last executing test programs: 2m50.691338782s ago: executing program 2 (id=3440): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) shutdown(r0, 0x1) 2m50.478548678s ago: executing program 2 (id=3442): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@nodelalloc}]}, 0x1, 0xb92, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000700)=[{&(0x7f0000000640)='#u', 0x2}], 0x1, 0x5000, 0x0, 0xa) 2m50.084910817s ago: executing program 2 (id=3446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2100, 0x14) 2m49.058846811s ago: executing program 2 (id=3450): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) shutdown(r0, 0x1) 2m48.710373499s ago: executing program 2 (id=3452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x40106183, &(0x7f00000000c0)={@none, 0x1}) 2m47.810265071s ago: executing program 2 (id=3459): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 2m32.689257249s ago: executing program 32 (id=3459): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 2m31.520965497s ago: executing program 1 (id=3520): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) shutdown(r0, 0x1) 2m31.098324547s ago: executing program 1 (id=3521): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001300050001000000000000", @ANYRES32=r1, @ANYRES32=r0], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000700005040100000000000000070000", @ANYRES32=r1, @ANYBLOB="14000180080001"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m30.657779138s ago: executing program 1 (id=3523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4048000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x20040004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) 2m29.610547012s ago: executing program 1 (id=3525): r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x22, &(0x7f00000004c0)=@new_dev={0x4, 0x177, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1, 0x800, 0x83, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x1, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 2m29.139462674s ago: executing program 1 (id=3530): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001300050001000000000000", @ANYRES32=r1, @ANYRES32=r0], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000700005040100000000000000070000", @ANYRES32=r1, @ANYBLOB="14000180080001"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m28.44272168s ago: executing program 1 (id=3532): sync() syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x235, &(0x7f0000000300)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiMwyo5k9m3M+kyAhSd+bv1eAHjHYM3SacjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1v9mjOH4hVjOKXcKufG3HWLF+Rapn6+7g0Dw8GozxMZGJcz7mdiYJgZtnMPyF8MUH+VN0Ajg4GZgYFBhYGBgYmBhSEtMyfVwIOBkYEZyjFkgWhgYGiAqGZi4ABL6CXn56S0MzCCkwBY23IGFrgZho8ZWOEcI2SOsQXUIAaGdjDJAeMyeEDp5VD6MZSWR0s2LGAT+qE8jQYGBjawC4sM2RgYGCoSS0qKDEFiYJYRXMxIAG4zE9TLc6FmwILiOBPDKBgFo2AUjIJRMApGwSgYBaNgFIxkAAgAAP//ANi4fQ==") 2m13.211379001s ago: executing program 33 (id=3532): sync() syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x235, &(0x7f0000000300)="$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") 19.259427874s ago: executing program 0 (id=4023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 16.87045568s ago: executing program 0 (id=4026): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 15.298379278s ago: executing program 0 (id=4032): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 12.66737258s ago: executing program 0 (id=4036): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$eJzs3UFr02AYB/AnXZdVUdhZPAS8eCrqJ6jKBsOAoPSgJ4XpZRPBXaKnfgu/gV/FryM57VZpU1Y2IlNoktX8fqeH95/mfd63kPfU9N39TyfHn88+/vj5PUajJIaTmMR5EvsxiJ2ozOKSpHYUANga5/N5/JpX/uLyZy20BAA07B/PfwDgP+D8B4D+cf4DQP+8fvP2xdM8P3iVZaOIcnZrOVrOimmVHx7lB4+ypf31p8qimO5c5I+rPLuc78btVf6kNk/j4YMqX2TPX+a7y2hYXVFM9+K4ruFJsvE9AAAAAAAAAAAAAAAAAAAAAACAto2zC7Xv9xmP0z/kVXV4lK7Grr7fZxj3hjUTpo0sAwAAAAAAAAAAAAAAAAAAALba2ddvJ+9PTz98ublFuYn7xKDbVdyNTd/5TuPf4N5qhhY36tq5knb7aaVY7PMNaONKce2jY9DogwkAAAAAAAAAAAAAAAAAAHpo/aPfrjsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO6s//+/uWIxz6DrhQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Gu/AwAA//+a6T6f") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x0, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) setns(0xc9, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x7800) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc1000, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') 10.9832743s ago: executing program 0 (id=4038): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x300f, 0xb, 0x1, 0x7}}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r6, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@loopback, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x70bd29, 0x3500, 0x2, 0x1, 0x0, 0x8}, [@tmpl={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 10.019166243s ago: executing program 0 (id=4043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$radio(0x0, 0x3, 0x2) write(r8, 0x0, 0x0) vmsplice(r6, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x74, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9000000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x603}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x90}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x848) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/85, 0x55}, 0x2}], 0x1, 0x2122, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) unshare(0x2c020400) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0405627, &(0x7f0000000180)={0x3, 0x980900, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa000000c}) poll(&(0x7f0000000140)=[{r4, 0x8}, {r3, 0x2cfc08c20dafc34e}, {r9, 0xa8}, {r1, 0xf102}], 0x4, 0x8000007) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003640)=@newtaction={0x78, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x64, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x78}, 0x1, 0x2b1e}, 0x408d4) 3.170182576s ago: executing program 3 (id=4113): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendfile(r0, r0, 0x0, 0x1000200201005) 2.922920951s ago: executing program 4 (id=4116): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @empty, 0x4b44}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdrdstopts={{0x14, 0x29, 0x37, {0x16}}}], 0x14}}], 0x1, 0x44040) 2.714538446s ago: executing program 4 (id=4117): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value, 0x8) 2.5295415s ago: executing program 4 (id=4118): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.478373142s ago: executing program 3 (id=4119): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 2.326461625s ago: executing program 3 (id=4120): socket$kcm(0x10, 0x400000002, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7e000005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 2.301079196s ago: executing program 4 (id=4121): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_open_dev$swradio(0x0, 0x0, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x200, 0x0, 0x3f}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffe]}}, {0x0, 0x0, 0x3, 0x0, @time}], 0x38) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_open_dev$sndctrl(0x0, 0xffffffff, 0x40901) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendto(r2, 0x0, 0x0, 0x4040c50, &(0x7f0000000480)=@in={0x2, 0x4e21, @broadcast}, 0x80) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="c62ee5d6a8ec1d", 0x7, 0x8040, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1000}) 2.001984283s ago: executing program 5 (id=4123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.000361804s ago: executing program 4 (id=4124): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 1.834510907s ago: executing program 5 (id=4125): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, 0x0, 0x0, 0x44040) 1.778034058s ago: executing program 4 (id=4126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) r1 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000040351213823fe701020301090269000301003003080b000201002006090400000001012000092401ff7f06090013090401000001026000"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000300)={0x1, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(r5, &(0x7f0000000340)={'syz0\x00', {0x3, 0xf801, 0x1, 0x7}, 0x2c, [0x8001, 0x0, 0x1, 0x700, 0x7, 0x7, 0x7, 0xffffffff, 0x2, 0xf980, 0x5, 0x5, 0x3ff, 0xffffffff, 0xf0, 0xfff, 0x7, 0x7fff, 0x2, 0x6, 0xfda, 0x8, 0x7, 0xfffffff8, 0x361, 0x80000000, 0xf6d, 0x3, 0x3, 0xb, 0x4, 0x6, 0x0, 0x5, 0x3, 0x7, 0x7, 0x401, 0x8, 0x5, 0x0, 0x9, 0x80000000, 0x4, 0x1, 0x5, 0x7, 0x2, 0x4, 0xafa2, 0x2, 0x8001, 0x9, 0x6683, 0xff, 0x6d00, 0x9, 0xffff, 0x2, 0x26b, 0x7, 0x3ff, 0xa0e0, 0xd], [0x2, 0x3, 0xa74, 0x3, 0x3, 0x2eda, 0x9, 0xd, 0x3, 0xfffffff8, 0x101, 0xfff, 0x4, 0x3, 0x723e0d6c, 0x9, 0x7, 0x9, 0x98e, 0x400, 0xd, 0x7, 0x0, 0x8, 0xfe, 0x1, 0x9, 0x3, 0x8000, 0x3, 0x1, 0x1, 0x37f47e45, 0x5, 0x4, 0x9, 0x7cc, 0x3, 0x4, 0x0, 0x101, 0x2, 0x9, 0xfce4, 0x3, 0x81, 0x9, 0x0, 0x8, 0x761f, 0x8, 0x1, 0x5, 0x80000001, 0x8, 0xd6b1, 0x21b, 0x8, 0x202b, 0x2, 0x9, 0x2, 0x9, 0x5], [0x5, 0x9, 0x3, 0x0, 0x1, 0x0, 0x8, 0x9, 0xfffffffd, 0x3db, 0x1ff, 0x8, 0x8, 0xaa, 0x5, 0x1, 0x9, 0x7, 0xc3, 0x8, 0x3cbc, 0x8, 0x8, 0x4, 0x3, 0x69f55213, 0x24a, 0x8, 0x432, 0x800, 0x7, 0x0, 0x8, 0x800, 0xfffffffc, 0x0, 0x80000001, 0xd, 0x3, 0x8, 0x2, 0x3, 0x800, 0x7fff, 0x1, 0x7, 0xf, 0x7, 0x7f, 0xc, 0x4, 0x80, 0x5, 0x7, 0x5880, 0x5, 0xcd, 0xa1c, 0xcce, 0x7fff, 0x7, 0x68fd, 0x40, 0x3], [0x8, 0x1, 0x10000, 0xffff, 0x1, 0x7, 0x8, 0x1fb4, 0x1, 0x8, 0x6, 0x7, 0xfffffff6, 0x15c, 0xd, 0xd38, 0x4, 0x7, 0x3, 0x5, 0x3, 0x1f, 0x9, 0x7, 0x4, 0x80000000, 0x1, 0x7, 0x920a, 0x9, 0x2, 0x7, 0x800, 0x2, 0x9, 0xf, 0x1000, 0xeb7b, 0xfffffffb, 0x5b, 0xd65d, 0x0, 0xfffffff8, 0x8000, 0x3ff, 0x2, 0x3, 0x9, 0x61ce, 0x1c11, 0xff, 0x6, 0x10001, 0x101, 0x0, 0x1, 0x1, 0x1000, 0x7fffffff, 0x1, 0xfffffff9, 0x6, 0x6, 0x7f]}, 0x45c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x19, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) 1.759324099s ago: executing program 5 (id=4127): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendfile(r0, r0, 0x0, 0x1000200201005) 1.407509387s ago: executing program 3 (id=4128): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 1.246534071s ago: executing program 3 (id=4129): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.197783942s ago: executing program 3 (id=4130): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x3, 0x46d, 0xa07}}, 0x118) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) write$UHID_INPUT2(r6, &(0x7f0000000200), 0x6) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)={0x710, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x6e0, 0x8, 0x0, 0x1, [{0x400, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3d8, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x290, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x248, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x710}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 748.941153ms ago: executing program 5 (id=4131): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 81.417718ms ago: executing program 5 (id=4132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e69637666300000000000000000000008000500060000001400178004"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 5 (id=4133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) kernel console output (not intermixed with test programs): 3][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.594627][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.644971][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.686671][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.730704][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.769045][T13947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.789012][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 825.808480][T14173] 8021q: adding VLAN 0 to HW filter on device bond5 [ 826.090388][T13947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.136679][T13947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.165212][T13947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.206812][T13947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.239306][T14192] syz_tun: entered allmulticast mode [ 826.251979][T14195] dvmrp8: entered allmulticast mode [ 826.295374][T14188] syz_tun: left allmulticast mode [ 826.598432][ T4484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.622257][ T4484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.683260][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.691983][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.817660][T14209] fuse: Unknown parameter '00000000000000000000' [ 827.903485][ T23] lg-g15 0003:046D:0A07.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 827.921533][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0006/input/input33 [ 828.206300][T14226] fido_id[14226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 828.503264][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 828.716045][T14242] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2621'. [ 828.766138][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2621'. [ 828.823294][T14243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 829.908209][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 829.908252][ T28] audit: type=1326 audit(1787328884.344:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 830.388532][ T28] audit: type=1326 audit(1787328884.344:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 830.522900][ T28] audit: type=1326 audit(1787328884.344:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a0795e90e code=0x7ffc0000 [ 830.591363][ T28] audit: type=1326 audit(1787328884.344:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 830.770102][ T28] audit: type=1326 audit(1787328884.354:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 830.895721][ T28] audit: type=1326 audit(1787328884.354:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 831.304222][ T28] audit: type=1326 audit(1787328884.354:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 831.502879][ T28] audit: type=1326 audit(1787328884.354:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 831.594924][ T28] audit: type=1326 audit(1787328884.354:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 831.703505][ T28] audit: type=1326 audit(1787328884.364:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2626" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 831.841831][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2632'. [ 831.902415][T14289] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2632'. [ 832.076894][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2632'. [ 832.148466][T14289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.237780][T11399] lg-g15 0003:046D:0A07.0007: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 832.274581][T11399] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0007/input/input34 [ 