last executing test programs: 5.071759005s ago: executing program 4 (id=1388): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 5.068099055s ago: executing program 2 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x2890400, &(0x7f0000000140)={[{@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@userxattr}]}) chdir(&(0x7f00000000c0)='./bus\x00') bind(0xffffffffffffffff, &(0x7f0000000480)=@in={0x2, 0x4e24, @local}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) 4.954491506s ago: executing program 4 (id=1390): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = getpid() r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 4.338025056s ago: executing program 1 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.02043927s ago: executing program 2 (id=1398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) 3.889430612s ago: executing program 2 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) setrlimit(0xf, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x76, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") setsockopt$sock_int(r1, 0x1, 0x23, 0x0, 0x0) clock_gettime(0xb, &(0x7f0000000040)) 3.826217753s ago: executing program 1 (id=1402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.881128097s ago: executing program 4 (id=1404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) 2.660909551s ago: executing program 4 (id=1405): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000480)={[&(0x7f0000000600)='\x00\xf3\x84\xe3vF/\xfa\xd8\xb7wNh\xff\x9c\xacr\x85\x9eQ\xe6\xbdD \x1f\xeb\xca\xc1\xf8\xfe\xd60A\xc4\xbe\x1d:\x8d\x84@o/\x9e.rhy\xc7\xd9\xf0\x0e\fPRL?\xbc\xc6\xf0\x957\xd3\xacx\xd9 \xc7\x99i^*\x8e{\x13\af$\x13\x9c\x7fCNS\xe5\xfe6@\xd7r\xc6\xcf\xd7x\xc3,^\xbd\xc2\xd8\x1e\x19\t\xde\xc0\x8a\x1e\xc2\x8c\xee)\xf7\xad\xd4\xce\x03\n\xed', &(0x7f00000003c0)='\x00\x00\xb73\xd1\x15\xfd\x9bau \x19\xba\xe5m\x06\xd0\x00\x00\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='{\\/[(!,#!2)\x00']}, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 2.553917952s ago: executing program 3 (id=1407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 2.553747662s ago: executing program 1 (id=1408): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x2890400, &(0x7f0000000140)={[{@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@userxattr}]}) chdir(&(0x7f00000000c0)='./bus\x00') bind(0xffffffffffffffff, &(0x7f0000000480)=@in={0x2, 0x4e24, @local}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) 2.276017646s ago: executing program 0 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "8a5d8e158de7ae443f099d3e507629cf08cf7768d36f6d31", "b306a0641bf7b7fe195d088b1b67dd7f62e46291655998789904796aa356b688"}}}}}}}}, 0x82) 2.223913707s ago: executing program 3 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000004}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 1.938468712s ago: executing program 3 (id=1411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x57a}]}}}}}}}}, 0x0) 1.925826032s ago: executing program 4 (id=1412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.755979204s ago: executing program 3 (id=1413): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x4, 0x0, 0x400, 0x8}, 0x10) 1.754633364s ago: executing program 0 (id=1414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={0x0, r0}, 0x18) 1.616361436s ago: executing program 2 (id=1415): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.552387967s ago: executing program 4 (id=1416): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1, 0x0, 0x5}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 1.482425168s ago: executing program 0 (id=1417): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.471861039s ago: executing program 0 (id=1418): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000440)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 1.426898149s ago: executing program 3 (id=1419): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c872e100e8ffffff850000000700000002c70000004002002d37f0fffcffffff"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x5, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0xa}, {0x3, 0x3, 0x8, 0xb}, {0x0, 0x2, 0x6, 0x6}, {0x4, 0x5, 0x9, 0x5}, {0x5, 0x1, 0x10, 0x1}, {0x2, 0x4, 0xd, 0xc}, {0x4, 0x1, 0xb, 0x4}, {0x1, 0x2, 0x10, 0xb}, {0x1, 0x5, 0xd, 0xc}, {0x3, 0x2, 0x0, 0xb}], 0x10, 0x3, @void, @value}, 0x94) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 1.278409571s ago: executing program 0 (id=1420): syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r0}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1.275677641s ago: executing program 2 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0x0) 1.157733313s ago: executing program 3 (id=1422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='signal_generate\x00', r0, 0x0, 0x1fc}, 0x18) timer_create(0x2, 0x0, &(0x7f0000000100)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x10, 0x100c93a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="62c3ae4dc5a1141164c8afda1c5110cdaa55c6eb8a612218af5da443136bc2377ba2cb02d0d860c2fbe36996ad537801fc93e6c70fa6caf17319bb42e82544f4e66caf91702e6e7193d5305a30dca18ab0ad50512ec3e361e43fbc7baf55fac7308fc693123e6a54a6c145c716aa086d81d9de79d821902a5da25f70963e66e9791e38df6fa31ef7576113ab2ade04f28599527a75b3c3ed2616", @ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}, {{&(0x7f0000000580)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) rseq(&(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x6, 0xb, 0x100, 0xfffffffffffffffc}, 0x2}, 0x20, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r6, 0xa49a, 0x30}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x0, 0x200038e3, 0x40, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, 0x80, 0x7800, 0x4, 0x2}}) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000740)={0x8, &(0x7f0000000680)=[{0x8, 0xa, 0xbb, 0x40}, {0x8000, 0x43, 0x9}, {0xc, 0x9, 0x20, 0x350}, {0x100, 0x4, 0x2, 0x4}, {0x6283, 0x7, 0x7, 0x2000}, {0xea7, 0xb, 0xf7, 0x1}, {0x5, 0xf, 0x9, 0x9}, {0xd, 0x2a, 0xe, 0x7}]}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.054466765s ago: executing program 1 (id=1423): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) setregid(0x0, 0x0) 1.002230075s ago: executing program 0 (id=1424): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) 1.001887765s ago: executing program 2 (id=1425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) setrlimit(0xf, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x76, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") setsockopt$sock_int(r1, 0x1, 0x23, 0x0, 0x0) clock_gettime(0xb, &(0x7f0000000040)) 940.617686ms ago: executing program 1 (id=1426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$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") kernel console output (not intermixed with test programs): loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.347185][ T6230] 9pnet_fd: Insufficient options for proto=fd [ 167.359949][ T4312] block nbd2: Receive control failed (result -32) [ 167.363046][ T6218] block nbd2: shutting down sockets [ 167.540530][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.564300][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.881299][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 167.900455][ T6242] loop2: detected capacity change from 0 to 7 [ 167.924422][ T6242] ldm_validate_partition_table(): Disk read failed. [ 167.930982][ T6242] Dev loop2: unable to read RDB block 0 [ 167.936146][ T6242] loop2: unable to read partition table [ 167.938301][ T6242] loop2: partition table beyond EOD, truncated [ 167.940082][ T6242] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.872211][ T6252] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 170.646602][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.661'. [ 170.659267][ T6276] loop2: detected capacity change from 0 to 7 [ 172.085176][ C0] blk_print_req_error: 55 callbacks suppressed [ 172.085192][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.089925][ C0] buffer_io_error: 55 callbacks suppressed [ 172.089936][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.102576][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.104628][ T4312] block nbd2: Receive control failed (result -32) [ 172.105690][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.109959][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.112509][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.115246][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.115982][ T6272] block nbd2: shutting down sockets [ 172.117765][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.138557][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.141160][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.152781][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.155372][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.158010][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.160645][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.162819][ T6276] ldm_validate_partition_table(): Disk read failed. [ 172.174975][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.177686][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.180470][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.183152][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.186581][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 172.189253][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 172.191538][ T6276] Dev loop2: unable to read RDB block 0 [ 172.208004][ T6276] loop2: unable to read partition table [ 172.209745][ T6276] loop2: partition table beyond EOD, truncated [ 172.211480][ T6276] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.413691][ T6287] 9pnet_fd: Insufficient options for proto=fd [ 172.801856][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.668'. [ 172.814398][ T6298] loop2: detected capacity change from 0 to 7 [ 173.636375][ T6299] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 174.177587][ T6298] ldm_validate_partition_table(): Disk read failed. [ 174.184446][ T6298] Dev loop2: unable to read RDB block 0 [ 174.186564][ T6298] loop2: unable to read partition table [ 174.188302][ T6298] loop2: partition table beyond EOD, truncated [ 174.190029][ T6298] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.288589][ T6303] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 174.325664][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.328132][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.571183][ T6305] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.574032][ T6305] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 175.309335][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.312146][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.500115][ T6314] block nbd0: shutting down sockets [ 175.743370][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'. [ 175.765010][ T6321] loop2: detected capacity change from 0 to 7 [ 175.865127][ T6321] ldm_validate_partition_table(): Disk