last executing test programs: 18.843766541s ago: executing program 3 (id=1977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000003c0)) 17.03684197s ago: executing program 0 (id=1981): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80047441, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket(0x9, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0xb, @val=@perf_event={0xa}}, 0x18) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xc) connect$x25(r4, &(0x7f0000000a80), 0x12) 16.978268301s ago: executing program 3 (id=1982): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000003c0)) 16.597990187s ago: executing program 0 (id=1983): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x44400, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000100)) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e26}, 0x73) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) 15.09841589s ago: executing program 3 (id=1985): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) setitimer(0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 13.465001526s ago: executing program 3 (id=1987): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7aef, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x659f, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x28) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500) 13.085680373s ago: executing program 2 (id=1989): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/4088, 0xff8}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006ee000/0x1000)=nil, &(0x7f0000459000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00005e2000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) r1 = io_uring_setup(0x1, &(0x7f0000000040)={0x0, 0x88359, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d00"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="2011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x6}) syz_usb_control_io(r3, 0x0, 0x0) 12.755014458s ago: executing program 1 (id=1990): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r0, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xb, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab4", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)) ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 12.647069929s ago: executing program 0 (id=1991): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80047441, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket(0x9, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0xb, @val=@perf_event={0xa}}, 0x18) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xc) connect$x25(r4, &(0x7f0000000a80), 0x12) 12.00678701s ago: executing program 2 (id=1992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, 0x0, &(0x7f0000000ac0)=""/68}, 0x20) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeeb, 0xa031, 0xffffffffffffffff, 0xe539e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 11.651762675s ago: executing program 1 (id=1993): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)) 11.414066759s ago: executing program 0 (id=1994): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000003c0)) 10.217680428s ago: executing program 1 (id=1995): r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0x9, 0xc, 0x5, 0xac, 0xf}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000002, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x8000, 0x0, 0x108}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1820, 0x1, 0xfffffffc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_remount}, {}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x24, 0x62d7, &(0x7f0000021240)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000100)='./file1\x00') syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_open_dev$sg(&(0x7f0000000000), 0xd, 0x101120) 7.644922928s ago: executing program 0 (id=1996): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 7.378151563s ago: executing program 2 (id=1997): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x82, 0x0, &(0x7f0000000000)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x40000000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0xd6, 0x10}, &(0x7f00000006c0)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r4, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 7.253791445s ago: executing program 1 (id=1998): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000003c0)) 7.163743736s ago: executing program 2 (id=1999): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x44}, r1}, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000080)={[{@norecovery}, {@bsdgroups}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@journal_checksum}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r5, 0xb) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000000)='\x02\x00\x00\x00\x96\x0e\x00\x00\x00\x00\x13p', 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x4004013, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmctl$SHM_UNLOCK(r5, 0xc) 7.027310718s ago: executing program 3 (id=2000): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x1}}}}, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x28, 0x801, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x7, 0x28011, r5, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) 3.079819121s ago: executing program 1 (id=2001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x33) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r4, 0x0, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 3.079508261s ago: executing program 2 (id=2002): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7aef, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x659f, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x28) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500) 3.078342551s ago: executing program 0 (id=2009): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x11c9014, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESOCT=0x0], 0x1, 0x6c6, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x7f, 0x0, r0, 0x5, '\x00', r1, r2, 0x3, 0x3}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x0, 0xf7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r5 = syz_clone(0x24180080, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000dc0)={{0x9, 0x1, 0x1, 0x0, 'syz0\x00', 0x81}, 0x5, 0x400, 0xffff, r5, 0x0, 0xfffeffff, 'syz0\x00', &(0x7f0000000340)}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") sendfile(r3, r3, 0x0, 0x2000000000409) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 501.969032ms ago: executing program 2 (id=2003): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)) 254.043616ms ago: executing program 3 (id=2004): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80047441, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket(0x9, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0xb, @val=@perf_event={0xa}}, 0x18) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xc) connect$x25(r4, &(0x7f0000000a80), 0x12) 0s ago: executing program 1 (id=2005): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0xee01, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x117) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100"/120], 0x190) bind$tipc(r3, &(0x7f0000001900)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}]}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) kernel console output (not intermixed with test programs): s laggy [ 575.169308][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 575.173107][ T9477] macvlan3: entered promiscuous mode [ 575.180970][ T9477] macvlan3: entered allmulticast mode [ 575.186456][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 575.186995][ T9477] bond2: entered allmulticast mode [ 575.197992][ T9477] bond2: entered promiscuous mode [ 575.206225][ T9477] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 575.215298][ T9477] team0: Port device macvlan3 added [ 575.347381][ T9475] bond2: (slave ip6gretap1): making interface the new active one [ 575.355438][ T9475] ip6gretap1: entered promiscuous mode [ 575.361318][ T9475] ip6gretap1: entered allmulticast mode [ 575.368583][ T9475] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 576.799086][ T9495] loop0: detected capacity change from 0 to 8192 [ 577.140452][ T9495] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 577.154572][ T9495] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 577.163930][ T9495] REISERFS (device loop0): using ordered data mode [ 577.170542][ T9495] reiserfs: using flush barriers [ 577.177531][ T9495] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 577.211273][ T9495] REISERFS (device loop0): checking transaction log (loop0) [ 577.231871][ T9495] REISERFS (device loop0): Using r5 hash to sort names [ 577.244770][ T9495] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 579.856478][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 579.862868][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 582.512004][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 582.526046][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 582.746499][ T9523] ceph: No mds server is up or the cluster is laggy [ 582.835459][ T23] libceph: connect (1)[c::]:6789 error -101 [ 582.857403][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 583.712216][ T9533] loop3: detected capacity change from 0 to 512 [ 583.930112][ T9533] EXT4-fs: Ignoring removed i_version option [ 583.970435][ T9533] EXT4-fs: Ignoring removed nobh option [ 583.980871][ T9533] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 584.916693][ T9533] EXT4-fs (loop3): 1 truncate cleaned up [ 584.923810][ T9533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.236456][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.405271][ T9554] syzkaller0: entered promiscuous mode [ 588.410807][ T9554] syzkaller0: entered allmulticast mode [ 588.829637][ T9564] loop0: detected capacity change from 0 to 128 [ 588.987117][ T28] audit: type=1800 audit(1782317311.527:354): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.806" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 589.034207][ T9564] syz.0.806: attempt to access beyond end of device [ 589.034207][ T9564] loop0: rw=2049, sector=132, nr_sectors = 7 limit=128 [ 590.153347][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 590.421606][ T9575] loop1: detected capacity change from 0 to 2048 [ 590.948712][ T9575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.345931][ T9585] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 591.370843][ T9585] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 591.378286][ T9585] overlayfs: failed to verify upper root origin [ 591.592928][ T9586] loop0: detected capacity change from 0 to 512 [ 591.864685][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.062303][ T9599] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 593.203103][ T9602] loop3: detected capacity change from 0 to 32768 [ 593.223801][ T9599] FAT-fs (loop0): Filesystem has been set read-only [ 597.294018][ T9627] siw: device registration error -23 [ 597.518490][ T9640] loop1: detected capacity change from 0 to 1024 [ 599.647158][ T9650] loop1: detected capacity change from 0 to 32768 [ 600.365719][ T9656] read_mapping_page failed! [ 600.370382][ T9656] diRead: read_metapage failed [ 600.375342][ T9656] jfs_lookup: iget failed on inum 32 [ 602.455782][ T9671] loop3: detected capacity change from 0 to 512 [ 604.094368][ T9671] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 604.109025][ T9671] FAT-fs (loop3): Filesystem has been set read-only [ 605.339031][ T9695] loop0: detected capacity change from 0 to 1024 [ 605.353270][ T9697] loop1: detected capacity change from 0 to 4096 [ 606.926389][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 606.942600][ T9703] syz_tun: entered promiscuous mode [ 606.948278][ T9703] macvtap1: entered promiscuous mode [ 606.957086][ T9703] macvtap1: entered allmulticast mode [ 606.962653][ T9703] syz_tun: entered allmulticast mode [ 606.988668][ T9703] syz_tun: left allmulticast mode [ 606.994291][ T9703] syz_tun: left promiscuous mode [ 607.004603][ T9703] macvtap1: left promiscuous mode [ 607.009826][ T9703] macvtap1: left allmulticast mode [ 607.124816][ T28] audit: type=1800 audit(1782317328.283:355): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.839" name="file2" dev="loop1" ino=33 res=0 errno=0 [ 608.654321][ T9712] loop1: detected capacity change from 0 to 512 [ 608.661477][ T9712] EXT4-fs: Ignoring removed i_version option [ 608.668009][ T9712] EXT4-fs: Ignoring removed nobh option [ 608.679033][ T9712] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 608.916013][ T9712] EXT4-fs (loop1): 1 truncate cleaned up [ 608.936753][ T9712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.160184][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.457539][ T9752] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 614.588972][ T9758] loop3: detected capacity change from 0 to 32768 [ 615.528106][ T9766] read_mapping_page failed! [ 615.532696][ T9766] diRead: read_metapage failed [ 615.537755][ T9766] jfs_lookup: iget failed on inum 32 [ 618.577755][ T9781] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 618.661766][ T9781] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 618.759393][ T9785] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 618.937291][ T9784] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 621.020675][ T9793] lo speed is unknown, defaulting to 1000 [ 621.137619][ T9796] loop1: detected capacity change from 0 to 16 [ 621.550903][ T9796] erofs: (device loop1): mounted with root inode @ nid 36. [ 624.306336][ T9807] netlink: 91 bytes leftover after parsing attributes in process `syz.1.864'. [ 625.032826][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 625.041958][ T9820] netlink: 'syz.1.870': attribute type 2 has an invalid length. [ 625.050433][ T9820] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 627.143190][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 628.494782][ T9836] Bluetooth: MGMT ver 1.22 [ 628.602352][ T5791] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 628.612543][ T5791] CPU: 1 PID: 5791 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 628.620225][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 628.630316][ T5791] Workqueue: hci3 hci_rx_work [ 628.635057][ T5791] Call Trace: [ 628.638371][ T5791] [ 628.641326][ T5791] dump_stack_lvl+0x18c/0x250 [ 628.646046][ T5791] ? show_regs_print_info+0x20/0x20 [ 628.651301][ T5791] ? load_image+0x420/0x420 [ 628.655849][ T5791] sysfs_create_dir_ns+0x26e/0x2a0 [ 628.660975][ T5791] ? __lock_acquire+0x7d80/0x7d80 [ 628.666031][ T5791] ? sysfs_warn_dup+0xa0/0xa0 [ 628.670715][ T5791] ? do_raw_spin_unlock+0x121/0x230 [ 628.675923][ T5791] kobject_add_internal+0x617/0xc90 [ 628.681143][ T5791] kobject_add+0x164/0x240 [ 628.685571][ T5791] ? kobject_init+0x1d0/0x1d0 [ 628.690261][ T5791] ? get_device_parent+0x366/0x390 [ 628.695384][ T5791] device_add+0x3fa/0xc40 [ 628.699723][ T5791] hci_conn_add_sysfs+0xd5/0x1e0 [ 628.704674][ T5791] le_conn_complete_evt+0xe9f/0x1480 [ 628.709973][ T5791] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 628.716224][ T5791] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 628.721863][ T5791] ? mutex_unlock+0x10/0x10 [ 628.726372][ T5791] ? skb_pull_data+0xf0/0x1f0 [ 628.731057][ T5791] hci_le_conn_complete_evt+0x187/0x440 [ 628.736612][ T5791] ? hci_remote_host_features_evt+0x150/0x150 [ 628.742686][ T5791] hci_event_packet+0x7b4/0x1280 [ 628.747635][ T5791] ? __lock_acquire+0x7d80/0x7d80 [ 628.752661][ T5791] ? lock_chain_count+0x20/0x20 [ 628.757513][ T5791] ? bis_list+0x290/0x290 [ 628.761937][ T5791] ? lockdep_hardirqs_on+0x98/0x150 [ 628.767145][ T5791] ? hci_send_to_monitor+0xd7/0x4f0 [ 628.772610][ T5791] hci_rx_work+0x43a/0xd60 [ 628.777032][ T5791] ? process_scheduled_works+0x975/0x1600 [ 628.782759][ T5791] process_scheduled_works+0xa60/0x1600 [ 628.788337][ T5791] ? worker_attach_to_pool+0x370/0x370 [ 628.793830][ T5791] ? assign_work+0x3cc/0x5d0 [ 628.798430][ T5791] worker_thread+0xa5e/0xfe0 [ 628.803058][ T5791] kthread+0x2fa/0x390 [ 628.807146][ T5791] ? pr_cont_work+0x550/0x550 [ 628.811829][ T5791] ? kthread_blkcg+0xd0/0xd0 [ 628.816419][ T5791] ret_from_fork+0x48/0x80 [ 628.820841][ T5791] ? kthread_blkcg+0xd0/0xd0 [ 628.825519][ T5791] ret_from_fork_asm+0x11/0x20 [ 628.830302][ T5791] [ 628.836759][ T5791] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 628.850926][ T5791] Bluetooth: hci3: failed to register connection device [ 629.858471][ T9840] loop0: detected capacity change from 0 to 131072 [ 629.919316][ T9840] F2FS-fs (loop0): Found nat_bits in checkpoint [ 630.005881][ T9840] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 631.019865][ T9853] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.046846][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 634.268535][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 634.938572][ T9871] tipc: Enabled bearer , priority 0 [ 635.083925][ T9870] tipc: Disabling bearer [ 635.446866][ T9884] loop0: detected capacity change from 0 to 512 [ 635.505946][ T9884] EXT4-fs: Ignoring removed i_version option [ 635.765701][ T9884] EXT4-fs: Ignoring removed nobh option [ 635.935074][ T9884] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 637.860264][ T9884] EXT4-fs (loop0): 1 truncate cleaned up [ 638.210993][ T9884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.498706][ T9897] loop3: detected capacity change from 0 to 1024 [ 639.425633][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.303772][ T5826] IPVS: starting estimator thread 0... [ 640.536621][ T9910] IPVS: using max 37 ests per chain, 88800 per kthread [ 642.370818][ T9925] autofs4:pid:9925:autofs_fill_super: called with bogus options [ 643.552317][ T9934] loop0: detected capacity change from 0 to 32768 [ 643.576216][ T9936] overlayfs: failed to clone upperpath [ 643.931907][ T9934] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 644.065830][ T9934] XFS (loop0): Ending clean mount [ 644.082766][ T9934] XFS (loop0): Quotacheck needed: Please wait. [ 644.173322][ T9934] XFS (loop0): Quotacheck: Done. [ 645.738300][ T5785] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 645.787609][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 646.120451][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.127007][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 652.807969][ T9993] syzkaller0: entered promiscuous mode [ 652.960199][ T9993] syzkaller0: entered allmulticast mode [ 653.647525][ T9993] tipc: Enabled bearer , priority 0 [ 653.661498][ T9991] tipc: Resetting bearer [ 653.783370][ T9991] tipc: Disabling bearer [ 653.884031][T10003] loop1: detected capacity change from 0 to 1024 [ 659.063852][T10030] xt_cgroup: path and classid specified [ 660.685985][T10037] netlink: 'syz.3.924': attribute type 3 has an invalid length. [ 660.686060][T10037] netlink: 3 bytes leftover after parsing attributes in process `syz.3.924'. [ 661.016358][ T28] audit: type=1326 audit(1782317377.749:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016578][ T28] audit: type=1326 audit(1782317377.749:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016602][ T28] audit: type=1326 audit(1782317377.758:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016624][ T28] audit: type=1326 audit(1782317377.785:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016645][ T28] audit: type=1326 audit(1782317377.785:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016666][ T28] audit: type=1326 audit(1782317377.785:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016686][ T28] audit: type=1326 audit(1782317377.785:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016709][ T28] audit: type=1326 audit(1782317377.785:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016729][ T28] audit: type=1326 audit(1782317377.822:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 661.016751][ T28] audit: type=1326 audit(1782317377.822:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.3.924" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 665.818472][T10072] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 666.828668][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 674.599309][T10131] mmap: syz.0.947 (10131) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 678.548688][ T5785] Bluetooth: hci3: SCO packet for unknown connection handle 3840 [ 678.631308][ T5851] IPVS: starting estimator thread 0... [ 678.946246][T10162] IPVS: using max 20 ests per chain, 48000 per kthread [ 681.059716][T10190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.582212][T10197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 681.588793][T10197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 681.604060][T10197] vhci_hcd vhci_hcd.0: Device attached [ 681.680639][T10202] vhci_hcd: connection closed [ 681.686716][ T12] vhci_hcd: stop threads [ 681.710813][ T12] vhci_hcd: release socket [ 681.727642][ T12] vhci_hcd: disconnect device [ 682.774456][T10215] loop3: detected capacity change from 0 to 512 [ 683.807098][T10215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.859341][T10215] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.027421][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.873579][T10250] befs: (nbd0): No write support. Marking filesystem read-only [ 687.886733][T10250] syz.0.973: attempt to access beyond end of device [ 687.886733][T10250] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 690.346689][T10263] loop1: detected capacity change from 0 to 16 [ 690.673067][T10263] erofs: (device loop1): mounted with root inode @ nid 36. [ 692.312733][T10276] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 692.605543][T10278] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 693.884106][T10295] loop0: detected capacity change from 0 to 2048 [ 694.661934][T10295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.675518][T10295] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.218829][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.702946][T10309] loop3: detected capacity change from 0 to 128 [ 697.462145][T10319] loop0: detected capacity change from 0 to 256 [ 698.269098][T10319] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 698.280127][T10319] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 698.317891][T10319] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 702.596593][T10350] capability: warning: `syz.2.995' uses 32-bit capabilities (legacy support in use) [ 703.375772][T10349] syz.0.994: attempt to access beyond end of device [ 703.375772][T10349] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 703.389138][T10349] XFS (nbd0): SB validate failed with error -5. [ 703.737619][T10361] loop3: detected capacity change from 0 to 256 [ 705.396209][T10371] loop3: detected capacity change from 0 to 4096 [ 705.535259][T10371] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 705.545585][T10371] NILFS (loop3): error -5 reading inode: ino=2 [ 705.552122][T10371] NILFS (loop3): error -5 getting root inode [ 707.206500][ T5826] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 709.347836][ T5826] usb 2-1: device not accepting address 7, error -71 [ 712.138641][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 712.150977][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.162773][T10412] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 716.890902][T10424] overlayfs: failed to clone lowerpath [ 716.959236][T10424] overlayfs: failed to clone lowerpath [ 718.036344][T10429] raw_sendmsg: syz.1.1015 forgot to set AF_INET. Fix it! [ 718.390879][T10429] input: syz0 as /devices/virtual/input/input7 [ 718.846764][T10434] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1010'. [ 722.740621][T10467] loop0: detected capacity change from 0 to 128 [ 723.894943][T10469] binder: 10464:10469 ioctl c00c620f 2000000003c0 returned -22 [ 728.462435][T10515] befs: (nbd1): No write support. Marking filesystem read-only [ 728.472776][T10515] syz.1.1035: attempt to access beyond end of device [ 728.472776][T10515] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 732.645605][T10554] netlink: 'syz.1.1043': attribute type 6 has an invalid length. [ 732.654230][T10554] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1043'. [ 734.855717][T10583] loop3: detected capacity change from 0 to 2048 [ 734.877134][T10583] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 734.923087][T10583] syz.3.1051: attempt to access beyond end of device [ 734.923087][T10583] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 734.939223][T10584] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 735.179889][T10061] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 736.028584][T10061] usb 1-1: Using ep0 maxpacket: 32 [ 736.041244][T10061] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 736.058529][T10061] usb 1-1: config 0 has no interface number 0 [ 736.065277][T10061] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 736.076659][T10061] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 736.093733][T10061] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 736.110324][T10061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.123532][T10061] usb 1-1: Product: syz [ 736.132723][T10061] usb 1-1: Manufacturer: syz [ 736.137720][T10061] usb 1-1: SerialNumber: syz [ 736.145669][T10061] usb 1-1: config 0 descriptor?? [ 736.263830][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 736.263844][ T28] audit: type=1326 audit(1782317448.290:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.2.1055" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa7e19ce59 code=0x0 [ 736.488925][T10602] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1055'. [ 736.601525][T10061] radio-si470x 1-1:0.35: this is not a si470x device. [ 737.194251][T10061] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 737.208768][T10061] usb 1-1: USB disconnect, device number 5 [ 738.766645][T10617] bridge1: entered promiscuous mode [ 742.061037][T10664] loop0: detected capacity change from 0 to 512 [ 742.242940][T10664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.243070][T10664] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.683651][T10669] syz.0.1073 uses obsolete (PF_INET,SOCK_PACKET) [ 742.838833][ T28] audit: type=1107 audit(1782317454.267:430): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 743.175162][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.727729][T10673] loop0: detected capacity change from 0 to 2048 [ 743.789159][T10673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.858466][T10673] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.598283][T10685] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1075: bg 0: block 345: padding at end of block bitmap is not set [ 744.618238][T10685] EXT4-fs (loop0): Remounting filesystem read-only [ 744.625418][T10685] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.0.1075: cleanup dec ref error -117 [ 744.970587][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.011168][T10702] loop3: detected capacity change from 0 to 512 [ 746.832717][T10702] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 746.853371][T10702] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: comm syz.3.1081: inode #1792: comm syz.3.1081: iget: illegal inode # [ 746.871042][T10702] EXT4-fs (loop3): no journal found [ 749.222217][T10725] 9pnet_fd: Insufficient options for proto=fd [ 749.233336][T10726] netlink: 'syz.0.1086': attribute type 10 has an invalid length. [ 749.568994][T10726] team0: Port device netdevsim0 added [ 753.256278][T10753] loop0: detected capacity change from 0 to 2048 [ 753.359346][T10753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.392653][T10753] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.232139][T10759] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 754.504528][T10759] EXT4-fs (loop0): Remounting filesystem read-only [ 754.663518][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.824573][T10779] loop3: detected capacity change from 0 to 256 [ 756.472068][T10779] FAT-fs (loop3): Directory bread(block 64) failed [ 756.479641][T10779] FAT-fs (loop3): Directory bread(block 65) failed [ 756.486695][T10779] FAT-fs (loop3): Directory bread(block 66) failed [ 756.493494][T10779] FAT-fs (loop3): Directory bread(block 67) failed [ 756.500568][T10779] FAT-fs (loop3): Directory bread(block 68) failed [ 756.507313][T10779] FAT-fs (loop3): Directory bread(block 69) failed [ 756.514442][T10779] FAT-fs (loop3): Directory bread(block 70) failed [ 756.521127][T10779] FAT-fs (loop3): Directory bread(block 71) failed [ 756.528311][T10779] FAT-fs (loop3): Directory bread(block 72) failed [ 756.535108][T10779] FAT-fs (loop3): Directory bread(block 73) failed [ 756.904186][T10779] syz.3.1099: attempt to access