directory bread(block 73) failed [ 293.126408][ T8401] loop3: detected capacity change from 0 to 1764 [ 295.880434][ T8427] (null): rxe_set_mtu: Set mtu to 256 [ 295.886975][ T8427] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 296.617817][ T8432] loop1: detected capacity change from 0 to 256 [ 296.668865][ T8432] FAT-fs (loop1): Directory bread(block 64) failed [ 296.683604][ T8432] FAT-fs (loop1): Directory bread(block 65) failed [ 296.691631][ T8432] FAT-fs (loop1): Directory bread(block 66) failed [ 296.701770][ T8432] FAT-fs (loop1): Directory bread(block 67) failed [ 296.709692][ T8432] FAT-fs (loop1): Directory bread(block 68) failed [ 296.723958][ T8432] FAT-fs (loop1): Directory bread(block 69) failed [ 296.740912][ T8432] FAT-fs (loop1): Directory bread(block 70) failed [ 296.748858][ T8432] FAT-fs (loop1): Directory bread(block 71) failed [ 296.765349][ T8432] FAT-fs (loop1): Directory bread(block 72) failed [ 296.772360][ T8432] FAT-fs (loop1): Directory bread(block 73) failed [ 297.897961][ T8426] loop3: detected capacity change from 0 to 32768 [ 297.939998][ T8426] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 298.323727][ T8448] loop1: detected capacity change from 0 to 32768 [ 298.331319][ T8448] XFS: noikeep mount option is deprecated. [ 298.337343][ T8448] XFS: noikeep mount option is deprecated. [ 298.355737][ T8453] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 298.381586][ T8453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.479778][ T8456] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 298.484323][ T8448] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.488155][ T8456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.519067][ T8453] (syz.3.711,8453,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 298.632961][ T8463] (null): rxe_set_mtu: Set mtu to 256 [ 298.639789][ T8463] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 299.145288][ T8448] XFS (loop1): Ending clean mount [ 299.166565][ T8448] XFS (loop1): Quotacheck needed: Please wait. [ 299.243049][ T8448] XFS (loop1): Quotacheck: Done. [ 300.320183][ T5779] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 300.565339][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 301.950181][ T8493] loop0: detected capacity change from 0 to 256 [ 301.981965][ T8493] FAT-fs (loop0): Directory bread(block 64) failed [ 301.990862][ T8493] FAT-fs (loop0): Directory bread(block 65) failed [ 302.000676][ T8493] FAT-fs (loop0): Directory bread(block 66) failed [ 302.024048][ T8493] FAT-fs (loop0): Directory bread(block 67) failed [ 302.030713][ T8493] FAT-fs (loop0): Directory bread(block 68) failed [ 302.053945][ T8493] FAT-fs (loop0): Directory bread(block 69) failed [ 302.184084][ T8493] FAT-fs (loop0): Directory bread(block 70) failed [ 302.208783][ T8493] FAT-fs (loop0): Directory bread(block 71) failed [ 302.304440][ T8499] syz2: rxe_newlink: already configured on vxcan1 [ 302.881901][ T8493] FAT-fs (loop0): Directory bread(block 72) failed [ 302.904251][ T8493] FAT-fs (loop0): Directory bread(block 73) failed [ 305.058737][ T8512] loop3: detected capacity change from 0 to 32768 [ 305.078581][ T8512] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 305.422159][ T8528] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 305.459253][ T8528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.516024][ T8529] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 305.527333][ T8529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.601457][ T8528] (syz.3.732,8528,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 306.710820][ T8537] (null): rxe_set_mtu: Set mtu to 256 [ 306.717666][ T8537] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 307.457924][ T8541] loop2: detected capacity change from 0 to 512 [ 307.828261][ T8545] (null): rxe_set_mtu: Set mtu to 256 [ 307.835950][ T8545] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 308.386677][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 308.646792][ T8554] loop1: detected capacity change from 0 to 8 [ 308.655050][ T8554] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 311.146883][ T8575] cramfs: Error -5 while decompressing! [ 311.152654][ T8575] cramfs: ffffffff96fe0308(26)->ffff88805b067000(4096) [ 311.159860][ T8575] cramfs: Error -3 while decompressing! [ 311.165668][ T8575] cramfs: ffffffff96fe0322(26)->ffff88805b068000(4096) [ 311.172751][ T8575] cramfs: Error -3 while decompressing! [ 311.178539][ T8575] cramfs: ffffffff96fe033c(16)->ffff88805a32b000(4096) [ 311.185986][ T8575] cramfs: Error -5 while decompressing! [ 311.270220][ T8576] (null): rxe_set_mtu: Set mtu to 256 [ 311.276935][ T8576] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 311.879267][ T8575] cramfs: ffffffff96fe0308(26)->ffff88805b067000(4096) [ 311.915645][ T27] audit: type=1800 audit(1758414419.346:467): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.742" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 313.628175][ T8591] syz2: rxe_newlink: already configured on vxcan1 [ 316.068478][ T8611] loop1: detected capacity change from 0 to 256 [ 316.125613][ T8611] FAT-fs (loop1): Directory bread(block 64) failed [ 316.144091][ T8611] FAT-fs (loop1): Directory bread(block 65) failed [ 316.150833][ T8611] FAT-fs (loop1): Directory bread(block 66) failed [ 316.166327][ T8611] FAT-fs (loop1): Directory bread(block 67) failed [ 316.183586][ T8611] FAT-fs (loop1): Directory bread(block 68) failed [ 316.217912][ T8611] FAT-fs (loop1): Directory bread(block 69) failed [ 316.224812][ T8611] FAT-fs (loop1): Directory bread(block 70) failed [ 316.231473][ T8611] FAT-fs (loop1): Directory bread(block 