read failed. [ 175.872179][ T6321] Dev loop2: unable to read RDB block 0 [ 175.879254][ T6321] loop2: unable to read partition table [ 175.879947][ T6321] loop2: partition table beyond EOD, truncated [ 175.880080][ T6321] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.395987][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.680'. [ 176.524960][ T6330] 9pnet_fd: Insufficient options for proto=fd [ 176.853509][ T6336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.685'. [ 176.871884][ T6336] loop2: detected capacity change from 0 to 7 [ 176.948311][ T6336] ldm_validate_partition_table(): Disk read failed. [ 176.955036][ T6336] Dev loop2: unable to read RDB block 0 [ 176.960850][ T6336] loop2: unable to read partition table [ 176.963282][ T6336] loop2: partition table beyond EOD, truncated [ 176.965081][ T6336] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.093220][ T6355] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.096053][ T6355] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 179.385416][ T4312] block nbd2: Receive control failed (result -32) [ 179.388791][ T6346] block nbd2: shutting down sockets [ 179.512127][ T4312] Bluetooth: hci4: command 0x0406 tx timeout [ 179.682374][ T110] lo speed is unknown, defaulting to 1000 [ 179.697596][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.702963][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.813746][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 180.094310][ T6370] loop2: detected capacity change from 0 to 7 [ 180.119162][ C1] blk_print_req_error: 55 callbacks suppressed [ 180.119176][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.123364][ C1] buffer_io_error: 55 callbacks suppressed [ 180.123374][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.282799][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.285584][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.583586][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.586188][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.617565][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.620140][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.634053][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.636536][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.638857][ T6369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.694'. [ 180.641861][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.644450][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.646711][ T6370] ldm_validate_partition_table(): Disk read failed. [ 180.646768][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.651143][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.653462][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.656051][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.659065][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.661641][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.668973][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 180.671684][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 180.674066][ T6370] Dev loop2: unable to read RDB block 0 [ 180.683386][ T6370] loop2: unable to read partition table [ 180.685233][ T6370] loop2: partition table beyond EOD, truncated [ 180.687105][ T6370] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.903168][ T6380] device syzkaller1 entered promiscuous mode [ 181.178903][ T6386] loop2: detected capacity change from 0 to 7 [ 181.300703][ T6386] ldm_validate_partition_table(): Disk read failed. [ 181.320011][ T6386] Dev loop2: unable to read RDB block 0 [ 181.332266][ T6386] loop2: unable to read partition table [ 181.334787][ T6386] loop2: partition table beyond EOD, truncated [ 181.336675][ T6386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.693414][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.699'. [ 181.870794][ T6399] 9pnet_fd: Insufficient options for proto=fd [ 182.912900][ T6402] block nbd1: shutting down sockets [ 183.472182][ T6422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.716'. [ 183.500228][ T6422] loop2: detected capacity change from 0 to 7 [ 183.536592][ T6422] ldm_validate_partition_table(): Disk read failed. [ 183.543753][ T6422] Dev loop2: unable to read RDB block 0 [ 183.549050][ T6422] loop2: unable to read partition table [ 183.551646][ T6422] loop2: partition table beyond EOD, truncated [ 183.553794][ T6422] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.209733][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.713'. [ 184.213554][ T6423] loop2: detected capacity change from 0 to 7 [ 184.217265][ T6423] ldm_validate_partition_table(): Disk read failed. [ 184.219678][ T6423] Dev loop2: unable to read RDB block 0 [ 184.221681][ T6423] loop2: unable to read partition table [ 184.223298][ T6423] loop2: partition table beyond EOD, truncated [ 184.225167][ T6423] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.364178][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.379045][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.599394][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.727'. [ 184.620456][ T6431] loop2: detected capacity change from 0 to 7 [ 184.783398][ T6431] ldm_validate_partition_table(): Disk read failed. [ 184.790047][ T6431] Dev loop2: unable to read RDB block 0 [ 184.794916][ T6431] loop2: unable to read partition table [ 184.797305][ T6431] loop2: partition table beyond EOD, truncated [ 184.799175][ T6431] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.373526][ T6435] device syzkaller1 entered promiscuous mode [ 185.416415][ T6437] 9pnet_fd: Insufficient options for proto=fd [ 185.993213][ T6448] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 185.996187][ T6448] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 186.934557][ T4303] block nbd3: Receive control failed (result -32) [ 186.936919][ T6447] block nbd3: shutting down sockets [ 186.970802][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.732'. [ 187.009770][ T6465] 9pnet_fd: Insufficient options for proto=fd [ 187.587950][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.594040][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.278724][ T6490] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.281474][ T6490] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 189.428149][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'. [ 189.486153][ T6498] 9pnet_fd: Insufficient options for proto=fd [ 189.588526][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.745'. [ 189.797096][ T6461] loop2: detected capacity change from 0 to 7 [ 189.800301][ C0] blk_print_req_error: 70 callbacks suppressed [ 189.800314][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.804672][ C0] buffer_io_error: 70 callbacks suppressed [ 189.804682][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.814070][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.816734][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.834339][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.837150][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.858128][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.860664][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.874319][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.876986][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.888661][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.891353][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.900278][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.902846][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.908391][ T4636] ldm_validate_partition_table(): Disk read failed. [ 189.916152][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.918850][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.929830][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.932329][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.943150][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.945805][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 189.960344][ T4636] Dev loop2: unable to read RDB block 0 [ 189.962801][ T4636] loop2: unable to read partition table [ 189.965564][ T4636] loop2: partition table beyond EOD, truncated [ 190.083043][ T6461] ldm_validate_partition_table(): Disk read failed. [ 190.094578][ T6461] Dev loop2: unable to read RDB block 0 [ 190.103067][ T6461] loop2: unable to read partition table [ 190.112979][ T4303] block nbd2: Receive control failed (result -32) [ 190.115701][ T6495] block nbd2: shutting down sockets [ 190.155327][ T6461] loop2: partition table beyond EOD, truncated [ 190.157100][ T6461] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.537680][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 190.558826][ T6513] loop2: detected capacity change from 0 to 7 [ 190.675256][ T6513] ldm_validate_partition_table(): Disk read failed. [ 190.680233][ T6513] Dev loop2: unable to read RDB block 0 [ 190.685521][ T6513] loop2: unable to read partition table [ 190.687915][ T6513] loop2: partition table beyond EOD, truncated [ 190.689817][ T6513] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.464521][ T6525] 9pnet_fd: Insufficient options for proto=fd [ 191.520960][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.756'. [ 193.418776][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.761'. [ 193.422521][ T6546] loop2: detected capacity change from 0 to 7 [ 193.425536][ T6546] ldm_validate_partition_table(): Disk read failed. [ 193.427911][ T6546] Dev loop2: unable to read RDB block 0 [ 193.429968][ T6546] loop2: unable to read partition table [ 193.431617][ T6546] loop2: partition table beyond EOD, truncated [ 193.433409][ T6546] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.127292][ T4303] block nbd1: Receive control failed (result -32) [ 194.129934][ T6538] block nbd1: shutting down sockets [ 194.645627][ T6555] loop2: detected capacity change from 0 to 7 [ 194.674283][ T6555] ldm_validate_partition_table(): Disk read failed. [ 194.681561][ T6555] Dev loop2: unable to read RDB block 0 [ 194.691387][ T6555] loop2: unable to read partition table [ 194.693800][ T6555] loop2: partition table beyond EOD, truncated [ 194.695607][ T6555] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.224313][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.762'. [ 196.155370][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.773'. [ 196.177036][ T6587] loop2: detected capacity change from 0 to 7 [ 196.190785][ C1] blk_print_req_error: 70 callbacks suppressed [ 196.190798][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.190824][ C1] buffer_io_error: 70 callbacks suppressed [ 196.190831][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.217808][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.220895][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.299778][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.302508][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.573956][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.576584][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.751475][ T4303] block nbd4: Receive control failed (result -32) [ 196.753794][ T6582] block nbd4: shutting down sockets [ 196.794381][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.797197][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.822869][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.825627][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.834235][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.836877][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.839336][ T6587] ldm_validate_partition_table(): Disk read failed. [ 196.864275][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.866886][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.879702][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.882451][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.904056][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.906834][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 196.909328][ T6587] Dev loop2: unable to read RDB block 0 [ 196.927160][ T6587] loop2: unable to read partition table [ 196.928873][ T6587] loop2: partition table beyond EOD, truncated [ 196.930698][ T6587] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.459572][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.778'. [ 198.463272][ T6615] loop2: detected capacity change from 0 to 7 [ 198.466542][ T6615] ldm_validate_partition_table(): Disk read failed. [ 198.468998][ T6615] Dev loop2: unable to read RDB block 0 [ 198.471173][ T6615] loop2: unable to read partition table [ 198.472808][ T6615] loop2: partition table beyond EOD, truncated [ 198.474642][ T6615] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.939997][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.790'. [ 198.961803][ T6629] loop2: detected capacity change from 0 to 7 [ 199.000228][ T6629] ldm_validate_partition_table(): Disk read failed. [ 199.007279][ T6629] Dev loop2: unable to read RDB block 0 [ 199.014086][ T6629] loop2: unable to read partition table [ 199.016415][ T6629] loop2: partition table beyond EOD, truncated [ 199.018192][ T6629] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.542005][ T4303] block nbd1: Receive control failed (result -32) [ 199.545136][ T6617] block nbd1: shutting down sockets [ 201.448298][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.806'. [ 201.468480][ T6671] loop2: detected capacity change from 0 to 7 [ 201.627184][ C1] blk_print_req_error: 40 callbacks suppressed [ 201.627201][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 201.631383][ C1] buffer_io_error: 40 callbacks suppressed [ 201.631394][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 201.700450][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 201.703210][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 201.910798][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 201.913489][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.034279][ T4303] block nbd4: Receive control failed (result -32) [ 202.036621][ T6664] block nbd4: shutting down sockets [ 202.066158][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 202.068755][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.103767][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 202.106607][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.114411][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 202.116916][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.129507][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 202.132158][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.134505][ T6671] ldm_validate_partition_table(): Disk read failed. [ 202.139703][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 202.142375][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.149753][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 202.152200][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.159313][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 202.161969][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.165212][ T6671] Dev loop2: unable to read RDB block 0 [ 202.177175][ T6671] loop2: unable to read partition table [ 202.179089][ T6671] loop2: partition table beyond EOD, truncated [ 202.180752][ T6671] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.536408][ T6689] binder: 6688:6689 tried to acquire reference to desc 0, got 1 instead [ 202.546709][ T6689] binder: cannot allocate buffer: no space left [ 202.549049][ T6689] binder: 6688:6689 transaction async to 6688:0 failed 7/29201/-28, size 5234-0 line 3239 [ 202.596090][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.086134][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 203.109405][ T6703] loop2: detected capacity change from 0 to 7 [ 203.388368][ T6703] ldm_validate_partition_table(): Disk read failed. [ 203.410044][ T6703] Dev loop2: unable to read RDB block 0 [ 203.426503][ T6703] loop2: unable to read partition table [ 203.428871][ T6703] loop2: partition table beyond EOD, truncated [ 203.430693][ T6703] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.815332][ T6705] block nbd2: shutting down sockets [ 204.115882][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.820'. [ 204.134343][ T6716] loop2: detected capacity change from 0 to 7 [ 204.160120][ T6716] ldm_validate_partition_table(): Disk read failed. [ 204.167057][ T6716] Dev loop2: unable to read RDB block 0 [ 204.171353][ T6716] loop2: unable to read partition table [ 204.173703][ T6716] loop2: partition table beyond EOD, truncated [ 204.175543][ T6716] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.035910][ T6734] binder: tried to use weak ref as strong ref [ 205.043593][ T6734] binder: 6732:6734 Acquire 1 refcount change on invalid ref 0 ret -22 [ 205.052655][ T6734] binder: 6732:6734 got transaction to invalid handle, 1 [ 205.077236][ T6734] binder: 6734:6732 cannot find target node [ 205.078906][ T6734] binder: 6732:6734 transaction async to 0:0 failed 10/29201/-22, size 5234-0 line 3054 [ 205.092510][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.494762][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.831'. [ 205.516140][ T6745] loop2: detected capacity change from 0 to 7 [ 205.674926][ T6745] ldm_validate_partition_table(): Disk read failed. [ 205.679586][ T6745] Dev loop2: unable to read RDB block 0 [ 205.684535][ T6745] loop2: unable to read partition table [ 205.687038][ T6745] loop2: partition table beyond EOD, truncated [ 205.688840][ T6745] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.145134][ T6742] block nbd2: shutting down sockets [ 206.619961][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'. [ 206.658119][ T6761] loop2: detected capacity change from 0 to 7 [ 206.705448][ C1] blk_print_req_error: 50 callbacks suppressed [ 206.705464][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 206.709700][ C1] buffer_io_error: 50 callbacks suppressed [ 206.709710][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 206.826329][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 206.828951][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.000536][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.003259][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.248554][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.251172][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.262482][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.265282][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.306518][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.309123][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.311366][ T6761] ldm_validate_partition_table(): Disk read failed. [ 207.313580][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.316246][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.321431][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.324003][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.328404][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.330960][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.343576][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.346224][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 207.348814][ T6761] Dev loop2: unable to read RDB block 0 [ 207.352113][ T6761] loop2: unable to read partition table [ 207.353815][ T6761] loop2: partition table beyond EOD, truncated [ 207.355588][ T6761] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.486145][ T6774] binder: tried to use weak ref as strong ref [ 207.488517][ T6774] binder: 6772:6774 Acquire 1 refcount change on invalid ref 0 ret -22 [ 207.530061][ T6774] binder: 6772:6774 got transaction to invalid handle, 1 [ 207.532003][ T6774] binder: 6774:6772 cannot find target node [ 207.533614][ T6774] binder: 6772:6774 transaction async to 0:0 failed 13/29201/-22, size 5234-0 line 3054 [ 207.554649][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.632704][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'. [ 207.695396][ T6781] block nbd4: shutting down sockets [ 208.911500][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 208.924536][ T6798] loop2: detected capacity change from 0 to 7 [ 209.418189][ T6798] ldm_validate_partition_table(): Disk read failed. [ 209.420580][ T6798] Dev loop2: unable to read RDB block 0 [ 209.422659][ T6798] loop2: unable to read partition table [ 209.424436][ T6798] loop2: partition table beyond EOD, truncated [ 209.426116][ T6798] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.925384][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.852'. [ 209.946215][ T6809] loop2: detected capacity change from 0 to 7 [ 210.091882][ T6809] ldm_validate_partition_table(): Disk read failed. [ 210.101979][ T6809] Dev loop2: unable to read RDB block 0 [ 210.113014][ T6809] loop2: unable to read partition table [ 210.115409][ T6809] loop2: partition table beyond EOD, truncated [ 210.117276][ T6809] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.643598][ T6813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.856'. [ 210.648131][ T6814] binder: tried to use weak ref as strong ref [ 210.649863][ T6814] binder: 6810:6814 Acquire 1 refcount change on invalid ref 0 ret -22 [ 210.679025][ T6814] binder: 6810:6814 got transaction to invalid handle, 1 [ 210.681102][ T6814] binder: 6814:6810 cannot find target node [ 210.682735][ T6814] binder: 6810:6814 transaction async to 0:0 failed 16/29201/-22, size 5234-0 line 3054 [ 210.721468][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.815049][ T6817] block nbd0: shutting down sockets [ 211.867502][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.864'. [ 211.879862][ T6838] loop2: detected capacity change from 0 to 7 [ 212.433330][ C1] blk_print_req_error: 35 callbacks suppressed [ 212.433353][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.437773][ C1] buffer_io_error: 35 callbacks suppressed [ 