beyond end of device [ 756.904186][T10779] loop3: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 757.433910][ T28] audit: type=1800 audit(1782317467.550:431): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1099" name="file1" dev="loop3" ino=1048628 res=0 errno=0 [ 757.769868][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1104'. [ 757.873849][ T5785] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 762.798615][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1114'. [ 762.857942][ T5785] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 765.455427][T10857] xt_hashlimit: max too large, truncated to 1048576 [ 768.394029][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 769.691010][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 769.700739][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'. [ 769.713861][T10880] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.723228][T10880] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.732018][T10880] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.740748][T10880] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.751419][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 769.768196][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'. [ 769.832563][T10883] loop0: detected capacity change from 0 to 1024 [ 769.884428][T10883] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 769.884428][T10883] [ 770.040602][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 771.290635][T10896] loop0: detected capacity change from 0 to 256 [ 771.365083][T10896] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 771.375910][T10896] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 771.461765][T10896] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 771.608059][T10896] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 771.616675][T10896] exFAT-fs (loop0): Filesystem has been set read-only [ 773.162959][T10906] 9pnet_fd: Insufficient options for proto=fd [ 773.585775][T10905] netlink: 'syz.1.1133': attribute type 10 has an invalid length. [ 773.650270][T10905] team0: Port device netdevsim0 added [ 773.930689][T10909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.102521][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1137'. [ 774.797803][T10922] virtio-fs: tag not found [ 775.573007][ T28] audit: type=1326 audit(1782317484.359:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 775.648037][ T28] audit: type=1326 audit(1782317484.359:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 775.683889][ T28] audit: type=1326 audit(1782317484.369:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 775.766581][ T28] audit: type=1326 audit(1782317484.369:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 775.815203][ T28] audit: type=1326 audit(1782317484.369:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 775.869511][ T28] audit: type=1326 audit(1782317484.378:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 775.915182][ T28] audit: type=1326 audit(1782317484.378:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 775.965737][ T28] audit: type=1326 audit(1782317484.378:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 776.026443][ T28] audit: type=1326 audit(1782317484.387:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 776.117426][ T28] audit: type=1326 audit(1782317484.387:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519239ce59 code=0x7ffc0000 [ 777.872389][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.904030][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 778.850483][T10948] 9pnet_fd: Insufficient options for proto=fd [ 779.447842][T10946] netlink: 'syz.3.1146': attribute type 10 has an invalid length. [ 779.455399][T10946] team0: Port device netdevsim0 added [ 781.831172][T10970] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 789.307261][T11028] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 792.853017][T11065] xt_hashlimit: max too large, truncated to 1048576 [ 795.213894][T11081] loop3: detected capacity change from 0 to 2048 [ 795.373502][T11081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.404477][T11081] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.850024][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.103051][T11102] loop3: detected capacity change from 0 to 8 [ 798.231990][T11097] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 798.792997][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 798.793012][ T28] audit: type=1326 audit(1782317506.781:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.3.1178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f519239ce59 code=0x0 [ 799.182703][T11108] SQUASHFS error: Failed to read block 0x4de: -5 [ 799.196867][T11108] SQUASHFS error: Failed to read block 0x4de: -5 [ 799.234636][T11108] SQUASHFS error: Failed to read block 0x4de: -5 [ 799.246194][T11108] SQUASHFS error: Failed to read block 0x4de: -5 [ 799.256923][T11108] SQUASHFS error: Failed to read block 0x4de: -5 [ 799.264359][T11108] SQUASHFS error: Failed to read block 0x4de: -5 [ 799.282701][ T28] audit: type=1800 audit(1782317507.164:447): pid=11108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1178" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 800.668333][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.764054][T11125] loop1: detected capacity change from 0 to 1024 [ 801.731206][T11131] bridge2: entered promiscuous mode [ 802.150749][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.431521][T11140] loop1: detected capacity change from 0 to 256 [ 802.572421][T11140] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 802.583546][T11140] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 802.634630][T11140] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 802.745990][T11140] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 802.754694][T11140] exFAT-fs (loop1): Filesystem has been set read-only [ 803.104056][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.326219][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.165528][T11151] loop1: detected capacity change from 0 to 2048 [ 804.248949][T11142] ceph: No mds server is up or the cluster is laggy [ 804.256723][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 804.263311][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 804.287008][T11151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.388134][T11151] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.506392][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.546152][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 805.018604][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 805.482487][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.642591][T11164] loop3: detected capacity change from 0 to 2048 [ 805.854737][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.594349][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.626741][T11164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.637530][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.700433][T11164] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.990146][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.203806][T11181] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1198: bg 0: block 345: padding at end of block bitmap is not set [ 808.233932][T11181] EXT4-fs (loop3): Remounting filesystem read-only [ 808.241490][T11181] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.1198: cleanup dec ref error -117 [ 808.765803][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.786391][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.839184][T11192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.848217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.858012][T11192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.149421][T11194] xt_hashlimit: max too large, truncated to 1048576 [ 810.521236][T11192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.530828][T11192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.540006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.685307][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.695908][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.705811][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.716273][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.726284][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.736783][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.746721][T11206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.757250][T11206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.110075][T11196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.360329][ T23] net_ratelimit: 4 callbacks suppressed [ 814.360349][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.412540][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.831441][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.761918][T11239] loop0: detected capacity change from 0 to 512 [ 817.382644][T11239] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 817.391292][T11239] EXT4-fs (loop0): orphan cleanup on readonly fs [ 817.404031][T11239] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (66560 > 6144). [ 817.416984][T11239] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 817.432032][T11239] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 817.470763][T11239] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #16: comm syz.0.1205: corrupted inode contents [ 817.474251][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.494162][T11239] EXT4-fs (loop0): Remounting filesystem read-only [ 817.506997][T11239] EXT4-fs (loop0): 1 truncate cleaned up [ 817.514001][T11239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 817.977728][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.037973][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.190333][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.985760][T11251] virtio-fs: tag not found [ 819.821487][ T28] audit: type=1326 audit(1782317525.760:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 819.840847][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.914427][ T28] audit: type=1326 audit(1782317525.760:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 820.505884][T11255] virtio-fs: tag not found [ 820.861149][ T28] audit: type=1326 audit(1782317525.788:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 821.117110][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.136403][ T28] audit: type=1326 audit(1782317525.788:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 821.806605][ T28] audit: type=1326 audit(1782317525.788:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 821.927516][ T28] audit: type=1326 audit(1782317525.816:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 821.959175][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.011543][ T28] audit: type=1326 audit(1782317525.816:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 822.062315][ T28] audit: type=1326 audit(1782317525.816:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 822.086523][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.141596][ T28] audit: type=1326 audit(1782317525.825:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11249 comm="syz.0.1210" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 822.347181][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.582079][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.750500][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.399630][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.905255][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.995355][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.330421][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.457381][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.712838][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.636602][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.752937][T11334] binder: 11333:11334 ioctl c00c620f 2000000003c0 returned -22 [ 831.644540][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 831.784583][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.824736][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 831.955877][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.417498][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.630620][T11361] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 834.820725][ T5863] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 835.741034][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.061006][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.330749][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.405097][T11371] binder: 11370:11371 ioctl c00c620f 2000000003c0 returned -22 [ 839.141406][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.150316][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.238720][T11381] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 839.491928][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.766772][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.961205][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.524900][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.158028][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.325176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.888199][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 843.894560][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.228564][T11417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1255'. [ 844.317293][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.843079][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.703606][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.158454][T11435] loop0: detected capacity change from 0 to 256 [ 848.166113][T11435] exfat: Deprecated parameter 'namecase' [ 848.171856][T11435] exfat: Deprecated parameter 'namecase' [ 848.177623][T11435] exfat: Deprecated parameter 'namecase' [ 848.974017][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.985052][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.019440][T11435] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 