last executing test programs: 21.017501564s ago: executing program 0 (id=1799): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x580, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x2, 0x16, 0x1, 0x3, 0xe, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb6, 0x63e, {0x6, 0x3c, 0x9, 0x8, 0x0, 0x9, 0x0, @in=@broadcast, @in=@multicast2}}, @sadb_key={0x4, 0x9, 0x98, 0x0, "269265d016477aa53a941e336ec68eb4d86366"}]}, 0x70}}, 0x890) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000080)='./bus\x00', 0x4000210) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 16.207573652s ago: executing program 0 (id=1809): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090d81010002000007a05680026e00794e13b8d0fe2fa04132881cd635b3b7567d460f4dc391747f2a415683e031a99d670cc5d064f811534b6900827ac6c763a8fd8e03a6ca470d02b103cf958809334c450ed7332a024cc1e7ff071e96910c648410a780096d57310a66bbf3d1835f1d342bf8c5f22b3c987505e9"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x487, 0x0, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f00000024c0)='./file0\x00', 0x0, &(0x7f00000024c0)=ANY=[], 0xff, 0x125fe, &(0x7f0000012500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r2, r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 13.788834292s ago: executing program 1 (id=1812): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x4000, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000340)="$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") syz_open_dev$sndctrl(0x0, 0x9, 0x400000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) r3 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87}) eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], &(0x7f0000001540)}, 0x20) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000800)={0x0, {{0xa, 0x0, 0x0, @local, 0x800000}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13.752368534s ago: executing program 0 (id=1813): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) 12.817818628s ago: executing program 1 (id=1814): socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x1f00, 0x0}) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x100, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.072141349s ago: executing program 2 (id=1815): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x1, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x2}, {0x2, 0x25000, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x3000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x3, 0x6}, {0x1, 0x8000000, 0x0, 0xd, 0x59, 0xad, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x7, 0x2, 0x5}, {0x50000, 0x8000000, 0xd, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1003, 0x17}, 0x40019, 0x0, 0xd000, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) listen(0xffffffffffffffff, 0x9) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000002380)={0x73622a85, 0x100}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002580)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.929062467s ago: executing program 0 (id=1816): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r4, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000000), 0xae1, 0x80) syz_open_dev$loop(&(0x7f00000000c0), 0xf, 0x183a43) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000400)={0x0, 0x83, 0xf00}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x110, r6, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x6, &(0x7f0000000000/0x400000)=nil) 9.092045644s ago: executing program 0 (id=1817): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) syz_open_dev$tty1(0xc, 0x4, 0x2) 8.858356537s ago: executing program 2 (id=1818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x450000, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.566495232s ago: executing program 2 (id=1820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ptrace(0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f3a, 0x2, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000001000500000000000200f70a", @ANYRES32=0x0, @ANYBLOB="04000770f2a7a3e021ecfc00", @ANYRES32=0x0, @ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x44, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x45, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47ba, 0x800aa2b, 0x0, 0x0, 0x0) 7.503107036s ago: executing program 1 (id=1821): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010000080"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x74}, 0x1, 0x0, 0x0, 0x24048051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r6, 0xbd5e4000) 6.477845855s ago: executing program 3 (id=1822): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(0x0) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) 5.539857089s ago: executing program 3 (id=1823): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x80010, r0, 0x0) ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc008aeba, &(0x7f0000000040)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x9590f6cc3ea35512) sendto(r1, &(0x7f0000000000), 0x0, 0x4000080, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000030601020000000000000000070000090900020073797a3000000000090002007379649d000000000900020073797a32000000000500010007000000210238f453b91f9c7831535225415f88c29afa161165a1ee35cc16a176bea6"], 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x5, &(0x7f0000000080)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x40086603, &(0x7f0000000040)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20) 5.5169531s ago: executing program 1 (id=1824): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x6, 0x9d, 0x1, 0x7, 0xfe, 0x8, 0x7, 0x5, 0xb2, 0xc, 0x4, 0x58, 0x5, 0x0, 0x6, 0xfe}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0xb, 0x8000000000000000, 0x2, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = openat$urandom(0xffffffffffffff9c, 0x0, 0x442, 0x0) writev(r6, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) syz_open_procfs(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x150, 0x168, 0x9, 0x150, 0xb, 0x290, 0x250, 0x250, 0x290, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x742d, 0x58, 0x3}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@rand_addr=0x64010101, @ipv4=@local, @ipv6=@mcast2, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) fanotify_mark(0xffffffffffffffff, 0x0, 0x21, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x0) 5.273873155s ago: executing program 2 (id=1825): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 4.563697756s ago: executing program 3 (id=1826): socket$can_raw(0x1d, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x28081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0xd000, 0x1, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x2}, {0x2, 0x25000, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x41000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x4, 0x3, 0x6}, {0x1, 0x8000000, 0x0, 0xd, 0x59, 0xad, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0x2, 0x8092000, 0xf, 0xbd, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x7, 0x2, 0x5}, {0x50000, 0x8000000, 0xd, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x58000, 0xedd8}, {0xffff1003, 0x17}, 0x20040039, 0x0, 0xd000, 0x0, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) listen(0xffffffffffffffff, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r2, &(0x7f0000000100)=""/107, 0x6b) write$nci(r2, &(0x7f0000000100)=ANY=[], 0x4) writev(r2, &(0x7f0000001900)=[{0x0}], 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000100000000000a00000a140000001100010000000000000000000500000a7ed939bffdbf12e04220642842dc3422488445acb5ba1b3d185c52ea36b5178d548bff0df45798fcac80d684f8f515acdaab2edf50ef403c3351412783160cd3dc638356ee4707879980291f3a82383f6d6c7ffc745bbff4c1"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x121) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000002380)={0x73622a85, 0x100}) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="016bf5e078c08bda1f00029078ac1e0101e0000001167c9078ac141430"], 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 4.527305428s ago: executing program 2 (id=1827): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x400007, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) listen(0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_raw(r7, &(0x7f0000000000), 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x200000, 0x0, 0x0, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd9002584b5f9ae54dd851daed0c915d40f3a3fb324415ea188556f05a94c5a063dcf7be1743c393ed5fd0563366b67048a89f49375cd26cdbbe7f4b9f7d02fb8c26996da27d63c84e31f1b8a8b942e2b7b25354a25c9b79d6dfbd7f7d9ee7c0767dc1e21f382382ac9a01aa1fb75a182d9d410079b15e59a58c12e44ea45aaf6021bf0179b6a99c4b47de940e8c244a8", 0xdb}, {&(0x7f0000000180)="224a1f4b1161baddab286f59366916998e7ac05aef", 0x15}], 0x2}], 0x1, 0x0) 4.249713684s ago: executing program 3 (id=1828): r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)={0x22600, 0x54, 0x33}, 0x18) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000001ac0)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x110, r1, 0xe307b000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSET={0x15c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x118, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x114, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f6366a7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6651}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef8d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x398}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.925814068s ago: executing program 2 (id=1830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x700, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_USERDATA={0x4}]}], {0x14}}, 0x118}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c5fe68bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8ba58502975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x87, 0x0, 0x0, 0xb61, 0x0, r0}) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.121242075s ago: executing program 0 (id=1831): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80801) r1 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@userxattr}]}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=0x1, 0x4) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r2, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) 1.001464712s ago: executing program 3 (id=1832): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(0x0) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) 209.659138ms ago: executing program 1 (id=1833): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x80005, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(0x3) sendmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x8, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044854}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x3, 0xff) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x10, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x9d7fd000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 3 (id=1834): r0 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x10, &(0x7f00000000c0)=0x6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) getgroups(0xfffe, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x22048a0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}}, 0x128}}, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r3, &(0x7f0000000000)={r0, r4, 0x8001}) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x3, 0x4) kernel console output (not intermixed with test programs): p2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.595099][ T6283] EXT4-fs (loop2): 1 truncate cleaned up [ 94.638367][ T23] hub 1-1:4.0: 2 ports detected [ 94.687916][ T6283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.259564][ T6292] vivid-007: ================= START STATUS ================= [ 95.273497][ T6292] vivid-007: Enable Output Cropping: true [ 95.294383][ T6292] vivid-007: Enable Output Composing: true [ 95.399226][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.118'. [ 95.810821][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.836124][ T6292] vivid-007: Enable Output Scaler: true [ 95.842573][ T6292] vivid-007: Tx RGB Quantization Range: Automatic [ 95.849440][ T6292] vivid-007: Transmit Mode: HDMI [ 95.857761][ T6292] vivid-007: Display Present: true inactive [ 95.865789][ T6292] vivid-007: Hotplug Present: 0x00000001 [ 95.872404][ T6292] vivid-007: RxSense Present: 0x00000001 [ 95.878361][ T6292] vivid-007: EDID Present: 0x00000001 [ 95.888032][ T6292] vivid-007: ================== END STATUS ================== [ 97.224473][ T788] hub 1-1:4.0: hub_ext_port_status failed (err = -32) [ 99.094528][ T8] usb 1-1: USB disconnect, device number 3 [ 101.189239][ T6319] loop1: detected capacity change from 0 to 1024 [ 101.222593][ T6319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.423847][ T6323] loop3: detected capacity change from 0 to 128 [ 101.533586][ T6323] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.645611][ T6323] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.971915][ T6330] netlink: 'syz.2.129': attribute type 10 has an invalid length. [ 102.213053][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.248865][ T6330] team0: Port device bond0 added [ 102.266825][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 102.456274][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 102.492229][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 102.521374][ T6332] team0 (unregistering): Port device bond0 removed [ 103.334979][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.988057][ T6372] syzkaller0: entered promiscuous mode [ 105.031222][ T6372] syzkaller0: entered allmulticast mode [ 106.595313][ T6385] loop1: detected capacity change from 0 to 1024 [ 106.634359][ T6385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.816047][ T6389] loop3: detected capacity change from 0 to 1024 [ 106.843714][ T6392] loop0: detected capacity change from 0 to 128 [ 106.849069][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.886157][ T6389] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.910950][ T6392] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.933181][ T6392] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.547578][ T6399] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: comm syz.3.142: lblock 0 mapped to illegal pblock 0 (length 6) [ 107.590789][ T6399] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 107.711542][ T6399] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.711542][ T6399] [ 107.724926][ T5767] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.581030][ T42] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 108.612181][ T42] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 108.759385][ T42] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.759385][ T42] [ 108.786421][ T6413] overlayfs: failed to clone upperpath [ 108.922965][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.642545][ T6409] syz.0.146 (6409): drop_caches: 2 [ 110.368606][ T6424] loop2: detected capacity change from 0 to 1024 [ 110.378451][ T6424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.473708][ T6424] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.575664][ T6424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 111.660109][ T6424] System zones: 0-1, 3-36 [ 111.715902][ T6424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.118863][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.648213][ T6453] Zero length message leads to an empty skb [ 114.302059][ T6468] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.014416][ T6474] fuse: Bad value for 'fd' [ 120.915153][ T6538] loop3: detected capacity change from 0 to 2048 [ 121.459841][ T6540] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.595151][ T6545] syz.3.184: attempt to access beyond end of device [ 122.595151][ T6545] loop3: rw=0, sector=2199023255622, nr_sectors = 2 limit=2048 [ 122.798218][ T6545] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 122.908299][ T6554] bad cache= option: no%e [ 122.908299][ T6554] [ 122.915330][ T6554] CIFS: VFS: bad cache= option: no%e [ 123.745521][ T6540] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 123.774618][ T6540] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 123.823191][ T6540] Remounting filesystem read-only [ 123.842645][ T64] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 123.863098][ T64] NILFS (loop3): discard dirty block: blocknr=1099511627811, size=1024 [ 123.902073][ T64] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 123.975401][ T64] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 123.995293][ T64] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 124.162773][ T6560] syzkaller0: entered promiscuous mode [ 124.220435][ T64] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 124.252128][ T6560] syzkaller0: entered allmulticast mode [ 124.306785][ T64] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 124.396900][ T64] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 124.496800][ T64] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 124.611488][ T64] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.627542][ T64] NILFS (loop3): discard dirty page: offset=131072, ino=3 [ 124.635259][ T64] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.644827][ T64] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.653714][ T64] NILFS (loop3): discard dirty block: blocknr=46, size=1024 [ 124.662382][ T64] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.671748][ T64] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 124.682186][ T64] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.724585][ T64] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.753167][ T64] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 124.771835][ T64] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.803506][ T5771] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 124.826731][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=12 [ 124.833552][ T5771] NILFS (loop3): discard dirty block: blocknr=17, size=1024 [ 124.854139][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.863051][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.927099][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.948282][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 124.972584][ T5771] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 124.995804][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.007563][ T6571] syzkaller0: entered promiscuous mode [ 125.013078][ T6571] syzkaller0: entered allmulticast mode [ 125.029129][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.050664][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.071624][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 125.082218][ T5771] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 125.091450][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.109830][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.121728][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.245589][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 125.278648][ T6573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.400624][ T6573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.177172][ T6594] loop3: detected capacity change from 0 to 128 [ 132.074316][ T6619] netlink: 'syz.0.211': attribute type 12 has an invalid length. [ 133.062117][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.068701][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.162330][ T6640] binder: 6637:6640 ioctl c0306201 0 returned -14 [ 137.965212][ T6346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.168649][ T6346] usb 3-1: Using ep0 maxpacket: 8 [ 138.225470][ T6346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.329905][ T6346] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.419337][ T6346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.491330][ T6346] usb 3-1: config 0 descriptor?? [ 138.777593][ T6346] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 141.666016][ T6692] fuse: Bad value for 'fd' [ 141.764216][ T5854] usb 3-1: USB disconnect, device number 2 [ 148.704129][ T5854] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 148.961765][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.974625][ T5854] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 148.984016][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.992369][ T5854] usb 4-1: Product: syz [ 148.996756][ T5854] usb 4-1: Manufacturer: syz [ 149.001526][ T5854] usb 4-1: SerialNumber: syz [ 149.393380][ T5854] usb 4-1: config 0 descriptor?? [ 149.779418][ T5854] hub 4-1:0.0: bad descriptor, ignoring hub [ 149.804148][ T5854] hub: probe of 4-1:0.0 failed with error -5 [ 149.831779][ T5854] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 150.776968][ T5769] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 150.784764][ T5769] Bluetooth: Wrong link type (-22) [ 150.791297][ T5769] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 150.797906][ T5769] Bluetooth: Wrong link type (-22) [ 150.803562][ T5769] Bluetooth: hci2: link tx timeout [ 150.810569][ T5769] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.473082][ T6757] process 'syz.1.248' launched '/dev/fd/3' with NULL argv: empty string added [ 152.252992][ T5808] usb 4-1: USB disconnect, device number 3 [ 152.561961][ T6768] syzkaller0: entered promiscuous mode [ 152.586280][ T6768] syzkaller0: entered allmulticast mode [ 152.976941][ T5766] Bluetooth: hci2: command 0x0406 tx timeout [ 153.908168][ T6788] syzkaller0: entered promiscuous mode [ 153.913693][ T6788] syzkaller0: entered allmulticast mode [ 154.934515][ T6795] syz.2.256 uses obsolete (PF_INET,SOCK_PACKET) [ 160.540470][ T6839] loop3: detected capacity change from 0 to 4096 [ 160.630678][ T6839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.903239][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.387794][ T5754] IPVS: starting estimator thread 0... [ 164.494450][ T6888] IPVS: using max 21 ests per chain, 50400 per kthread [ 167.154308][ T6911] netlink: 'syz.0.286': attribute type 3 has an invalid length. [ 167.162236][ T6911] netlink: 'syz.0.286': attribute type 3 has an invalid length. [ 168.768764][ T6918] xt_l2tp: v2 tid > 0xffff: 37482740 [ 169.141147][ T6927] tipc: Started in network mode [ 169.146881][ T6927] tipc: Node identity 4ee53d601854, cluster identity 4711 [ 169.154960][ T6927] tipc: Enabled bearer , priority 0 [ 169.162911][ T6927] syzkaller0: entered promiscuous mode [ 169.171931][ T6927] syzkaller0: entered allmulticast mode [ 170.043222][ T6932] tipc: Resetting bearer [ 170.094842][ T6926] tipc: Resetting bearer [ 170.198153][ T6926] tipc: Disabling bearer [ 170.265593][ T6933] warning: `syz.2.291' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.363609][ T6960] sched: RT throttling activated [ 177.912422][ T6978] Cannot find add_set index 0 as target [ 179.153541][ T6987] syzkaller0: entered promiscuous mode [ 179.163983][ T6987] syzkaller0: entered allmulticast mode [ 179.899635][ T6994] syzkaller0: entered promiscuous mode [ 179.936428][ T6994] syzkaller0: entered allmulticast mode [ 181.025785][ T7005] tipc: Enabling of bearer rejected, failed to enable media [ 187.085743][ T7038] Bluetooth: hci0: command 0x0406 tx timeout [ 187.091911][ T7038] Bluetooth: hci1: command 0x0406 tx timeout [ 187.093487][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 187.097956][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 189.325401][ T7068] syzkaller0: entered promiscuous mode [ 189.330932][ T7068] syzkaller0: entered allmulticast mode [ 189.391314][ T7068] TC_ACT_REPEAT abuse ? [ 189.724369][ T7072] Bluetooth: MGMT ver 1.22 [ 190.569949][ T9] IPVS: starting estimator thread 0... [ 190.664311][ T7079] IPVS: using max 19 ests per chain, 45600 per kthread [ 190.783444][ T7074] o2cb: This node has not been configured. [ 190.789842][ T7074] o2cb: Cluster check failed. Fix errors before retrying. [ 190.797180][ T7074] (syz.2.332,7074,1):user_dlm_register:674 ERROR: status = -22 [ 190.804807][ T7074] (syz.2.332,7074,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 194.476161][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.482701][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.521679][ T7099] tipc: Started in network mode [ 194.534616][ T7099] tipc: Node identity b614688308e8, cluster identity 4711 [ 194.541928][ T7099] tipc: Enabled bearer , priority 0 [ 194.568012][ T7103] loop3: detected capacity change from 0 to 512 [ 194.585054][ T7099] syzkaller0: entered promiscuous mode [ 194.590571][ T7099] syzkaller0: entered allmulticast mode [ 194.598412][ T7103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.631444][ T7103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 194.648550][ T7103] System zones: 1-12 [ 194.660700][ T7103] EXT4-fs (loop3): 1 truncate cleaned up [ 194.670064][ T7103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.690672][ T5085] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 194.814925][ T7099] tipc: Resetting bearer [ 194.873637][ T7096] tipc: Resetting bearer [ 194.912956][ T7096] tipc: Disabling bearer [ 195.593523][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.912265][ T7113] netlink: 'syz.2.341': attribute type 3 has an invalid length. [ 195.920309][ T7113] netlink: 'syz.2.341': attribute type 3 has an invalid length. [ 196.765935][ T7118] loop2: detected capacity change from 0 to 128 [ 196.775969][ T7118] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.776278][ T7118] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.807180][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.025916][ T7135] xt_TCPMSS: Only works on TCP SYN packets [ 204.281615][ T5085] Bluetooth: hci0: unexpected event for opcode 0x041b [ 207.667056][ T7186] tipc: Enabling of bearer rejected, failed to enable media [ 210.525664][ T7200] Cannot find del_set index 0 as target [ 212.893472][ T7220] loop2: detected capacity change from 0 to 512 [ 213.038010][ T7220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.131886][ T7220] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.758253][ T7220] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.364: corrupted inode contents [ 213.830518][ T7220] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.364: mark_inode_dirty error [ 213.885808][ T7220] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.364: corrupted inode contents [ 213.898063][ T7220] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.364: mark_inode_dirty error [ 215.237386][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.364095][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 224.549863][ T7314] loop2: detected capacity change from 0 to 128 [ 224.764864][ T7314] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 225.794496][ T7314] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.925574][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.658877][ T7330] tipc: Enabled bearer , priority 0 [ 227.733331][ T7330] syzkaller0: entered promiscuous mode [ 227.739441][ T7330] syzkaller0: entered allmulticast mode [ 227.754839][ T7330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.377'. [ 227.845024][ T7332] tipc: Resetting bearer [ 227.870555][ T7329] tipc: Resetting bearer [ 227.917160][ T7331] nbd0: detected capacity change from 0 to 8589934655 [ 228.007325][ T7329] tipc: Disabling bearer [ 228.417325][ T5085] block nbd0: Receive control failed (result -104) [ 232.825255][ T7389] loop2: detected capacity change from 0 to 32768 [ 233.504722][ T7389] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 233.682338][ T7389] XFS (loop2): Ending clean mount [ 233.711080][ T7389] XFS (loop2): Quotacheck needed: Please wait. [ 234.000769][ T7389] XFS (loop2): Quotacheck: Done. [ 234.811125][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.760949][ T7428] capability: warning: `syz.2.405' uses deprecated v2 capabilities in a way that may be insecure [ 237.659526][ T7444] overlayfs: failed to clone upperpath [ 238.265426][ T789] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 249.688353][ T7526] ip6t_rpfilter: unknown options [ 251.433341][ T7532] loop3: detected capacity change from 0 to 256 [ 251.648485][ T7532] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 254.011615][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 255.491637][ T7558] ALSA: mixer_oss: invalid OSS volume '' [ 256.255042][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.261790][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.540085][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 30 seconds [ 258.552539][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 30 seconds [ 258.576292][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 30 seconds [ 258.602845][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 30 seconds [ 258.664703][ T7577] loop2: detected capacity change from 0 to 128 [ 258.706088][ T7577] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.980840][ T7577] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 259.710035][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.279770][ T7593] netlink: 'syz.0.443': attribute type 2 has an invalid length. [ 260.288007][ T7593] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 260.296135][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 263.562563][ T7608] loop3: detected capacity change from 0 to 8192 [ 265.120277][ T7617] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 270.249419][ T7664] loop3: detected capacity change from 0 to 128 [ 271.030476][ T7664] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 271.107513][ T7664] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.087682][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.304342][ T7680] loop3: detected capacity change from 0 to 1024 [ 273.325252][ T7680] EXT4-fs: inline encryption not supported [ 273.349602][ T7680] EXT4-fs: Ignoring removed nobh option [ 273.362007][ T7680] EXT4-fs: Ignoring removed bh option [ 273.624862][ T7680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.195882][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.463'. [ 274.431615][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.818477][ T7706] block device autoloading is deprecated and will be removed. [ 276.062381][ T7698] netlink: 44 bytes leftover after parsing attributes in process `syz.2.465'. [ 276.073337][ T5768] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 278.353980][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.437744][ T7737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.558076][ T7731] vlan2: entered promiscuous mode [ 278.563134][ T7731] bridge0: entered promiscuous mode [ 280.848593][ T7756] loop3: detected capacity change from 0 to 32768 [ 280.920763][ T7756] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.479 (7756) [ 280.979594][ T7756] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 280.990145][ T7756] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 280.999892][ T7756] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 281.010528][ T7756] BTRFS info (device loop3): trying to use backup root at mount time [ 281.018885][ T7756] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 281.028452][ T7756] BTRFS info (device loop3): use lzo compression, level 0 [ 281.035612][ T7756] BTRFS info (device loop3): max_inline at 4096 [ 281.042341][ T7756] BTRFS info (device loop3): enabling ssd optimizations [ 281.049319][ T7756] BTRFS info (device loop3): using spread ssd allocation scheme [ 281.056996][ T7756] BTRFS info (device loop3): enabling disk space caching [ 281.064262][ T7756] BTRFS error (device loop3): cannot disable free space tree [ 281.075130][ T7756] BTRFS error (device loop3): open_ctree failed: -22 [ 281.472215][ T7464] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (7464) [ 283.721079][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.485'. [ 284.865964][ T7783] loop3: detected capacity change from 0 to 128 [ 285.828746][ T7783] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.935965][ T7783] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.915790][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.582524][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 60 seconds [ 289.594102][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 60 seconds [ 289.605260][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 60 seconds [ 289.616229][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 60 seconds [ 290.575648][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 292.345881][ T7841] loop3: detected capacity change from 0 to 128 [ 292.587204][ T7841] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.618559][ T7841] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.623432][ T7849] loop2: detected capacity change from 0 to 128 [ 295.002533][ T7849] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.876724][ T7849] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.899595][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.091883][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.461611][ T27] audit: type=1107 audit(2000000195.879:3): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 296.545491][ T7876] futex_wake_op: syz.3.505 tries to shift op by -1; fix this program [ 301.507344][ T7911] loop3: detected capacity change from 0 to 128 [ 301.550333][ T7914] loop2: detected capacity change from 0 to 128 [ 301.569124][ T7911] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.592688][ T7914] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.602797][ T7911] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.678074][ T7914] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.532142][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.543398][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.123676][ T7936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.519'. [ 305.905851][ T7936] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.017440][ T7939] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 306.029295][ T7939] bond0: (slave gre0): Error -95 calling set_mac_address [ 307.096994][ T7950] netlink: 100 bytes leftover after parsing attributes in process `syz.0.522'. [ 307.834003][ T7957] loop3: detected capacity change from 0 to 4096 [ 309.142542][ T7962] loop2: detected capacity change from 0 to 512 [ 309.188133][ T7962] EXT4-fs: Ignoring removed nobh option [ 309.264920][ T7962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.275337][ T27] audit: type=1326 audit(2000000209.699:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.1.529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f360d19bf79 code=0x0 [ 310.512123][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.674527][ T6345] libceph: connect (1)[c::]:6789 error -101 [ 311.686637][ T6345] libceph: mon0 (1)[c::]:6789 connect error [ 311.749800][ T7978] ceph: No mds server is up or the cluster is laggy [ 315.592724][ T5139] udevd[5139]: worker [7272] /devices/virtual/block/nbd0 is taking a long time [ 317.454143][ T8017] loop3: detected capacity change from 0 to 512 [ 318.134891][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.141255][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.212641][ T8017] EXT4-fs (loop3): 1 truncate cleaned up [ 318.219214][ T8017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.448049][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.376352][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 90 seconds [ 320.387764][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 90 seconds [ 321.048713][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 90 seconds [ 321.059733][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 90 seconds [ 326.034999][ T8042] loop3: detected capacity change from 0 to 32768 [ 326.069577][ T8042] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.543 (8042) [ 326.126356][ T8042] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.136595][ T8042] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 326.145323][ T8042] BTRFS info (device loop3): using free space tree [ 326.374316][ T8042] BTRFS info (device loop3): enabling ssd optimizations [ 326.381306][ T8042] BTRFS info (device loop3): auto enabling async discard [ 326.999192][ T8072] ptrace attach of "./syz-executor exec"[5764] was attempted by "./syz-executor exec"[8072] [ 327.497861][ T5771] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 328.627930][ T8088] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 333.244382][ T6343] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 334.136903][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027e31800: rx timeout, send abort [ 334.646745][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027e31800: abort rx timeout. Force session deactivation [ 334.955483][ T6343] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.965722][ T6343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.080305][ T6343] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 335.089660][ T6343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 335.097892][ T6343] usb 3-1: SerialNumber: syz [ 335.840449][ T6343] usb 3-1: 0:2 : does not exist [ 336.305634][ T8112] loop3: detected capacity change from 0 to 256 [ 336.677859][ T8112] exfat: Deprecated parameter 'utf8' [ 336.895604][ T6343] usb 3-1: USB disconnect, device number 4 [ 336.924224][ T8112] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 337.068750][ T8106] udevd[8106]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.656405][ T8136] lo speed is unknown, defaulting to 1000 [ 339.662427][ T8136] lo speed is unknown, defaulting to 1000 [ 339.670823][ T8136] lo speed is unknown, defaulting to 1000 [ 339.680877][ T8136] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.693402][ T8136] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 339.732434][ T8136] lo speed is unknown, defaulting to 1000 [ 339.740002][ T8136] lo speed is unknown, defaulting to 1000 [ 339.747141][ T8136] lo speed is unknown, defaulting to 1000 [ 339.753618][ T8136] lo speed is unknown, defaulting to 1000 [ 342.382416][ T8153] Error parsing options; rc = [-22] [ 342.430391][ T8153] loop2: detected capacity change from 0 to 64 [ 342.590126][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 345.022241][ T8181] loop2: detected capacity change from 0 to 128 [ 345.260843][ T8181] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.293309][ T8181] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 346.750948][ T8106] udevd[8106]: incorrect ext4 checksum on /dev/loop2 [ 347.104225][ T5854] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 348.055754][ T5854] usb 4-1: config 10 has an invalid interface number: 75 but max is 0 [ 348.083154][ T5854] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 348.294149][ T5854] usb 4-1: config 10 has no interface number 0 [ 348.323114][ T5854] usb 4-1: config 10 interface 75 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 32 [ 349.231989][ T5854] usb 4-1: config 10 interface 75 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 1024 [ 349.244240][ T5854] usb 4-1: config 10 interface 75 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 349.257937][ T5854] usb 4-1: config 10 interface 75 has no altsetting 0 [ 349.279128][ T5854] usb 4-1: string descriptor 0 read error: -22 [ 349.293964][ T5854] usb 4-1: Dual-Role OTG device on HNP port [ 349.317417][ T5854] usb 4-1: New USB device found, idVendor=0424, idProduct=4913, bcdDevice=ca.aa [ 349.343892][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.379873][ T8188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.400019][ T8188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.422997][ T5854] hub 4-1:10.75: bad descriptor, ignoring hub [ 349.455984][ T5854] hub: probe of 4-1:10.75 failed with error -5 [ 349.748257][ T5854] usb 4-1: USB disconnect, device number 4 [ 351.014954][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 120 seconds [ 351.371806][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 120 seconds [ 351.390781][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 120 seconds [ 351.402098][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 120 seconds [ 351.909587][ T8211] block device autoloading is deprecated and will be removed. [ 351.925483][ T8211] syz.2.580: attempt to access beyond end of device [ 351.925483][ T8211] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 352.716592][ T6345] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 354.964164][ T5768] Bluetooth: hci3: command 0x0406 tx timeout [ 355.070106][ T5768] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 356.902687][ T6345] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 357.724969][ T6345] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 357.736137][ T6345] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.747287][ T6345] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 357.778041][ T6345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.785616][ T8256] ptrace attach of "./syz-executor exec"[5767] was attempted by "./syz-executor exec"[8256] [ 357.797882][ T6345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.814091][ T6345] usb 3-1: SerialNumber: syz [ 357.845481][ T6345] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 358.864257][ T6345] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 358.885429][ T5768] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 358.916425][ T6345] usb 3-1: USB disconnect, device number 6 [ 359.012186][ T5768] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 361.457084][ T5768] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 361.468571][ T5768] Bluetooth: hci3: ACL packet too small [ 361.726959][ T5768] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 361.935990][ T5768] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 362.158561][ T5768] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 362.169098][ T5768] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 362.587259][ T8330] loop3: detected capacity change from 0 to 128 [ 362.666625][ T8330] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.778988][ T8330] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 362.907827][ T27] audit: type=1326 audit(2000000262.329:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8333 comm="syz.2.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x0 [ 363.513177][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.174241][ T6347] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 364.268405][ T5808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 364.364339][ T6347] usb 3-1: Using ep0 maxpacket: 32 [ 364.426746][ T6347] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 364.473302][ T6347] usb 3-1: config 0 has no interface number 0 [ 364.511848][ T6347] usb 3-1: config 0 interface 184 has no altsetting 0 [ 364.561556][ T6347] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 364.603341][ T6347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.651693][ T6347] usb 3-1: Product: syz [ 364.708900][ T6347] usb 3-1: Manufacturer: syz [ 364.753316][ T6347] usb 3-1: SerialNumber: syz [ 364.879074][ T6347] usb 3-1: config 0 descriptor?? [ 364.930680][ T6347] smsc75xx v1.0.0 [ 364.935223][ T6347] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 364.946390][ T6347] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 365.084259][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 365.104430][ T5808] usb 4-1: config index 0 descriptor too short (expected 64967, got 165) [ 365.123913][ T5808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.164192][ T5808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.195783][ T6347] usb 3-1: USB disconnect, device number 7 [ 365.215929][ T5808] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.225277][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.233295][ T5808] usb 4-1: Product: syz [ 365.238117][ T5808] usb 4-1: Manufacturer: syz [ 365.242745][ T5808] usb 4-1: SerialNumber: syz [ 365.662109][ T5808] usb 4-1: 0:2 : does not exist [ 365.912992][ T5808] usb 4-1: USB disconnect, device number 5 [ 366.010284][ T8376] loop2: detected capacity change from 0 to 512 [ 366.046410][ T8106] udevd[8106]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.090995][ T8376] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 366.123793][ T8376] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 366.168943][ T8376] EXT4-fs (loop2): orphan cleanup on readonly fs [ 366.195773][ T8376] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.641: bad orphan inode 15 [ 366.226899][ T5768] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 366.236459][ T8376] ext4_test_bit(bit=14, block=18) = 1 [ 366.241974][ T5768] Bluetooth: hci2: Injecting HCI hardware error event [ 366.252158][ T8376] is_bad_inode(inode)=0 [ 366.253735][ T5768] Bluetooth: hci2: hardware error 0x00 [ 366.270976][ T8376] NEXT_ORPHAN(inode)=1023 [ 366.293140][ T8376] max_ino=32 [ 366.304690][ T8389] loop3: detected capacity change from 0 to 128 [ 366.310094][ T8376] i_nlink=0 [ 366.324886][ T8376] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2969: inode #15: comm syz.2.641: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 366.361956][ T8389] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.397699][ T8376] EXT4-fs warning (device loop2): ext4_evict_inode:272: xattr delete (err -117) [ 366.422296][ T8389] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 366.467473][ T8376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 366.619328][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.390357][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.482307][ T27] audit: type=1326 audit(2000000266.899:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 367.763953][ T27] audit: type=1326 audit(2000000266.899:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 368.178449][ T27] audit: type=1326 audit(2000000266.929:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 368.215392][ T27] audit: type=1326 audit(2000000266.929:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 368.270135][ T27] audit: type=1326 audit(2000000266.929:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.2.