212.437784][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.460854][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.463396][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.466064][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.468612][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.514137][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.516702][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.521921][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.524506][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.526754][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.529399][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.531916][ T6838] ldm_validate_partition_table(): Disk read failed. [ 212.548915][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.551542][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.554329][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.556945][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.579159][ T6845] binder: 6844:6845 got transaction to invalid handle, 1 [ 212.581262][ T6845] binder: 6845:6844 cannot find target node [ 212.582944][ T6845] binder: 6844:6845 transaction async to 0:0 failed 20/29201/-22, size 5234-0 line 3054 [ 212.594578][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.664804][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'. [ 212.701791][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.704621][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.720186][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 212.722791][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 212.725495][ T6838] Dev loop2: unable to read RDB block 0 [ 212.728302][ T6838] loop2: unable to read partition table [ 212.730015][ T6838] loop2: partition table beyond EOD, truncated [ 212.731835][ T6838] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.737627][ T6849] netlink: 68 bytes leftover after parsing attributes in process `syz.3.871'. [ 212.781410][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 213.007526][ T6852] ALSA: mixer_oss: invalid OSS volume '' [ 213.198535][ T6849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.485616][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.867'. [ 213.494197][ T6864] loop2: detected capacity change from 0 to 7 [ 213.714592][ T6864] ldm_validate_partition_table(): Disk read failed. [ 213.720212][ T6864] Dev loop2: unable to read RDB block 0 [ 213.724920][ T6864] loop2: unable to read partition table [ 213.727301][ T6864] loop2: partition table beyond EOD, truncated [ 213.729141][ T6864] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 215.110520][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.882'. [ 215.135188][ T6883] binder: 6875:6883 got transaction to invalid handle, 1 [ 215.137609][ T6883] binder: 6883:6875 cannot find target node [ 215.139252][ T6883] binder: 6875:6883 transaction async to 0:0 failed 24/29201/-22, size 5234-0 line 3054 [ 215.152855][ T4424] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.623244][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.883'. [ 215.656737][ T6895] loop2: detected capacity change from 0 to 7 [ 215.728893][ T6895] ldm_validate_partition_table(): Disk read failed. [ 215.734058][ T6895] Dev loop2: unable to read RDB block 0 [ 215.748585][ T6895] loop2: unable to read partition table [ 215.751035][ T6895] loop2: partition table beyond EOD, truncated [ 215.752823][ T6895] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 216.824620][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'. [ 216.845089][ T6904] loop2: detected capacity change from 0 to 7 [ 216.881904][ T6904] ldm_validate_partition_table(): Disk read failed. [ 216.890265][ T6904] Dev loop2: unable to read RDB block 0 [ 216.902098][ T6904] loop2: unable to read partition table [ 216.904411][ T6904] loop2: partition table beyond EOD, truncated [ 216.906173][ T6904] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.622600][ T6914] binder: 6910:6914 got transaction to invalid handle, 1 [ 217.623845][ T6909] netlink: 68 bytes leftover after parsing attributes in process `syz.1.891'. [ 217.634864][ T6914] binder: 6914:6910 cannot find target node [ 217.636588][ T6914] binder: 6910:6914 transaction async to 0:0 failed 28/29201/-22, size 5234-0 line 3054 [ 217.762423][ T6917] ALSA: mixer_oss: invalid OSS volume '' [ 217.881847][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 217.885116][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.898598][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.004876][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.895'. [ 218.180232][ T6925] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(º«‰ [ 218.180232][ T6925] Â[©Çw²´Ž—Ù׌Ùâ [ 219.385848][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.899'. [ 219.399644][ T6935] loop2: detected capacity change from 0 to 7 [ 220.341327][ C1] blk_print_req_error: 50 callbacks suppressed [ 220.341344][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.345714][ C1] buffer_io_error: 50 callbacks suppressed [ 220.345726][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.369188][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.371811][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.404890][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.407482][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.410375][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.412965][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.454923][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.457578][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.487625][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.490191][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.518017][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.520584][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.523151][ T6935] ldm_validate_partition_table(): Disk read failed. [ 220.564102][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.566698][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.579936][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.582482][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.605415][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 220.607995][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 220.611601][ T6935] Dev loop2: unable to read RDB block 0 [ 220.782732][ T6935] loop2: unable to read partition table [ 220.784559][ T6935] loop2: partition table beyond EOD, truncated [ 220.786210][ T6935] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.033399][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.903'. [ 221.054637][ T6951] loop2: detected capacity change from 0 to 7 [ 221.092487][ T6951] ldm_validate_partition_table(): Disk read failed. [ 221.098676][ T6951] Dev loop2: unable to read RDB block 0 [ 221.103185][ T6951] loop2: unable to read partition table [ 221.105623][ T6951] loop2: partition table beyond EOD, truncated [ 221.107455][ T6951] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.878853][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.908'. [ 221.902083][ T6961] binder: tried to use weak ref as strong ref [ 221.926687][ T6961] binder: 6960:6961 Acquire 1 refcount change on invalid ref 0 ret -22 [ 221.942121][ T6961] binder: 6960:6961 got transaction to invalid handle, 1 [ 221.956998][ T6961] binder: 6961:6960 cannot find target node [ 221.958642][ T6961] binder: 6960:6961 transaction async to 0:0 failed 31/29201/-22, size 5234-0 line 3054 [ 221.994387][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.223367][ T6973] netlink: 308 bytes leftover after parsing attributes in process `syz.3.914'. [ 222.392600][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.400827][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.531660][ T6981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.915'. [ 223.553370][ T6981] loop2: detected capacity change from 0 to 7 [ 223.681307][ T6981] ldm_validate_partition_table(): Disk read failed. [ 223.688726][ T6981] Dev loop2: unable to read RDB block 0 [ 223.702650][ T6981] loop2: unable to read partition table [ 223.705047][ T6981] loop2: partition table beyond EOD, truncated [ 223.706847][ T6981] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.362607][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.917'. [ 224.382606][ T6987] loop2: detected capacity change from 0 to 7 [ 224.523610][ T6987] ldm_validate_partition_table(): Disk read failed. [ 224.531323][ T6987] Dev loop2: unable to read RDB block 0 [ 224.540300][ T6987] loop2: unable to read partition table [ 224.542705][ T6987] loop2: partition table beyond EOD, truncated [ 224.544553][ T6987] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.153551][ T4303] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 225.211923][ T7001] binder: tried to use weak ref as strong ref [ 225.213604][ T7001] binder: 6999:7001 Acquire 1 refcount change on invalid ref 0 ret -22 [ 225.216565][ T7001] binder: 6999:7001 got transaction to invalid handle, 1 [ 225.218975][ T7001] binder: 7001:6999 cannot find target node [ 225.221735][ T7001] binder: 6999:7001 transaction async to 0:0 failed 34/29201/-22, size 5234-0 line 3054 [ 225.225912][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.543124][ T7021] 9pnet_fd: Insufficient options for proto=fd [ 227.257176][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.928'. [ 227.260929][ T7020] loop2: detected capacity change from 0 to 7 [ 227.267228][ C1] blk_print_req_error: 50 callbacks suppressed [ 227.267241][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.271385][ C1] buffer_io_error: 50 callbacks suppressed [ 227.271394][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.282661][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.285234][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.298391][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.300976][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.313167][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.315918][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.334441][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.337108][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.358628][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.361238][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.397823][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.400429][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.402614][ T7020] ldm_validate_partition_table(): Disk read failed. [ 227.411889][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.414389][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.420445][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.429104][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.431533][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.434310][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.446668][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 