849.061521][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.149427][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.357593][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.406677][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.540408][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.798596][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.656671][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.095482][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.280276][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.395130][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.896030][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.949150][T11514] siw: device registration error -23 [ 859.237920][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.579632][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.669844][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.201375][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.269653][ T9057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.180232][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.539642][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.098183][T11559] siw: device registration error -23 [ 865.577497][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.691512][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.853133][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.867874][T11562] loop1: detected capacity change from 0 to 4096 [ 866.902223][T11562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 866.932670][T11562] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 867.084442][T11562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.275035][T11575] binder: 11568:11575 ioctl c00c620f 2000000003c0 returned -22 [ 868.980786][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.093617][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.094161][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.529000][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.459285][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.596112][ T5863] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 871.687955][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.054142][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.282935][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.492436][ T5863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.505280][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.517559][ T5863] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 873.536690][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 873.558576][ T5863] usb 4-1: SerialNumber: syz [ 873.603561][ T5863] usb 4-1: 0:2 : does not exist [ 874.395164][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.498862][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.534866][T11639] binder: 11635:11639 ioctl c00c620f 2000000003c0 returned -22 [ 875.706732][T10061] usb 4-1: USB disconnect, device number 3 [ 876.343061][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.743027][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.949232][T11649] binder: 11644:11649 ioctl c00c620f 2000000003c0 returned -22 [ 877.883083][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.998243][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.846349][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.156843][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.227854][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.247940][T11682] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1313'. [ 881.321197][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.767794][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.989857][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.097701][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.315351][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.483334][T11727] binder: 11722:11727 ioctl c00c620f 2000000003c0 returned -22 [ 886.986607][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.349177][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.383363][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.565373][T11755] loop0: detected capacity change from 0 to 512 [ 888.566312][T11755] EXT4-fs: Ignoring removed i_version option [ 888.566332][T11755] EXT4-fs: Ignoring removed nobh option [ 888.580427][T11755] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 888.678179][T11755] EXT4-fs (loop0): 1 truncate cleaned up [ 888.679506][T11755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.628527][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.663468][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.041567][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.143491][T11767] binder: 11762:11767 ioctl c00c620f 2000000003c0 returned -22 [ 890.625602][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.676222][T11776] binder: 11771:11776 ioctl c00c620f 2000000003c0 returned -22 [ 890.731802][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.921837][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.028354][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.049262][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.140317][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.225473][T11807] binder: 11801:11807 ioctl c00c620f 2000000003c0 returned -22 [ 895.412832][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.995176][T11817] binder: 11812:11817 ioctl c00c620f 2000000003c0 returned -22 [ 896.532172][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.059953][T11826] binder: 11821:11826 ioctl c00c620f 2000000003c0 returned -22 [ 897.322590][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.654580][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.870249][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.675766][T11835] loop0: detected capacity change from 0 to 512 [ 899.880737][T11835] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.1358: corrupted inode contents [ 899.918052][T11835] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 899.933435][T11835] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.1358: corrupted inode contents [ 899.975244][T11835] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.1358: mark_inode_dirty error [ 899.987285][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.007770][T11835] EXT4-fs (loop0): 1 orphan inode deleted [ 900.019347][T11835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.236190][T11846] binder: 11843:11846 ioctl c00c620f 2000000003c0 returned -22 [ 900.290162][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.237315][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.315424][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.356778][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.428605][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.758920][T11855] binder: 11850:11855 ioctl c00c620f 2000000003c0 returned -22 [ 903.894023][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.936971][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.997236][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.247311][T11878] binder: 11873:11878 ioctl c00c620f 2000000003c0 returned -22 [ 906.041935][T11888] binder: 11885:11888 ioctl c00c620f 2000000003c0 returned -22 [ 906.106082][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.217463][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.158197][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.329370][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.189234][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 909.189357][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.922999][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.083960][T11911] binder: 11906:11911 ioctl c00c620f 2000000003c0 returned -22 [ 910.335925][T11915] loop1: detected capacity change from 0 to 512 [ 910.336855][T11915] EXT4-fs: Ignoring removed i_version option [ 910.336875][T11915] EXT4-fs: Ignoring removed nobh option [ 910.403072][T11915] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 910.526907][T11915] EXT4-fs (loop1): 1 truncate cleaned up [ 910.528312][T11915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.552947][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.066845][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.447130][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.461027][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.298702][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.655689][T11931] binder: 11928:11931 ioctl c00c620f 2000000003c0 returned -22 [ 913.375697][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.507220][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.719100][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.738844][ T7556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.760837][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.771306][T11939] binder: 11936:11939 ioctl c00c620f 2000000003c0 returned -22 [ 915.604178][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.613311][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.858906][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.321658][T11962] binder: 11958:11962 ioctl c00c620f 2000000003c0 returned -22 [ 918.089015][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.934529][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.198742][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.620569][T11974] kvm: kvm [11973]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 920.310811][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.866804][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.875840][T11015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.905838][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.920916][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.093763][T11986] binder: 11982:11986 ioctl c00c620f 2000000003c0 returned -22 [ 921.593898][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.184358][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.418445][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.177591][T12009] binder: 12003:12009 ioctl c00c620f 2000000003c0 returned -22 [ 925.006343][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.434248][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.180810][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.738733][T12029] binder: 12026:12029 ioctl c00c620f 2000000003c0 returned -22 [ 926.978075][T11015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.028855][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.111137][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.425007][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.521301][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.757328][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.186630][T12049] loop1: detected capacity change from 0 to 1024 [ 930.194465][T12049] hfsplus: unable to parse mount options [ 930.626532][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.694819][T11444] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 932.059566][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.571194][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.841745][T12063] binder: 12060:12063 ioctl c00c620f 2000000003c0 returned -22 [ 932.932814][T12079] futex_wake_op: syz.0.1416 tries to shift op by 144; fix this program [ 934.289374][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.881104][T12081] binder: 12074:12081 ioctl c00c620f 2000000003c0 returned -22 [ 935.312354][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.543184][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.232841][T12108] loop0: detected capacity change from 0 to 1024 [ 936.240568][T12108] hfsplus: unable to parse mount options [ 936.650080][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.567892][T11426] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 937.686712][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.770447][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.713974][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.942950][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.368886][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.394043][T12134] loop0: detected capacity change from 0 to 8 [ 941.991135][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.025845][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.354971][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.393685][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'. [ 944.525536][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.123578][T12169] sctp: [Deprecated]: syz.0.1436 (pid 12169) Use of int in maxseg socket option. [ 945.123578][T12169] Use struct sctp_assoc_value instead [ 946.014242][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.053810][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.323581][T10061] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 946.591074][T10061] usb 2-1: Using ep0 maxpacket: 8 [ 946.594168][T10061] usb 2-1: unable to get BOS descriptor or descriptor too short [ 946.613057][T10061] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.613090][T10061] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 946.615576][T10061] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 946.645769][T10061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.645801][T10061] usb 2-1: Product: syz [ 946.645817][T10061] usb 2-1: Manufacturer: syz [ 946.645833][T10061] usb 2-1: SerialNumber: syz [ 946.653143][T10061] usb 2-1: config 0 descriptor?? [ 947.114981][T12171] blktrace: Concurrent blktraces are not allowed on sg0 [ 947.165625][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.537859][T12182] IPVS: lc: FWM 3 0x00000003 - no destination available [ 948.622396][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.630550][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.851393][ T5851] usb 2-1: USB disconnect, device number 9 [ 949.579201][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.289755][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.525620][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.539488][T12198] binder: 12191:12198 ioctl c00c620f 2000000003c0 returned -22 [ 951.925675][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 951.925727][ T28] audit: type=1326 audit(1782317649.962:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 952.837265][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.846223][ T28] audit: type=1326 audit(1782317650.056:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 952.870892][ T28] audit: type=1326 