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 368.328710][ T5768] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 369.176270][ T8432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'. [ 369.196358][ T5768] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 370.273950][ T8459] loop2: detected capacity change from 0 to 4096 [ 370.385840][ T5768] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 370.392883][ T8459] ntfs: volume version 3.1. [ 370.463183][ T5768] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 370.823953][ T8480] loop2: detected capacity change from 0 to 256 [ 371.208293][ T8480] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 375.485717][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'. [ 377.178982][ T8544] loop2: detected capacity change from 0 to 32768 [ 377.225917][ T8544] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 377.239843][ T8544] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 377.369898][ T8544] XFS (loop2): Ending clean mount [ 377.399925][ T8544] XFS (loop2): Quotacheck needed: Please wait. [ 377.464836][ T8544] XFS (loop2): Quotacheck: Done. [ 377.522037][ T5775] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 377.924178][ T5768] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 378.793085][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.804268][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.874007][ T8604] bridge_slave_0: entered promiscuous mode [ 379.907810][ T8604] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.923164][ T8601] loop3: detected capacity change from 0 to 4096 [ 379.951868][ T8601] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 379.997666][ T8601] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 381.111610][ T5768] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 381.269587][ T8623] netlink: 152 bytes leftover after parsing attributes in process `syz.0.742'. [ 381.343541][ T8623] team0: Port device team_slave_0 removed [ 381.353017][ T8623] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 381.681065][ T8631] loop3: detected capacity change from 0 to 512 [ 381.688436][ T8631] EXT4-fs: Ignoring removed nobh option [ 381.694136][ T8631] EXT4-fs: Ignoring removed bh option [ 382.456255][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 150 seconds [ 382.467088][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 150 seconds [ 382.478134][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 150 seconds [ 382.489544][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 150 seconds [ 382.514941][ T8631] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 382.525898][ T8631] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.735: invalid indirect mapped block 256 (level 1) [ 382.543895][ T8631] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.735: invalid indirect mapped block 2683928664 (level 1) [ 382.559287][ T8631] EXT4-fs (loop3): 1 truncate cleaned up [ 382.565645][ T8631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.914232][ T27] audit: type=1800 audit(2000000282.269:11): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.735" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 382.951740][ T8637] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 383.102022][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.412947][ T8649] loop2: detected capacity change from 0 to 256 [ 383.553898][ T8649] FAT-fs (loop2): Directory bread(block 64) failed [ 383.569290][ T8649] FAT-fs (loop2): Directory bread(block 65) failed [ 383.594284][ T8649] FAT-fs (loop2): Directory bread(block 66) failed [ 383.613249][ T8649] FAT-fs (loop2): Directory bread(block 67) failed [ 383.622568][ T8649] FAT-fs (loop2): Directory bread(block 68) failed [ 383.637293][ T8649] FAT-fs (loop2): Directory bread(block 69) failed [ 383.657768][ T8649] FAT-fs (loop2): Directory bread(block 70) failed [ 383.671569][ T8649] FAT-fs (loop2): Directory bread(block 71) failed [ 383.679249][ T8649] FAT-fs (loop2): Directory bread(block 72) failed [ 383.686513][ T8649] FAT-fs (loop2): Directory bread(block 73) failed [ 384.399598][ T8668] loop2: detected capacity change from 0 to 512 [ 384.412153][ T8668] EXT4-fs: Ignoring removed nobh option [ 384.417880][ T8668] EXT4-fs: Ignoring removed bh option [ 384.604935][ T8668] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 384.625921][ T8668] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.750: invalid indirect mapped block 256 (level 1) [ 384.650188][ T8668] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.750: invalid indirect mapped block 2683928664 (level 1) [ 384.668338][ T8668] EXT4-fs (loop2): 1 truncate cleaned up [ 384.690393][ T8668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.069736][ T27] audit: type=1800 audit(2000000284.489:12): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.750" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 385.212442][ T8673] loop3: detected capacity change from 0 to 1024 [ 385.328710][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.446496][ T8673] syz.3.755: attempt to access beyond end of device [ 385.446496][ T8673] loop3: rw=0, sector=1835012, nr_sectors = 4 limit=1024 [ 385.482833][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 385.524514][ T8673] Buffer I/O error on dev loop3, logical block 458753, async page read [ 385.533035][ T8673] hfsplus: unable to mark blocks free: error -5 [ 385.594125][ T8673] hfsplus: can't free extent [ 385.699373][ T8683] loop2: detected capacity change from 0 to 256 [ 385.843801][ T8683] FAT-fs (loop2): Directory bread(block 64) failed [ 385.871100][ T8683] FAT-fs (loop2): Directory bread(block 65) failed [ 385.891671][ T8683] FAT-fs (loop2): Directory bread(block 66) failed [ 385.911907][ T8683] FAT-fs (loop2): Directory bread(block 67) failed [ 385.932307][ T8683] FAT-fs (loop2): Directory bread(block 68) failed [ 385.942272][ T8683] FAT-fs (loop2): Directory bread(block 69) failed [ 385.962663][ T8683] FAT-fs (loop2): Directory bread(block 70) failed [ 385.971133][ T8683] FAT-fs (loop2): Directory bread(block 71) failed [ 385.982427][ T8683] FAT-fs (loop2): Directory bread(block 72) failed [ 385.989560][ T8683] FAT-fs (loop2): Directory bread(block 73) failed [ 386.068856][ T8689] loop3: detected capacity change from 0 to 64 [ 386.294669][ T8691] netlink: 'syz.2.765': attribute type 30 has an invalid length. [ 386.614231][ T6347] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 386.634593][ T789] IPVS: starting estimator thread 0... [ 386.737438][ T8698] IPVS: using max 20 ests per chain, 48000 per kthread [ 386.872532][ T8695] loop2: detected capacity change from 0 to 32768 [ 387.224601][ T8695] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 387.497797][ T6347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.507683][ T6347] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 387.516820][ T6347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.531577][ T6347] usb 4-1: config 0 descriptor?? [ 387.579306][ T8695] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 387.695966][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 388.098076][ T8722] loop2: detected capacity change from 0 to 128 [ 388.128027][ T8722] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 388.141557][ T8722] hpfs: filesystem error: improperly stopped [ 388.151240][ T8722] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 388.160217][ T8722] hpfs: You really don't want any checks? You are crazy... [ 388.168599][ T8722] hpfs: hpfs_map_sector(): read error [ 388.174551][ T8722] hpfs: code page support is disabled [ 388.181752][ T8722] hpfs: hpfs_map_4sectors(): unaligned read [ 388.192894][ T6347] razer 0003:1532:010E.0002: failed to enable macro keys: -71 [ 388.202782][ T8722] hpfs: hpfs_map_4sectors(): unaligned read [ 388.214773][ T8722] hpfs: filesystem error: unable to find root dir [ 388.223709][ T6347] razer 0003:1532:010E.0002: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 388.256044][ T6347] usb 4-1: USB disconnect, device number 6 [ 388.270096][ T8722] hpfs: hpfs_map_4sectors(): unaligned read [ 388.380567][ T8723] fido_id[8723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 388.440006][ T8725] loop2: detected capacity change from 0 to 1024 [ 388.543290][ T12] hfsplus: b-tree write err: -5, ino 4 [ 388.592766][ T8727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.780'. [ 389.026467][ T8739] loop2: detected capacity change from 0 to 1024 [ 389.035106][ T8739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.042528][ T8739] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 389.516330][ T8739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.824223][ T8739] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.785: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 389.873386][ T8739] EXT4-fs (loop2): Remounting filesystem read-only [ 390.005684][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.458174][ T8750] loop3: detected capacity change from 0 to 32768 [ 390.521545][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 390.551463][ T8750] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 390.841623][ T8750] XFS (loop3): Ending clean mount [ 390.976559][ T8750] XFS (loop3): Quotacheck needed: Please wait. [ 391.249473][ T8750] XFS (loop3): Quotacheck: Done. [ 391.416545][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.428572][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.441734][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.444159][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.474392][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.489680][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.501423][ T8] usb 3-1: config 0 descriptor?? [ 391.516178][ T8] hub 3-1:0.0: USB hub found [ 391.733831][ T8] hub 3-1:0.0: 11 ports detected [ 391.744479][ T8] hub 3-1:0.0: insufficient power available to use all downstream ports [ 391.952817][ T8] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 391.974329][ T8] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 392.017151][ T8] usb 3-1: USB disconnect, device number 8 [ 392.597558][ T6345] IPVS: starting estimator thread 0... [ 392.694199][ T8777] IPVS: using max 22 ests per chain, 52800 per kthread [ 392.884278][ T6345] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 393.085943][ T6345] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 393.099323][ T6345] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.113284][ T6345] usb 3-1: config 0 has no interface number 0 [ 393.122172][ T6345] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 393.131671][ T6345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.144111][ T6345] usb 3-1: Product: syz [ 393.148323][ T6345] usb 3-1: Manufacturer: syz [ 393.163173][ T6345] usb 3-1: SerialNumber: syz [ 393.170756][ T6345] usb 3-1: config 0 descriptor?? [ 393.176180][ T5808] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 393.200379][ T6345] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 393.208208][ T6345] ims_pcu: probe of 3-1:0.41 failed with error -22 [ 393.389332][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 393.411226][ T5808] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 393.431469][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.461885][ T5808] usb 4-1: config 0 descriptor?? [ 395.269972][ T5808] aquacomputer_d5next 0003:0C70:F0BD.