227.449300][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 227.466909][ T7020] Dev loop2: unable to read RDB block 0 [ 227.469500][ T7020] loop2: unable to read partition table [ 227.471137][ T7020] loop2: partition table beyond EOD, truncated [ 227.472906][ T7020] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.115464][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.931'. [ 228.134741][ T7037] loop2: detected capacity change from 0 to 7 [ 228.164621][ T7037] ldm_validate_partition_table(): Disk read failed. [ 228.170307][ T7037] Dev loop2: unable to read RDB block 0 [ 228.181061][ T7037] loop2: unable to read partition table [ 228.183481][ T7037] loop2: partition table beyond EOD, truncated [ 228.185376][ T7037] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.932218][ T7048] 9pnet_fd: Insufficient options for proto=fd [ 229.565071][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.942'. [ 229.585345][ T7066] loop2: detected capacity change from 0 to 7 [ 229.689001][ T7066] ldm_validate_partition_table(): Disk read failed. [ 229.696056][ T7066] Dev loop2: unable to read RDB block 0 [ 229.701494][ T7066] loop2: unable to read partition table [ 229.703759][ T7066] loop2: partition table beyond EOD, truncated [ 229.705566][ T7066] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.563958][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 230.584640][ T7075] loop2: detected capacity change from 0 to 7 [ 230.612128][ T7075] ldm_validate_partition_table(): Disk read failed. [ 230.617703][ T7075] Dev loop2: unable to read RDB block 0 [ 230.623078][ T7075] loop2: unable to read partition table [ 230.625580][ T7075] loop2: partition table beyond EOD, truncated [ 230.627394][ T7075] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.430606][ T7082] 9pnet_fd: Insufficient options for proto=fd [ 233.224815][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.958'. [ 233.244483][ T7109] loop2: detected capacity change from 0 to 7 [ 233.312787][ C1] blk_print_req_error: 55 callbacks suppressed [ 233.312804][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.317367][ C1] buffer_io_error: 55 callbacks suppressed [ 233.317379][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.444150][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.446912][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.646418][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.649145][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.837301][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.839992][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.854094][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.856644][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.859075][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.861522][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.867746][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.870374][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.872626][ T7109] ldm_validate_partition_table(): Disk read failed. [ 233.904127][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.906737][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.914087][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.916663][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.919099][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 233.921744][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 233.924389][ T7109] Dev loop2: unable to read RDB block 0 [ 233.926821][ T7109] loop2: unable to read partition table [ 233.928508][ T7109] loop2: partition table beyond EOD, truncated [ 233.930261][ T7109] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 234.264962][ T7119] 9pnet_fd: Insufficient options for proto=fd [ 234.739332][ T7124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.960'. [ 234.761271][ T7124] loop2: detected capacity change from 0 to 7 [ 235.060386][ T7124] ldm_validate_partition_table(): Disk read failed. [ 235.062831][ T7124] Dev loop2: unable to read RDB block 0 [ 235.064955][ T7124] loop2: unable to read partition table [ 235.066602][ T7124] loop2: partition table beyond EOD, truncated [ 235.068393][ T7124] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.181704][ T27] audit: type=1326 audit(235.150:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.3.968" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x0 [ 235.618047][ T7143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.972'. [ 235.736850][ T24] Process accounting resumed [ 236.442934][ T7156] binder: tried to use weak ref as strong ref [ 236.454250][ T7156] binder: 7155:7156 Acquire 1 refcount change on invalid ref 0 ret -22 [ 236.464747][ T7156] binder: 7155:7156 got transaction to invalid handle, 1 [ 236.467259][ T7156] binder: 7156:7155 cannot find target node [ 236.468850][ T7156] binder: 7155:7156 transaction async to 0:0 failed 37/29201/-22, size 5234-0 line 3054 [ 236.484685][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.836234][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 236.855614][ T7167] loop2: detected capacity change from 0 to 7 [ 236.982746][ T7167] ldm_validate_partition_table(): Disk read failed. [ 236.992919][ T7167] Dev loop2: unable to read RDB block 0 [ 237.000858][ T7167] loop2: unable to read partition table [ 237.003209][ T7167] loop2: partition table beyond EOD, truncated [ 237.005025][ T7167] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.064902][ T7192] binder: tried to use weak ref as strong ref [ 238.066647][ T7192] binder: 7191:7192 Acquire 1 refcount change on invalid ref 0 ret -22 [ 238.084831][ T7192] binder: 7191:7192 got transaction to invalid handle, 1 [ 238.086799][ T7192] binder: 7192:7191 cannot find target node [ 238.088405][ T7192] binder: 7191:7192 transaction async to 0:0 failed 40/29201/-22, size 5234-0 line 3054 [ 238.111926][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.788424][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'. [ 238.809431][ T7210] loop2: detected capacity change from 0 to 7 [ 238.890978][ C1] blk_print_req_error: 40 callbacks suppressed [ 238.890996][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 238.895444][ C1] buffer_io_error: 40 callbacks suppressed [ 238.895454][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.017565][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.020161][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.171313][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.174033][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.401814][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.404458][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.415083][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.417763][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.429138][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.431869][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.444102][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.446814][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.449458][ T7210] ldm_validate_partition_table(): Disk read failed. [ 239.456931][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.459615][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.467873][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.470524][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.475227][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 239.477868][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 239.480232][ T7210] Dev loop2: unable to read RDB block 0 [ 239.486513][ T7210] loop2: unable to read partition table [ 239.488275][ T7210] loop2: partition table beyond EOD, truncated [ 239.490063][ T7210] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.576765][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.579440][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.020708][ T7226] binder: tried to use weak ref as strong ref [ 241.030168][ T7226] binder: 7225:7226 Acquire 1 refcount change on invalid ref 0 ret -22 [ 241.035648][ T7226] binder: 7225:7226 got transaction to invalid handle, 1 [ 241.041160][ T7226] binder: 7226:7225 cannot find target node [ 241.045585][ T7226] binder: 7225:7226 transaction async to 0:0 failed 43/29201/-22, size 5234-0 line 3054 [ 241.052442][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.526682][ T27] audit: type=1326 audit(243.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5a7a8 code=0x7ffc0000 [ 243.540745][ T27] audit: type=1326 audit(243.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff86b5a7a8 code=0x7ffc0000 [ 243.553605][ T27] audit: type=1326 audit(243.510:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7243 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b5a7a8 code=0x7ffc0000 [ 243.835828][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 243.858531][ T7248] loop2: detected capacity change from 0 to 7 [ 243.886387][ T7248] ldm_validate_partition_table(): Disk read failed. [ 243.894340][ C1] blk_print_req_error: 14 callbacks suppressed [ 243.894366][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 243.953395][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 243.956081][ C1] buffer_io_error: 15 callbacks suppressed [ 243.956092][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 243.960681][ T7248] Dev loop2: unable to read RDB block 0 [ 244.230928][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 244.233655][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 244.437602][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 244.440480][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 244.463342][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 244.466194][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 244.468986][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 244.471600][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 244.474267][ T7248] loop2: unable to read partition table [ 244.475947][ T7248] loop2: partition table beyond EOD, truncated [ 244.477687][ T7248] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.544078][ T4303] Bluetooth: hci4: command 0x0405 tx timeout [ 246.511656][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 246.564828][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 248.339580][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'. [ 248.361791][ T7324] loop2: detected capacity change from 0 to 7 [ 248.475917][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 248.478624][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 248.537003][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 248.540002][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 248.745667][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 248.748271][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 248.958109][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 248.960624][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 