834.613478][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2642'. [ 834.677916][T14333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2642'. [ 834.778530][T14331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2642'. [ 834.789141][T14331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 835.496550][T14348] loop0: detected capacity change from 0 to 4096 [ 835.515691][T14348] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 835.548309][T14348] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 835.629827][T13361] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 836.863939][T13361] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 836.872637][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2654'. [ 836.891137][T14360] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2654'. [ 836.933292][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2654'. [ 839.696278][T14384] tipc: Enabling of bearer rejected, failed to enable media [ 839.971237][ T1186] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 30 seconds [ 840.003292][ T1186] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 30 seconds [ 840.014233][ T1186] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 30 seconds [ 841.328973][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'. [ 841.389155][T14403] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2666'. [ 841.400134][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2666'. [ 841.410621][T14403] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.412750][T14412] loop2: detected capacity change from 0 to 32768 [ 842.475936][T14412] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2670 (14412) [ 842.515904][T14412] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 842.623734][T14412] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 842.738459][T14412] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 842.773875][T14412] BTRFS info (device loop2): use zstd compression, level 3 [ 842.781371][T14412] BTRFS info (device loop2): using free space tree [ 842.838524][T14412] BTRFS info (device loop2): enabling ssd optimizations [ 842.862909][T14412] BTRFS info (device loop2): auto enabling async discard [ 843.806568][T13947] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 844.138774][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 846.189119][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 846.241919][T14483] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 849.488075][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'. [ 849.696286][T14509] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 850.186838][T11399] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 850.212050][T11399] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 850.253214][T11399] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 850.260730][T11399] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 850.303677][T11399] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 850.326154][T11399] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 850.343405][T11399] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 850.361642][T11399] hid-generic 0000:0000:0001.0008: unknown main item tag 0x0 [ 850.406605][T11399] hid-generic 0000:0000:0001.0008: hidraw0: HID v0.10 Device [syz0] on syz1 [ 850.605656][T14532] fido_id[14532]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 852.685624][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2709'. [ 853.012866][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 853.012884][ T28] audit: type=1326 audit(1787328907.304:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 853.108595][ T28] audit: type=1326 audit(1787328907.314:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 853.160124][ T28] audit: type=1326 audit(1787328907.484:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 853.230585][ T28] audit: type=1326 audit(1787328907.484:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 853.264401][ T28] audit: type=1326 audit(1787328907.554:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e2db5e90e code=0x7ffc0000 [ 853.465072][ T28] audit: type=1326 audit(1787328907.554:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e2db5e90e code=0x7ffc0000 [ 853.531074][ T28] audit: type=1326 audit(1787328907.564:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 853.653409][ T28] audit: type=1326 audit(1787328907.564:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 853.681630][ T28] audit: type=1326 audit(1787328907.564:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 853.709768][ T28] audit: type=1326 audit(1787328907.564:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.2713" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 854.531901][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'. [ 854.634486][T14591] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 855.823568][T14615] Core dump to core aborted: cannot preserve file permissions [ 856.634951][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 856.896822][T14602] loop0: detected capacity change from 0 to 32768 [ 856.913658][T14602] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2720 (14602) [ 856.944676][T14602] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 857.792455][T14602] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 857.892392][T14602] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 857.928523][T14602] BTRFS info (device loop0): use zstd compression, level 3 [ 857.952387][T14633] loop2: detected capacity change from 0 to 256 [ 858.041822][T14602] BTRFS info (device loop0): using free space tree [ 858.054879][T14633] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 858.264260][T14602] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 858.264949][T14602] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 858.277065][T14602] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 858.349816][T14602] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 858.386483][T14602] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 858.408662][T14602] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 858.429439][T14602] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 858.532963][T14602] BTRFS error (device loop0): open_ctree failed: -12 [ 860.908016][T14674] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2745'. [ 861.061611][T14677] loop0: detected capacity change from 0 to 64 [ 864.960176][T14730] fuse: Bad value for 'fd' [ 866.226216][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 866.723277][T14754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2763'. [ 867.872947][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 867.892247][ T5837] IPVS: starting estimator thread 0... [ 868.602945][T14774] IPVS: using max 17 ests per chain, 40800 per kthread [ 869.228790][ T23] lg-g15 0003:046D:0A07.0009: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 869.299093][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0009/input/input35 [ 869.319698][T14805] fuse: Unknown parameter '00000000000000000000' [ 869.601480][T14779] loop2: detected capacity change from 0 to 32768 [ 870.013444][ T1186] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 60 seconds [ 870.024645][ T1186] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 60 seconds [ 870.053522][ T1186] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 60 seconds [ 870.054418][T14779] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 870.255202][T14779] XFS (loop2): Ending clean mount [ 870.361005][T14779] XFS (loop2): Quotacheck needed: Please wait. [ 870.571868][T14779] XFS (loop2): Quotacheck: Done. [ 870.623275][T14779] XFS (loop2): User initiated shutdown received. [ 870.658645][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.671618][T14779] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 870.686032][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.706716][T14779] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 870.814665][T13947] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 872.930837][T14864] fuse: Unknown parameter '00000000000000000000' [ 874.391912][ T5786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 874.647718][ T5786] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.781652][ T5786] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.193873][ T5786] usb 3-1: config 0 interface 0 has no altsetting 0 [ 875.200628][ T5786] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 875.210187][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.232174][ T5786] usb 3-1: config 0 descriptor?? [ 875.352812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 877.311598][ T5786] usbhid 3-1:0.0: can't add hid device: -71 [ 877.332976][ T5786] usbhid: probe of 3-1:0.0 failed with error -71 [ 877.398150][ T5786] usb 3-1: USB disconnect, device number 2 [ 877.762179][T14918] ftl_cs: FTL header not found. [ 877.809350][T14925] fuse: Unknown parameter '00000000000000000000' [ 877.855359][T14918] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 879.415005][T14935] loop2: detected capacity change from 0 to 64 [ 881.192718][T14962] fuse: Unknown parameter '00000000000000000000' [ 882.981629][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 883.998390][T14989] loop2: detected capacity change from 0 to 256 [ 884.061997][T14989] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 884.346937][T14991] loop2: detected capacity change from 0 to 8 [ 884.489547][T14991] SQUASHFS error: Failed to read block 0x2d7: -5 [ 884.512930][T14991] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 884.786847][T14997] fuse: Unknown parameter '00000000000000000000' [ 885.041829][T15001] binder: 15000:15001 ioctl 8 0 returned -22 [ 887.488967][ T5837] lg-g15 0003:046D:0A07.000A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 887.559814][ T5837] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000A/input/input36 [ 888.160482][T15018] fido_id[15018]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 888.567012][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2828'. [ 888.850408][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2826'. [ 888.890120][T15025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2826'. [ 890.143233][T15001] syz.0.2815 (15001): drop_caches: 2 [ 890.547899][T15050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2838'. [ 890.647090][T15050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2838'. [ 891.030461][T15063] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 892.003472][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 892.003490][ T28] audit: type=1326 audit(1787328946.594:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.3.2848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 892.815852][ T28] audit: type=1326 audit(1787328946.594:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.3.2848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 892.846492][ T28] audit: type=1326 audit(1787328947.364:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.3.2848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 892.874434][ T28] audit: type=1326 audit(1787328947.364:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.3.2848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 892.903007][ T28] audit: type=1326 audit(1787328947.364:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.3.2848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 892.933826][ T28] audit: type=1326 audit(1787328947.364:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.3.2848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 892.967180][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2851'. [ 892.977434][ T28] audit: type=1326 audit(1787328947.364:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.3.2848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 893.035775][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2851'. [ 893.068453][ T28] audit: type=1326 audit(1787328947.364:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.3.2848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 893.250999][T11399] lg-g15 0003:046D:0A07.000B: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 893.267822][T11399] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000B/input/input37 [ 897.661678][T15119] loop2: detected capacity change from 0 to 512 [ 897.716580][T15119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.803121][T15119] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.927008][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2861'. [ 897.947876][ T28] audit: type=1800 audit(1787328952.534:134): pid=15119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2855" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 897.965394][T15125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2861'. [ 898.308859][T13947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.753944][T15137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2863'. [ 899.697634][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 899.708331][T15147] bridge_slave_1: left allmulticast mode [ 899.716262][T15147] bridge_slave_1: left promiscuous mode [ 899.722130][T15147] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.738832][T15147] bridge_slave_0: left allmulticast mode [ 899.748745][T15147] bridge_slave_0: left promiscuous mode [ 899.769137][T15147] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.069431][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2870'. [ 900.097661][ T1186] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 90 seconds [ 900.109676][ T1186] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 90 seconds [ 900.142993][ T1186] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 90 seconds [ 900.174825][T15159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2870'. [ 900.364617][T15167] loop2: detected capacity change from 0 to 512 [ 900.378019][T15167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 900.438642][T15167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.453681][T15167] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.513783][T15167] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.2872: iget: bad i_size value: 2533274857506816 [ 900.569234][T15172] netlink: 'syz.1.2874': attribute type 7 has an invalid length. [ 900.577739][T15172] netlink: 'syz.1.2874': attribute type 8 has an invalid length. [ 900.650346][T13947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.951655][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2875'. [ 901.837083][T15188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2880'. [ 902.009246][T15188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2880'. [ 902.827798][T15223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2887'. [ 903.249091][T15222] Bluetooth: MGMT ver 1.22 [ 903.789927][T15232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2891'. [ 903.945368][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2891'. [ 