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.3-1/input0 [ 395.461177][ T6345] usb 4-1: USB disconnect, device number 7 [ 396.123374][ T8814] loop3: detected capacity change from 0 to 128 [ 396.149155][ T8814] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 396.170817][ T8814] hpfs: filesystem error: improperly stopped [ 396.177380][ T8814] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 396.185684][ T8814] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 396.196124][ T8814] hpfs: You really don't want any checks? You are crazy... [ 396.204634][ T8814] hpfs: hpfs_map_sector(): read error [ 396.210369][ T8814] hpfs: code page support is disabled [ 396.219412][ T8814] hpfs: hpfs_map_4sectors(): unaligned read [ 396.229041][ T8814] hpfs: hpfs_map_4sectors(): unaligned read [ 396.235509][ T8814] hpfs: filesystem error: unable to find root dir [ 396.992118][ T8] usb 3-1: USB disconnect, device number 9 [ 397.193158][ T8823] loop3: detected capacity change from 0 to 128 [ 397.299798][ T8823] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.312650][ T8823] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 398.166942][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.414116][ T6345] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 398.744700][ T6345] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 398.753869][ T6345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.950457][ T8848] loop3: detected capacity change from 0 to 512 [ 398.964228][ T8848] EXT4-fs: Ignoring removed nobh option [ 398.969903][ T8848] EXT4-fs: Ignoring removed bh option [ 399.108596][ T8848] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 399.122643][ T8848] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.823: invalid indirect mapped block 256 (level 1) [ 399.145418][ T8848] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.823: invalid indirect mapped block 2683928664 (level 1) [ 399.165852][ T8848] EXT4-fs (loop3): 1 truncate cleaned up [ 399.178766][ T8848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.604159][ T27] audit: type=1800 audit(2000000298.999:13): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.823" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 399.671660][ T6345] usb 3-1: config 0 descriptor?? [ 399.686711][ T6345] cp210x 3-1:0.0: cp210x converter detected [ 399.782966][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.116661][ T6345] usb 3-1: cp210x converter now attached to ttyUSB0 [ 400.154378][ T6347] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 400.354972][ T8] usb 3-1: USB disconnect, device number 10 [ 400.357569][ T6347] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.382959][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 400.391647][ T6347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 400.398777][ T8] cp210x 3-1:0.0: device disconnected [ 400.500261][ T6347] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 400.572419][ T6347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.792590][ T6347] usb 4-1: config 0 descriptor?? [ 402.239988][ T6347] samsung 0003:0419:0600.0004: hidraw0: USB HID v0.05 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 402.508078][ T6347] usb 4-1: USB disconnect, device number 8 [ 403.813663][ T8886] loop2: detected capacity change from 0 to 512 [ 403.832361][ T8884] loop3: detected capacity change from 0 to 2048 [ 403.896264][ T8886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.924328][ T8884] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 403.946082][ T8886] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.996842][ T8884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.161898][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.457849][ T8902] loop2: detected capacity change from 0 to 128 [ 405.495655][ T8902] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.531310][ T8902] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 406.417655][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.054174][ T6347] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 407.317736][ T6347] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 407.413290][ T6347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.520225][ T6347] usb 4-1: config 0 has no interface number 0 [ 407.561110][ T6347] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 407.590849][ T6347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.634250][ T6347] usb 4-1: Product: syz [ 407.638472][ T6347] usb 4-1: Manufacturer: syz [ 407.658957][ T6347] usb 4-1: SerialNumber: syz [ 407.681954][ T6347] usb 4-1: config 0 descriptor?? [ 407.695889][ T6347] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 407.712614][ T6347] ims_pcu: probe of 4-1:0.41 failed with error -22 [ 407.777429][ T8910] loop2: detected capacity change from 0 to 40427 [ 407.820907][ T8910] F2FS-fs (loop2): invalid crc value [ 407.848624][ T8910] F2FS-fs (loop2): Found nat_bits in checkpoint [ 408.022243][ T8910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 408.857254][ T5775] syz-executor: attempt to access beyond end of device [ 408.857254][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 408.991053][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 409.685593][ T8951] loop2: detected capacity change from 0 to 2048 [ 409.702325][ T8951] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 409.758273][ T8951] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 409.794418][ T8951] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 409.934438][ T5808] usb 4-1: USB disconnect, device number 9 [ 409.936161][ T8951] UDF-fs: Scanning with blocksize 512 failed [ 410.004591][ T8951] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 410.031681][ T8951] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 410.053730][ T8954] loop3: detected capacity change from 0 to 512 [ 410.075362][ T8951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.084453][ T8954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 410.146908][ T8954] EXT4-fs (loop3): 1 truncate cleaned up [ 410.153842][ T8954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.282382][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.431266][ T8965] loop3: detected capacity change from 0 to 128 [ 410.489972][ T8965] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.542071][ T8968] loop2: detected capacity change from 0 to 128 [ 410.552392][ T8965] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 410.618911][ T8968] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.707382][ T8968] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.230945][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.396889][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.550769][ T8984] loop3: detected capacity change from 0 to 1024 [ 411.590446][ T8984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.678582][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.694249][ T6347] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 411.876446][ T6347] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 411.884954][ T6347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.921193][ T6347] usb 3-1: config 0 has no interface number 0 [ 411.939111][ T6347] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 411.963418][ T6347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.982894][ T6347] usb 3-1: Product: syz [ 411.993016][ T6347] usb 3-1: Manufacturer: syz [ 412.003146][ T6347] usb 3-1: SerialNumber: syz [ 412.020034][ T6347] usb 3-1: config 0 descriptor?? [ 412.046318][ T6347] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 412.062968][ T6347] ims_pcu: probe of 3-1:0.41 failed with error -22 [ 412.466601][ T8990] loop3: detected capacity change from 0 to 32768 [ 413.213333][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 180 seconds [ 413.224588][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 180 seconds [ 413.235934][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 180 seconds [ 413.247686][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 180 seconds [ 413.772355][ T9005] loop3: detected capacity change from 0 to 1024 [ 413.783844][ T9005] EXT4-fs: Ignoring removed bh option [ 413.792699][ T9005] EXT4-fs: inline encryption not supported [ 413.926099][ T9005] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 413.966639][ T9005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 414.225353][ T9005] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.879: lblock 2 mapped to illegal pblock 2 (length 1) [ 414.243511][ T9005] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 414.252123][ T9005] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.879: lblock 0 mapped to illegal pblock 48 (length 1) [ 414.324993][ T9005] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 414.345679][ T9005] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.879: Failed to acquire dquot type 0 [ 414.454146][ T6345] usb 3-1: USB disconnect, device number 11 [ 414.490294][ T9005] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 414.525705][ T9005] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.879: mark_inode_dirty error [ 414.570151][ T9005] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 414.606336][ T9005] EXT4-fs (loop3): 1 orphan inode deleted [ 414.616008][ T9005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.654579][ T2924] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 414.689106][ T2924] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 414.699957][ T2924] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 0 [ 414.721390][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.745188][ T5771] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 414.766671][ T5771] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 414.777156][ T5771] EXT4-fs error (device loop3): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 414.934267][ T6345] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 415.132233][ T6345] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 415.154090][ T6345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.162142][ T6345] usb 3-1: Product: syz [ 415.166452][ T6344] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 415.184213][ T6345] usb 3-1: Manufacturer: syz [ 415.189527][ T6345] usb 3-1: SerialNumber: syz [ 415.206645][ T6345] usb 3-1: config 0 descriptor?? [ 415.226192][ T6345] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 415.396203][ T6344] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 415.414086][ T6344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.435414][ T6344] usb 4-1: config 0 descriptor?? [ 415.454695][ T6344] cp210x 4-1:0.0: cp210x converter detected [ 416.009278][ T6345] gspca_sunplus: reg_r err -71 [ 416.015859][ T6344] usb 4-1: cp210x converter now attached to ttyUSB0 [ 416.039446][ T6345] sunplus: probe of 3-1:0.0 failed with error -71 [ 416.050811][ T6345] usb 3-1: USB disconnect, device number 12 [ 416.102733][ T6348] usb 4-1: USB disconnect, device number 10 [ 416.158308][ T6348] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 416.198366][ T6348] cp210x 4-1:0.0: device disconnected [ 416.300004][ T27] audit: type=1326 audit(2000000315.719:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.1.894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f360d19bf79 code=0x0 [ 416.451579][ T9044] loop2: detected capacity change from 0 to 256 [ 416.480766][ T9044] FAT-fs (loop2): Directory bread(block 64) failed [ 416.488012][ T9044] FAT-fs (loop2): Directory bread(block 65) failed [ 416.494833][ T9044] FAT-fs (loop2): Directory bread(block 66) failed [ 416.501931][ T9044] FAT-fs (loop2): Directory bread(block 67) failed [ 416.508746][ T9044] FAT-fs (loop2): Directory bread(block 68) failed [ 416.516697][ T9044] FAT-fs (loop2): Directory bread(block 69) failed [ 416.523341][ T9044] FAT-fs (loop2): Directory bread(block 70) failed [ 416.530019][ T9044] FAT-fs (loop2): Directory bread(block 71) failed [ 416.536753][ T9044] FAT-fs (loop2): Directory bread(block 72) failed [ 416.543320][ T9044] FAT-fs (loop2): Directory bread(block 73) failed [ 419.940448][ T9065] loop3: detected capacity change from 0 to 64 [ 420.196563][ T9057] loop2: detected capacity change from 0 to 40427 [ 420.198507][ T9057] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 420.200006][ T9057] F2FS-fs (loop2): invalid crc value [ 420.221467][ T9057] F2FS-fs (loop2): Found nat_bits in checkpoint [ 420.295680][ T9057] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 420.730608][ T9078] loop2: detected capacity change from 0 to 512 [ 420.790660][ T9074] loop3: detected capacity change from 0 to 8192 [ 420.797459][ T9078] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 420.869689][ T9074] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 420.901891][ T9078] EXT4-fs (loop2): 1 truncate cleaned up [ 420.924337][ T9074] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 420.935734][ T9078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.961199][ T9074] REISERFS (device loop3): using ordered data mode [ 420.974430][ T9074] reiserfs: using flush barriers [ 421.004922][ T9074] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 421.055645][ T9074] REISERFS (device loop3): checking transaction log (loop3) [ 421.206082][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.345387][ T9074] REISERFS (device loop3): Using tea hash to sort names [ 421.365406][ T9074] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 421.397934][ T9094] loop2: detected capacity change from 0 to 256 [ 421.659492][ T9098] loop2: detected capacity change from 0 to 128 [ 422.113694][ T9103] loop2: detected capacity change from 0 to 1024 [ 422.290927][ T9108] loop3: detected capacity change from 0 to 256 [ 422.320664][ T9108] exfat: Deprecated parameter 'utf8' [ 422.354353][ T9108] exfat: Deprecated parameter 'namecase' [ 422.361298][ T3453] hfsplus: b-tree write err: -5, ino 4 [ 422.400457][ T9108] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 422.711216][ T9116] loop3: detected capacity change from 0 to 8 [ 422.780090][ T9118] loop2: detected capacity change from 0 to 256 [ 422.856865][ T9118] FAT-fs (loop2): Directory bread(block 64) failed [ 422.904214][ T9118] FAT-fs (loop2): Directory bread(block 65) failed [ 422.925723][ T9118] FAT-fs (loop2): Directory bread(block 66) failed [ 422.932459][ T9118] FAT-fs (loop2): Directory bread(block 67) failed [ 422.952095][ T9118] FAT-fs (loop2): Directory bread(block 68) failed [ 422.976871][ T9118] FAT-fs (loop2): Directory bread(block 69) failed [ 422.990565][ T9118] FAT-fs (loop2): Directory bread(block 70) failed [ 423.017678][ T9118] FAT-fs (loop2): Directory bread(block 71) failed [ 423.054429][ T9118] FAT-fs (loop2): Directory bread(block 72) failed [ 423.080280][ T9118] FAT-fs (loop2): Directory bread(block 73) failed [ 423.084675][ T9125] loop3: detected capacity change from 0 to 128 [ 423.112732][ T9125] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.129233][ T9125] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 423.650513][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.009944][ T9156] loop3: detected capacity change from 0 to 16 [ 424.084940][ T9156] erofs: (device loop3): mounted with root inode @ nid 36. [ 424.128656][ T9156] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 424.192153][ T5768] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 7514 in[4096, 0] out[8192] [ 424.218624][ T9156] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 7514 in[4096, 0] out[8192] [ 424.239974][ T27] audit: type=1800 audit(2000000323.649:15): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.939" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 424.273086][ T9163] Illegal XDP return value 484737024 on prog (id 31) dev N/A, expect packet loss! [ 424.691814][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 425.022547][ T9176] loop2: detected capacity change from 0 to 32768 [ 425.127036][ T9176] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 425.415178][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 425.578227][ T9199] loop3: detected capacity change from 0 to 40427 [ 425.639823][ T9199] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 425.684195][ T9199] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 425.726289][ T9199] F2FS-fs (loop3): invalid crc value [ 426.355044][ T9199] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 426.399166][ T9212] loop2: detected capacity change from 0 to 2048 [ 426.509755][ T9213] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.650650][ T9199] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 426.694593][ T9199] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 426.756941][ T9218] NILFS (loop2): error -2 truncating bmap (ino=16) [ 428.052072][ T9213] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 428.100121][ T9213] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 428.140681][ T9213] Remounting filesystem read-only [ 428.161957][ T11] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 428.186339][ T11] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 428.216474][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.256110][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.282300][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.292000][ T11] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 428.299415][ T11] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 428.306807][ T11] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 428.314140][ T11] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 428.321446][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.330384][ T11] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 428.337459][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.350517][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.359481][ T11] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 428.371365][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.394291][ T11] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 428.401128][ T11] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 428.408767][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.423293][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.444393][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.453332][ T11] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 428.472192][ T11] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 428.488869][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 428.512864][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 429.074444][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 429.104539][ T11] NILFS (loop2): discard dirty page: offset=0, ino=16 [ 429.164297][ T11] NILFS (loop2): discard dirty block: blocknr=23, size=1024 [ 429.184167][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 429.193068][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 429.264197][ T11] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 429.285808][ T5775] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 429.306583][ T5775] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 429.313814][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 429.333525][ T5775] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 429.352229][ T5775] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 429.377017][ T5775] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 429.385928][ T5775] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 429.409394][ T5775] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 429.424708][ T5775] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 429.453554][ T5775] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 429.474326][ T5775] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 429.493426][ T5775] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 429.711117][ T9239] loop3: detected capacity change from 0 to 64 [ 429.860371][ T5771] hfs: node 4:3 still has 1 user(s)! [ 429.914465][ T6344] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 429.968652][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.976'. [ 430.758806][ T6344] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 430.767126][ T6344] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.777369][ T6344] usb 3-1: config 0 has no interface number 0 [ 430.794714][ T6344] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 430.834479][ T6344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.842683][ T6344] usb 3-1: Product: syz [ 430.851509][ T6344] usb 3-1: Manufacturer: syz [ 430.874942][ T6344] usb 3-1: SerialNumber: syz [ 430.883798][ T6344] usb 3-1: config 0 descriptor?? [ 430.899712][ T6344] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 430.910229][ T6344] ims_pcu: probe of 3-1:0.41 failed with error -22 [ 432.430287][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 432.867335][ T9272] loop3: detected capacity change from 0 to 32768 [ 433.763505][ T6348] usb 3-1: USB disconnect, device number 13 [ 434.232214][ T9297] ªªªªªª: renamed from vlan0 (while UP) [ 434.275308][ T9299] netlink: 292 bytes leftover after parsing attributes in process `syz.3.994'. [ 434.315542][ T9299] netlink: 292 bytes leftover after parsing attributes in process `syz.3.994'. [ 435.026310][ T9320] hub 9-0:1.0: USB hub found [ 435.076484][ T9320] hub 9-0:1.0: 1 port detected [ 436.352919][ T9349] genirq: Flags mismatch irq 10. 00000000 (pcl812) vs. 00000080 (virtio2) [ 437.121534][ T9363] loop3: detected capacity change from 0 to 4096 [ 437.158711][ T9363] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 437.241020][ T9363] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 439.351753][ T9390] loop2: detected capacity change from 0 to 4096 [ 440.013026][ T9402] veth0: entered promiscuous mode [ 440.028628][ T9401] veth0: left promiscuous mode [ 440.216638][ T9404] loop3: detected capacity change from 0 to 4096 [ 440.229726][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.236849][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.517419][ T6344] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 440.735836][ T6344] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 440.756612][ T6344] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.784505][ T6344] usb 3-1: config 0 has no interface number 0 [ 440.803543][ T6344] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 440.825658][ T6344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.852144][ T6344] usb 3-1: Product: syz [ 440.861951][ T6344] usb 3-1: Manufacturer: syz [ 440.872099][ T6344] usb 3-1: SerialNumber: syz [ 440.888987][ T6344] usb 3-1: config 0 descriptor?? [ 440.905313][ T6344] ims_pcu 3-1:0.41: Missing CDC union descriptor [ 440.911750][ T6344] ims_pcu: probe of 3-1:0.41 failed with error -22 [ 442.381769][ T9439] loop3: detected capacity change from 0 to 128 [ 442.410644][ T9439] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.447199][ T9439] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 443.982478][ T8] usb 3-1: USB disconnect, device number 14 [ 444.082834][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 210 seconds [ 444.093928][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 210 seconds [ 444.106755][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 210 seconds [ 444.118361][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 210 seconds [ 445.199024][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.384205][ T9488] capability: warning: `syz.1.1064' uses 32-bit capabilities (legacy support in use) [ 445.515077][ T9496] Bluetooth: MGMT ver 1.22 [ 445.730116][ T9502] loop2: detected capacity change from 0 to 128 [ 445.819798][ T9502] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.832567][ T9502] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 445.916764][ T9513] overlayfs: failed to clone upperpath [ 445.937749][ T9513] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 445.948210][ T9513] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 447.530278][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.074381][ T9609] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 450.312570][ T789] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 450.515258][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 450.526325][ T789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 450.537600][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 450.641191][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.651299][ T789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.664470][ T789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.673766][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.888734][ T789] usb 4-1: GET_CAPABILITIES returned 0 [ 450.904234][ T789] usbtmc 4-1:16.0: can't read capabilities [ 451.100050][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 451.111409][ T9607] usbtmc 4-1:16.0: Unable to send data, error -71 [ 451.120472][ T6345] usb 4-1: USB disconnect, device number 11 [ 452.906307][ T9654] input: syz0 as /devices/virtual/input/input10 [ 453.159167][ T9661] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1126'. [ 455.591425][ T9702] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 456.289311][ T9702] bond1: (slave lo): Enslaving as an active interface with an up link [ 456.388436][ T9702] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 456.972112][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1148'. [ 456.997300][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 459.355744][ T9827] input: syz1 as /devices/virtual/input/input12 [ 459.947981][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 460.945270][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 460.955958][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.972926][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.992259][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.002201][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.012681][ T8] usb 4-1: Product: syz [ 461.017301][ T8] usb 4-1: Manufacturer: syz [ 461.022041][ T8] usb 4-1: SerialNumber: syz [ 461.248876][ T8] usb 4-1: 0:2 : does not exist [ 461.279694][ T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 461.331934][ T8] usb 4-1: USB disconnect, device number 12 [ 461.420550][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 461.421308][ T8106] udevd[8106]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.708424][ T9871] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 461.739764][ T9871] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 461.816101][ T9871] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 461.840696][ T9871] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 461.858878][ T9874] loop2: detected capacity change from 0 to 128 [ 461.920816][ T9874] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.959639][ T9874] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 461.991650][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.073015][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 462.091425][ T9882] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.101324][ T9882] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.110522][ T9882] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.119849][ T9882] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.151245][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 462.200938][ T9886] loop3: detected capacity change from 0 to 256 [ 462.244375][ T9886] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 463.158230][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.380159][ T9936] loop2: detected capacity change from 0 to 128 [ 464.422374][ T9936] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 464.447428][ T9936] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 465.689443][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.065585][T10003] overlayfs: failed to clone upperpath [ 469.485186][T10036] loop2: detected capacity change from 0 to 2048 [ 469.513600][T10038] loop3: detected capacity change from 0 to 512 [ 469.523699][T10038] EXT4-fs: Ignoring removed orlov option [ 469.550516][T10036] loop2: p3 p4 < > [ 469.559424][T10036] loop2: p3 start 4284289 is beyond EOD, truncated [ 469.574364][T10038] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 469.593703][T10038] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 469.620357][T10038] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 469.621128][ T5139] loop2: p3 p4 < > [ 469.650802][T10038] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8002e01d, mo2=0006] [ 469.657558][ T5139] loop2: p3 start 4284289 is beyond EOD, truncated [ 469.696623][T10038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.779529][ T5775] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 469.787177][ T8106] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 469.836007][ T8106] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.871218][ T8106] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 469.891711][ T8106] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.917065][ T8106] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 469.931036][ T8106] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.940984][ T8106] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 469.975867][ T8106] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.002364][ T8106] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 470.021093][ T8106] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.051009][ T8106] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 470.116631][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.328823][ T8106] udevd[8106]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 470.908694][ T8106] udevd[8106]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 470.929885][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 472.754839][T10076] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 472.794974][T10076] bond1: entered promiscuous mode [ 472.800139][T10076] bond1: entered allmulticast mode [ 472.807091][T10076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.412335][T10086] io-wq is not configured for unbound workers [ 473.610452][T10089] loop3: detected capacity change from 0 to 512 [ 473.804148][T10089] EXT4-fs: Ignoring removed i_version option [ 473.804931][T10096] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 474.186920][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 240 seconds [ 474.198309][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 240 seconds [ 474.209499][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 240 seconds [ 474.220639][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 240 seconds [ 474.276794][T10089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.457071][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.085200][T10128] loop2: detected capacity change from 0 to 2048 [ 477.093022][T10128] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.184362][T10128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.271699][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.599717][T10147] mmap: syz.2.1294 (10147) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 479.894318][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 479.944261][T10168] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 