248.965009][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.966836][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.977691][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 248.980484][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 248.983026][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 248.985695][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 248.988626][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 248.991188][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 248.993497][ T7324] ldm_validate_partition_table(): Disk read failed. [ 248.994981][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 248.996043][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 249.000284][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 249.006709][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 249.009198][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 249.011755][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 249.014316][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 249.016795][ T7324] Dev loop2: unable to read RDB block 0 [ 249.017370][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 249.020880][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 249.023193][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 249.025807][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 249.034103][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 249.036796][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 249.049775][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 249.052301][ T7324] loop2: unable to read partition table [ 249.054054][ T7324] loop2: partition table beyond EOD, truncated [ 249.055870][ T7324] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.864413][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1039'. [ 250.885603][ T7372] loop2: detected capacity change from 0 to 7 [ 250.922112][ T7372] ldm_validate_partition_table(): Disk read failed. [ 250.929988][ T7372] Dev loop2: unable to read RDB block 0 [ 250.943861][ T7372] loop2: unable to read partition table [ 250.946327][ T7372] loop2: partition table beyond EOD, truncated [ 250.948191][ T7372] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.934925][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1047'. [ 251.952766][ T7384] loop2: detected capacity change from 0 to 7 [ 252.099254][ T7384] ldm_validate_partition_table(): Disk read failed. [ 252.107061][ T7384] Dev loop2: unable to read RDB block 0 [ 252.112803][ T7384] loop2: unable to read partition table [ 252.113585][ T7384] loop2: partition table beyond EOD, truncated [ 252.113692][ T7384] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 253.216953][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.230771][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.817491][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.821751][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.271367][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1058'. [ 254.332955][ T7414] loop2: detected capacity change from 0 to 7 [ 254.498023][ C1] blk_print_req_error: 37 callbacks suppressed [ 254.498040][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.502266][ C1] buffer_io_error: 36 callbacks suppressed [ 254.502276][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 254.679127][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.681773][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 254.887060][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.889714][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 254.903622][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.906231][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 254.920958][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.923542][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 254.936707][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.939474][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 254.959512][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.962130][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 254.964790][ T7414] ldm_validate_partition_table(): Disk read failed. [ 254.973331][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.975960][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 254.994437][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 254.997052][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 255.113501][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 255.116248][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 255.118553][ T7414] Dev loop2: unable to read RDB block 0 [ 255.135845][ T7414] loop2: unable to read partition table [ 255.137655][ T7414] loop2: partition table beyond EOD, truncated [ 255.139326][ T7414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 255.330233][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 255.352798][ T7421] loop2: detected capacity change from 0 to 7 [ 255.528570][ T7421] ldm_validate_partition_table(): Disk read failed. [ 255.540559][ T7421] Dev loop2: unable to read RDB block 0 [ 255.549671][ T7421] loop2: unable to read partition table [ 255.552072][ T7421] loop2: partition table beyond EOD, truncated [ 255.553958][ T7421] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.857005][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.870258][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.931412][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 257.136363][ T7458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.180920][ T7458] bond0: (slave rose0): Enslaving as an active interface with an up link [ 257.195455][ T5957] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 257.569252][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1075'. [ 257.620920][ T7467] loop2: detected capacity change from 0 to 7 [ 257.679916][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1076'. [ 258.357591][ T7467] ldm_validate_partition_table(): Disk read failed. [ 258.367598][ T7467] Dev loop2: unable to read RDB block 0 [ 258.377211][ T7467] loop2: unable to read partition table [ 258.379321][ T7467] loop2: partition table beyond EOD, truncated [ 258.381144][ T7467] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 260.798138][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1089'. [ 260.807277][ T7519] loop2: detected capacity change from 0 to 7 [ 260.914850][ C1] blk_print_req_error: 40 callbacks suppressed [ 260.914868][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 260.919300][ C1] buffer_io_error: 40 callbacks suppressed [ 260.919311][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 260.926601][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 260.929391][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.027748][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 261.030333][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.474422][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 261.477002][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.492181][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 261.494738][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.502634][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 261.505227][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.507640][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 261.510132][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.512412][ T7519] ldm_validate_partition_table(): Disk read failed. [ 261.514387][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 261.516903][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.524231][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 261.526766][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.545367][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 261.547907][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 261.561905][ T7519] Dev loop2: unable to read RDB block 0 [ 261.564457][ T7519] loop2: unable to read partition table [ 261.566134][ T7519] loop2: partition table beyond EOD, truncated [ 261.567829][ T7519] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.913955][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1090'. [ 261.937676][ T7530] loop2: detected capacity change from 0 to 7 [ 262.268084][ T7530] ldm_validate_partition_table(): Disk read failed. [ 262.273778][ T7530] Dev loop2: unable to read RDB block 0 [ 262.279915][ T7530] loop2: unable to read partition table [ 262.282400][ T7530] loop2: partition table beyond EOD, truncated [ 262.284177][ T7530] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.333321][ T7577] loop2: detected capacity change from 0 to 256 [ 263.440209][ T7577] FAT-fs (loop2): Directory bread(block 64) failed [ 263.442462][ T7577] FAT-fs (loop2): Directory bread(block 65) failed [ 263.458970][ T7577] FAT-fs (loop2): Directory bread(block 66) failed [ 263.460834][ T7577] FAT-fs (loop2): Directory bread(block 67) failed [ 263.462713][ T7577] FAT-fs (loop2): Directory bread(block 68) failed [ 263.483234][ T7577] FAT-fs (loop2): Directory bread(block 69) failed [ 263.489425][ T7577] FAT-fs (loop2): Directory bread(block 70) failed [ 263.491234][ T7577] FAT-fs (loop2): Directory bread(block 71) failed [ 263.493107][ T7577] FAT-fs (loop2): Directory bread(block 72) failed [ 263.509935][ T7577] FAT-fs (loop2): Directory bread(block 73) failed [ 263.710166][ T7591] loop1: detected capacity change from 0 to 512 [ 263.761292][ T7591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 263.785340][ T7591] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 263.805513][ T7591] EXT4-fs (loop1): group descriptors corrupted! [ 263.890139][ T7596] loop2: detected capacity change from 0 to 512 [ 263.892418][ T7596] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 263.928952][ T7596] EXT4-fs: error: could not find journal device path [ 264.396025][ T27] audit: type=1326 audit(264.370:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a7a8 code=0x7ffc0000 [ 264.403615][ T27] audit: type=1326 audit(264.370:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=21 compat=0 ip=0xffff9dd5a7a8 code=0x7ffc0000 [ 264.429998][ T27] audit: type=1326 audit(264.370:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a7a8 code=0x7ffc0000 [ 265.048678][ T27] audit: type=1326 audit(265.020:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a7a8 code=0x7ffc0000 [ 265.075180][ T27] audit: type=1326 audit(265.050:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffff9dd5a7a8 code=0x7ffc0000 [ 265.081047][ T27] audit: type=1326 audit(265.050:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.2.1113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a7a8 code=0x7ffc0000 [ 265.386252][ T7618] loop1: detected capacity change from 0 to 2048 [ 265.406256][ T7620] loop2: detected capacity change from 0 to 512 [ 265.469722][ T7618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 265.487035][ T7620] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 265.489938][ T7620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 