audit(1782317650.056:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 952.895927][ T28] audit: type=1326 audit(1782317650.056:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 952.941794][ T28] audit: type=1326 audit(1782317650.056:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 952.967106][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.161613][ T28] audit: type=1326 audit(1782317650.065:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 953.253120][ T28] audit: type=1326 audit(1782317650.093:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 953.277354][ T28] audit: type=1326 audit(1782317650.103:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 953.301632][ T28] audit: type=1326 audit(1782317650.103:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 953.325888][ T28] audit: type=1326 audit(1782317650.112:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.1446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 954.791854][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.214158][T12249] futex_wake_op: syz.2.1453 tries to shift op by 144; fix this program [ 957.448755][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.948922][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.706479][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.256011][T12267] NILFS (nullb0): couldn't find nilfs on the device [ 959.374671][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.528912][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.358821][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.374281][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.735059][T12304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.744927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.542286][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.050290][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.064734][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.075333][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.096460][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.177247][T12326] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 965.631728][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.841516][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.149967][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.880560][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.881131][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.253581][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.234849][T12361] binder: 12353:12361 ioctl c00c620f 2000000003c0 returned -22 [ 971.095475][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.387889][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.672756][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.737600][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.878519][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.884863][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 975.637284][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.615698][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.553303][T12411] IPVS: lc: FWM 3 0x00000003 - no destination available [ 978.335380][T12407] binder: 12399:12407 ioctl c00c620f 2000000003c0 returned -22 [ 978.512915][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.977292][T12421] loop3: detected capacity change from 0 to 8 [ 979.025091][T12421] SQUASHFS error: xz decompression failed, data probably corrupt [ 979.032992][T12421] SQUASHFS error: Failed to read block 0x108: -5 [ 979.039575][T12421] SQUASHFS error: Unable to read metadata cache entry [106] [ 979.046883][T12421] SQUASHFS error: Unable to read inode 0x11f [ 979.194577][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.203151][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.458298][T11426] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 979.823166][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.138353][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.490351][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.276829][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.879644][ T2197] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 984.168210][ T2197] usb 1-1: Using ep0 maxpacket: 32 [ 984.579014][ T2197] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 984.585344][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.608819][ T2197] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 984.618094][ T2197] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 984.641799][ T2197] usb 1-1: Product: syz [ 984.646033][ T2197] usb 1-1: Manufacturer: syz [ 984.681538][ T2197] usb 1-1: SerialNumber: syz [ 984.706065][ T2197] usb 1-1: config 0 descriptor?? [ 984.721872][T12449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 985.363406][T12462] binder: 12458:12462 ioctl c00c620f 2000000003c0 returned -22 [ 985.805862][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.157290][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.169384][ T177] usb 1-1: USB disconnect, device number 7 [ 987.886296][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.979990][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.214233][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.237309][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.101775][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.438512][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.532914][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.638440][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.721726][ T5826] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 993.702456][T12526] binder: 12524:12526 ioctl c00c620f 2000000003c0 returned -22 [ 993.728880][ T5826] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 993.830303][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.844844][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.853622][ T5826] usb 2-1: Product: syz [ 993.857941][ T5826] usb 2-1: Manufacturer: syz [ 993.862580][ T5826] usb 2-1: SerialNumber: syz [ 994.668815][ T5826] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 994.681297][ T5826] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 994.795078][ T5826] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 995.439955][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.502799][ T5826] lan78xx: probe of 2-1:1.0 failed with error -32 [ 996.702830][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.721060][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.764721][ T5823] usb 2-1: USB disconnect, device number 10 [ 996.998247][ T28] kauditd_printk_skb: 248 callbacks suppressed [ 996.998294][ T28] audit: type=1800 audit(1782317692.158:731): pid=12545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1533" name="file0" dev="overlay" ino=2001 res=0 errno=0 [ 999.221343][T12547] overlayfs: failed to clone upperpath [ 999.477659][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.499015][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.957996][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.736936][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.846657][T12561] binder: 12558:12561 ioctl c00c620f 2000000003c0 returned -22 [ 1002.288196][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.177341][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.440815][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.697808][T12585] binder: 12583:12585 ioctl c00c620f 2000000003c0 returned -22 [ 1004.819708][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.064145][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.096613][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.768820][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.201398][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.210028][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.300159][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.957771][T12634] binder: 12632:12634 ioctl c00c620f 2000000003c0 returned -22 [ 1011.598195][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.837810][T12644] binder: 12637:12644 ioctl c00c620f 2000000003c0 returned -22 [ 1012.846039][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.906613][ T5785] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 1013.494200][T12651] binder: 12648:12651 ioctl c00c620f 2000000003c0 returned -22 [ 1014.067344][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.089724][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.235935][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.532606][T12667] NILFS (nullb0): couldn't find nilfs on the device [ 1016.486074][ T5826] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1016.603141][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.892213][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 1016.903835][ T5826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1016.921815][ T5826] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1017.288629][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.512768][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1017.520993][ T5826] usb 4-1: Product: syz [ 1017.525935][ T5826] usb 4-1: Manufacturer: syz [ 1017.530918][ T5826] usb 4-1: SerialNumber: syz [ 1017.544535][ T5826] usb 4-1: config 0 descriptor?? [ 1017.552107][T12671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1017.733959][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.980508][T12692] binder: 12688:12692 ioctl c00c620f 2000000003c0 returned -22 [ 1018.869958][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.947078][ T23] usb 4-1: USB disconnect, device number 4 [ 1020.024905][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.541387][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.549648][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.117677][ T28] audit: type=1326 audit(1782317715.734:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12710 comm="syz.1.1581" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe888b9ce59 code=0x0 [ 1021.217003][T12720] loop1: detected capacity change from 0 to 16 [ 1021.733621][T12716] overlayfs: missing 'lowerdir' [ 1022.368418][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.910774][T12728] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1023.374657][T12729] binder: 12726:12729 ioctl c00c620f 2000000003c0 returned -22 [ 1023.608476][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.824320][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.050153][T12735] binder: 12731:12735 ioctl c00c620f 2000000003c0 returned -22 [ 1024.878526][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.035011][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.289288][ T5863] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1027.134665][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.146021][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.347586][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 1028.267967][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.583453][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1028.942194][T12776] binder: 12774:12776 ioctl c00c620f 2000000003c0 returned -22 [ 1029.358346][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.672503][ T5863] usb 2-1: string descriptor 0 read error: -71 [ 1029.774781][ T5863] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1029.784172][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1029.798552][ T5863] usb 2-1: config 0 descriptor?? [ 1029.807358][ T5863] usb 2-1: can't set config #0, error -71 [ 1029.817794][ T5863] usb 2-1: USB disconnect, device number 11 [ 1030.295792][T12782] binder: 12779:12782 ioctl c00c620f 2000000003c0 returned -22 [ 1030.411388][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.435706][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.468250][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.570818][T12785] binder: 12783:12785 ioctl c00c620f 2000000003c0 returned -22 [ 1031.571201][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.682655][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.933872][T12805] overlayfs: failed to clone upperpath [ 1033.708763][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.794772][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.362922][T12819] NILFS (nullb0): couldn't find nilfs on the device [ 1035.439267][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.639851][T12823] binder: 12814:12823 ioctl c00c620f 2000000003c0 returned -22 [ 1036.209646][T12829] binder: 12826:12829 ioctl c00c620f 2000000003c0 returned -22 [ 1036.958926][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.967161][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.981681][T12833] binder: 12830:12833 ioctl c00c620f 2000000003c0 returned -22 [ 1037.611741][T12843] loop1: detected capacity change from 0 to 32768 [ 1038.612928][T11015] read_mapping_page failed! [ 1038.693913][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.856725][T12846] ceph: No mds server is up or the cluster is laggy [ 1038.918689][T11015] ERROR: (device loop1): txCommit: [ 1038.918689][T11015] [ 1038.978353][T11015] jfs_write_inode: jfs_commit_inode failed! [ 1039.541270][ T28] audit: type=1326 audit(1782317732.955:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12844 comm="syz.3.1615" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f519239ce59 code=0x0 [ 1039.572028][T12853] loop3: detected capacity change from 0 to 16 [ 1039.639942][T12853] overlayfs: missing 'lowerdir' [ 1040.389569][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.425223][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.553148][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1040.559672][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1040.632748][T12865] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1040.790390][T12865] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1040.799080][T12865] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1040.892177][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.454076][T12864] binder: 12863:12864 ioctl c00c620f 2000000003c0 returned -22 [ 1041.609585][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.636204][T12878] binder: 12874:12878 ioctl c00c620f 2000000003c0 returned -22 [ 1042.761744][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.971897][T12882] binder: 12879:12882 ioctl c00c620f 2000000003c0 returned -22 [ 1043.209984][T12885] MTD: Couldn't look up '/dev/nullb0': -15 [ 1043.943694][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.952014][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.329209][T12889] loop0: detected capacity change from 0 to 32768 [ 1045.465809][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.483780][T11015] read_mapping_page failed! [ 1045.500269][T11015] ERROR: (device loop0): txCommit: [ 1045.500269][T11015] [ 1045.557327][T11015] jfs_write_inode: jfs_commit_inode failed! [ 1046.027482][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.563612][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.625349][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.724811][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.022878][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.129789][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.899361][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.860630][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.690087][T12942] NILFS (nullb0): couldn't find nilfs on the device [ 1053.178591][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.520154][T12946] binder: 12944:12946 ioctl c00c620f 2000000003c0 returned -22 [ 1054.473407][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.489833][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 1054.630110][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.908738][T12952] loop3: detected capacity change from 0 to 32768 [ 1056.092095][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.151397][ T3533] read_mapping_page failed! [ 1056.156285][ T3533] ERROR: (device loop3): txCommit: [ 1056.156285][ T3533] [ 1056.165982][ T3533] jfs_write_inode: jfs_commit_inode failed! [ 1056.289414][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.450977][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.773204][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.063677][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.395891][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.991343][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.241037][T13005] binder: 13001:13005 ioctl c00c620f 2000000003c0 returned -22 [ 1061.709443][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.952408][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.139585][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.241561][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.489738][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.685232][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.935049][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.090624][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.128451][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.149889][T13054] binder: 13046:13054 ioctl c00c620f 2000000003c0 returned -22 [ 1069.296628][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.617370][T13068] binder: 13063:13068 ioctl c00c620f 2000000003c0 returned -22 [ 1070.446257][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.600245][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.608589][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.643752][T13078] loop0: detected capacity change from 0 to 256 [ 1072.716752][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.143711][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.584277][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.592531][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.748554][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.813513][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.227040][T13121] futex_wake_op: syz.2.1691 tries to shift op by 144; fix this program [ 1078.416535][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.523037][T13130] binder: 13114:13130 ioctl c00c620f 2000000003c0 returned -22 [ 1079.075640][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.942382][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.943687][T13147] binder: 13143:13147 ioctl c00c620f 2000000003c0 returned -22 [ 1081.177977][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.219047][T13150] binder: 13148:13150 ioctl c00c620f 2000000003c0 returned -22 [ 1082.425793][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.436481][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.794110][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.117055][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1703'. [ 1085.573830][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.708241][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.592777][T13187] loop0: detected capacity change from 0 to 4096 [ 1087.232666][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.314385][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.409434][T13187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.440315][T13187] netlink: 'syz.0.1706': attribute type 29 has an invalid length. [ 1088.418698][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.328187][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.337095][T13187] IPv6: NLM_F_CREATE should be specified when creating new route [ 1089.530457][ T28] audit: type=1804 audit(1782317779.576:734): pid=13187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1706" name="/newroot/410/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1089.616673][T13213] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1089.679850][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.805245][T13214] netlink: 'syz.1.1712': attribute type 9 has an invalid length. [ 1089.930963][T13213] loop3: detected capacity change from 0 to 128 [ 1089.972839][T13213] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1090.108798][ T28] audit: type=1804 audit(1782317779.576:735): pid=13187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1706" name="/newroot/410/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1090.149255][T13213] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1090.223605][T13213] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.1713: Directory block failed checksum [ 1090.360870][ T28] audit: type=1804 audit(1782317779.576:736): pid=13187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1706" name="/newroot/410/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1090.579071][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1090.599146][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.835825][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.512087][T13226] loop3: detected capacity change from 0 to 32768 [ 1092.475819][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.585087][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.646498][ T2956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.661562][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.669242][T11015] read_mapping_page failed! [ 1092.670557][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.682433][T11015] ERROR: (device loop3): txCommit: [ 1092.682433][T11015] [ 1092.822347][T11015] jfs_write_inode: jfs_commit_inode failed! [ 1094.385760][T13243] futex_wake_op: syz.3.1721 tries to shift op by 144; fix this program [ 1094.404297][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.463966][T13244] binder: 13236:13244 ioctl c00c620f 2000000003c0 returned -22 [ 1096.038834][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.282465][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.063219][T13267] binder: 13260:13267 ioctl c00c620f 2000000003c0 returned -22 [ 1097.247570][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.741953][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.750272][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.758413][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.767385][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.804287][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.605380][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.617539][T13291] binder: 13283:13291 ioctl c00c620f 2000000003c0 returned -22 [ 1102.031764][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.078079][T13308] binder: 13302:13308 ioctl c00c620f 2000000003c0 returned -22 [ 1102.156835][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.886722][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.096759][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.212615][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.238828][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1106.245384][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1106.268794][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.178861][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 1107.432022][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.602779][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.616917][ T3533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.631324][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.643440][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.808451][T13340] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.817972][T13340] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.826786][T13340] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.835515][T13340] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1107.925062][T13340] vxlan0: entered promiscuous mode [ 1108.547150][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.112717][T13356] binder: 13349:13356 ioctl c00c620f 2000000003c0 returned -22 [ 1109.483937][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.761343][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.835857][T13362] binder: 13361:13362 ioctl c00c620f 2000000003c0 returned -22 [ 1110.937574][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.420768][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.964293][T13379] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1113.287000][T13382] binder: 13376:13382 ioctl c00c620f 2000000003c0 returned -22 [ 1113.588939][ T23] net_ratelimit: 1 callbacks suppressed [ 1113.588955][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.497164][T13391] qrtr: Invalid version 0 [ 1115.887498][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.967104][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.012544][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.944813][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.086540][T13404] binder: 13398:13404 ioctl c00c620f 2000000003c0 returned -22 [ 1118.125373][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.234004][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.369453][T13417] binder: 13415:13417 ioctl c00c620f 2000000003c0 returned -22 [ 1119.475293][T13419] binder: 13416:13419 ioctl c00c620f 2000000003c0 returned -22 [ 1119.788960][T13421] loop3: detected capacity change from 0 to 32768 [ 1120.346493][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.651081][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.720068][T11015] read_mapping_page failed! [ 1120.724702][T11015] ERROR: (device loop3): txCommit: [ 1120.724702][T11015] [ 1120.745759][T11015] jfs_write_inode: jfs_commit_inode failed! [ 1120.924467][T13414] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1122.059208][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.650964][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.674669][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.952949][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.020647][T13450] binder: 13449:13450 ioctl c00c620f 2000000003c0 returned -22 [ 1126.174576][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.211872][T13459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1779'. [ 1127.505776][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.519020][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.268054][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.562548][T13471] binder: 13465:13471 ioctl c00c620f 2000000003c0 returned -22 [ 1128.641852][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.490945][T13480] futex_wake_op: syz.2.1785 tries to shift op by 144; fix this program [ 1130.615770][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.665877][T13475] binder: 13472:13475 ioctl c00c620f 2000000003c0 returned -22 [ 1131.158904][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.998388][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.095952][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.204890][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.384919][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.281019][T13502] netlink: 'syz.0.1790': attribute type 9 has an invalid length. [ 1135.344795][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.682239][T13525] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1136.723628][T13524] IPVS: stopping master sync thread 13525 ... [ 1136.781435][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.237718][T13528] binder: 13522:13528 ioctl c00c620f 2000000003c0 returned -22 [ 1137.623929][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.454208][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.462547][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.523567][T13543] binder: 13539:13543 ioctl c00c620f 2000000003c0 returned -22 [ 1139.192990][T13542] binder: 13533:13542 ioctl c00c620f 2000000003c0 returned -22 [ 1139.588560][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.834957][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.875544][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.973382][T13567] binder: 13562:13567 ioctl c00c620f 2000000003c0 returned -22 [ 1141.983532][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.996000][T11015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.025179][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.865851][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.932500][T13565] loop1: detected capacity change from 0 to 4096 [ 1144.317173][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.340283][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.386263][T13565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.694457][T13565] netlink: 'syz.1.1807': attribute type 29 has an invalid length. [ 1144.979897][T13565] IPv6: NLM_F_CREATE should be specified when creating new route [ 1145.508698][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.545224][ T28] audit: type=1804 