480.157148][T10174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.438706][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 484.029008][T10230] loop3: detected capacity change from 0 to 512 [ 484.141793][T10230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.172956][T10230] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.262737][T10230] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 484.318484][T10230] Quota error (device loop3): write_blk: dquota write failed [ 484.354541][T10230] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 484.374209][T10230] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1320: Failed to acquire dquot type 1 [ 484.541977][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.680634][T10247] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1325'. [ 486.204785][T10275] pimreg: entered allmulticast mode [ 486.238767][T10275] pimreg: left allmulticast mode [ 489.432034][T10326] loop2: detected capacity change from 0 to 1024 [ 489.490379][T10326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.578864][ T27] audit: type=1800 audit(2000000388.999:16): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1353" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 489.613676][T10326] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.1353: Allocating blocks 385-513 which overlap fs metadata [ 489.644241][ T27] audit: type=1800 audit(2000000388.999:17): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1353" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 489.725530][T10333] EXT4-fs (loop2): pa ffff88805bc4b0e8: logic 16, phys. 129, len 24 [ 489.734432][T10333] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 8 [ 489.983114][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.126471][T10339] loop2: detected capacity change from 0 to 64 [ 490.343928][T10343] loop2: detected capacity change from 0 to 256 [ 490.372016][T10343] exfat: Deprecated parameter 'utf8' [ 490.389796][T10343] exfat: Deprecated parameter 'utf8' [ 490.423158][T10343] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 490.895789][T10359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 492.063244][T10370] loop2: detected capacity change from 0 to 512 [ 492.091682][T10370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 492.109006][T10370] EXT4-fs: Ignoring removed orlov option [ 492.140575][T10370] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.1368: corrupted in-inode xattr: bad e_name length [ 492.169333][T10370] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1368: couldn't read orphan inode 15 (err -117) [ 492.208948][T10370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.397222][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.629805][T10378] loop2: detected capacity change from 0 to 4096 [ 492.717686][T10378] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 492.773484][T10378] ntfs3: loop2: Failed to load $Extend (-22). [ 492.801914][T10378] ntfs3: loop2: Failed to initialize $Extend. [ 493.805617][T10388] loop2: detected capacity change from 0 to 32768 [ 495.040624][T10407] loop2: detected capacity change from 0 to 4096 [ 495.141382][T10407] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 495.182856][T10407] ntfs3: loop2: Failed to load $Extend (-22). [ 495.195225][T10407] ntfs3: loop2: Failed to initialize $Extend. [ 497.196577][T10430] syzkaller0: entered promiscuous mode [ 497.205303][T10430] syzkaller0: entered allmulticast mode [ 497.570171][T10440] loop2: detected capacity change from 0 to 128 [ 497.601009][T10440] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 497.620229][T10440] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 500.238999][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 500.824244][T10489] syzkaller0: entered promiscuous mode [ 500.829923][T10489] syzkaller0: entered allmulticast mode [ 502.174716][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.181062][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.456182][T10506] fuse: Bad value for 'fd' [ 504.238352][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 270 seconds [ 504.249808][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 270 seconds [ 504.261184][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 270 seconds [ 504.272704][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 270 seconds [ 511.957927][ T5139] udevd[5139]: worker [7272] /devices/virtual/block/nbd0 timeout; kill it [ 512.003945][ T5139] udevd[5139]: seq 11155 '/devices/virtual/block/nbd0' killed [ 514.767870][T10655] tipc: Enabling of bearer rejected, failed to enable media [ 518.189863][T10700] hfsplus: unable to find HFS+ superblock [ 522.527190][T10739] lo speed is unknown, defaulting to 1000 [ 522.642854][T10743] loop2: detected capacity change from 0 to 256 [ 522.693200][T10743] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 527.006341][T10782] loop2: detected capacity change from 0 to 128 [ 527.049420][T10782] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 527.069787][T10785] syz_tun: entered allmulticast mode [ 527.079760][T10782] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 527.133154][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 527.222653][T10785] syz_tun (unregistering): left allmulticast mode [ 528.796822][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 528.923207][T10814] loop2: detected capacity change from 0 to 512 [ 528.955331][T10814] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 530.641763][T10836] loop2: detected capacity change from 0 to 32768 [ 530.701209][T10836] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 530.816105][T10836] XFS (loop2): Ending clean mount [ 530.837231][T10836] XFS (loop2): Quotacheck needed: Please wait. [ 530.930284][T10836] XFS (loop2): Quotacheck: Done. [ 531.879173][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 532.062123][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 534.691541][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 300 seconds [ 534.702925][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 300 seconds [ 534.715013][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 300 seconds [ 534.727051][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 300 seconds [ 537.207853][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 537.408819][T10895] loop2: detected capacity change from 0 to 40427 [ 537.420021][T10895] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 537.442579][T10895] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 537.492405][T10895] F2FS-fs (loop2): Found nat_bits in checkpoint [ 537.571005][T10895] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 537.581761][T10895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 537.646298][T10895] syz.2.1531: attempt to access beyond end of device [ 537.646298][T10895] loop2: rw=2049, sector=53248, nr_sectors = 32 limit=40427 [ 537.823487][ T5775] syz-executor: attempt to access beyond end of device [ 537.823487][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 537.868681][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 541.618522][T10944] loop2: detected capacity change from 0 to 128 [ 541.698167][T10944] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 541.752868][T10944] ext4 filesystem being mounted at /343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 542.703522][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.115701][T10962] syz_tun: entered allmulticast mode [ 543.134379][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 543.659943][T10962] syz_tun (unregistering): left allmulticast mode [ 543.891861][T10966] fuse: Bad value for 'fd' [ 545.460343][T10976] loop2: detected capacity change from 0 to 32768 [ 545.617424][T10976] loop2: p9 p11 p16 [ 546.004849][ T5768] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 546.907220][ T7464] udevd[7464]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 546.931612][ T8106] udevd[8106]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 546.965662][ T7203] udevd[7203]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 547.366916][T11005] syz_tun: entered allmulticast mode [ 547.387966][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 547.437909][T11005] syz_tun (unregistering): left allmulticast mode [ 547.804773][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 547.876052][T11016] xt_connbytes: Forcing CT accounting to be enabled [ 547.883163][T11016] set match dimension is over the limit! [ 548.488904][T11020] loop2: detected capacity change from 0 to 128 [ 548.579722][T11020] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.658873][T11020] ext4 filesystem being mounted at /349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 549.171837][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.657947][T11053] syz_tun: entered allmulticast mode [ 551.975290][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 552.371063][T11053] syz_tun (unregistering): left allmulticast mode [ 552.394689][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 554.385960][T11070] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 554.486176][T11070] bond2: (slave lo): Enslaving as an active interface with an up link [ 554.929956][T11070] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 559.028548][T11118] No such timeout policy "syz1" [ 561.675046][T11159] tipc: Cannot configure node identity twice [ 562.758629][ T6348] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 563.024241][ T6348] usb 3-1: Using ep0 maxpacket: 32 [ 563.040469][ T6348] usb 3-1: no configurations [ 563.054457][ T6348] usb 3-1: can't read configurations, error -22 [ 563.109448][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.120519][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.244399][ T6348] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 563.814230][ T6348] usb 3-1: Using ep0 maxpacket: 32 [ 563.835629][ T6348] usb 3-1: no configurations [ 563.856752][ T6348] usb 3-1: can't read configurations, error -22 [ 563.888870][ T6348] usb usb3-port1: attempt power cycle [ 564.270173][T11181] 9pnet_fd: Insufficient options for proto=fd [ 564.827668][ T6348] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 565.210051][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 330 seconds [ 565.220850][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 330 seconds [ 565.231843][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 330 seconds [ 565.243611][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 330 seconds [ 565.296433][ T6348] usb 3-1: device descriptor read/8, error -71 [ 566.993797][T11212] tipc: Enabling of bearer rejected, failed to enable media [ 573.348999][T11256] tipc: Enabling of bearer rejected, failed to enable media [ 574.409643][T11269] netlink: set zone limit has 8 unknown bytes [ 576.580959][T11291] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 576.590182][T11291] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 576.599120][T11291] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 576.613515][T11291] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 580.451691][T11345] overlayfs: failed to clone upperpath [ 581.445110][T11358] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 581.580691][T11358] bond1: entered promiscuous mode [ 581.609066][T11358] bond1: entered allmulticast mode [ 581.627967][T11358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.263706][T11383] loop2: detected capacity change from 0 to 4096 [ 583.486884][ T27] audit: type=1800 audit(2000000482.909:18): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1670" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 584.124923][T11391] tipc: Enabling of bearer rejected, failed to enable media [ 585.237907][T11406] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1668'. [ 587.867259][T11446] lo speed is unknown, defaulting to 1000 [ 595.746862][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 360 seconds [ 595.757874][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 360 seconds [ 595.769167][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 360 seconds [ 595.780314][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 360 seconds [ 596.216482][T11513] tipc: Enabling of bearer rejected, failed to enable media [ 606.730804][T11578] xt_connbytes: Forcing CT accounting to be enabled [ 606.737651][T11578] set match dimension is over the limit! [ 608.540735][T11583] overlayfs: failed to clone upperpath [ 609.256362][T11594] usb usb7: usbfs: process 11594 (syz.2.1728) did not claim interface 0 before use [ 609.954079][T11596] netlink: 'syz.0.1722': attribute type 9 has an invalid length. [ 611.022665][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 612.665155][ T27] audit: type=1326 audit(2000000022.779:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 612.714123][ T27] audit: type=1326 audit(2000000022.779:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 612.737147][T11611] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 612.744135][T11611] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 612.753260][T11611] vhci_hcd vhci_hcd.0: Device attached [ 612.765881][ T27] audit: type=1326 audit(2000000022.809:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 612.795042][ T27] audit: type=1326 audit(2000000022.809:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 612.851097][ T27] audit: type=1326 audit(2000000022.809:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 612.891244][ T27] audit: type=1326 audit(2000000022.839:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 613.802094][T11614] vhci_hcd: connection closed [ 613.857530][ T2924] vhci_hcd: stop threads [ 613.881812][ T2924] vhci_hcd: release socket [ 613.886434][ T27] audit: type=1326 audit(2000000022.839:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 613.934284][ T9] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 613.946241][ T2924] vhci_hcd: disconnect device [ 614.010320][ T27] audit: type=1326 audit(2000000022.839:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 614.156205][ T27] audit: type=1326 audit(2000000022.849:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 614.184261][ T27] audit: type=1326 audit(2000000022.859:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.2.