71) failed [ 316.244160][ T8611] FAT-fs (loop1): Directory bread(block 72) failed [ 316.249531][ T8616] loop2: detected capacity change from 0 to 256 [ 316.250702][ T8611] FAT-fs (loop1): Directory bread(block 73) failed [ 316.321229][ T8616] FAT-fs (loop2): Directory bread(block 64) failed [ 316.338058][ T8616] FAT-fs (loop2): Directory bread(block 65) failed [ 316.354012][ T8616] FAT-fs (loop2): Directory bread(block 66) failed [ 316.369184][ T8616] FAT-fs (loop2): Directory bread(block 67) failed [ 316.377425][ T8616] FAT-fs (loop2): Directory bread(block 68) failed [ 316.388635][ T8616] FAT-fs (loop2): Directory bread(block 69) failed [ 316.395742][ T8616] FAT-fs (loop2): Directory bread(block 70) failed [ 316.403674][ T8616] FAT-fs (loop2): Directory bread(block 71) failed [ 316.416709][ T8616] FAT-fs (loop2): Directory bread(block 72) failed [ 316.423460][ T8616] FAT-fs (loop2): Directory bread(block 73) failed [ 317.292084][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.300216][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.436626][ T8634] loop1: detected capacity change from 0 to 128 [ 317.471833][ T8634] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.488734][ T8634] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.911085][ T8642] (null): rxe_set_mtu: Set mtu to 256 [ 317.917904][ T8642] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 318.909401][ T8646] loop3: detected capacity change from 0 to 32768 [ 318.916367][ T8646] XFS: ikeep mount option is deprecated. [ 318.957780][ T8646] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.204425][ T8646] XFS (loop3): Ending clean mount [ 319.220954][ T8646] XFS (loop3): Quotacheck needed: Please wait. [ 319.688683][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.711747][ T8646] XFS (loop3): Quotacheck: Done. [ 320.138916][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.498495][ T8677] loop2: detected capacity change from 0 to 512 [ 320.590353][ T8679] loop3: detected capacity change from 0 to 256 [ 321.007472][ T8679] FAT-fs (loop3): Directory bread(block 64) failed [ 321.025206][ T8679] FAT-fs (loop3): Directory bread(block 65) failed [ 321.032486][ T8679] FAT-fs (loop3): Directory bread(block 66) failed [ 321.039248][ T8679] FAT-fs (loop3): Directory bread(block 67) failed [ 321.045992][ T8679] FAT-fs (loop3): Directory bread(block 68) failed [ 321.053664][ T8679] FAT-fs (loop3): Directory bread(block 69) failed [ 321.058763][ T8683] netlink: 'syz.2.773': attribute type 3 has an invalid length. [ 321.089741][ T8679] FAT-fs (loop3): Directory bread(block 70) failed [ 321.111401][ T8679] FAT-fs (loop3): Directory bread(block 71) failed [ 321.127339][ T8679] FAT-fs (loop3): Directory bread(block 72) failed [ 321.143942][ T8679] FAT-fs (loop3): Directory bread(block 73) failed [ 326.518365][ T8706] loop2: detected capacity change from 0 to 512 [ 327.720864][ T8725] loop0: detected capacity change from 0 to 64 [ 327.752492][ T8725] hfs: unable to locate alternate MDB [ 327.773102][ T8725] hfs: continuing without an alternate MDB [ 327.929030][ T8730] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 328.046310][ T8725] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 332.240665][ T8757] (null): rxe_set_mtu: Set mtu to 256 [ 332.247355][ T8757] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 333.220367][ T8769] loop3: detected capacity change from 0 to 64 [ 333.257702][ T8769] hfs: unable to locate alternate MDB [ 333.283473][ T8769] hfs: continuing without an alternate MDB [ 333.368700][ T8769] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 333.410222][ T8769] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 333.547047][ T8772] vxcan1 speed is unknown, defaulting to 1000 [ 333.832353][ T8765] loop2: detected capacity change from 0 to 32768 [ 333.939709][ T8765] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 334.281358][ T8780] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 334.319450][ T8780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.418591][ T8783] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 334.445819][ T8783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.473569][ T8780] (syz.2.797,8780,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 336.106860][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 337.608246][ T8804] loop2: detected capacity change from 0 to 512 [ 339.307026][ T8816] loop0: detected capacity change from 0 to 32768 [ 339.314097][ T8816] XFS: ikeep mount option is deprecated. [ 339.331811][ T8816] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.431477][ T8816] XFS (loop0): Ending clean mount [ 339.439575][ T8816] XFS (loop0): Quotacheck needed: Please wait. [ 339.498676][ T8816] XFS (loop0): Quotacheck: Done. [ 340.123596][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 340.763065][ T8833] loop0: detected capacity change from 0 to 32768 [ 340.780548][ T8833] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 341.496891][ T6877] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 341.685772][ T8847] loop1: detected capacity change from 0 to 512 [ 341.695423][ T6877] usb 3-1: Using ep0 maxpacket: 8 [ 341.730440][ T6877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.760716][ T6877] usb 3-1: config 0 has no interfaces? [ 341.797314][ T6877] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 341.820486][ T6877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.835447][ T6877] usb 3-1: Product: syz [ 341.843198][ T6877] usb 3-1: Manufacturer: syz [ 341.853223][ T6877] usb 3-1: SerialNumber: syz [ 341.866891][ T6877] usb 3-1: config 0 descriptor?? [ 341.908935][ T8833] (syz.0.811,8833,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 342.148824][ T8853] netlink: 68 bytes leftover after parsing attributes in process `syz.3.817'. [ 342.515218][ T8855] loop3: detected capacity change from 0 to 512 [ 342.943161][ T8857] netlink: 'syz.3.818': attribute type 3 has an invalid length. [ 342.949971][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 343.059819][ T8861] loop1: detected capacity change from 0 to 1764 [ 343.662457][ T8865] loop0: detected capacity change from 0 to 32768 [ 343.669545][ T8865] XFS: ikeep mount option is deprecated. [ 343.685110][ T8865] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 343.769178][ T8] usb 3-1: USB disconnect, device number 11 [ 343.792617][ T8865] XFS (loop0): Ending clean mount [ 343.800381][ T8865] XFS (loop0): Quotacheck needed: Please wait. [ 343.959916][ T8865] XFS (loop0): Quotacheck: Done. [ 344.255366][ T8880] syz2: rxe_newlink: already configured on vxcan1 [ 345.524264][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 345.581066][ T8885] loop2: detected capacity change from 0 to 4096 [ 345.667407][ T8887] loop1: detected capacity change from 0 to 8 [ 345.678506][ T8887] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 345.720816][ T8885] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 345.925092][ T8885] ntfs3: loop2: Failed to load $Extend (-22). [ 345.931354][ T8885] ntfs3: loop2: Failed to initialize $Extend. [ 346.015849][ T8889] cramfs: Error -5 while decompressing! [ 346.021445][ T8889] cramfs: ffffffff96fdc308(26)->ffff888056693000(4096) [ 346.028427][ T8889] cramfs: Error -3 while decompressing! [ 346.034138][ T8889] cramfs: ffffffff96fdc322(26)->ffff888056694000(4096) [ 346.041017][ T8889] cramfs: Error -3 while decompressing! [ 346.046624][ T8889] cramfs: ffffffff96fdc33c(16)->ffff888056695000(4096) [ 346.053527][ T8889] cramfs: Error -5 while decompressing! [ 346.059230][ T8889] cramfs: ffffffff96fdc308(26)->ffff888056693000(4096) [ 346.066563][ T27] audit: type=1800 audit(1758414453.506:468): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.825" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 346.283131][ T8893] netlink: 68 bytes leftover after parsing attributes in process `syz.2.826'. [ 346.403890][ T6879] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 346.446817][ T8895] loop3: detected capacity change from 0 to 64 [ 346.455442][ T8895] hfs: unable to locate alternate MDB [ 346.460845][ T8895] hfs: continuing without an alternate MDB [ 346.544592][ T8895] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 346.572783][ T8895] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 346.604008][ T6879] usb 1-1: Using ep0 maxpacket: 8 [ 346.620650][ T6879] usb 1-1: no configurations [ 346.630693][ T6879] usb 1-1: can't read configurations, error -22 [ 346.815441][ T6879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 347.029221][ T6879] usb 1-1: Using ep0 maxpacket: 8 [ 347.053363][ T6879] usb 1-1: no configurations [ 347.070384][ T6879] usb 1-1: can't read configurations, error -22 [ 347.108139][ T6879] usb usb1-port1: attempt power cycle [ 347.170596][ T8897] loop2: detected capacity change from 0 to 32768 [ 347.365381][ T8897] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 347.564222][ T6879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 347.668133][ T6879] usb 1-1: Using ep0 maxpacket: 8 [ 347.739477][ T6879] usb 1-1: no configurations [ 347.803478][ T6879] usb 1-1: can't read configurations, error -22 [ 348.204000][ T6879] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 348.264320][ T6879] usb 1-1: Using ep0 maxpacket: 8 [ 348.274114][ T6879] usb 1-1: no configurations [ 348.278747][ T6879] usb 1-1: can't read configurations, error -22 [ 348.296484][ T6879] usb usb1-port1: unable to enumerate USB device [ 348.662821][ T8916] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 349.436918][ T8916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.524983][ T8920] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 349.688592][ T8920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.698787][ T8916] (syz.2.828,8916,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 351.553031][ T8934] loop1: detected capacity change from 0 to 1764 [ 351.621065][ T8936] loop3: detected capacity change from 0 to 256 [ 351.679123][ T8936] FAT-fs (loop3): Directory bread(block 64) failed [ 351.695238][ T8936] FAT-fs (loop3): Directory bread(block 65) failed [ 351.704021][ T8936] FAT-fs (loop3): Directory bread(block 66) failed [ 351.710604][ T8936] FAT-fs (loop3): Directory bread(block 67) failed [ 351.727624][ T8936] FAT-fs (loop3): Directory bread(block 68) failed [ 351.747640][ T8936] FAT-fs (loop3): Directory bread(block 69) failed [ 351.766524][ T8936] FAT-fs (loop3): Directory bread(block 70) failed [ 351.773087][ T8936] FAT-fs (loop3): Directory bread(block 71) failed [ 351.806363][ T8936] FAT-fs (loop3): Directory bread(block 72) failed [ 351.829602][ T8936] FAT-fs (loop3): Directory bread(block 73) failed [ 352.008427][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 352.978407][ T8956] loop0: detected capacity change from 0 to 512 [ 353.049862][ T8956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 353.069171][ T8956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 353.124731][ T8956] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 353.144985][ T8956] EXT4-fs (loop0): 1 truncate cleaned up [ 353.210162][ T8956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.006040][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.081072][ T8965] loop1: detected capacity change from 0 to 8 [ 354.093664][ T8965] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 354.388847][ T6890] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 354.614206][ T6890] usb 1-1: Using ep0 maxpacket: 8 [ 354.663516][ T6890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.800753][ T6890] usb 1-1: config 0 has no interfaces? [ 354.927968][ T6890] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 355.064814][ T6890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.072947][ T6890] usb 1-1: Product: syz [ 355.077146][ T6890] usb 1-1: Manufacturer: syz [ 355.081742][ T6890] usb 1-1: SerialNumber: syz [ 355.095086][ T6890] usb 1-1: config 0 descriptor?? [ 355.206973][ T8974] loop3: detected capacity change from 0 to 1764 [ 355.291901][ T8970] loop2: detected capacity change from 0 to 32768 [ 355.309962][ T8970] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 355.462485][ T8978] cramfs: Error -5 while decompressing! [ 355.468648][ T8978] cramfs: ffffffff96fe0308(26)->ffff888059f65000(4096) [ 355.475585][ T8978] cramfs: Error -3 while decompressing! [ 355.481138][ T8978] cramfs: ffffffff96fe0322(26)->ffff888059f66000(4096) [ 355.488073][ T8978] cramfs: Error -3 while decompressing! [ 355.493617][ T8978] cramfs: ffffffff96fe033c(16)->ffff888059f67000(4096) [ 355.500554][ T8978] cramfs: Error -5 while decompressing! [ 355.506150][ T8978] cramfs: ffffffff96fe0308(26)->ffff888059f65000(4096) [ 355.549675][ T27] audit: type=1800 audit(1758414462.946:469): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.843" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 356.633278][ T8988] (syz.2.845,8988,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 357.170831][ T6887] usb 1-1: USB disconnect, device number 11 [ 357.285053][ T8982] loop1: detected capacity change from 0 to 32768 [ 357.440463][ T8982] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 357.480870][ T8982] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 358.308858][ T9007] loop0: detected capacity change from 0 to 64 [ 358.342675][ T9007] hfs: unable to locate alternate MDB [ 358.348366][ T9007] hfs: continuing without an alternate MDB [ 358.385807][ T9007] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 358.420206][ T9007] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 358.859341][ T9011] (null): rxe_set_mtu: Set mtu to 256 [ 358.866172][ T9011] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 359.610843][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 361.557780][ T9031] loop0: detected capacity change from 0 to 32768 [ 361.564785][ T9031] XFS: ikeep mount option is deprecated. [ 361.682915][ T9031] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 361.783049][ T9031] XFS (loop0): Ending clean mount [ 361.793452][ T9031] XFS (loop0): Quotacheck needed: Please wait. [ 361.814555][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 361.853462][ T9031] XFS (loop0): Quotacheck: Done. [ 361.941605][ T9050] netlink: 68 bytes leftover after parsing attributes in process `syz.2.860'. [ 362.301324][ T27] audit: type=1800 audit(1758414469.736:470): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.856" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 362.578737][ T9055] loop1: detected capacity change from 0 to 512 [ 362.634987][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 364.567271][ T9065] (null): rxe_set_mtu: Set mtu to 256 [ 364.573641][ T9065] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 364.580584][ T9066] (null): rxe_set_mtu: Set mtu to 256 [ 364.586298][ T9066] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 364.944989][ T9071] loop0: detected capacity change from 0 to 256 [ 365.089542][ T9075] loop3: detected capacity change from 0 to 512 [ 365.103115][ T9075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 365.131831][ T9075] EXT4-fs (loop3): 1 truncate cleaned up [ 365.132325][ T9071] FAT-fs (loop0): Directory bread(block 64) failed [ 365.139066][ T9075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.148639][ T9071] FAT-fs (loop0): Directory bread(block 65) failed [ 365.315008][ T9071] FAT-fs (loop0): Directory bread(block 66) failed [ 365.805072][ T9071] FAT-fs (loop0): Directory bread(block 67) failed [ 365.822833][ T9071] FAT-fs (loop0): Directory bread(block 68) failed [ 365.892457][ T9071] FAT-fs (loop0): Directory bread(block 69) failed [ 365.923952][ T9071] FAT-fs (loop0): Directory bread(block 70) failed [ 365.953747][ T9071] FAT-fs (loop0): Directory bread(block 71) failed [ 366.014079][ T9071] FAT-fs (loop0): Directory bread(block 72) failed [ 366.020812][ T9071] FAT-fs (loop0): Directory bread(block 73) failed [ 366.971478][ T9089] loop0: detected capacity change from 0 to 8 [ 366.991693][ T9089] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 367.024441][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.492606][ T9098] loop2: detected capacity change from 0 to 8 [ 367.573608][ T9098] SQUASHFS error: zlib decompression failed, data probably corrupt [ 367.582081][ T9098] SQUASHFS error: Failed to read block 0x9b: -5 [ 367.588465][ T9098] SQUASHFS error: Unable to read metadata cache entry [99] [ 367.595829][ T9098] SQUASHFS error: Unable to read inode 0x127 [ 367.653846][ T9101] cramfs: Error -5 while decompressing! [ 367.659498][ T9101] cramfs: ffffffff96fdc308(26)->ffff88805bb25000(4096) [ 367.666652][ T9101] cramfs: Error -3 while decompressing! [ 367.672256][ T9101] cramfs: ffffffff96fdc322(26)->ffff88805bb26000(4096) [ 367.679334][ T9101] cramfs: Error -3 while decompressing! [ 367.684982][ T9101] cramfs: ffffffff96fdc33c(16)->ffff88805bb27000(4096) [ 367.692199][ T9101] cramfs: Error -5 while decompressing! [ 367.697838][ T9101] cramfs: ffffffff96fdc308(26)->ffff88805bb25000(4096) [ 367.773939][ T27] audit: type=1800 audit(1758414475.146:471): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.868" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 369.329387][ T9111] loop1: detected capacity change from 0 to 47 [ 369.618850][ T9118] syz2: rxe_newlink: already configured on vxcan1 [ 370.643074][ T9123] syz2: rxe_newlink: already configured on vxcan1 [ 372.288784][ T9130] loop3: detected capacity change from 0 to 256 [ 372.345957][ T9132] loop2: detected capacity change from 0 to 512 [ 372.369098][ T9130] FAT-fs (loop3): Directory bread(block 64) failed [ 372.393968][ T9130] FAT-fs (loop3): Directory bread(block 65) failed [ 372.439108][ T9130] FAT-fs (loop3): Directory bread(block 66) failed [ 372.463905][ T9130] FAT-fs (loop3): Directory bread(block 67) failed [ 372.493939][ T9130] FAT-fs (loop3): Directory bread(block 68) failed [ 372.513264][ T9130] FAT-fs (loop3): Directory bread(block 69) failed [ 372.574178][ T9130] FAT-fs (loop3): Directory bread(block 70) failed [ 372.598457][ T9130] FAT-fs (loop3): Directory bread(block 71) failed [ 372.622887][ T9130] FAT-fs (loop3): Directory bread(block 72) failed [ 372.647430][ T9130] FAT-fs (loop3): Directory bread(block 73) failed [ 375.560111][ T9147] loop3: detected capacity change from 0 to 512 [ 376.090075][ T9152] (null): rxe_set_mtu: Set mtu to 256 [ 376.096876][ T9152] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 376.891088][ T9151] netlink: 'syz.3.882': attribute type 3 has an invalid length. [ 377.114935][ T9161] loop2: detected capacity change from 0 to 8 [ 377.128821][ T9161] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 378.365207][ T9168] cramfs: Error -5 while decompressing! [ 378.370914][ T9168] cramfs: ffffffff96fe0308(26)->ffff88805b0e3000(4096) [ 378.378114][ T9168] cramfs: Error -3 while decompressing! [ 378.383776][ T9168] cramfs: ffffffff96fe0322(26)->ffff88805b0e4000(4096) [ 378.390871][ T9168] cramfs: Error -3 while decompressing! [ 378.396785][ T9168] cramfs: ffffffff96fe033c(16)->ffff88805ab67000(4096) [ 378.404056][ T9168] cramfs: Error -5 while decompressing! [ 378.409724][ T9168] cramfs: ffffffff96fe0308(26)->ffff88805b0e3000(4096) [ 378.557359][ T27] audit: type=1800 audit(1758414485.856:472): pid=9168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.886" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 378.744879][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.751292][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.986219][ T9155] loop0: detected capacity change from 0 to 32768 [ 379.041292][ T9155] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 379.065236][ T9172] loop1: detected capacity change from 0 to 512 [ 379.093551][ T9172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 379.173396][ T9172] EXT4-fs (loop1): 1 truncate cleaned up [ 379.180375][ T9172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.139203][ T9178] (syz.0.884,9178,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 380.149404][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.144934][ T9199] loop3: detected capacity change from 0 to 512 [ 384.382184][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 384.481211][ T9205] loop1: detected capacity change from 0 to 128 [ 384.753718][ T9205] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.005526][ T9205] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 385.716410][ T9224] (null): rxe_set_mtu: Set mtu to 256 [ 385.722081][ T9224] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 387.430343][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.349453][ T9239] loop2: detected capacity change from 0 to 512 [ 389.145706][ T9250] (null): rxe_set_mtu: Set mtu to 256 [ 389.152649][ T9250] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 389.969502][ T9259] loop1: detected capacity change from 0 to 64 [ 389.979086][ T9259] hfs: unable to locate alternate MDB [ 389.988753][ T9259] hfs: continuing without an alternate MDB [ 390.836412][ T9259] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 390.852671][ T9259] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 391.460493][ T9269] syz2: rxe_newlink: already configured on vxcan1 [ 391.554270][ T6888] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 391.831920][ T9278] loop2: detected capacity change from 0 to 64 [ 391.840182][ T9278] hfs: unable to locate alternate MDB [ 391.861013][ T9278] hfs: continuing without an alternate MDB [ 391.873520][ T6888] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 391.890642][ T6888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.904485][ T6888] usb 1-1: Product: syz [ 391.909959][ T9278] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 391.924020][ T6888] usb 1-1: Manufacturer: syz [ 391.928646][ T6888] usb 1-1: SerialNumber: syz [ 391.940127][ T9278] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 391.956054][ T6888] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 391.973550][ T6889] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 392.131117][ T9265] loop3: detected capacity change from 0 to 32768 [ 392.152233][ T9265] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 393.139866][ T6889] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 393.153367][ T6889] ath9k_htc: Failed to initialize the device [ 393.192540][ T6889] usb 1-1: ath9k_htc: USB layer deinitialized [ 393.437816][ T9296] loop1: detected capacity change from 0 to 8 [ 393.938988][ T9296] SQUASHFS error: zlib decompression failed, data probably corrupt [ 393.946975][ T9296] SQUASHFS error: Failed to read block 0x9b: -5 [ 393.953323][ T9296] SQUASHFS