265.642723][ T7620] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1118: corrupted inode contents [ 265.681010][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.682876][ T7620] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #16: comm syz.2.1118: mark_inode_dirty error [ 265.686975][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.689002][ T7620] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1118: corrupted inode contents [ 265.704091][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.706126][ T7620] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1118: mark_inode_dirty error [ 265.716001][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.718081][ T7620] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1118: corrupted inode contents [ 265.738689][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.740582][ T7620] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 265.743278][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.753602][ T7620] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.1118: corrupted inode contents [ 265.773750][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.775721][ T7620] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.1118: mark_inode_dirty error [ 265.782917][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.785591][ T7620] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 265.788551][ T27] audit: type=1326 audit(265.760:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad75a7a8 code=0x7ffc0000 [ 265.793621][ T7620] EXT4-fs (loop2): Remounting filesystem read-only [ 265.800114][ T7620] EXT4-fs (loop2): 1 truncate cleaned up [ 265.801328][ T27] audit: type=1326 audit(265.760:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad75a7a8 code=0x7ffc0000 [ 265.825024][ T27] audit: type=1326 audit(265.760:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffad75a7a8 code=0x7ffc0000 [ 265.834144][ T27] audit: type=1326 audit(265.760:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.4.1120" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad75a7a8 code=0x7ffc0000 [ 265.859211][ T5817] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:19: Failed to release dquot type 1 [ 265.866057][ T5817] EXT4-fs (loop2): Remounting filesystem read-only [ 265.874902][ T7620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 265.958659][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 266.093638][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1126'. [ 266.178494][ T7618] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 266.204216][ T7618] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 266.207934][ T7618] EXT4-fs (loop1): This should not happen!! Data will be lost [ 266.207934][ T7618] [ 266.213780][ T7618] EXT4-fs (loop1): Total free blocks count 0 [ 266.216261][ T7618] EXT4-fs (loop1): Free/Dirty block details [ 266.217932][ T7618] EXT4-fs (loop1): free_blocks=2415919104 [ 266.225105][ T7618] EXT4-fs (loop1): dirty_blocks=3552 [ 266.226596][ T7618] EXT4-fs (loop1): Block reservation details [ 266.228196][ T7618] EXT4-fs (loop1): i_reserved_data_blocks=222 [ 266.255923][ T7652] loop3: detected capacity change from 0 to 2048 [ 266.287552][ T7652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 266.322605][ T7652] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 266.329475][ T7652] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 266.332961][ T7652] EXT4-fs (loop3): This should not happen!! Data will be lost [ 266.332961][ T7652] [ 266.336816][ T7652] EXT4-fs (loop3): Total free blocks count 0 [ 266.338521][ T7652] EXT4-fs (loop3): Free/Dirty block details [ 266.340407][ T7652] EXT4-fs (loop3): free_blocks=2415919104 [ 266.342540][ T7652] EXT4-fs (loop3): dirty_blocks=16 [ 266.344482][ T7652] EXT4-fs (loop3): Block reservation details [ 266.346141][ T7652] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 266.351523][ T7652] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 266.397896][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1492 with error 28 [ 266.829304][ T7668] binder: 7666:7668 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 267.801163][ T7702] binder: 7701:7702 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 268.228009][ T7716] loop1: detected capacity change from 0 to 2048 [ 268.259352][ T7716] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.334722][ T7716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 268.965984][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 269.005467][ T7733] device wireguard0 entered promiscuous mode [ 269.071255][ T7725] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1154: bg 0: block 234: padding at end of block bitmap is not set [ 269.076047][ T7740] binder: 7738:7740 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 269.079257][ T7725] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 269.096027][ T7725] EXT4-fs (loop1): This should not happen!! Data will be lost [ 269.096027][ T7725] [ 269.109217][ T7725] EXT4-fs (loop1): Total free blocks count 0 [ 269.117685][ T7725] EXT4-fs (loop1): Free/Dirty block details [ 269.127442][ T7725] EXT4-fs (loop1): free_blocks=0 [ 269.132113][ T7725] EXT4-fs (loop1): dirty_blocks=2416 [ 269.137610][ T7735] device batadv_slave_0 entered promiscuous mode [ 269.141045][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 269.149537][ T7725] EXT4-fs (loop1): Block reservation details [ 269.151197][ T7725] EXT4-fs (loop1): i_reserved_data_blocks=151 [ 269.181926][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 269.264479][ T7745] IPv4: Oversized IP packet from 127.202.26.0 [ 269.310373][ T7742] device batadv_slave_0 left promiscuous mode [ 269.317440][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.726097][ T7752] loop1: detected capacity change from 0 to 2048 [ 270.187048][ T7752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 271.011114][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1165'. [ 271.014809][ T7764] loop2: detected capacity change from 0 to 7 [ 271.024584][ C1] blk_print_req_error: 20 callbacks suppressed [ 271.024599][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.028789][ C1] buffer_io_error: 20 callbacks suppressed [ 271.028799][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.053003][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.055810][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.076811][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.079611][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.092740][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.095564][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.129114][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.131986][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.155701][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.158860][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.192920][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.195663][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.198433][ T7764] ldm_validate_partition_table(): Disk read failed. [ 271.235600][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.238380][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.269472][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.272051][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.295765][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 271.298544][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 271.462104][ T7764] Dev loop2: unable to read RDB block 0 [ 271.483446][ T7764] loop2: unable to read partition table [ 271.485273][ T7764] loop2: partition table beyond EOD, truncated [ 271.486990][ T7764] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.667056][ T4304] EXT4-fs (loop1): unmounting filesystem. [ 271.792521][ T7772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.824150][ T7772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 271.848001][ T7780] binder: 7779:7780 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 271.975988][ T7772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.979129][ T7772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 272.000279][ T7784] loop2: detected capacity change from 0 to 512 [ 272.114199][ T7784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 272.194594][ T7772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.197389][ T7772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 272.228079][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 272.465720][ T7772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.475908][ T7772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 272.717756][ T7772] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 272.737493][ T7772] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.779018][ T7772] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 272.790476][ T7772] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.796938][ T7772] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 272.799237][ T7772] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.805864][ T7772] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 272.808317][ T7772] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.897704][ T7804] 9pnet: p9_errstr2errno: server reported unknown error [ 272.964228][ T7801] 9pnet: Could not find request transport: fd00000000000000000000004 [ 273.826444][ T7789] loop1: detected capacity change from 0 to 128 [ 273.851277][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 273.851289][ T27] audit: type=1326 audit(273.820:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 273.869674][ T27] audit: type=1326 audit(273.830:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 273.940137][ T27] audit: type=1326 audit(273.830:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 273.974196][ T27] audit: type=1326 audit(273.830:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 274.014198][ T27] audit: type=1326 audit(273.830:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 274.113136][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1182'. [ 274.117116][ T7816] loop2: detected capacity change from 0 to 7 [ 274.173663][ T7816] ldm_validate_partition_table(): Disk read failed. [ 274.199906][ T7816] Dev loop2: unable to read RDB block 0 [ 274.210387][ T7816] loop2: unable to read partition table [ 274.212857][ T7816] loop2: partition table beyond EOD, truncated [ 274.214675][ T7816] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.491250][ T6467] kworker/u4:21: attempt to access beyond end of device [ 274.491250][ T6467] loop1: rw=1048577, sector=145, nr_sectors = 560 limit=128 [ 274.683143][ T27] audit: type=1326 audit(273.830:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 274.764610][ T27] audit: type=1326 audit(273.830:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 274.770599][ T27] audit: type=1326 audit(273.830:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 274.963165][ T7821] loop3: detected