905.707822][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 905.784399][T15264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2901'. [ 907.137246][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 907.162928][T15268] bridge_slave_1: left allmulticast mode [ 907.172899][T15268] bridge_slave_1: left promiscuous mode [ 907.187377][T15268] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.259142][T15268] bridge_slave_0: left allmulticast mode [ 907.265013][T15268] bridge_slave_0: left promiscuous mode [ 907.270928][T15268] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.380068][ T5140] udevd[5140]: worker [13535] /devices/virtual/block/nbd0 is taking a long time [ 909.139441][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 912.340183][T15312] fuse: Bad value for 'fd' [ 912.897735][T15322] could not allocate digest TFM handle sha3-224-ce [ 912.922232][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 913.150152][T15316] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 913.163596][T15316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2911'. [ 913.225195][T15344] bond0: entered promiscuous mode [ 913.230322][T15344] bond_slave_0: entered promiscuous mode [ 913.258142][T15344] bond_slave_1: entered promiscuous mode [ 913.283642][T15344] batadv0: entered promiscuous mode [ 913.291748][T15344] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 914.174658][T11399] lg-g15 0003:046D:0A07.000C: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 914.804425][T11399] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000C/input/input39 [ 915.006018][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2936'. [ 915.068536][T15369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2936'. [ 915.394226][T15379] fuse: Bad value for 'fd' [ 915.975915][T15391] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 916.205355][T15396] overlayfs: failed to clone upperpath [ 917.503860][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2947'. [ 917.589087][T15413] loop2: detected capacity change from 0 to 128 [ 917.635896][T15405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2947'. [ 917.994898][T15445] jffs2: notice: (15445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 918.038070][T15445] overlayfs: failed to clone upperpath [ 918.683022][T15464] jffs2: notice: (15464) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 919.834468][T15474] o2cb: This node has not been configured. [ 919.840738][T15474] o2cb: Cluster check failed. Fix errors before retrying. [ 919.848244][T15474] (syz.3.2960,15474,1):user_dlm_register:674 ERROR: status = -22 [ 919.856225][T15474] (syz.3.2960,15474,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 922.653430][ T5790] Bluetooth: hci2: command 0xfc11 tx timeout [ 922.661768][ T5780] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 923.388714][T15524] jffs2: notice: (15524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 923.416285][T15526] gadgetfs: bound to dummy_udc driver [ 923.722941][T11596] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 923.732772][ C0] gadgetfs: connected [ 923.752590][T11596] gadgetfs: disconnected [ 924.063191][ C0] gadgetfs: connected [ 924.070877][T11596] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 924.086929][T11596] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 924.102702][T11596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.125959][ C0] gadgetfs: configuration #1 [ 924.173469][T15528] gadgetfs: suspended from state 3 [ 924.198313][T15528] gadgetfs: disconnected [ 924.206607][ T5764] usb 1-1: USB disconnect, device number 2 [ 926.661537][T15570] fuse: Unknown parameter 'user_id00000000000000000000' [ 926.750321][T15574] loop2: detected capacity change from 0 to 4096 [ 926.803924][T15574] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 927.069695][T15579] GUP no longer grows the stack in syz.0.3000 (15579): 200000006000-200000008000 (200000004000) [ 927.081403][T15579] CPU: 0 PID: 15579 Comm: syz.0.3000 Not tainted syzkaller #0 [ 927.089023][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 927.099164][T15579] Call Trace: [ 927.102482][T15579] [ 927.105452][T15579] dump_stack_lvl+0x18c/0x250 [ 927.110369][T15579] ? show_regs_print_info+0x20/0x20 [ 927.115632][T15579] ? load_image+0x420/0x420 [ 927.120212][T15579] ? find_vma+0x134/0x1b0 [ 927.124669][T15579] fixup_user_fault+0x691/0x750 [ 927.129586][T15579] fault_in_user_writeable+0x71/0xd0 [ 927.134961][T15579] futex_lock_pi+0x276/0xa00 [ 927.139683][T15579] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 927.145111][T15579] ? userfaultfd_unmap_prep+0x3c0/0x3c0 [ 927.150713][T15579] do_futex+0x23d/0x3e0 [ 927.154889][T15579] ? __ia32_sys_get_robust_list+0x110/0x110 [ 927.160891][T15579] __se_sys_futex+0x3a9/0x440 [ 927.165618][T15579] ? __x64_sys_futex+0xf0/0xf0 [ 927.170405][T15579] ? __x64_sys_futex+0x21/0xf0 [ 927.175188][T15579] do_syscall_64+0x55/0xb0 [ 927.179713][T15579] ? clear_bhb_loop+0x40/0x90 [ 927.184511][T15579] ? clear_bhb_loop+0x40/0x90 [ 927.189210][T15579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 927.195123][T15579] RIP: 0033:0x7f84d599e0d9 [ 927.199557][T15579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.219301][T15579] RSP: 002b:00007f84d67e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 927.227818][T15579] RAX: ffffffffffffffda RBX: 00007f84d5c25fa0 RCX: 00007f84d599e0d9 [ 927.235983][T15579] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 927.243967][T15579] RBP: 00007f84d5a35024 R08: 0000000000000000 R09: 0000000000000002 [ 927.251967][T15579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.259975][T15579] R13: 00007f84d5c26038 R14: 00007f84d5c25fa0 R15: 00007fff0a34d768 [ 927.267987][T15579] [ 927.291348][ T28] audit: type=1326 audit(1787328981.874:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.2.3001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 927.362854][ T28] audit: type=1326 audit(1787328981.874:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.2.3001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 927.427139][ T28] audit: type=1326 audit(1787328981.884:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.2.3001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 927.463224][ T28] audit: type=1326 audit(1787328981.884:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.2.3001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 927.491522][ T28] audit: type=1326 audit(1787328981.884:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.2.3001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 927.774522][T15587] erspan1: entered promiscuous mode [ 927.843724][T11399] lg-g15 0003:046D:0A07.000D: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 927.859880][T11399] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000D/input/input40 [ 928.620983][ T5780] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 929.055353][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 930.223911][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 120 seconds [ 930.235163][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 120 seconds [ 930.246500][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 120 seconds [ 931.447675][ T28] audit: type=1326 audit(1787328986.044:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.1.3020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 931.509855][ T28] audit: type=1326 audit(1787328986.044:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.1.3020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 931.568225][ T28] audit: type=1326 audit(1787328986.074:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.1.3020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 931.615354][ T28] audit: type=1326 audit(1787328986.074:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.1.3020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 931.647194][ T28] audit: type=1326 audit(1787328986.074:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15639 comm="syz.1.3020" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 932.099269][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.105670][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.112957][T11399] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 938.314130][T11399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 938.352423][T11399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.363733][T11399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.373653][T11399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 938.389163][T11399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 938.399233][T11399] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 938.419536][T11399] usb 3-1: Manufacturer: syz [ 938.443424][T11399] usb 3-1: config 0 descriptor?? [ 939.667296][T11399] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 939.681581][T11399] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 939.733716][T11399] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 941.063379][T14202] usb 3-1: USB disconnect, device number 3 [ 941.802892][T14202] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 942.026250][T14202] usb 3-1: Using ep0 maxpacket: 8 [ 942.035101][T14202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 942.047239][T14202] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 942.060485][T14202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.075385][T14202] usb 3-1: config 0 descriptor?? [ 942.460206][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 942.460222][ T28] audit: type=1326 audit(1787328997.054:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15734 comm="syz.1.3052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x0 [ 942.491574][T14202] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 942.666426][T15737] fuse: Unknown parameter '0x0000000000000006' [ 943.087721][T11399] usb 3-1: USB disconnect, device number 4 [ 943.355011][T15759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3061'. [ 944.999032][T15790] tipc: Enabling of bearer rejected, failed to enable media [ 945.915750][T15800] loop2: detected capacity change from 0 to 8192 [ 946.906079][T15800] Dev loop2: RDB in block 1 has bad checksum [ 947.691881][T15823] MTD: Couldn't look up './dev/mtdblock0': -2 [ 948.132973][ T28] audit: type=1326 audit(1787329002.714:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15819 comm="syz.2.3084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x0 [ 948.803002][ T28] audit: type=1326 audit(1787329003.344:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 948.946974][ T28] audit: type=1326 audit(1787329003.344:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 948.993022][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3091'. [ 949.051005][ T28] audit: type=1326 audit(1787329003.354:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 949.149844][ T28] audit: type=1326 audit(1787329003.354:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 949.272939][ T28] audit: type=1326 audit(1787329003.354:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 949.349645][ T28] audit: type=1326 audit(1787329003.354:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 949.414649][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 949.430426][ T28] audit: type=1326 audit(1787329003.364:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 949.502834][ T28] audit: type=1326 audit(1787329003.364:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 949.570492][ T28] audit: type=1326 audit(1787329003.364:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15838 comm="syz.1.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 951.105990][T15862] dccp_v6_rcv: dropped packet with invalid checksum [ 951.942879][T15864] netlink: 'syz.1.3100': attribute type 22 has an invalid length. [ 951.961692][T15864] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3100'. [ 952.619454][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'. [ 952.636888][T14202] IPVS: starting estimator thread 0... [ 952.743019][T15882] IPVS: using max 16 ests per chain, 38400 per kthread [ 960.253243][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 150 seconds [ 960.264520][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 150 seconds [ 960.295418][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 150 seconds [ 960.685876][T15951] loop2: detected capacity change from 0 to 128 [ 960.753139][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 961.033069][ T9] IPVS: starting estimator thread 0... [ 961.046246][T15951] EXT4-fs (loop2): Test dummy encryption mode enabled [ 961.125710][T15951] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 961.140190][T15953] IPVS: using max 14 ests per chain, 33600 per kthread [ 961.209970][T15951] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 962.538555][T13947] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 963.238747][T15976] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3131'. [ 963.470910][T15974] loop2: detected capacity change from 0 to 40427 [ 963.546074][T15974] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 963.567092][T15974] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 963.621690][T15974] F2FS-fs (loop2): invalid crc value [ 963.760548][T15974] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 963.774868][T15974] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 964.035682][ T28] audit: type=1326 audit(1787329018.634:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.133064][ T28] audit: type=1326 audit(1787329018.634:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.210060][ T28] audit: type=1326 audit(1787329018.654:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.263586][ T28] audit: type=1326 audit(1787329018.664:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.294316][ T28] audit: type=1326 audit(1787329018.664:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.324430][ T28] audit: type=1326 audit(1787329018.674:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18cf39dd6b code=0x7ffc0000 [ 964.351523][ T28] audit: type=1326 audit(1787329018.674:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.384498][ T28] audit: type=1326 audit(1787329018.674:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.451785][ T28] audit: type=1326 audit(1787329018.674:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.541768][ T28] audit: type=1326 audit(1787329018.674:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 964.907403][T16001] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3140'. [ 967.773286][T16030] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3151'. [ 969.895102][T11399] lg-g15 0003:046D:0A07.000F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 969.916145][T11399] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000F/input/input41 [ 971.961412][T16063] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3162'. [ 