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0798f9bf79 code=0x7ffc0000 [ 617.533218][T11647] syz.0.1740 (11647) used greatest stack depth: 18440 bytes left [ 619.107254][ T9] vhci_hcd: vhci_device speed not set [ 619.268319][T11660] trusted_key: syz.1.1743 sent an empty control message without MSG_MORE. [ 624.548739][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.557829][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.437857][T11692] overlayfs: failed to clone upperpath [ 625.834406][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 390 seconds [ 625.845361][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 390 seconds [ 625.856982][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 390 seconds [ 625.868416][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 390 seconds [ 627.645229][T11709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1756'. [ 627.654913][T11603] syz.0.1722 (11603) used greatest stack depth: 17936 bytes left [ 632.542380][T11742] overlayfs: failed to clone upperpath [ 636.731013][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.743922][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.828888][T11767] vlan2: left promiscuous mode [ 636.833762][T11767] bridge0: left promiscuous mode [ 643.000177][T11828] loop2: detected capacity change from 0 to 128 [ 643.061978][T11828] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 643.082416][T11828] ext4 filesystem being mounted at /389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 643.931416][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 647.859335][T11870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 650.438704][T11886] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 651.287519][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 651.287661][ T27] audit: type=1107 audit(2000000061.829:42): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 652.234597][T11902] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 652.274814][T11902] bond0: (slave gre0): Error -95 calling set_mac_address [ 655.621842][T11927] loop2: detected capacity change from 0 to 128 [ 655.895044][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 655.904509][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 655.913041][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 655.921659][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 655.930511][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 655.939135][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 655.947789][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 655.956381][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 655.967757][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.013893][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.022546][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.031368][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.039991][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.048543][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.057120][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.065753][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.074286][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.082726][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.091381][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.099822][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.108256][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.116774][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.125201][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.133763][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.142221][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.150671][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.159120][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.167700][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.176178][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.184677][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.193525][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.201995][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.210426][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.218873][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.227337][T11927] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 656.294182][ T27] audit: type=1800 audit(2000000067.079:43): pid=11927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1807" name="file1" dev="loop2" ino=1048751 res=0 errno=0 [ 656.315041][ T97] block nbd0: Possible stuck request ffff888021eb8000: control (read@0,1024B). Runtime 420 seconds [ 656.325926][ T97] block nbd0: Possible stuck request ffff888021eb8200: control (read@1024,1024B). Runtime 420 seconds [ 656.340006][ T97] block nbd0: Possible stuck request ffff888021eb8400: control (read@2048,1024B). Runtime 420 seconds [ 656.351541][ T97] block nbd0: Possible stuck request ffff888021eb8600: control (read@3072,1024B). Runtime 420 seconds [ 657.051177][T11934] loop2: detected capacity change from 0 to 4096 [ 657.655549][T11934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.681488][ T27] audit: type=1800 audit(2000000068.519:44): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1810" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 657.874471][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.309607][T11972] netlink: 'syz.1.1821': attribute type 2 has an invalid length. [ 665.263849][T11976] netlink: 'syz.1.1821': attribute type 2 has an invalid length. [ 667.276622][T11994] Cannot find del_set index 2 as target [ 669.786705][T12004] overlayfs: failed to clone lowerpath [ 669.795531][T12004] overlayfs: failed to clone lowerpath [ 671.509316][T12017] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 671.520969][T12017] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 671.708210][T12017] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 671.716978][T12017] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 671.726142][T12017] overlayfs: missing 'lowerdir' [ 672.454428][ T28] INFO: task udevd:7272 blocked for more than 143 seconds. [ 672.479153][ T28] Not tainted syzkaller #0 [ 672.485350][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.496682][ T28] task:udevd state:D stack:24968 pid:7272 ppid:5139 flags:0x00004006 [ 672.506217][ T28] Call Trace: [ 672.510342][ T28] [ 672.513992][ T28] __schedule+0x1553/0x45a0 [ 672.520467][ T28] ? asan.module_dtor+0x20/0x20 [ 672.525745][ T28] ? mark_lock+0x94/0x320 [ 672.530159][ T28] ? lock_chain_count+0x20/0x20 [ 672.535402][ T28] ? _raw_spin_lock_irq+0xbb/0xf0 [ 672.541305][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 672.548512][ T28] schedule+0xbd/0x170 [ 672.552767][ T28] io_schedule+0x80/0xd0 [ 672.557554][ T28] folio_wait_bit_common+0x714/0xfa0 [ 672.565631][ T28] ? folio_wait_bit+0x30/0x30 [ 672.570783][ T28] ? _compound_head+0x120/0x120 [ 672.577166][ T28] ? filemap_add_folio+0x192/0x3c0 [ 672.582416][ T28] ? __filemap_get_folio+0x704/0xbb0 [ 672.590172][ T28] ? blkdev_writepage+0x30/0x30 [ 672.596752][ T28] do_read_cache_folio+0x1c0/0x7d0 [ 672.602075][ T28] ? blkdev_writepage+0x30/0x30 [ 672.689755][ T28] read_part_sector+0xd2/0x340 [ 672.695030][ T28] adfspart_check_POWERTEC+0x93/0xed0 [ 672.700453][ T28] ? adfspart_check_ADFS+0x620/0x620 [ 672.705824][ T28] ? put_partition+0x370/0x370 [ 672.710631][ T28] ? alloc_pages+0x4dc/0x740 [ 672.715305][ T28] bdev_disk_changed+0x740/0x1420 [ 672.720581][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 672.725955][ T28] ? iput+0x343/0x920 [ 672.730033][ T28] blkdev_get_whole+0x30d/0x390 [ 672.736668][ T28] blkdev_get_by_dev+0x279/0x600 [ 672.741653][ T28] blkdev_open+0x152/0x360 [ 672.746150][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 672.750774][ T28] do_dentry_open+0x8c6/0x1500 [ 672.755706][ T28] path_openat+0x27f1/0x3230 [ 672.760343][ T28] ? do_sys_openat2+0xda/0x1d0 [ 672.766791][ T28] ? verify_lock_unused+0x140/0x140 [ 672.772041][ T28] ? do_filp_open+0x430/0x430 [ 672.780008][ T28] ? __virt_addr_valid+0x18c/0x540 [ 672.785540][ T28] do_filp_open+0x1f5/0x430 [ 672.790264][ T28] ? vfs_tmpfile+0x490/0x490 [ 672.803707][ T28] ? _raw_spin_unlock+0x28/0x40 [ 672.809011][ T28] ? alloc_fd+0x58f/0x630 [ 672.813549][ T28] do_sys_openat2+0x134/0x1d0 [ 672.818799][ T28] ? do_sys_open+0xe0/0xe0 [ 672.824528][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 672.830613][ T28] ? lock_chain_count+0x20/0x20 [ 672.842261][ T28] __x64_sys_openat+0x139/0x160 [ 672.847655][ T28] do_syscall_64+0x55/0xa0 [ 672.852304][ T28] ? clear_bhb_loop+0x40/0x90 [ 672.857583][ T28] ? clear_bhb_loop+0x40/0x90 [ 672.862503][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.869169][ T28] RIP: 0033:0x7f21ec6a7407 [ 672.873806][ T28] RSP: 002b:00007fff9df20ef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 672.883038][ T28] RAX: ffffffffffffffda RBX: 00007f21ecd53880 RCX: 00007f21ec6a7407 [ 672.891813][ T28] RDX: 00000000000a0800 RSI: 000056094fee0600 RDI: ffffffffffffff9c [ 672.909341][ T28] RBP: 000056094fedf910 R08: 0000000000000000 R09: 0000000000000000 [ 672.917587][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000056094ff09af0 [ 672.926014][ T28] R13: 000056094fef7410 R14: 0000000000000000 R15: 000056094ff09af0 [ 672.960080][ T28] [ 673.607759][ T28] [ 673.607759][ T28] Showing all locks held in the system: [ 673.624433][ T28] 1 lock held by khungtaskd/28: [ 673.645346][ T28] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 673.669855][ T28] 2 locks held by kworker/u4:2/42: [ 673.675808][ T28] #0: ffff888019287938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 673.687278][ T28] #1: ffffc90000b2fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 673.699672][ T28] 1 lock held by syslogd/5121: [ 673.704494][ T28] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 673.714769][ T28] 2 locks held by getty/5531: [ 673.719649][ T28] #0: ffff88814d6d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 673.729499][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 673.740636][ T28] 1 lock held by udevd/7272: [ 673.745614][ T28] #0: ffff888021e1a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 673.755952][ T28] [ 673.758289][ T28] ============================================= [ 673.758289][ T28] [ 673.769883][ T28] NMI backtrace for cpu 1 [ 673.774262][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 673.781466][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 673.791512][ T28] Call Trace: [ 673.794786][ T28] [ 673.797708][ T28] dump_stack_lvl+0x18c/0x250 [ 673.802387][ T28] ? show_regs_print_info+0x20/0x20 [ 673.807693][ T28] ? load_image+0x400/0x400 [ 673.812224][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 673.817180][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 673.823381][ T28] ? _printk+0xde/0x130 [ 673.827538][ T28] ? load_image+0x400/0x400 [ 673.832045][ T28] ? load_image+0x400/0x400 [ 673.836550][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 673.842615][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 673.848595][ T28] watchdog+0xf3d/0xf80 [ 673.852752][ T28] ? watchdog+0x1e1/0xf80 [ 673.857093][ T28] kthread+0x2fa/0x390 [ 673.861154][ T28] ? hungtask_pm_notify+0x90/0x90 [ 673.866171][ T28] ? kthread_blkcg+0xd0/0xd0 [ 673.870750][ T28] ret_from_fork+0x48/0x80 [ 673.875162][ T28] ? kthread_blkcg+0xd0/0xd0 [ 673.879743][ T28] ret_from_fork_asm+0x11/0x20 [ 673.884516][ T28] [ 673.888072][ T28] Sending NMI from CPU 1 to CPUs 0: [ 673.893304][ C0] NMI backtrace for cpu 0 [ 673.893316][ C0] CPU: 0 PID: 789 Comm: kworker/0:2 Not tainted syzkaller #0 [ 673.893332][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 673.893341][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 673.893364][ C0] RIP: 0010:mark_lock+0x9/0x320 [ 673.893384][ C0] Code: 8b 8e e8 ea 5d 76 00 4c 89 f7 41 89 d9 e9 79 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 <53> 50 89 d5 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df 83 fa [ 673.893397][ C0] RSP: 0018:ffffc90003957770 EFLAGS: 00000002 [ 673.893409][ C0] RAX: 0000000000000000 RBX: ffff888021338ac0 RCX: dffffc0000000000 [ 673.893420][ C0] RDX: 0000000000000006 RSI: ffff888021338b30 RDI: ffff888021338000 [ 673.893431][ C0] RBP: ffffc900039579e8 R08: ffffffff911bf5e7 R09: 1ffffffff2237ebc [ 673.893442][ C0] R10: dffffc0000000000 R11: fffffbfff2237ebd R12: 0000000000000000 [ 673.893453][ C0] R13: ffff888021338000 R14: ffff888021338b30 R15: ffff888021338b50 [ 673.893464][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 673.893478][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.893489][ C0] CR2: 00007fdbcd5e96c0 CR3: 000000007ba68000 CR4: 00000000003506f0 [ 673.893503][ C0] Call Trace: [ 673.893508][ C0] [ 673.893516][ C0] __lock_acquire+0x11c7/0x7d40 [ 673.893535][ C0] ? verify_lock_unused+0x140/0x140 [ 673.893559][ C0] ? verify_lock_unused+0x140/0x140 [ 673.893579][ C0] ? mark_lock+0x94/0x320 [ 673.893595][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 673.893615][ C0] lock_acquire+0x19e/0x420 [ 673.893630][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 673.893650][ C0] ? read_lock_is_recursive+0x20/0x20 [ 673.893667][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 673.893682][ C0] ? __rwlock_init+0x150/0x150 [ 673.893699][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 673.893719][ C0] _raw_spin_lock+0x2e/0x40 [ 673.893734][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 673.893750][ C0] wg_ratelimiter_gc_entries+0x5d/0x450 [ 673.893768][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 673.893793][ C0] process_scheduled_works+0xa5d/0x15d0 [ 673.893821][ C0] ? assign_work+0x430/0x430 [ 673.893841][ C0] ? assign_work+0x3d0/0x430 [ 673.893859][ C0] worker_thread+0xa55/0xfc0 [ 673.893877][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 673.893892][ C0] ? _raw_spin_unlock+0x40/0x40 [ 673.893910][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 673.893933][ C0] kthread+0x2fa/0x390 [ 673.893946][ C0] ? pr_cont_work+0x560/0x560 [ 673.893963][ C0] ? kthread_blkcg+0xd0/0xd0 [ 673.893977][ C0] ret_from_fork+0x48/0x80 [ 673.893995][ C0] ? kthread_blkcg+0xd0/0xd0 [ 673.894012][ C0] ret_from_fork_asm+0x11/0x20 [ 673.894041][ C0] [ 673.900334][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 673.900348][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 673.900364][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 673.900374][ T28] Call Trace: [ 673.900381][ T28] [ 673.900388][ T28] dump_stack_lvl+0x18c/0x250 [ 673.900418][ T28] ? show_regs_print_info+0x20/0x20 [ 673.900444][ T28] ? load_image+0x400/0x400 [ 673.900471][ T28] panic+0x2dc/0x730 [ 673.900487][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 673.900512][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 673.900528][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 673.900549][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 673.900577][ T28] watchdog+0xf7c/0xf80 [ 673.900598][ T28] ? watchdog+0x1e1/0xf80 [ 673.900627][ T28] kthread+0x2fa/0x390 [ 673.900641][ T28] ? hungtask_pm_notify+0x90/0x90 [ 673.900661][ T28] ? kthread_blkcg+0xd0/0xd0 [ 673.900676][ T28] ret_from_fork+0x48/0x80 [ 673.900694][ T28] ? kthread_blkcg+0xd0/0xd0 [ 673.900709][ T28] ret_from_fork_asm+0x11/0x20 [ 673.900741][ T28] [ 673.906153][ T28] Kernel Offset: disabled [ 674.279953][ T28] Rebooting in 86400 seconds..