audit(1782317832.108:737): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1807" name="/newroot/441/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1145.677567][ T28] audit: type=1804 audit(1782317832.126:738): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1807" name="/newroot/441/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1145.836571][ T28] audit: type=1804 audit(1782317832.136:739): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1807" name="/newroot/441/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1146.385247][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.404694][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.544265][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.635298][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.843063][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.407333][T13613] binder: 13611:13613 ioctl c00c620f 2000000003c0 returned -22 [ 1149.461379][T13616] binder: 13607:13616 ioctl c00c620f 2000000003c0 returned -22 [ 1149.848792][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.878055][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.974084][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.035583][T13630] capability: warning: `syz.1.1828' uses deprecated v2 capabilities in a way that may be insecure [ 1152.193611][T13641] lo speed is unknown, defaulting to 1000 [ 1152.199645][T13641] lo speed is unknown, defaulting to 1000 [ 1152.206699][T13641] lo speed is unknown, defaulting to 1000 [ 1152.218750][T13641] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1152.237614][T13641] lo speed is unknown, defaulting to 1000 [ 1152.245122][T13641] lo speed is unknown, defaulting to 1000 [ 1152.252100][T13641] lo speed is unknown, defaulting to 1000 [ 1152.259183][T13641] lo speed is unknown, defaulting to 1000 [ 1152.317890][T13636] binder: 13626:13636 ioctl c00c620f 2000000003c0 returned -22 [ 1152.542494][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.743903][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.758072][T13650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1154.104764][T13655] binder: 13654:13655 ioctl c00c620f 2000000003c0 returned -22 [ 1154.138854][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.978151][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.031739][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 1157.271054][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.379452][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.143761][T13684] binder: 13679:13684 ioctl c00c620f 2000000003c0 returned -22 [ 1158.917312][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.002784][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.204820][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.980524][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.201584][T13694] binder: 13692:13694 ioctl c00c620f 2000000003c0 returned -22 [ 1161.282787][T13697] binder: 13691:13697 ioctl c00c620f 2000000003c0 returned -22 [ 1161.319609][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.460919][T13705] loop3: detected capacity change from 0 to 8192 [ 1163.654600][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.697899][T13705] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1163.705474][T13705] UDF-fs: Scanning with blocksize 512 failed [ 1163.855366][T13705] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1163.862930][T13705] UDF-fs: Scanning with blocksize 1024 failed [ 1163.870385][T13705] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1163.878180][T13705] UDF-fs: Scanning with blocksize 2048 failed [ 1163.900932][T13705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1165.028423][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.478315][T13716] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1166.022138][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.259141][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1855'. [ 1167.133640][T13725] syz.1.1855 (13725) used greatest stack depth: 16600 bytes left [ 1167.159429][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.306031][T13729] loop1: detected capacity change from 0 to 512 [ 1167.342699][T13729] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1167.376812][T13729] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1167.448270][T13733] binder: 13732:13733 ioctl c00c620f 2000000003c0 returned -22 [ 1167.505222][T13729] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.1857: Invalid inode table block 1 in block_group 0 [ 1167.583314][T13729] EXT4-fs (loop1): get root inode failed [ 1167.607438][T13729] EXT4-fs (loop1): mount failed [ 1168.430735][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.447014][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.566722][T13744] binder: 13738:13744 ioctl c00c620f 2000000003c0 returned -22 [ 1168.836002][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 1169.255823][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.818700][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.868406][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1175.874858][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.083302][T13757] syz.1.1864: attempt to access beyond end of device [ 1176.083302][T13757] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1176.087024][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.097565][T13757] SQUASHFS error: Failed to read block 0x0: -5 [ 1176.425421][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.724161][T13770] binder: 13761:13770 ioctl c00c620f 2000000003c0 returned -22 [ 1177.561618][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.572379][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.004584][T13784] binder: 13779:13784 ioctl c00c620f 2000000003c0 returned -22 [ 1178.097170][T13792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.111719][T13792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.122926][T13792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.134091][T13792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.143168][T13792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.395754][T13793] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1870'. [ 1179.500920][T13793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.508855][T13793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.322695][T13803] loop0: detected capacity change from 0 to 512 [ 1180.332998][T13803] EXT4-fs: Ignoring removed bh option [ 1180.469643][T13803] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1181.352040][ T23] net_ratelimit: 159 callbacks suppressed [ 1181.352055][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.366758][T13803] EXT4-fs (loop0): 1 truncate cleaned up [ 1181.378062][T13803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.161765][T13816] IPVS: Error connecting to the multicast addr [ 1182.468956][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.481256][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.526031][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.553553][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.923232][T13832] binder: 13830:13832 ioctl c00c620f 2000000003c0 returned -22 [ 1184.826221][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.946059][T13840] binder: 13835:13840 ioctl c00c620f 2000000003c0 returned -22 [ 1185.217699][T13844] binder: 13839:13844 ioctl c00c620f 2000000003c0 returned -22 [ 1185.815323][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.993816][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.027619][T13854] loop3: detected capacity change from 0 to 512 [ 1186.184665][T13854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1186.669314][T13854] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1186.696088][T13854] EXT4-fs (loop3): 1 truncate cleaned up [ 1186.710056][T13854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1188.149172][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.157415][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.213382][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.281446][T13869] futex_wake_op: syz.2.1890 tries to shift op by 144; fix this program [ 1188.808585][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.108191][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.396728][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.497918][T13876] binder: 13872:13876 ioctl c00c620f 2000000003c0 returned -22 [ 1191.731922][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.399575][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.917497][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.017000][T13895] netlink: 'syz.1.1899': attribute type 11 has an invalid length. [ 1193.224913][T13893] binder: 13887:13893 ioctl c00c620f 2000000003c0 returned -22 [ 1193.887580][T13900] binder: 13898:13900 ioctl c00c620f 2000000003c0 returned -22 [ 1194.621331][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.153009][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.212794][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.312271][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.780978][T13925] binder: 13924:13925 ioctl c00c620f 2000000003c0 returned -22 [ 1198.351382][ T28] audit: type=1326 audit(1782317881.089:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13922 comm="syz.1.1908" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe888b9ce59 code=0x0 [ 1198.634038][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.650640][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.723831][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.792801][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.575918][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.250085][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.262166][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.432017][T13963] binder: 13959:13963 ioctl c00c620f 2000000003c0 returned -22 [ 1204.965092][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.166831][T13971] binder: 13970:13971 ioctl c00c620f 2000000003c0 returned -22 [ 1206.152181][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.315373][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.392009][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.654728][T13984] loop3: detected capacity change from 0 to 1024 [ 1207.672738][T13984] EXT4-fs: Ignoring removed mblk_io_submit option [ 1207.744315][T13984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1207.765789][T13984] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1207.791433][T13984] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 1207.878825][T13785] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1208.801439][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.537790][T10061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.554849][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.569622][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.776540][T13998] binder: 13994:13998 ioctl c00c620f 2000000003c0 returned -22 [ 1210.868883][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 1211.673977][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.772317][T14002] binder: 14001:14002 ioctl c00c620f 2000000003c0 returned -22 [ 1212.977669][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.058605][T14011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.067524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.811706][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.888949][T14024] kernel profiling enabled (shift: 9) [ 1214.789111][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.501555][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.026569][T14046] binder: 14044:14046 ioctl c00c620f 2000000003c0 returned -22 [ 1217.064174][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.658051][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.559035][T14054] loop3: detected capacity change from 0 to 512 [ 1218.581608][T14054] EXT4-fs: Ignoring removed bh option [ 1218.616243][T14054] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1218.660723][T14054] EXT4-fs (loop3): 1 truncate cleaned up [ 1218.686436][T14054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.779974][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.807597][T14058] binder: 14057:14058 ioctl c00c620f 2000000003c0 returned -22 [ 1219.245509][T14060] IPVS: Error connecting to the multicast addr [ 1219.647288][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.937470][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.300580][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.637630][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.077601][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.172435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.731822][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.894400][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.682058][T14083] binder: 14079:14083 ioctl c00c620f 2000000003c0 returned -22 [ 1224.590376][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.047673][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 1225.568580][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.838247][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.381881][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.457287][T14090] binder: 14085:14090 ioctl c00c620f 2000000003c0 returned -22 [ 1227.490119][T14093] binder: 14092:14093 ioctl c00c620f 2000000003c0 returned -22 [ 1228.641002][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.850111][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.789922][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.895024][T14116] netlink: 'syz.0.1961': attribute type 11 has an invalid length. [ 1230.814541][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.932994][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.018477][T14118] binder: 14111:14118 ioctl c00c620f 2000000003c0 returned -22 [ 1232.097942][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.489137][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1966'. [ 1232.570022][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 1233.527888][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.538984][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.589372][ T2956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.598290][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.637068][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.736584][T14132] binder: 