973.168683][T16065] loop2: detected capacity change from 0 to 32768 [ 973.189009][T16065] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 973.765441][T13985] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 973.977265][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'. [ 974.196332][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'. [ 974.365269][T16084] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 3, id = 0 [ 974.685900][T16080] loop2: detected capacity change from 0 to 32768 [ 974.716654][T16080] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 974.937324][T13985] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 976.100079][ T5790] Bluetooth: hci0: unexpected event for opcode 0x000e [ 976.293522][T16118] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3182'. [ 979.817047][T16151] loop2: detected capacity change from 0 to 32768 [ 979.836852][T16151] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.3195 (16151) [ 979.889418][T16151] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 979.923049][T16151] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 979.932661][T16151] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 979.955619][T16151] BTRFS info (device loop2): use zstd compression, level 3 [ 979.970179][T16151] BTRFS info (device loop2): using free space tree [ 980.362960][T16151] BTRFS info (device loop2): enabling ssd optimizations [ 980.421596][T16151] BTRFS info (device loop2): auto enabling async discard [ 980.480793][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 980.480808][ T28] audit: type=1800 audit(1787329035.074:171): pid=16151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3195" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 980.598453][ T28] audit: type=1800 audit(1787329035.114:172): pid=16151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3195" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 980.752837][ T28] audit: type=1800 audit(1787329035.324:173): pid=16151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3195" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 981.008113][T13947] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 987.674086][T16239] netlink: 'syz.3.3219': attribute type 1 has an invalid length. [ 987.839783][T16239] 8021q: adding VLAN 0 to HW filter on device bond10 [ 988.219480][T16249] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 988.229049][T16249] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 988.859919][T16262] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3228'. [ 990.333107][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 180 seconds [ 990.345017][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 180 seconds [ 990.355982][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 180 seconds [ 991.589398][T16293] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3237'. [ 992.167919][T16307] bond0: (slave bond_slave_0): Releasing backup interface [ 992.248946][T16307] bond0: (slave bond_slave_1): Releasing backup interface [ 992.341129][T16307] team0: Port device team_slave_0 removed [ 992.384218][T16307] team0: Port device team_slave_1 removed [ 992.397780][T16307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.407292][T16307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.420919][T16307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.431564][T16307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.504825][T16307] bond4: (slave ip6gretap1): Releasing backup interface [ 993.536393][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.639898][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.016875][T16333] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3248'. [ 995.193899][T16356] Invalid ELF header magic: != ELF [ 996.319769][T16370] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3258'. [ 996.683700][T16377] jffs2: notice: (16377) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 997.501626][T16402] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3267'. [ 998.868895][T16416] loop2: detected capacity change from 0 to 512 [ 998.903794][T16416] EXT4-fs: Ignoring removed nobh option [ 998.937073][T16416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 998.979638][T16416] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 999.075321][T16416] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 999.163231][T16416] EXT4-fs (loop2): 1 truncate cleaned up [ 999.194020][T16416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.290387][T16416] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 1000.155523][T13947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.584028][T16438] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3277'. [ 1003.042815][T11596] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1003.662916][T11596] usb 1-1: Using ep0 maxpacket: 32 [ 1004.814516][T11596] usb 1-1: unable to read config index 0 descriptor/all [ 1004.821595][T11596] usb 1-1: can't read configurations, error -71 [ 1004.910459][T16499] loop2: detected capacity change from 0 to 32768 [ 1004.940260][T16499] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1005.112160][T13985] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1005.286714][T16523] overlayfs: failed to resolve './cgroup': -2 [ 1005.388920][T16528] overlayfs: failed to clone upperpath [ 1005.451165][ T5764] lg-g15 0003:046D:0A07.0010: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1005.708339][ T5764] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0010/input/input42 [ 1006.417381][T16530] fido_id[16530]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1008.073738][ T28] audit: type=1326 audit(1787329062.664:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.3316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 1008.275255][ T28] audit: type=1326 audit(1787329062.664:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.3316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 1008.728750][ T28] audit: type=1326 audit(1787329062.674:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.3316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 1008.920294][ T28] audit: type=1326 audit(1787329062.674:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.3316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 1008.954912][ T28] audit: type=1326 audit(1787329062.674:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.3316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 1008.999501][ T28] audit: type=1326 audit(1787329062.674:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.3316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 1009.049085][ T28] audit: type=1326 audit(1787329062.674:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.3316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 1009.103995][ T28] audit: type=1326 audit(1787329062.674:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.2.3316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2db9e0d9 code=0x7ffc0000 [ 1014.719499][ T23] lg-g15 0003:046D:0A07.0011: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1014.740958][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0011/input/input43 [ 1015.110759][T16641] fido_id[16641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1017.871137][T16714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1017.880868][T16714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1017.953153][T16714] syz_tun: entered promiscuous mode [ 1017.960020][T16714] syz_tun: left promiscuous mode [ 1020.414526][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 210 seconds [ 1020.426166][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 210 seconds [ 1020.438195][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 210 seconds [ 1021.083856][T16754] jffs2: notice: (16754) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1021.959976][T16773] xt_hashlimit: size too large, truncated to 1048576 [ 1023.256044][T16778] loop2: detected capacity change from 0 to 32768 [ 1023.297337][T16778] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1023.476028][T13985] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 1027.300432][T16826] binder: 16822:16826 ioctl 4018620d 0 returned -22 [ 1028.319220][ T5790] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1030.611960][T16892] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1031.553075][ T5764] lg-g15 0003:046D:0A07.0012: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1031.585924][ T5764] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0012/input/input44 [ 1033.240531][T16929] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3432'. [ 1034.344866][T16940] Invalid ELF header magic: != ELF [ 1035.544897][T16946] loop2: detected capacity change from 0 to 4096 [ 1035.665410][T16946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.749291][ T28] audit: type=1800 audit(1787329090.344:182): pid=16946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3442" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1035.814277][T13947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.059162][T16970] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3447'. [ 1037.235431][T16986] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1040.621162][T17038] jffs2: notice: (17038) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1042.883938][ T28] audit: type=1326 audit(1787329097.444:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1042.915166][ T28] audit: type=1326 audit(1787329097.444:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1042.944362][ T28] audit: type=1326 audit(1787329097.444:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1042.995275][ T28] audit: type=1326 audit(1787329097.444:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1043.074054][ T28] audit: type=1326 audit(1787329097.444:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1043.195106][ T28] audit: type=1326 audit(1787329097.444:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1043.652993][ T28] audit: type=1326 audit(1787329097.444:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1043.686374][ T28] audit: type=1326 audit(1787329097.444:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1043.731418][ T28] audit: type=1326 audit(1787329097.444:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.1.3481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f18cf39e0d9 code=0x7ffc0000 [ 1043.889905][ T5140] udevd[5140]: worker [13535] /devices/virtual/block/nbd0 timeout; kill it [ 1043.908654][ T5140] udevd[5140]: seq 15189 '/devices/virtual/block/nbd0' killed [ 1046.292909][T17104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1048.313872][T17142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.321337][T17142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.337491][T17142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.345025][T17142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.514464][T17142] batadv0 (unregistering): left promiscuous mode [ 1051.030909][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 240 seconds [ 1051.048544][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 240 seconds [ 1051.061354][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 240 seconds [ 1052.636974][T17180] overlayfs: failed to clone upperpath [ 1053.093816][ T28] audit: type=1326 audit(1787329107.694:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.3516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1053.165116][ T28] audit: type=1326 audit(1787329107.694:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.3516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1053.242873][ T28] audit: type=1326 audit(1787329107.724:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.3516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1053.303035][ T28] audit: type=1326 audit(1787329107.734:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.3516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1053.398233][ T28] audit: type=1326 audit(1787329107.734:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.3516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1053.563088][ T28] audit: type=1326 audit(1787329107.734:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.3516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1053.803155][ T5764] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1053.813158][ T5764] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1053.838425][ T28] audit: type=1326 audit(1787329107.734:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.3516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1054.005926][ T28] audit: type=1326 audit(1787329107.734:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.3516" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1054.529949][T17207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1054.551219][T17207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1054.564791][T17207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1054.574989][T17207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1054.584260][T17207] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1054.591720][T17207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1054.974948][T17204] chnl_net:caif_netlink_parms(): no params data found [ 1054.979229][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.988381][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.345497][T17204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.369426][T17204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.389992][T17204] bridge_slave_0: entered allmulticast mode [ 1055.414082][T17204] bridge_slave_0: entered promiscuous mode [ 1055.450806][T17204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.462221][T17204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.475546][T17204] bridge_slave_1: entered allmulticast mode [ 1055.971123][T17204] bridge_slave_1: entered promiscuous mode [ 1056.446768][T17204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.476608][T17204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.588468][T17204] team0: Port device team_slave_0 added [ 1056.619205][T17204] team0: Port device team_slave_1 added [ 1056.659197][ T5790] Bluetooth: hci2: command tx timeout [ 1056.701128][T17204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.708206][T17204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.734348][T17204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.749314][T17204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.756412][T17204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.818072][T17204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.903762][T17204] hsr_slave_0: entered promiscuous mode [ 1056.913639][T17204] hsr_slave_1: entered promiscuous mode [ 1056.928277][T17204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.952387][T17204] Cannot create hsr debugfs