error: Unable to read metadata cache entry [99] [ 393.960622][ T9296] SQUASHFS error: Unable to read inode 0x127 [ 394.271468][ T6889] usb 1-1: USB disconnect, device number 12 [ 394.321823][ T9285] (syz.3.910,9285,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 394.742286][ T9306] (null): rxe_set_mtu: Set mtu to 256 [ 394.749722][ T9306] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 395.790959][ T9314] loop1: detected capacity change from 0 to 512 [ 396.371203][ T9324] (null): rxe_set_mtu: Set mtu to 256 [ 396.378021][ T9324] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 397.344869][ T9330] loop0: detected capacity change from 0 to 512 [ 397.461532][ T5780] ocfs2: Unmounting device (7,3) on (node local) [ 398.132359][ T9344] loop1: detected capacity change from 0 to 8 [ 398.180564][ T9344] SQUASHFS error: zlib decompression failed, data probably corrupt [ 398.188738][ T9344] SQUASHFS error: Failed to read block 0x9b: -5 [ 398.195095][ T9344] SQUASHFS error: Unable to read metadata cache entry [99] [ 398.202343][ T9344] SQUASHFS error: Unable to read inode 0x127 [ 398.424212][ T6881] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 398.795634][ T6881] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 398.825457][ T6881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.852841][ T6881] usb 4-1: Product: syz [ 398.858860][ T6881] usb 4-1: Manufacturer: syz [ 398.873334][ T6881] usb 4-1: SerialNumber: syz [ 399.007268][ T6881] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 399.060460][ T9346] loop1: detected capacity change from 0 to 128 [ 399.080665][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.095053][ T9346] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 399.141834][ T9346] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 399.499151][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 400.401664][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 400.516631][ T8] ath9k_htc: Failed to initialize the device [ 400.644403][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 400.800593][ T9353] CUSE: info not properly terminated [ 401.142786][ T9368] (null): rxe_set_mtu: Set mtu to 256 [ 401.149150][ T9368] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 401.916115][ T8] usb 4-1: USB disconnect, device number 12 [ 402.313317][ T9376] loop3: detected capacity change from 0 to 8 [ 402.362638][ T9376] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 402.597723][ T9376] cramfs: Error -5 while decompressing! [ 402.603523][ T9376] cramfs: ffffffff96fdc308(26)->ffff888059c98000(4096) [ 402.612105][ T9376] cramfs: Error -3 while decompressing! [ 402.647886][ T9376] cramfs: ffffffff96fdc322(26)->ffff88805c6ee000(4096) [ 402.655208][ T9376] cramfs: Error -3 while decompressing! [ 402.660852][ T9376] cramfs: ffffffff96fdc33c(16)->ffff88805569f000(4096) [ 402.668146][ T9376] cramfs: Error -5 while decompressing! [ 402.673700][ T9376] cramfs: ffffffff96fdc308(26)->ffff888059c98000(4096) [ 402.680839][ T27] audit: type=1800 audit(1758414510.126:473): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.935" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 404.736722][ T9404] (null): rxe_set_mtu: Set mtu to 256 [ 404.743419][ T9404] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 405.439096][ T9382] loop2: detected capacity change from 0 to 32768 [ 405.461150][ T9382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.937 (9382) [ 405.499418][ T9382] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.524006][ T9382] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 405.548979][ T9382] BTRFS info (device loop2): force clearing of disk cache [ 405.562256][ T9382] BTRFS info (device loop2): enabling auto defrag [ 405.571064][ T9382] BTRFS info (device loop2): max_inline at 0 [ 405.580896][ T9382] BTRFS info (device loop2): using free space tree [ 405.628501][ T9382] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 405.629045][ T9382] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 405.664539][ T9382] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 405.693518][ T9382] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 405.710952][ T6879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 405.777833][ T9382] BTRFS error (device loop2): open_ctree failed: -12 [ 405.949082][ T6879] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 405.966545][ T6879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.980418][ T6879] usb 1-1: Product: syz [ 405.988062][ T6879] usb 1-1: Manufacturer: syz [ 406.009862][ T6879] usb 1-1: SerialNumber: syz [ 406.071584][ T6879] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 406.087629][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 407.138516][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 407.165307][ T8] ath9k_htc: Failed to initialize the device [ 407.195941][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 407.308807][ T9430] loop3: detected capacity change from 0 to 40427 [ 407.328937][ T9430] F2FS-fs (loop3): invalid crc value [ 407.340162][ T9430] F2FS-fs (loop3): Found nat_bits in checkpoint [ 407.409036][ T9430] F2FS-fs (loop3): Start checkpoint disabled! [ 407.424280][ T9430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 407.919422][ T9442] loop1: detected capacity change from 0 to 512 [ 408.203335][ T9447] loop2: detected capacity change from 0 to 512 [ 408.434703][ T6881] usb 1-1: USB disconnect, device number 13 [ 408.539035][ T9450] (null): rxe_set_mtu: Set mtu to 256 [ 408.545726][ T9450] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 410.368249][ T9461] vxcan1 speed is unknown, defaulting to 1000 [ 410.417448][ T9464] loop0: detected capacity change from 0 to 4096 [ 410.502401][ T9464] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 410.531075][ T9455] netlink: 'syz.2.950': attribute type 3 has an invalid length. [ 410.532214][ T9464] ntfs3: loop0: Failed to load $Extend (-22). [ 410.553170][ T9464] ntfs3: loop0: Failed to initialize $Extend. [ 410.644326][ T9464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.954'. [ 410.878670][ T42] bio_check_eod: 182 callbacks suppressed [ 410.878688][ T42] kworker/u4:2: attempt to access beyond end of device [ 410.878688][ T42] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 410.958053][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 411.458702][ T9459] loop2: detected capacity change from 0 to 32768 [ 411.478219][ T9459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.950 (9459) [ 411.517286][ T9459] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 411.538929][ T9459] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 411.575900][ T9459] BTRFS info (device loop2): setting nodatacow, compression disabled [ 411.645279][ T9459] BTRFS info (device loop2): max_inline at 0 [ 411.653942][ T9459] BTRFS info (device loop2): using free space tree [ 411.665921][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 411.666367][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 411.714368][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 411.737721][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 411.759406][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 411.776416][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 411.805054][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 411.852936][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 411.877984][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 411.981201][ T9459] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 411.993137][ T9459] BTRFS error (device loop2): open_ctree failed: -12 [ 412.357023][ T9493] loop2: detected capacity change from 0 to 512 [ 412.822302][ T9498] loop2: detected capacity change from 0 to 8 [ 412.852211][ T9498] SQUASHFS error: zlib decompression failed, data probably corrupt [ 412.860426][ T9498] SQUASHFS error: Failed to read block 0x9b: -5 [ 412.866783][ T9498] SQUASHFS error: Unable to read metadata cache entry [99] [ 412.874424][ T9498] SQUASHFS error: Unable to read inode 0x127 [ 413.526817][ T9500] loop0: detected capacity change from 0 to 512 [ 413.830575][ T9512] loop2: detected capacity change from 0 to 128 [ 413.849059][ T9507] netlink: 'syz.0.961': attribute type 3 has an invalid length. [ 413.959074][ T9512] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 414.038120][ T9512] ext4 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 414.143712][ T9516] loop1: detected capacity change from 0 to 47 [ 414.291761][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.393059][ T9509] CUSE: info not properly terminated [ 414.489235][ T9521] loop2: detected capacity change from 0 to 64 [ 414.505870][ T9521] hfs: unable to locate alternate MDB [ 414.513923][ T9521] hfs: continuing without an alternate MDB [ 414.585770][ T9521] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 414.619613][ T9521] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 416.722724][ T9533] loop0: detected capacity change from 0 to 512 [ 418.458009][ T9551] vxcan1 speed is unknown, defaulting to 1000 [ 418.725343][ T9559] loop1: detected capacity change from 0 to 256 [ 418.778617][ T9559] FAT-fs (loop1): Directory bread(block 64) failed [ 418.814287][ T9559] FAT-fs (loop1): Directory bread(block 65) failed [ 418.841291][ T9559] FAT-fs (loop1): Directory bread(block 66) failed [ 418.858397][ T9559] FAT-fs (loop1): Directory bread(block 67) failed [ 418.884243][ T9559] FAT-fs (loop1): Directory bread(block 68) failed [ 418.924135][ T9559] FAT-fs (loop1): Directory bread(block 69) failed [ 418.942874][ T9559] FAT-fs (loop1): Directory bread(block 70) failed [ 418.953064][ T9559] FAT-fs (loop1): Directory bread(block 71) failed [ 418.961142][ T9559] FAT-fs (loop1): Directory bread(block 72) failed [ 418.978669][ T9559] FAT-fs (loop1): Directory bread(block 73) failed [ 419.743606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f06e000: rx timeout, send abort [ 419.752496][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f06e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 419.767002][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031137000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 420.500084][ T9572] loop3: detected capacity change from 0 to 47 [ 421.047585][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031136800: rx timeout, send abort [ 421.056009][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031136800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 421.070499][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031135800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 422.048417][ T9586] loop1: detected capacity change from 0 to 512 [ 422.057872][ T5780] Trying to free block not in datazone [ 422.063701][ T5780] Trying to free block not in datazone [ 422.069754][ T5780] Trying to free block not in datazone [ 422.102131][ T5780] minix_free_block (loop3:19): bit already cleared [ 422.202454][ T5780] ------------[ cut here ]------------ [ 422.208515][ T5780] WARNING: CPU: 1 PID: 5780 at fs/inode.c:332 drop_nlink+0xbf/0x100 [ 422.216588][ T5780] Modules linked in: [ 422.220503][ T5780] CPU: 1 PID: 5780 Comm: syz-executor Not tainted syzkaller #0 [ 422.228169][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.238317][ T5780] RIP: 0010:drop_nlink+0xbf/0x100 [ 