14127:14132 ioctl c00c620f 2000000003c0 returned -22 [ 1234.261020][T14141] binder: 14137:14141 ioctl c00c620f 2000000003c0 returned -22 [ 1234.670302][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.054227][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.971648][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.231127][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.926096][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.932595][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.005451][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.024346][T11480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.033543][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.042290][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.580136][T14161] binder: 14157:14161 ioctl c00c620f 2000000003c0 returned -22 [ 1240.110861][T14170] atomic_op ffff888078707198 conn xmit_atomic 0000000000000000 [ 1240.843861][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.989497][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.224195][T14179] binder: 14175:14179 ioctl c00c620f 2000000003c0 returned -22 [ 1241.929096][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.437016][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.943626][T11480] Bluetooth: hci4: Frame reassembly failed (-84) [ 1244.427770][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.471853][T14198] netlink: 'syz.2.1986': attribute type 11 has an invalid length. [ 1244.516436][ T7558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.531138][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.590081][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.092258][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1246.084307][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.289322][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.788534][T14225] binder: 14218:14225 ioctl c00c620f 2000000003c0 returned -22 [ 1247.945901][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.072980][T14228] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1249.100455][T14228] loop1: detected capacity change from 0 to 32768 [ 1250.253282][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.565166][ T2956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.576414][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.586432][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.855457][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.361457][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.496588][T13767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.569545][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.642946][T14248] binder: 14242:14248 ioctl c00c620f 2000000003c0 returned -22 [ 1254.949756][ T28] audit: type=1326 audit(1782317934.504:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1254.986380][ T28] audit: type=1326 audit(1782317934.532:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1255.028836][ T28] audit: type=1326 audit(1782317934.532:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1255.070053][ T28] audit: type=1326 audit(1782317934.532:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1257.322570][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.338273][ T28] audit: type=1326 audit(1782317934.532:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1257.375926][T11480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.384996][ T2197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.399255][ T28] audit: type=1326 audit(1782317934.532:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1257.404404][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.430250][ T28] audit: type=1326 audit(1782317934.532:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1257.566792][T14258] loop1: detected capacity change from 0 to 16 [ 1257.574600][T14258] erofs: (device loop1): mounted with root inode @ nid 36. [ 1257.624257][T14257] syz.1.2001: attempt to access beyond end of device [ 1257.624257][T14257] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1257.673576][T14257] syz.1.2001: attempt to access beyond end of device [ 1257.673576][T14257] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1257.688441][T14257] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1257.769729][ T28] audit: type=1326 audit(1782317934.532:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1257.871980][ T23] ================================================================== [ 1257.880146][ T23] BUG: KASAN: slab-use-after-free in __io_req_complete_post+0x7a2/0x10b0 [ 1257.888643][ T23] Read of size 8 at addr ffff88805d6b62d8 by task kworker/1:0/23 [ 1257.896374][ T23] [ 1257.898703][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 1257.906003][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1257.916082][ T23] Workqueue: events ublk_stop_work_fn [ 1257.921492][ T23] Call Trace: [ 1257.924785][ T23] [ 1257.927732][ T23] dump_stack_lvl+0x18c/0x250 [ 1257.932424][ T23] ? __lock_acquire+0x7d80/0x7d80 [ 1257.937449][ T23] ? show_regs_print_info+0x20/0x20 [ 1257.942679][ T23] ? load_image+0x420/0x420 [ 1257.947178][ T23] ? __virt_addr_valid+0x10c/0x380 [ 1257.952283][ T23] ? __virt_addr_valid+0x10c/0x380 [ 1257.957385][ T23] ? __virt_addr_valid+0x10c/0x380 [ 1257.962490][ T23] print_report+0xa8/0x210 [ 1257.966901][ T23] ? __io_req_complete_post+0x7a2/0x10b0 [ 1257.972522][ T23] kasan_report+0x117/0x150 [ 1257.977082][ T23] ? __io_req_complete_post+0x7a2/0x10b0 [ 1257.982710][ T23] __io_req_complete_post+0x7a2/0x10b0 [ 1257.988172][ T23] io_uring_cmd_done+0x266/0x390 [ 1257.993153][ T23] ? io_uring_cmd_do_in_task_lazy+0x70/0x70 [ 1257.999054][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 1258.004254][ T23] ublk_cancel_dev+0x1f7/0x3a0 [ 1258.009023][ T23] ublk_stop_dev+0x367/0x410 [ 1258.013609][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.018806][ T23] ? process_scheduled_works+0x975/0x1600 [ 1258.024517][ T23] ? process_scheduled_works+0x975/0x1600 [ 1258.030227][ T23] process_scheduled_works+0xa60/0x1600 [ 1258.035775][ T23] ? worker_attach_to_pool+0x370/0x370 [ 1258.041232][ T23] ? assign_work+0x3cc/0x5d0 [ 1258.045821][ T23] worker_thread+0xa5e/0xfe0 [ 1258.050418][ T23] kthread+0x2fa/0x390 [ 1258.054476][ T23] ? pr_cont_work+0x550/0x550 [ 1258.059149][ T23] ? kthread_blkcg+0xd0/0xd0 [ 1258.063726][ T23] ret_from_fork+0x48/0x80 [ 1258.068137][ T23] ? kthread_blkcg+0xd0/0xd0 [ 1258.072724][ T23] ret_from_fork_asm+0x11/0x20 [ 1258.077489][ T23] [ 1258.080528][ T23] [ 1258.082838][ T23] Allocated by task 14230: [ 1258.087242][ T23] kasan_set_track+0x4e/0x70 [ 1258.091824][ T23] __kasan_kmalloc+0x8f/0xa0 [ 1258.096404][ T23] io_ring_ctx_alloc+0x54/0xc10 [ 1258.101244][ T23] io_uring_create+0x2df/0x1330 [ 1258.106086][ T23] __se_sys_io_uring_setup+0x29f/0x2b0 [ 1258.111536][ T23] do_syscall_64+0x55/0xb0 [ 1258.115966][ T23] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.121857][ T23] [ 1258.124167][ T23] Freed by task 2956: [ 1258.128193][ T23] kasan_set_track+0x4e/0x70 [ 1258.132955][ T23] kasan_save_free_info+0x28/0x40 [ 1258.138059][ T23] ____kasan_slab_free+0x126/0x1f0 [ 1258.143447][ T23] slab_free_freelist_hook+0x130/0x1a0 [ 1258.148982][ T23] __kmem_cache_free+0xba/0x1f0 [ 1258.153827][ T23] io_ring_exit_work+0x7a6/0x830 [ 1258.158763][ T23] process_scheduled_works+0xa60/0x1600 [ 1258.164320][ T23] worker_thread+0xa5e/0xfe0 [ 1258.168912][ T23] kthread+0x2fa/0x390 [ 1258.172978][ T23] ret_from_fork+0x48/0x80 [ 1258.177386][ T23] ret_from_fork_asm+0x11/0x20 [ 1258.182144][ T23] [ 1258.184476][ T23] Last potentially related work creation: [ 1258.190176][ T23] kasan_save_stack+0x3e/0x60 [ 1258.194849][ T23] __kasan_record_aux_stack+0xaf/0xc0 [ 1258.200216][ T23] insert_work+0x3d/0x310 [ 1258.204626][ T23] __queue_work+0xbfd/0xfd0 [ 1258.209117][ T23] queue_work_on+0x128/0x1f0 [ 1258.213692][ T23] io_ring_ctx_wait_and_kill+0x256/0x2b0 [ 1258.219312][ T23] io_uring_release+0x42/0x50 [ 1258.223974][ T23] __fput+0x221/0x930 [ 1258.228094][ T23] task_work_run+0x1d4/0x260 [ 1258.232678][ T23] do_exit+0x986/0x2530 [ 1258.236860][ T23] do_group_exit+0x22d/0x2f0 [ 1258.241440][ T23] get_signal+0x12a6/0x1390 [ 1258.245951][ T23] arch_do_signal_or_restart+0xc2/0x7b0 [ 1258.251629][ T23] exit_to_user_mode_loop+0x70/0x110 [ 1258.256916][ T23] exit_to_user_mode_prepare+0xee/0x180 [ 1258.262460][ T23] syscall_exit_to_user_mode+0x1a/0x50 [ 1258.267917][ T23] do_syscall_64+0x61/0xb0 [ 1258.272330][ T23] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.278222][ T23] [ 1258.280537][ T23] The buggy address belongs to the object at ffff88805d6b6000 [ 1258.280537][ T23] which belongs to the cache kmalloc-4k of size 4096 [ 1258.294580][ T23] The buggy address is located 728 bytes inside of [ 1258.294580][ T23] freed 4096-byte region [ffff88805d6b6000, ffff88805d6b7000) [ 1258.308457][ T23] [ 1258.310773][ T23] The buggy address belongs to the physical page: [ 1258.317178][ T23] page:ffffea000175ac00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d6b0 [ 1258.327422][ T23] head:ffffea000175ac00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1258.336431][ T23] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1258.344426][ T23] page_type: 0xffffffff() [ 1258.348754][ T23] raw: 00fff00000000840 ffff888017c42140 ffffea00015e2200 dead000000000002 [ 1258.357436][ T23] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1258.366011][ T23] page dumped because: kasan: bad access detected [ 1258.372424][ T23] page_owner tracks the page as allocated [ 1258.378127][ T23] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2984, tgid 2984 (kworker/u4:9), ts 1202684842788, free_ts 1201538343075 [ 1258.400607][ T23] post_alloc_hook+0x1c1/0x200 [ 1258.405373][ T23] get_page_from_freelist+0x2181/0x22a0 [ 1258.410910][ T23] __alloc_pages+0x1f0/0x460 [ 1258.415497][ T23] alloc_slab_page+0x5d/0x180 [ 1258.420163][ T23] new_slab+0x87/0x2d0 [ 1258.424320][ T23] ___slab_alloc+0xc5c/0x12f0 [ 1258.428999][ T23] __kmem_cache_alloc_node+0x11f/0x250 [ 1258.434459][ T23] __kmalloc_node_track_caller+0xa4/0x230 [ 1258.440232][ T23] kmalloc_reserve+0x116/0x240 [ 1258.444984][ T23] __alloc_skb+0x138/0x2c0 [ 1258.449387][ T23] nsim_dev_trap_report_work+0x253/0xa90 [ 1258.455051][ T23] process_scheduled_works+0xa60/0x1600 [ 1258.460588][ T23] worker_thread+0xa5e/0xfe0 [ 1258.465170][ T23] kthread+0x2fa/0x390 [ 1258.469224][ T23] ret_from_fork+0x48/0x80 [ 1258.473648][ T23] ret_from_fork_asm+0x11/0x20 [ 1258.478421][ T23] page last free stack trace: [ 1258.483084][ T23] free_unref_page_prepare+0x7d7/0x8f0 [ 1258.488549][ T23] free_unref_page+0x32/0x2e0 [ 1258.493229][ T23] __unfreeze_partials+0x1cf/0x210 [ 1258.498329][ T23] put_cpu_partial+0x17c/0x250 [ 1258.503081][ T23] __slab_free+0x319/0x400 [ 1258.507490][ T23] qlist_free_all+0x75/0xd0 [ 1258.512089][ T23] kasan_quarantine_reduce+0x143/0x160 [ 1258.517559][ T23] __kasan_slab_alloc+0x22/0x80 [ 1258.522405][ T23] slab_post_alloc_hook+0x6a/0x4d0 [ 1258.527532][ T23] kmem_cache_alloc+0x17e/0x2c0 [ 1258.532378][ T23] getname_flags+0xbb/0x500 [ 1258.536889][ T23] __x64_sys_unlink+0x3c/0x50 [ 1258.541557][ T23] do_syscall_64+0x55/0xb0 [ 1258.545964][ T23] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1258.551850][ T23] [ 1258.554158][ T23] Memory state around the buggy address: [ 1258.559774][ T23] ffff88805d6b6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.567825][ T23] ffff88805d6b6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.575873][ T23] >ffff88805d6b6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.583932][ T23] ^ [ 1258.590850][ T23] ffff88805d6b6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.598892][ T23] ffff88805d6b6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.606942][ T23] ================================================================== [ 1258.628524][ T28] audit: type=1326 audit(1782317934.532:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1258.653335][ T28] audit: type=1326 audit(1782317934.532:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.0.2009" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77339ce59 code=0x7ffc0000 [ 1258.653891][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.690425][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1258.697659][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 1258.704968][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1258.715042][ T23] Workqueue: events ublk_stop_work_fn [ 1258.720541][ T23] Call Trace: [ 1258.723829][ T23] [ 1258.726766][ T23] dump_stack_lvl+0x18c/0x250 [ 1258.731469][ T23] ? show_regs_print_info+0x20/0x20 [ 1258.736678][ T23] ? load_image+0x420/0x420 [ 1258.741204][ T23] panic+0x2ca/0x720 [ 1258.745119][ T23] ? bpf_jit_dump+0xd0/0xd0 [ 1258.749715][ T23] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1258.755700][ T23] ? _raw_spin_unlock+0x40/0x40 [ 1258.760543][ T23] ? print_memory_metadata+0x314/0x400 [ 1258.766015][ T23] ? __io_req_complete_post+0x7a2/0x10b0 [ 1258.771726][ T23] check_panic_on_warn+0x84/0xa0 [ 1258.776661][ T23] ? __io_req_complete_post+0x7a2/0x10b0 [ 1258.782285][ T23] end_report+0x6f/0x130 [ 1258.786530][ T23] kasan_report+0x128/0x150 [ 1258.791032][ T23] ? __io_req_complete_post+0x7a2/0x10b0 [ 1258.796654][ T23] __io_req_complete_post+0x7a2/0x10b0 [ 1258.802108][ T23] io_uring_cmd_done+0x266/0x390 [ 1258.807053][ T23] ? io_uring_cmd_do_in_task_lazy+0x70/0x70 [ 1258.812943][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 1258.818135][ T23] ublk_cancel_dev+0x1f7/0x3a0 [ 1258.822896][ T23] ublk_stop_dev+0x367/0x410 [ 1258.827488][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.832676][ T23] ? process_scheduled_works+0x975/0x1600 [ 1258.838403][ T23] ? process_scheduled_works+0x975/0x1600 [ 1258.844118][ T23] process_scheduled_works+0xa60/0x1600 [ 1258.849667][ T23] ? worker_attach_to_pool+0x370/0x370 [ 1258.855311][ T23] ? assign_work+0x3cc/0x5d0 [ 1258.859895][ T23] worker_thread+0xa5e/0xfe0 [ 1258.864490][ T23] kthread+0x2fa/0x390 [ 1258.868985][ T23] ? pr_cont_work+0x550/0x550 [ 1258.873689][ T23] ? kthread_blkcg+0xd0/0xd0 [ 1258.878357][ T23] ret_from_fork+0x48/0x80 [ 1258.882773][ T23] ? kthread_blkcg+0xd0/0xd0 [ 1258.887353][ T23] ret_from_fork_asm+0x11/0x20 [ 1258.892117][ T23] [ 1258.895407][ T23] Kernel Offset: disabled [ 1258.899725][ T23] Rebooting in 86400 seconds..