directory [ 1057.325460][T17204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1057.716571][T17204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1057.883114][T17204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1057.979612][T17204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1058.248477][T17204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.272578][T17204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.288142][T15407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.295358][T15407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.335486][T17204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1058.360229][T17204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1058.511996][T17204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.615357][T15407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.622762][T15407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.732938][ T5790] Bluetooth: hci2: command tx timeout [ 1059.286318][T17204] veth0_vlan: entered promiscuous mode [ 1059.306235][T17204] veth1_vlan: entered promiscuous mode [ 1059.373546][T17204] veth0_macvtap: entered promiscuous mode [ 1059.406178][T17204] veth1_macvtap: entered promiscuous mode [ 1059.430953][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.448104][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.465610][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.486591][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.501228][T17204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.525292][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.546021][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.559493][T17204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.576017][T17204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.600481][T17204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.627752][T17204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.645606][T17204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.659855][T17204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.670601][T17204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.969196][T15409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.989905][T15409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.056813][T15407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.155229][T15409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.163688][T15409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.216008][T15407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.319611][ T5764] lg-g15 0003:046D:0A07.0014: item fetching failed at offset 19/20 [ 1060.330093][ T5764] lg-g15: probe of 0003:046D:0A07.0014 failed with error -22 [ 1060.340044][T15407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.488390][T17288] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1060.525457][T15407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.914480][ T5790] Bluetooth: hci2: command tx timeout [ 1061.997413][T17303] loop4: detected capacity change from 0 to 512 [ 1062.005372][T17303] EXT4-fs: Ignoring removed i_version option [ 1062.066275][T15407] bond1: (slave ip6gretap1): Releasing backup interface [ 1062.144244][T17303] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1062.277009][T17303] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1062.434800][T17303] Quota error (device loop4): write_blk: dquota write failed [ 1062.464628][T17303] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1062.489292][T17303] Quota error (device loop4): write_blk: dquota write failed [ 1062.510742][T17303] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1062.568021][T17303] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.3542: Failed to acquire dquot type 1 [ 1062.600927][T17303] EXT4-fs (loop4): 1 truncate cleaned up [ 1062.610947][T17303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.680585][T17303] Quota error (device loop4): write_blk: dquota write failed [ 1062.722514][T17303] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1062.834472][T17303] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.3542: Failed to acquire dquot type 1 [ 1062.948557][T17204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.987773][ T5790] Bluetooth: hci2: command tx timeout [ 1063.400096][T17326] netlink: 'syz.4.3543': attribute type 12 has an invalid length. [ 1063.859121][T15407] hsr_slave_0: left promiscuous mode [ 1063.913161][T15407] hsr_slave_1: left promiscuous mode [ 1063.928931][T15407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.948535][T15407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.975564][T15407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.756949][T15407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.945636][T15407] bridge_slave_1: left allmulticast mode [ 1064.997347][T15407] bridge_slave_1: left promiscuous mode [ 1065.029270][T15407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.144050][T15407] bridge_slave_0: left allmulticast mode [ 1065.167315][T15407] bridge_slave_0: left promiscuous mode [ 1065.177952][T17347] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1065.179658][T15407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.272034][T15407] veth1_macvtap: left promiscuous mode [ 1065.281529][T15407] veth0_macvtap: left promiscuous mode [ 1065.293043][T15407] veth1_vlan: left promiscuous mode [ 1065.305227][T15407] veth0_vlan: left promiscuous mode [ 1065.662148][T15407] bond4 (unregistering): Released all slaves [ 1065.710940][T15407] bond3 (unregistering): Released all slaves [ 1065.756181][T15407] bond2 (unregistering): Released all slaves [ 1065.818404][T15407] bond1 (unregistering): Released all slaves [ 1067.328402][T15407] team0 (unregistering): Port device team_slave_1 removed [ 1067.409675][T15407] team0 (unregistering): Port device team_slave_0 removed [ 1067.486244][T15407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.565226][T15407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.038948][ T1201] lg-g15 0003:046D:0A07.0015: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1068.066865][ T1201] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0015/input/input45 [ 1068.229378][T15407] bond0 (unregistering): Released all slaves [ 1068.425633][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1068.452777][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.462648][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.232667][T15407] IPVS: stop unused estimator thread 0... [ 1070.953240][T17409] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.3561'. [ 1073.826815][T17451] netlink: 'syz.4.3571': attribute type 72 has an invalid length. [ 1074.176061][T17207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1074.195192][T17207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1074.215362][T17207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1074.239433][T17207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1074.249441][T17207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1074.265686][T17207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1074.283191][ T5837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1074.503077][ T5837] usb 5-1: Using ep0 maxpacket: 8 [ 1074.546079][ T5837] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1074.576859][ T5837] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1074.596331][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.625269][ T5837] usb 5-1: Product: syz [ 1074.644927][ T5837] usb 5-1: Manufacturer: syz [ 1074.649660][ T5837] usb 5-1: SerialNumber: syz [ 1074.701983][ T5837] usb 5-1: config 0 descriptor?? [ 1074.764007][ T5837] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1074.792646][ T5837] usb 5-1: setting power ON [ 1074.798176][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 1074.914632][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1074.970968][ T5837] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1075.034107][ T5837] usb 5-1: media controller created [ 1075.089403][T17457] chnl_net:caif_netlink_parms(): no params data found [ 1075.110031][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1075.201085][ T5837] usb 5-1: selecting invalid altsetting 6 [ 1075.212869][ T5837] usb 5-1: digital interface selection failed (-22) [ 1075.224429][ T5837] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1075.255217][ T5837] usb 5-1: setting power OFF [ 1075.262363][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 1075.292823][ T5837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1075.302492][ T5837] (NULL device *): no alternate interface [ 1076.104912][ T5837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1076.144230][T17482] binder: 17480:17482 ioctl 40046205 0 returned -22 [ 1076.151801][T17457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.227642][ T5837] usb 5-1: USB disconnect, device number 2 [ 1076.242977][T17457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.253368][T17457] bridge_slave_0: entered allmulticast mode [ 1076.288938][T17457] bridge_slave_0: entered promiscuous mode [ 1076.325671][T17457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.333019][ T5790] Bluetooth: hci0: command tx timeout [ 1076.339628][T17487] binder: 17480:17487 ioctl 4c09 8 returned -22 [ 1076.359266][T17457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.379733][T17457] bridge_slave_1: entered allmulticast mode [ 1076.399503][T17457] bridge_slave_1: entered promiscuous mode [ 1076.543747][T17457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.580569][T17457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.741052][T17457] team0: Port device team_slave_0 added [ 1076.759309][T17457] team0: Port device team_slave_1 added [ 1076.762984][T17501] netlink: 'syz.4.3580': attribute type 72 has an invalid length. [ 1076.833543][T17457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.850857][T17457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.907369][T17457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.934663][T17457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.945121][T17457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.023354][T17457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.167549][T17457] hsr_slave_0: entered promiscuous mode [ 1077.217690][T17457] hsr_slave_1: entered promiscuous mode [ 1077.233824][T17457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.241571][T17457] Cannot create hsr debugfs directory [ 1077.670870][T17525] loop4: detected capacity change from 0 to 4096 [ 1077.782963][T17525] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1077.795313][T17457] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1077.836557][T17457] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1077.894309][T17457] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1077.928957][T17457] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1078.258922][T17457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.309033][T17457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.345222][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.352478][T13774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.412951][ T5790] Bluetooth: hci0: command tx timeout [ 1078.414837][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.426149][T13774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.137448][T17553] device-mapper: ioctl: Invalid ioctl structure: name mypoo, dev f801 [ 1079.234941][T17457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.736960][T17558] netlink: 'syz.0.3589': attribute type 72 has an invalid length. [ 1080.089593][T17457] veth0_vlan: entered promiscuous mode [ 1080.167758][T17457] veth1_vlan: entered promiscuous mode [ 1080.309764][T17457] veth0_macvtap: entered promiscuous mode [ 1080.329533][T17457] veth1_macvtap: entered promiscuous mode [ 1080.377826][T17457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.389819][T17457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.403529][T17457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.435754][T17457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.456146][T17457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.496365][ T5790] Bluetooth: hci0: command tx timeout [ 1080.512965][ T1201] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1080.528398][T17457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.539166][T17457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.549807][T17457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.569344][T17457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.591280][T17457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.624575][T17457] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.647092][T17457] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.657454][T17457] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.666428][T17457] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.734665][ T1201] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1080.754884][ T1201] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1080.771104][ T1201] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1080.801088][ T1201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1080.835900][ T1201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1080.893603][ T1201] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1080.942872][ T1201] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1080.961480][ T1201] usb 5-1: Product: syz [ 1080.971789][ T1201] usb 5-1: Manufacturer: syz [ 1080.976138][T13774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.011634][ T1201] cdc_wdm 5-1:1.0: skipping garbage [ 1081.017513][ T1201] cdc_wdm 5-1:1.0: skipping garbage [ 1081.054160][ T1201] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1081.060368][ T1201] cdc_wdm 5-1:1.0: Unknown control protocol [ 1081.070466][T13774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.235889][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.242685][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.250413][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.257025][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.263323][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.269920][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.276175][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.282788][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.289148][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.295748][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.302026][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.308710][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.317940][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.324550][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.332599][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.339246][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.345776][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.352379][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.358811][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1081.365463][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1081.372219][ T5837] usb 5-1: USB disconnect, device number 3 [ 1081.378132][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1081.451137][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 270 seconds [ 1081.462548][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 270 seconds [ 1081.473588][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 270 seconds [ 1081.502600][T15407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.526480][T15407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.573621][ T5790] Bluetooth: hci0: command tx timeout [ 1082.640667][T17640] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1085.054520][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1085.265253][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.283263][ T9] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1085.292474][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.319271][ T9] usb 5-1: config 0 descriptor?? [ 1087.084711][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1087.090795][ T9] usbhid: probe of 5-1:0.0 failed with error -71 [ 1087.099234][ T9] usb 5-1: USB disconnect, device number 4 [ 1087.220015][T17689] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3615'. [ 1087.351552][T17692] loop4: detected capacity change from 0 to 2048 [ 1087.473762][T17692] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1087.521315][T17692] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1087.559723][T17692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1089.157229][T17724] loop4: detected capacity change from 0 to 8 [ 1089.198912][T17724] SQUASHFS error: xz decompression failed, data probably corrupt [ 1089.207191][T17724] SQUASHFS error: Failed to read block 0x108: -5 [ 1089.213606][T17724] SQUASHFS error: Unable to read metadata cache entry [106] [ 1089.220896][T17724] SQUASHFS error: Unable to read inode 0x11f [ 1089.392569][T17726] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3626'. [ 1090.179376][T17736] jffs2: notice: (17736) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1092.550721][ T5790] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1096.473123][T17857] syz.3.3661 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1097.882035][ T5764] lg-g15 0003:046D:0A07.0016: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1097.902546][ T5764] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0016/input/input46 [ 1097.975199][T17866] loop4: detected capacity change from 0 to 32768 [ 1098.578746][T17866] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1098.933037][T17866] XFS (loop4): Ending clean mount [ 1098.957125][T17866] XFS (loop4): Quotacheck needed: Please wait. [ 1099.029731][T17896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1099.095121][T17866] XFS (loop4): Quotacheck: Done. [ 1099.398441][T17204] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1099.452291][T17905] veth1_to_bond: entered promiscuous mode [ 1099.461082][T17904] veth1_to_bond: left promiscuous mode [ 1099.507923][T17907] MPI: mpi too large (16392 bits) [ 1101.106598][ T28] audit: type=1326 audit(1787329155.704:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.143587][ T28] audit: type=1326 audit(1787329155.704:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.168261][ T28] audit: type=1326 audit(1787329155.724:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.212067][ T28] audit: type=1326 audit(1787329155.724:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.251742][ T28] audit: type=1326 audit(1787329155.724:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.280925][ T28] audit: type=1326 audit(1787329155.724:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.340518][ T28] audit: type=1326 audit(1787329155.724:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.390211][ T28] audit: type=1326 audit(1787329155.724:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.420517][ T28] audit: type=1326 audit(1787329155.724:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a0799dd6b code=0x7ffc0000 [ 1101.464151][ T28] audit: type=1326 audit(1787329155.724:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.3.3673" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0799e0d9 code=0x7ffc0000 [ 1101.601739][T17942] loop5: detected capacity change from 0 to 1024 [ 1101.658166][T17942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1101.696143][T17942] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1102.187344][ T23] lg-g15 0003:046D:0A07.0017: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1102.203002][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0017/input/input47 [ 1102.872842][T17457] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1102.890169][T17994] loop4: detected capacity change from 0 to 164 [ 1103.836296][T17999] mmap: syz.5.3686 (17999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1106.117782][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 1106.117824][ T28] audit: type=1326 audit(1787329160.714:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1106.497714][ T28] audit: type=1326 audit(1787329160.744:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1106.635220][ T28] audit: type=1326 audit(1787329160.744:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1106.823415][ T28] audit: type=1326 audit(1787329160.754:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1107.125320][ T28] audit: type=1326 audit(1787329160.754:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1107.156891][ T28] audit: type=1326 audit(1787329160.754:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1107.181639][ T28] audit: type=1326 audit(1787329160.754:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1107.270265][ T28] audit: type=1326 audit(1787329160.754:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1107.462536][ T28] audit: type=1326 audit(1787329160.764:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1107.770101][ T28] audit: type=1326 audit(1787329160.764:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18041 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f51bb95e90e code=0x7ffc0000 [ 1108.412119][T18065] loop4: detected capacity change from 0 to 4096 [ 1108.513040][T18065] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1108.604715][T18063] 9pnet_fd: Insufficient options for proto=fd [ 1108.862738][T18065] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1108.897858][T18065] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 1108.994501][T18065] ntfs3: Volume is dirty and "force" flag is not set! [ 1109.569230][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3712'. [ 1109.582285][T18087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.720511][T18087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.204637][T18090] overlayfs: failed to resolve './file0': -2 [ 1111.688631][T18121] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1112.097411][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 300 seconds [ 1112.111057][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 300 seconds [ 1112.137486][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 300 seconds [ 1112.550544][ T23] lg-g15 0003:046D:0A07.0018: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1112.611660][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0018/input/input48 [ 1112.956333][T18129] fido_id[18129]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1114.518992][T18123] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.529601][T18123] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.539352][T18123] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.549053][T18123] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.971624][T18145] loop4: detected capacity change from 0 to 64 [ 1115.023826][T18145] MINIX-fs: bad superblock [ 1116.335068][T18158] loop4: detected capacity change from 0 to 1024 [ 1116.418664][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.425670][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.447955][T18158] hfsplus: xattr searching failed [ 1116.482999][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 1116.483017][ T28] audit: type=1800 audit(1787329171.074:362): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3736" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 1116.894618][T18142] lg-g15 0003:046D:0A07.0019: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1116.928242][T18142] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0019/input/input49 [ 1118.226157][T18175] fido_id[18175]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1118.686662][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 1119.585659][T18203] SET target dimension over the limit! [ 1119.922863][ T5837] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1120.133021][ T5837] usb 6-1: device descriptor read/64, error -71 [ 1120.427453][T18207] loop4: detected capacity change from 0 to 256 [ 1120.482850][ T5837] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1121.442826][ T5837] usb 6-1: device descriptor read/64, error -71 [ 1121.574079][ T5837] usb usb6-port1: attempt power cycle [ 1121.878582][T18221] loop4: detected capacity change from 0 to 4096 [ 1121.893078][T18221] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1121.992878][ T5837] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1122.038247][ T5837] usb 6-1: device descriptor read/8, error -71 [ 1122.322838][ T5837] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1122.353699][ T5837] usb 6-1: device descriptor read/8, error -71 [ 1122.483076][ T5837] usb usb6-port1: unable to enumerate USB device [ 1123.434517][T18244] usb usb8: usbfs: process 18244 (syz.4.3765) did not claim interface 0 before use [ 1127.564432][T18279] syzkaller1: entered promiscuous mode [ 1127.582864][T18279] syzkaller1: entered allmulticast mode [ 1128.257251][T18295] netlink: 'syz.3.3786': attribute type 5 has an invalid length. [ 1128.635566][T18305] syz.4.3791 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 1128.647045][T18305] CPU: 0 PID: 18305 Comm: syz.4.3791 Not tainted syzkaller #0 [ 1128.654712][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1128.664886][T18305] Call Trace: [ 1128.668187][T18305] [ 1128.671160][T18305] dump_stack_lvl+0x18c/0x250 [ 1128.675902][T18305] ? show_regs_print_info+0x20/0x20 [ 1128.681242][T18305] ? load_image+0x420/0x420 [ 1128.685855][T18305] ? ___ratelimit+0x478/0x610 [ 1128.690587][T18305] ? radix_tree_cpu_dead+0x160/0x160 [ 1128.695932][T18305] dump_header+0xd8/0x820 [ 1128.700506][T18305] oom_kill_process+0x390/0x580 [ 1128.705592][T18305] out_of_memory+0xe0e/0x1200 [ 1128.710330][T18305] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1128.716153][T18305] ? mutex_lock_nested+0x20/0x20 [ 1128.721201][T18305] ? unregister_oom_notifier+0x20/0x20 [ 1128.726713][T18305] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1128.732313][T18305] ? try_charge_memcg+0xc91/0x17c0 [ 1128.737471][T18305] ? drain_local_stock+0x630/0x630 [ 1128.742742][T18305] ? do_raw_spin_unlock+0x121/0x230 [ 1128.748032][T18305] try_charge_memcg+0xca1/0x17c0 [ 1128.753061][T18305] ? folio_flags+0x120/0x120 [ 1128.757803][T18305] ? percpu_ref_tryget+0x15/0x180 [ 1128.762889][T18305] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1128.768725][T18305] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1128.774725][T18305] ? percpu_ref_tryget+0x15/0x180 [ 1128.779770][T18305] ? percpu_ref_tryget+0x15/0x180 [ 1128.784845][T18305] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1128.790609][T18305] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1128.796351][T18305] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1128.802408][T18305] obj_cgroup_charge+0x36e/0x630 [ 1128.807485][T18305] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1128.813407][T18305] ? obj_cgroup_charge+0xed/0x630 [ 1128.818451][T18305] ? mod_objcg_mlstate+0x320/0x320 [ 1128.823605][T18305] ? percpu_ref_tryget+0x15/0x180 [ 1128.828844][T18305] ? percpu_ref_tryget+0x15/0x180 [ 1128.833910][T18305] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1128.839830][T18305] slab_pre_alloc_hook+0x2e2/0x300 [ 1128.844985][T18305] ? kvmalloc_node+0x70/0x180 [ 1128.849700][T18305] ? kvmalloc_node+0x70/0x180 [ 1128.854487][T18305] __kmem_cache_alloc_node+0x53/0x250 [ 1128.859894][T18305] ? kvmalloc_node+0x70/0x180 [ 1128.864589][T18305] __kmalloc_node+0xa6/0x240 [ 1128.869206][T18305] kvmalloc_node+0x70/0x180 [ 1128.873749][T18305] alloc_fdtable+0x106/0x2c0 [ 1128.878541][T18305] dup_fd+0x747/0xa20 [ 1128.882555][T18305] ? apparmor_task_alloc+0x1bd/0x230 [ 1128.888014][T18305] copy_files+0xaf/0x110 [ 1128.892346][T18305] copy_process+0x157d/0x3da0 [ 1128.897061][T18305] ? plist_add+0x3db/0x490 [ 1128.901622][T18305] ? copy_process+0x98e/0x3da0 [ 1128.906415][T18305] ? futex_wait+0x4a7/0x5c0 [ 1128.910952][T18305] ? __pidfd_prepare+0x140/0x140 [ 1128.916266][T18305] kernel_clone+0x24b/0x8a0 [ 1128.920792][T18305] ? create_io_thread+0x190/0x190 [ 1128.925846][T18305] ? do_futex+0x2ff/0x3e0 [ 1128.930202][T18305] __x64_sys_clone+0x1b7/0x230 [ 1128.934992][T18305] ? __ia32_sys_vfork+0x140/0x140 [ 1128.940056][T18305] ? lock_chain_count+0x20/0x20 [ 1128.945194][T18305] ? lockdep_hardirqs_on+0x98/0x150 [ 1128.950437][T18305] do_syscall_64+0x55/0xb0 [ 1128.954875][T18305] ? clear_bhb_loop+0x40/0x90 [ 1128.959576][T18305] ? clear_bhb_loop+0x40/0x90 [ 1128.964274][T18305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.970188][T18305] RIP: 0033:0x7f907a39e0d9 [ 1128.974628][T18305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.994464][T18305] RSP: 002b:00007f907b25dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1129.003014][T18305] RAX: ffffffffffffffda RBX: 00007f907a625fa0 RCX: 00007f907a39e0d9 [ 1129.011010][T18305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1129.019001][T18305] RBP: 00007f907a435024 R08: 0000000000000000 R09: 0000000000000000 [ 1129.026991][T18305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1129.034977][T18305] R13: 00007f907a626038 R14: 00007f907a625fa0 R15: 00007ffc62cadd68 [ 1129.043079][T18305] [ 1129.108623][T18305] memory: usage 96kB, limit 96kB, failcnt 94 [ 1129.185508][T18305] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1129.203454][T11399] lg-g15 0003:046D:0A07.001A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1129.269423][T18305] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1129.283255][T18305] Memory cgroup stats for /syz4/test: [ 1129.283821][T18305] cache 0 [ 1129.306704][T18305] rss 0 [ 1129.309550][T18305] rss_huge 0 [ 1129.316859][T18305] shmem 0 [ 1129.319833][T18305] mapped_file 0 [ 1129.332627][T18305] dirty 0 [ 1129.336700][T18305] writeback 0 [ 