422.243359][ T5780] Code: 48 8b 1b 48 8d bb 78 07 00 00 be 08 00 00 00 e8 a7 5d ea ff f0 48 ff 83 78 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 91 10 93 ff <0f> 0b eb 88 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 422.263202][ T5780] RSP: 0018:ffffc90004427cb0 EFLAGS: 00010293 [ 422.269329][ T5780] RAX: ffffffff81f2870f RBX: ffff88805dcd9ad0 RCX: ffff88801eef0000 [ 422.277446][ T5780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.285509][ T5780] RBP: 0000000000000000 R08: ffffea00015bf0b7 R09: 1ffffd40002b7e16 [ 422.293915][ T5780] R10: dffffc0000000000 R11: fffff940002b7e17 R12: 1ffff1100bb9b365 [ 422.301900][ T5780] R13: 1ffff92000884f9c R14: ffff88805dcd9b28 R15: dffffc0000000000 [ 422.310031][ T5780] FS: 0000555570b03500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 422.319027][ T5780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.325649][ T5780] CR2: 00007ff2299d4f98 CR3: 0000000062bb5000 CR4: 00000000003506e0 [ 422.333630][ T5780] Call Trace: [ 422.336974][ T5780] [ 422.339937][ T5780] minix_unlink+0x18b/0x1e0 [ 422.344489][ T5780] ? minix_link+0xc0/0xc0 [ 422.348844][ T5780] ? bpf_lsm_inode_link+0x10/0x10 [ 422.353917][ T5780] ? bpf_lsm_inode_unlink+0x9/0x10 [ 422.359044][ T5780] ? security_inode_unlink+0xcf/0x110 [ 422.364497][ T5780] vfs_unlink+0x389/0x600 [ 422.368846][ T5780] do_unlinkat+0x328/0x570 [ 422.373273][ T5780] ? fsnotify_link_count+0xf0/0xf0 [ 422.378432][ T5780] ? getname_flags+0x20a/0x500 [ 422.383210][ T5780] __x64_sys_unlink+0x49/0x50 [ 422.387923][ T5780] do_syscall_64+0x55/0xb0 [ 422.392354][ T5780] ? clear_bhb_loop+0x40/0x90 [ 422.397471][ T5780] ? clear_bhb_loop+0x40/0x90 [ 422.402161][ T5780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.408363][ T5780] RIP: 0033:0x7f9cb438e1d7 [ 422.412809][ T5780] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.432518][ T5780] RSP: 002b:00007ffd7ea65b98 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 422.441052][ T5780] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cb438e1d7 [ 422.449105][ T5780] RDX: 00007ffd7ea65bc0 RSI: 00007ffd7ea65c50 RDI: 00007ffd7ea65c50 [ 422.457131][ T5780] RBP: 00007ffd7ea65c50 R08: 0000000000000000 R09: 0000000000000000 [ 422.465166][ T5780] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd7ea66d40 [ 422.473154][ T5780] R13: 00007f9cb4411c2d R14: 0000000000066cca R15: 00007ffd7ea67e10 [ 422.481192][ T5780] [ 422.484821][ T5780] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 422.492119][ T5780] CPU: 1 PID: 5780 Comm: syz-executor Not tainted syzkaller #0 [ 422.499674][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.509746][ T5780] Call Trace: [ 422.513036][ T5780] [ 422.515978][ T5780] dump_stack_lvl+0x16c/0x230 [ 422.520679][ T5780] ? show_regs_print_info+0x20/0x20 [ 422.525896][ T5780] ? load_image+0x3b0/0x3b0 [ 422.530428][ T5780] panic+0x2c0/0x710 [ 422.534354][ T5780] ? bpf_jit_dump+0xd0/0xd0 [ 422.538899][ T5780] __warn+0x2e0/0x470 [ 422.542903][ T5780] ? drop_nlink+0xbf/0x100 [ 422.547336][ T5780] ? drop_nlink+0xbf/0x100 [ 422.551757][ T5780] report_bug+0x2be/0x4f0 [ 422.556105][ T5780] ? drop_nlink+0xbf/0x100 [ 422.560536][ T5780] ? drop_nlink+0xbf/0x100 [ 422.564961][ T5780] ? drop_nlink+0xc1/0x100 [ 422.569388][ T5780] handle_bug+0xcf/0x120 [ 422.573647][ T5780] exc_invalid_op+0x1a/0x50 [ 422.578167][ T5780] asm_exc_invalid_op+0x1a/0x20 [ 422.583025][ T5780] RIP: 0010:drop_nlink+0xbf/0x100 [ 422.588056][ T5780] Code: 48 8b 1b 48 8d bb 78 07 00 00 be 08 00 00 00 e8 a7 5d ea ff f0 48 ff 83 78 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 91 10 93 ff <0f> 0b eb 88 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 422.607685][ T5780] RSP: 0018:ffffc90004427cb0 EFLAGS: 00010293 [ 422.613767][ T5780] RAX: ffffffff81f2870f RBX: ffff88805dcd9ad0 RCX: ffff88801eef0000 [ 422.621732][ T5780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.629721][ T5780] RBP: 0000000000000000 R08: ffffea00015bf0b7 R09: 1ffffd40002b7e16 [ 422.637679][ T5780] R10: dffffc0000000000 R11: fffff940002b7e17 R12: 1ffff1100bb9b365 [ 422.645646][ T5780] R13: 1ffff92000884f9c R14: ffff88805dcd9b28 R15: dffffc0000000000 [ 422.653633][ T5780] ? drop_nlink+0xbf/0x100 [ 422.658059][ T5780] minix_unlink+0x18b/0x1e0 [ 422.662558][ T5780] ? minix_link+0xc0/0xc0 [ 422.666873][ T5780] ? bpf_lsm_inode_link+0x10/0x10 [ 422.671882][ T5780] ? bpf_lsm_inode_unlink+0x9/0x10 [ 422.676988][ T5780] ? security_inode_unlink+0xcf/0x110 [ 422.682348][ T5780] vfs_unlink+0x389/0x600 [ 422.686753][ T5780] do_unlinkat+0x328/0x570 [ 422.691152][ T5780] ? fsnotify_link_count+0xf0/0xf0 [ 422.696272][ T5780] ? getname_flags+0x20a/0x500 [ 422.701048][ T5780] __x64_sys_unlink+0x49/0x50 [ 422.705716][ T5780] do_syscall_64+0x55/0xb0 [ 422.710128][ T5780] ? clear_bhb_loop+0x40/0x90 [ 422.714790][ T5780] ? clear_bhb_loop+0x40/0x90 [ 422.719454][ T5780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.725341][ T5780] RIP: 0033:0x7f9cb438e1d7 [ 422.729742][ T5780] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.749335][ T5780] RSP: 002b:00007ffd7ea65b98 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 422.757738][ T5780] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cb438e1d7 [ 422.765694][ T5780] RDX: 00007ffd7ea65bc0 RSI: 00007ffd7ea65c50 RDI: 00007ffd7ea65c50 [ 422.773666][ T5780] RBP: 00007ffd7ea65c50 R08: 0000000000000000 R09: 0000000000000000 [ 422.781621][ T5780] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd7ea66d40 [ 422.789584][ T5780] R13: 00007f9cb4411c2d R14: 0000000000066cca R15: 00007ffd7ea67e10 [ 422.797571][ T5780] [ 422.800808][ T5780] Kernel Offset: disabled [ 422.805199][ T5780] Rebooting in 86400 seconds..