1129.340053][T18305] workingset_refault_anon 0 [ 1129.347532][T18305] workingset_refault_file 0 [ 1129.352124][T18305] swap 0 [ 1129.355770][T18305] pgpgin 0 [ 1129.359268][T18305] pgpgout 0 [ 1129.362465][T18305] pgfault 11 [ 1129.367763][T18305] pgmajfault 0 [ 1129.371256][T18305] inactive_anon 0 [ 1129.375896][T18305] active_anon 0 [ 1129.381479][T18305] inactive_file 0 [ 1129.387422][T18305] active_file 0 [ 1129.391296][T18305] unevictable 0 [ 1129.395936][T18305] hierarchical_memory_limit 98304 [ 1129.401064][T18305] hierarchical_memsw_limit 9223372036854771712 [ 1129.414186][T18305] total_cache 0 [ 1129.417799][T18305] total_rss 0 [ 1129.421132][T18305] total_rss_huge 0 [ 1129.428141][T18305] total_shmem 0 [ 1129.431813][T18305] total_mapped_file 0 [ 1129.437995][T18305] total_dirty 0 [ 1129.441548][T18305] total_writeback 0 [ 1129.445969][T18305] total_workingset_refault_anon 0 [ 1129.459850][T18305] total_workingset_refault_file 0 [ 1129.465813][T18305] total_swap 0 [ 1129.469358][T18305] total_pgpgin 0 [ 1129.475388][T18305] total_pgpgout 0 [ 1129.480175][T18305] total_pgfault 11 [ 1129.485079][T18305] total_pgmajfault 0 [ 1129.489183][T18305] total_inactive_anon 0 [ 1129.495879][T18305] total_active_anon 0 [ 1129.499995][T18305] total_inactive_file 0 [ 1129.506309][T18305] total_active_file 0 [ 1129.510423][T18305] total_unevictable 0 [ 1129.520472][T18305] anon_cost 0 [ 1129.525530][T18305] file_cost 0 [ 1129.529238][T18305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.3791,pid=18304,uid=0 [ 1129.552278][T18305] Memory cgroup out of memory: Killed process 18304 (syz.4.3791) total-vm:102376kB, anon-rss:1372kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1129.599055][T11399] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001A/input/input50 [ 1130.250965][T18326] netlink: 'syz.3.3797': attribute type 39 has an invalid length. [ 1130.498528][T18334] syz_tun: entered allmulticast mode [ 1130.543783][T18333] syz_tun: left allmulticast mode [ 1131.436369][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'. [ 1131.478282][T18363] netlink: 'syz.4.3807': attribute type 7 has an invalid length. [ 1131.486224][T18363] netlink: 'syz.4.3807': attribute type 8 has an invalid length. [ 1131.495184][T18363] netlink: 'syz.4.3807': attribute type 13 has an invalid length. [ 1132.671142][T18381] loop5: detected capacity change from 0 to 7 [ 1132.700767][T18381] Dev loop5: unable to read RDB block 7 [ 1132.720077][T18381] loop5: unable to read partition table [ 1133.006401][T18381] loop5: partition table beyond EOD, truncated [ 1133.035666][T18381] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1133.647038][T18387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.654745][T18387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.679535][ T5140] Dev loop5: unable to read RDB block 7 [ 1133.689012][ T5140] loop5: unable to read partition table [ 1133.689114][T18402] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3818'. [ 1133.695581][ T5140] loop5: partition table beyond EOD, [ 1133.715742][T18402] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3818'. [ 1133.720930][ T5140] truncated [ 1135.012306][T18387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.059209][T18387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.367654][T18387] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.379717][T18387] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.399355][T18387] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.411817][T18387] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.746508][T18482] syzkaller0: entered promiscuous mode [ 1137.752565][T18482] syzkaller0: entered allmulticast mode [ 1139.720370][T18501] syz.4.3851 (18501): drop_caches: 2 [ 1140.340811][ T5838] lg-g15 0003:046D:0A07.001B: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1140.351497][ T5838] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001B/input/input51 [ 1142.676409][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 330 seconds [ 1142.688041][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 330 seconds [ 1142.699112][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 330 seconds [ 1144.875081][T18576] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3878'. [ 1145.443036][T14202] lg-g15 0003:046D:0A07.001C: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1145.461335][T14202] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001C/input/input52 [ 1145.641846][T17276] udevd[17276]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1146.190719][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3894'. [ 1148.345831][T14202] lg-g15 0003:046D:0A07.001D: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1148.369377][T14202] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001D/input/input53 [ 1148.686954][T18672] sctp: [Deprecated]: syz.5.3914 (pid 18672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1148.686954][T18672] Use struct sctp_sack_info instead [ 1149.337449][ T23] lg-g15 0003:046D:0A07.001E: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1149.356434][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001E/input/input54 [ 1150.489373][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3918'. [ 1150.991645][T18699] fuse: Bad value for 'fd' [ 1151.877563][T18711] netlink: 'syz.4.3927': attribute type 5 has an invalid length. [ 1152.318876][T18716] netlink: 'syz.5.3928': attribute type 39 has an invalid length. [ 1153.312950][T18724] netlink: 'syz.5.3929': attribute type 7 has an invalid length. [ 1153.352920][T18724] netlink: 'syz.5.3929': attribute type 8 has an invalid length. [ 1153.360784][T18724] netlink: 'syz.5.3929': attribute type 13 has an invalid length. [ 1153.427800][ T23] lg-g15 0003:046D:0A07.001F: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1153.451915][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.001F/input/input55 [ 1153.534920][T18731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3931'. [ 1155.097321][ T23] lg-g15 0003:046D:0A07.0020: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1155.112523][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0020/input/input56 [ 1155.828682][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3939'. [ 1156.233034][ T23] IPVS: starting estimator thread 0... [ 1156.322983][T18769] IPVS: using max 14 ests per chain, 33600 per kthread [ 1156.994485][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1157.018327][ T23] IPVS: starting estimator thread 0... [ 1157.132926][T18787] IPVS: using max 17 ests per chain, 40800 per kthread [ 1157.860500][T18789] netlink: 'syz.5.3946': attribute type 5 has an invalid length. [ 1158.095950][T18791] netlink: 'syz.4.3947': attribute type 39 has an invalid length. [ 1158.405609][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3949'. [ 1159.003515][ T28] audit: type=1326 audit(1787329213.264:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.027765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.242714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1159.663586][ T28] audit: type=1326 audit(1787329213.264:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.691045][ T28] audit: type=1326 audit(1787329213.274:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.698084][T18806] netlink: 'syz.3.3950': attribute type 7 has an invalid length. [ 1159.731560][ T28] audit: type=1326 audit(1787329213.274:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.732807][T18806] netlink: 'syz.3.3950': attribute type 8 has an invalid length. [ 1159.768787][ T28] audit: type=1326 audit(1787329213.274:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.774595][T18806] netlink: 'syz.3.3950': attribute type 13 has an invalid length. [ 1159.798350][ T28] audit: type=1326 audit(1787329213.274:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.828491][ T28] audit: type=1326 audit(1787329213.274:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.858109][ T28] audit: type=1326 audit(1787329213.274:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.886616][ T28] audit: type=1326 audit(1787329213.274:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1159.914951][ T28] audit: type=1326 audit(1787329213.274:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.4.3959" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f907a39e0d9 code=0x7ffc0000 [ 1160.167059][T18808] loop5: detected capacity change from 0 to 256 [ 1163.975942][ T5790] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1164.129719][T14202] lg-g15 0003:046D:0A07.0021: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1164.151172][T14202] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0021/input/input57 [ 1165.619701][T18840] fido_id[18840]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1167.953743][T14202] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1168.241614][T14202] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1168.251334][T14202] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1168.283572][T14202] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1168.311512][T14202] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1168.325219][T14202] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1168.345763][T14202] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1168.355593][T14202] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1168.364658][T14202] usb 6-1: Product: syz [ 1168.369258][T14202] usb 6-1: Manufacturer: syz [ 1168.506090][T14202] cdc_wdm 6-1:1.0: skipping garbage [ 1168.511967][T14202] cdc_wdm 6-1:1.0: skipping garbage [ 1168.540039][T14202] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1168.546264][T14202] cdc_wdm 6-1:1.0: Unknown control protocol [ 1168.767462][ C1] wdm_int_callback: 1 callbacks suppressed [ 1168.767476][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1168.780286][ C1] wdm_int_callback: 1 callbacks suppressed [ 1168.780300][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1168.793557][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1168.800274][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1168.806932][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1168.813582][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1168.819985][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1168.826732][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1168.833051][T14202] usb 6-1: USB disconnect, device number 6 [ 1168.833126][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1168.846125][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1168.852511][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1169.026140][ T5790] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1171.462436][T18907] loop5: detected capacity change from 0 to 512 [ 1171.483689][T18905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.492331][T18905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.983268][T18907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.208006][T18907] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.800920][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 360 seconds [ 1172.815847][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 360 seconds [ 1172.826999][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 360 seconds [ 1174.814468][T17457] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.464344][T18932] binder: 18930:18932 ioctl 4018620d 0 returned -22 [ 1176.660966][T18935] loop4: detected capacity change from 0 to 32768 [ 1176.684420][T18935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3991 (18935) [ 1176.720213][T18935] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1176.743434][T18935] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1176.752171][T18935] BTRFS info (device loop4): turning on sync discard [ 1176.760754][T18935] BTRFS info (device loop4): using free space tree [ 1176.962492][T18935] BTRFS info (device loop4): enabling ssd optimizations [ 1177.904779][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.933893][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.413440][T17204] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1180.054354][T17207] Bluetooth: hci2: command 0x0406 tx timeout [ 1180.996314][ T5790] Bluetooth: hci2: unexpected event for opcode 0x000e [ 1181.692411][T19022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.700160][T19022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.950050][T19022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1184.005431][T19022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.288516][T17272] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1185.314007][T17272] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1185.600598][T19036] fido_id[19036]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1188.818421][T19069] loop5: detected capacity change from 0 to 32768 [ 1188.834399][T19069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4024 (19069) [ 1188.905280][T19069] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1188.931984][T19069] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1188.954709][T19069] BTRFS info (device loop5): turning on sync discard [ 1188.964315][T19069] BTRFS info (device loop5): using free space tree [ 1189.077668][T19069] BTRFS info (device loop5): enabling ssd optimizations [ 1189.902302][T17457] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1189.990981][ T5790] Bluetooth: hci1: unexpected event for opcode 0x000e [ 1190.261597][T14202] lg-g15 0003:046D:0A07.0023: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1190.307769][T14202] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0023/input/input58 [ 1190.314603][T17272] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1190.507543][T17272] hid-generic 0000:0000:0000.0024: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1193.535607][T19123] loop5: detected capacity change from 0 to 4096 [ 1193.563361][T19123] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1195.046218][T19135] netlink: 'syz.0.4038': attribute type 5 has an invalid length. [ 1195.136347][T19132] netlink: 'syz.5.4039': attribute type 39 has an invalid length. [ 1196.278102][T19156] loop5: detected capacity change from 0 to 4096 [ 1196.312722][T19156] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1196.663831][T19172] netlink: 'syz.3.4054': attribute type 5 has an invalid length. [ 1197.008033][T19178] netlink: 'syz.5.4057': attribute type 39 has an invalid length. [ 1197.899979][T19210] netlink: 'syz.3.4069': attribute type 39 has an invalid length. [ 1198.020426][T19181] netlink: 'syz.0.4043': attribute type 7 has an invalid length. [ 1198.275907][T19181] netlink: 'syz.0.4043': attribute type 8 has an invalid length. [ 1198.286160][T19181] netlink: 'syz.0.4043': attribute type 13 has an invalid length. [ 1199.075149][T19238] netlink: 'syz.3.4081': attribute type 39 has an invalid length. [ 1199.111649][T19237] loop4: detected capacity change from 0 to 4096 [ 1199.136368][T19237] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1199.806826][T19253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4089'. [ 1199.899957][T19256] netlink: 'syz.4.4090': attribute type 39 has an invalid length. [ 1200.084854][T19260] loop5: detected capacity change from 0 to 4096 [ 1200.106665][T19260] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1200.427512][T17207] Bluetooth: hci0: command 0x0406 tx timeout [ 1200.741700][T19275] netlink: 'syz.5.4098': attribute type 5 has an invalid length. [ 1201.056231][T19281] netlink: 'syz.3.4101': attribute type 39 has an invalid length. [ 1202.090800][T19294] sctp: [Deprecated]: syz.4.4107 (pid 19294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1202.090800][T19294] Use struct sctp_sack_info instead [ 1202.231653][T19300] netlink: 'syz.4.4108': attribute type 5 has an invalid length. [ 1202.467215][T19304] netlink: 'syz.4.4110': attribute type 39 has an invalid length. [ 1203.265404][T19319] sctp: [Deprecated]: syz.4.4117 (pid 19319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1203.265404][T19319] Use struct sctp_sack_info instead [ 1203.472937][T14003] block nbd0: Possible stuck request ffff888021e90400: control (read@2048,2048B). Runtime 390 seconds [ 1203.488627][T14003] block nbd0: Possible stuck request ffff888021e90000: control (read@0,1024B). Runtime 390 seconds [ 1203.505145][T14003] block nbd0: Possible stuck request ffff888021e90200: control (read@1024,1024B). Runtime 390 seconds [ 1203.850963][T19328] netlink: 'syz.4.4121': attribute type 39 has an invalid length. [ 1204.457042][T19343] loop5: detected capacity change from 0 to 32768 [ 1204.476772][T19343] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.4127 (19343) [ 1204.501567][T19343] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1204.543991][T19343] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1204.561207][T19343] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1204.577623][T14202] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1204.590607][T19343] BTRFS info (device loop5): use zstd compression, level 3 [ 1204.610045][T19343] BTRFS info (device loop5): using free space tree [ 1204.669859][T19343] BTRFS info (device loop5): enabling ssd optimizations [ 1204.685018][T19343] BTRFS info (device loop5): auto enabling async discard [ 1204.761773][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 1204.761792][ T28] audit: type=1800 audit(1787329259.354:433): pid=19343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4127" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 1204.849977][ T28] audit: type=1800 audit(1787329259.394:434): pid=19343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4127" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 1204.862115][T14202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1204.883101][T14202] usb 5-1: not running at top speed; connect to a high speed hub [ 1204.912204][T14202] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.944591][T14202] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1205.016166][T14202] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice=e7.3f [ 1205.029905][T14202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.044995][T14202] usb 5-1: Product: syz [ 1205.052145][T14202] usb 5-1: Manufacturer: syz [ 1205.118860][T14202] usb 5-1: SerialNumber: syz [ 1205.225467][T17457] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1205.532834][T14202] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu [ 1205.562954][T14202] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1205.894432][T14202] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1205.977864][T14202] usb 5-1: USB disconnect, device number 5 [ 1206.013011][ T29] INFO: task udevd:13535 blocked for more than 144 seconds. [ 1206.052886][ T29] Not tainted syzkaller #0 [ 1206.098853][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1206.121559][T13985] udevd[13985]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1206.188857][ T29] task:udevd state:D stack:22760 pid:13535 ppid:5140 flags:0x00004006 [ 1206.226044][ T29] Call Trace: [ 1206.229985][ T29] [ 1206.251775][ T29] __schedule+0x15ae/0x4660 [ 1206.277762][ T29] ? asan.module_dtor+0x20/0x20 [ 1206.313425][ T29] ? mark_lock+0x94/0x320 [ 1206.318428][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 1206.369062][ T29] ? lock_chain_count+0x20/0x20 [ 1206.396833][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1206.409926][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1206.423479][ T29] schedule+0xbd/0x170 [ 1206.435080][ T29] io_schedule+0x80/0xd0 [ 1206.447369][ T29] folio_wait_bit_common+0x881/0xfa0 [ 1206.461018][ T29] ? folio_wait_bit+0x30/0x30 [ 1206.466046][ T29] ? _compound_head+0x120/0x120 [ 1206.473285][ T29] ? filemap_add_folio+0x190/0x3d0 [ 1206.479925][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 1206.493363][ T29] ? blkdev_writepage+0x30/0x30 [ 1206.499276][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 1206.513011][ T29] ? blkdev_writepage+0x30/0x30 [ 1206.518465][ T29] read_part_sector+0xd2/0x350 [ 1206.533099][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 1206.539037][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 1206.553156][ T29] ? put_partition+0x360/0x360 [ 1206.559387][ T29] ? alloc_pages+0x4e1/0x740 [ 1206.573607][ T29] bdev_disk_changed+0x755/0x1450 [ 1206.580076][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1206.589296][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 1206.596020][ T29] ? iput+0x33f/0x900 [ 1206.600336][ T29] blkdev_get_whole+0x30d/0x390 [ 1206.606662][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 1206.612908][ T29] blkdev_open+0x14e/0x360 [ 1206.618111][ T29] do_dentry_open+0x880/0x14b0 [ 1206.623195][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1206.629249][ T29] path_openat+0x284f/0x3270 [ 1206.635537][ T29] ? do_sys_openat2+0xda/0x1d0 [ 1206.641577][ T29] ? __x64_sys_openat+0x139/0x160 [ 1206.648463][ T29] ? verify_lock_unused+0x140/0x140 [ 1206.660015][ T29] ? do_filp_open+0x430/0x430 [ 1206.665124][ T29] do_filp_open+0x1f2/0x430 [ 1206.671669][ T29] ? vfs_tmpfile+0x620/0x620 [ 1206.680678][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1206.686982][ T29] ? alloc_fd+0x590/0x640 [ 1206.692797][ T29] do_sys_openat2+0x134/0x1d0 [ 1206.698902][ T29] ? do_sys_open+0xe0/0xe0 [ 1206.705505][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1206.712490][ T29] ? lock_chain_count+0x20/0x20 [ 1206.717756][ T29] __x64_sys_openat+0x139/0x160 [ 1206.724153][ T29] do_syscall_64+0x55/0xb0 [ 1206.731027][ T29] ? clear_bhb_loop+0x40/0x90 [ 1206.736257][ T29] ? clear_bhb_loop+0x40/0x90 [ 1206.741903][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1206.748918][ T29] RIP: 0033:0x7fd736ca7407 [ 1206.753928][ T29] RSP: 002b:00007ffde3ebd500 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1206.764067][ T29] RAX: ffffffffffffffda RBX: 00007fd737386880 RCX: 00007fd736ca7407 [ 1206.773263][ T29] RDX: 00000000000a0800 RSI: 000055f71277c7c0 RDI: ffffffffffffff9c [ 1206.784038][ T29] RBP: 000055f712764910 R08: 0000000000000000 R09: 0000000000000000 [ 1206.793830][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f712777e20 [ 1206.802040][ T29] R13: 000055f71277c410 R14: 0000000000000000 R15: 000055f712777e20 [ 1206.811629][ T29] [ 1206.822820][ T29] INFO: task syz.1.3532:17249 blocked for more than 144 seconds. [ 1206.831980][ T29] Not tainted syzkaller #0 [ 1206.842809][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1206.852160][ T29] task:syz.1.3532 state:D stack:27304 pid:17249 ppid:13061 flags:0x00004006 [ 1206.864370][ T29] Call Trace: [ 1206.867844][ T29] [ 1206.871266][ T29] __schedule+0x15ae/0x4660 [ 1206.876633][ T29] ? asan.module_dtor+0x20/0x20 [ 1206.881810][ T29] ? __mutex_lock+0x66e/0xc80 [ 1206.886959][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1206.892997][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1206.899725][ T29] schedule+0xbd/0x170 [ 1206.904084][ T29] schedule_preempt_disabled+0x13/0x20 [ 1206.909679][ T29] __mutex_lock+0x673/0xc80 [ 1206.914511][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1206.919261][ T29] ? sync_bdevs+0x1a4/0x320 [ 1206.924189][ T29] ? mutex_lock_nested+0x20/0x20 [ 1206.929188][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 1206.936333][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 1206.942966][ T29] ? iput+0x33f/0x900 [ 1206.947444][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1206.953091][ T29] sync_bdevs+0x1a4/0x320 [ 1206.958796][ T29] ksys_sync+0xc6/0x170 [ 1206.965377][ T29] ? sync_filesystem+0x220/0x220 [ 1206.970682][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 1206.976983][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1206.982441][ T29] __ia32_sys_sync+0xe/0x20 [ 1206.987276][ T29] do_syscall_64+0x55/0xb0 [ 1206.991785][ T29] ? clear_bhb_loop+0x40/0x90 [ 1206.997111][ T29] ? clear_bhb_loop+0x40/0x90 [ 1207.001949][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1207.008849][ T29] RIP: 0033:0x7f18cf39e0d9 [ 1207.014319][ T29] RSP: 002b:00007f18d0264028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1207.023138][ T29] RAX: ffffffffffffffda RBX: 00007f18cf625fa0 RCX: 00007f18cf39e0d9 [ 1207.031469][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1207.040251][ T29] RBP: 00007f18cf625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.048554][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.057237][ T29] R13: 00007f18cf626038 R14: 00007f18cf625fa0 R15: 00007ffe12017a68 [ 1207.067798][ T29] [ 1207.090477][ T29] [ 1207.090477][ T29] Showing all locks held in the system: [ 1207.099749][ T29] 1 lock held by pool_workqueue_/3: [ 1207.105293][ T29] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1207.116242][ T29] 1 lock held by khungtaskd/29: [ 1207.121340][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1207.133117][ T29] 1 lock held by syslogd/5122: [ 1207.138939][ T29] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1207.150392][ T29] 2 locks held by getty/5531: [ 1207.155302][ T29] #0: ffff8880307420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1207.166319][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 1207.176824][ T29] 1 lock held by udevd/13535: [ 1207.181615][ T29] #0: ffff888021dd74c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 1207.193321][ T29] 1 lock held by syz.1.3532/17249: [ 1207.199173][ T29] #0: ffff888021dd74c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a4/0x320 [ 1207.211418][ T29] [ 1207.214546][ T29] ============================================= [ 1207.214546][ T29] [ 1207.223457][ T29] NMI backtrace for cpu 1 [ 1207.229185][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1207.237220][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.248993][ T29] Call Trace: [ 1207.252625][ T29] [ 1207.255994][ T29] dump_stack_lvl+0x18c/0x250 [ 1207.261585][ T29] ? __wake_up_klogd+0xd9/0x100 [ 1207.267633][ T29] ? show_regs_print_info+0x20/0x20 [ 1207.275255][ T29] ? load_image+0x420/0x420 [ 1207.280434][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1207.287199][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1207.293883][ T29] ? load_image+0x420/0x420 [ 1207.298519][ T29] ? wq_watchdog_touch+0xef/0x170 [ 1207.303615][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1207.310034][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1207.316165][ T29] watchdog+0xf59/0xfa0 [ 1207.320584][ T29] ? watchdog+0x1e1/0xfa0 [ 1207.326389][ T29] kthread+0x2fa/0x390 [ 1207.331733][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1207.339328][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1207.346476][ T29] ret_from_fork+0x48/0x80 [ 1207.351915][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1207.357508][ T29] ret_from_fork_asm+0x11/0x20 [ 1207.364122][ T29] [ 1207.369438][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1207.378434][ C0] NMI backtrace for cpu 0 [ 1207.378447][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1207.378463][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.378471][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1207.378500][ C0] Code: 19 1a 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 e5 38 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 1207.378513][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 1207.378527][ C0] RAX: 6fd19077e0c3a900 RBX: ffffffff81630d54 RCX: 6fd19077e0c3a900 [ 1207.378539][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32a0 [ 1207.378549][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 1207.378560][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 1207.378571][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1207.378581][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1207.378594][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1207.378605][ C0] CR2: 00007f84d5bed158 CR3: 0000000074c09000 CR4: 00000000003506f0 [ 1207.378621][ C0] Call Trace: [ 1207.378627][ C0] [ 1207.378632][ C0] default_idle+0x13/0x20 [ 1207.378651][ C0] default_idle_call+0x6c/0xa0 [ 1207.378672][ C0] do_idle+0x334/0x5c0 [ 1207.378703][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1207.378720][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1207.378746][ C0] cpu_startup_entry+0x43/0x60 [ 1207.378763][ C0] rest_init+0x2e2/0x300 [ 1207.378776][ C0] ? time_init+0x40/0x40 [ 1207.378882][ C0] arch_call_rest_init+0xe/0x10 [ 1207.378899][ C0] start_kernel+0x461/0x4e0 [ 1207.378914][ C0] x86_64_start_reservations+0x2a/0x30 [ 1207.378936][ C0] x86_64_start_kernel+0x60/0x60 [ 1207.378955][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1207.378982][ C0] [ 1207.412927][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1207.412945][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1207.412965][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.412976][ T29] Call Trace: [ 1207.412985][ T29] [ 1207.412994][ T29] dump_stack_lvl+0x18c/0x250 [ 1207.413027][ T29] ? show_regs_print_info+0x20/0x20 [ 1207.413058][ T29] ? load_image+0x420/0x420 [ 1207.413090][ T29] panic+0x2ca/0x720 [ 1207.413121][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1207.413144][ T29] ? nmi_backtrace_stall_check+0x41e/0x430 [ 1207.413197][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1207.413240][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1207.413275][ T29] watchdog+0xf98/0xfa0 [ 1207.413307][ T29] ? watchdog+0x1e1/0xfa0 [ 1207.413338][ T29] kthread+0x2fa/0x390 [ 1207.413357][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1207.413381][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1207.413400][ T29] ret_from_fork+0x48/0x80 [ 1207.413421][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1207.413441][ T29] ret_from_fork_asm+0x11/0x20 [ 1207.413476][ T29] [ 1207.419869][ T29] Kernel Offset: disabled [ 1207.757118][ T29] Rebooting in 86400 seconds..