capacity change from 0 to 128 [ 275.243017][ T7821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 275.920320][ T7824] binder: 7820:7824 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 276.188570][ T7832] device macvlan1 entered promiscuous mode [ 276.334739][ T7832] device ipvlan0 entered promiscuous mode [ 276.337282][ T7832] device ipvlan0 left promiscuous mode [ 276.344463][ T7832] device macvlan1 left promiscuous mode [ 276.903678][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1190'. [ 277.124162][ T7854] 9pnet: Could not find request transport: fd00000000000000000000004 [ 277.673489][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'. [ 277.677208][ T7868] loop2: detected capacity change from 0 to 7 [ 277.716580][ C1] blk_print_req_error: 25 callbacks suppressed [ 277.716597][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 277.721051][ C1] buffer_io_error: 25 callbacks suppressed [ 277.721062][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 277.798415][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 277.906138][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 277.908856][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.039272][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 278.041911][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.314396][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 278.316972][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.337094][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 278.339659][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.355214][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 278.357874][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.361162][ T7868] ldm_validate_partition_table(): Disk read failed. [ 278.362248][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 278.365558][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.374078][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 278.376665][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.379125][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 278.381859][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.403020][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 278.405827][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 278.408323][ T7868] Dev loop2: unable to read RDB block 0 [ 278.411454][ T7868] loop2: unable to read partition table [ 278.413143][ T7868] loop2: partition table beyond EOD, truncated [ 278.414973][ T7868] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 278.580794][ T7874] mmap: syz.0.1199 (7874) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 278.595649][ T27] audit: type=1326 audit(278.570:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 278.669909][ T7879] tmpfs: Unknown parameter 'quota' [ 279.424952][ T7875] loop3: detected capacity change from 0 to 128 [ 279.431931][ T27] audit: type=1326 audit(279.380:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 279.439165][ T27] audit: type=1326 audit(279.380:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 279.445212][ T27] audit: type=1326 audit(279.380:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 279.451437][ T27] audit: type=1326 audit(279.380:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 279.457644][ T27] audit: type=1326 audit(279.380:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 279.463409][ T27] audit: type=1326 audit(279.390:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 279.470160][ T27] audit: type=1326 audit(279.390:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 279.476735][ T27] audit: type=1326 audit(279.390:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8ab5a7dc code=0x7ffc0000 [ 279.482738][ T27] audit: type=1326 audit(279.390:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8ab58e70 code=0x7ffc0000 [ 279.603671][ T27] audit: type=1326 audit(279.400:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff8ab5a84c code=0x7ffc0000 [ 279.937784][ T7880] loop4: detected capacity change from 0 to 8192 [ 279.983754][ T7880] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.219045][ T7898] loop1: detected capacity change from 0 to 512 [ 280.223442][ T7890] 9pnet: Could not find request transport: fd00000000000000000000004 [ 280.276236][ T7898] EXT4-fs (loop1): 1 orphan inode deleted [ 280.277945][ T7898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 280.311877][ T4518] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:8: Failed to release dquot type 1 [ 280.344752][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1208'. [ 280.597590][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'. [ 280.619327][ T7910] loop2: detected capacity change from 0 to 7 [ 280.642007][ T7910] ldm_validate_partition_table(): Disk read failed. [ 280.651891][ T7910] Dev loop2: unable to read RDB block 0 [ 280.657425][ T7910] loop2: unable to read partition table [ 280.659952][ T7910] loop2: partition table beyond EOD, truncated [ 280.661822][ T7910] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.222521][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.225445][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.304658][ T4304] EXT4-fs (loop1): unmounting filesystem. [ 281.455329][ T7926] loop0: detected capacity change from 0 to 512 [ 281.489458][ T7931] 9pnet_fd: Insufficient options for proto=fd [ 281.529699][ T7926] EXT4-fs (loop0): too many log groups per flexible block group [ 281.531902][ T7926] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 281.533817][ T7926] EXT4-fs (loop0): mount failed [ 281.960334][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1226'. [ 281.964207][ T7948] loop2: detected capacity change from 0 to 7 [ 281.971898][ T7948] ldm_validate_partition_table(): Disk read failed. [ 281.976189][ T7948] Dev loop2: unable to read RDB block 0 [ 281.978338][ T7948] loop2: unable to read partition table [ 281.980201][ T7948] loop2: partition table beyond EOD, truncated [ 281.981969][ T7948] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 282.021119][ T7959] 9pnet_fd: Insufficient options for proto=fd [ 282.070704][ T3913] ldm_validate_partition_table(): Disk read failed. [ 282.076349][ T3913] Dev loop2: unable to read RDB block 0 [ 282.078404][ T3913] loop2: unable to read partition table [ 282.080144][ T3913] loop2: partition table beyond EOD, truncated [ 282.580100][ T3913] ldm_validate_partition_table(): Disk read failed. [ 282.582679][ T3913] Dev loop2: unable to read RDB block 0 [ 282.584969][ T3913] loop2: unable to read partition table [ 282.586713][ T3913] loop2: partition table beyond EOD, truncated [ 282.846482][ T7992] 9pnet_fd: Insufficient options for proto=fd [ 283.151587][ T8006] loop1: detected capacity change from 0 to 256 [ 283.160017][ T8006] ======================================================= [ 283.160017][ T8006] WARNING: The mand mount option has been deprecated and [ 283.160017][ T8006] and is ignored by this kernel. Remove the mand [ 283.160017][ T8006] option from the mount to silence this warning. [ 283.160017][ T8006] ======================================================= [ 283.516609][ T8019] capability: warning: `syz.3.1255' uses deprecated v2 capabilities in a way that may be insecure [ 283.555663][ T8019] netlink: '+}[@': attribute type 9 has an invalid length. [ 283.557681][ T8019] netlink: '+}[@': attribute type 7 has an invalid length. [ 283.559563][ T8019] netlink: '+}[@': attribute type 8 has an invalid length. [ 283.561937][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1252'. [ 283.565884][ T8017] loop2: detected capacity change from 0 to 7 [ 283.568041][ C0] blk_print_req_error: 75 callbacks suppressed [ 283.568053][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.572489][ C0] buffer_io_error: 75 callbacks suppressed [ 283.572499][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.585081][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.587711][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.605460][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.608044][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.624780][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.627431][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.640502][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.643159][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.654038][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.656684][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.671585][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.674210][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.676708][ T8017] ldm_validate_partition_table(): Disk read failed. [ 283.691918][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.694653][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.695657][ T8021] 9pnet_fd: Insufficient options for proto=fd [ 283.701950][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.704629][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.716440][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 283.719085][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.725255][ T8017] Dev loop2: unable to read RDB block 0 [ 283.729565][ T8017] loop2: unable to read partition table [ 283.731128][ T8017] loop2: partition table beyond EOD, truncated [ 283.732820][ T8017] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 283.790071][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 283.813120][ T3913] ldm_validate_partition_table(): Disk read failed. [ 283.819653][ T3913] Dev loop2: unable to read RDB block 0 [ 283.825004][ T3913] loop2: unable to read partition table [ 283.826784][ T3913] loop2: partition table beyond EOD, truncated [ 283.849754][ T8029] loop3: detected capacity change from 0 to 512 [ 283.858521][ T8029] EXT4-fs: Ignoring removed oldalloc option [ 283.867706][ T8029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.893478][ T3913] ldm_validate_partition_table(): Disk read failed. [ 283.897592][ T8029] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 283.914715][ T3913] Dev loop2: unable to read RDB block 0 [ 283.939888][ T8029] EXT4-fs (loop3): 1 truncate cleaned up [ 283.941574][ T8029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 283.950844][ T3913] loop2: unable to read partition table [ 283.952568][ T3913] loop2: partition table beyond EOD, truncated [ 283.970546][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 284.041906][ T3913] ldm_validate_partition_table(): Disk read failed. [ 284.044516][ T3913] Dev loop2: unable to read RDB block 0 [ 284.045466][ T8037] loop0: detected capacity change from 0 to 1024 [ 284.048258][ T3913] loop2: unable to read partition table [ 284.049852][ T3913] loop2: partition table beyond EOD, truncated [ 284.077293][ T8037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.131832][ T3913] ldm_validate_partition_table(): Disk read failed. [ 284.140098][ T3913] Dev loop2: unable to read RDB block 0 [ 284.152079][ T3913] loop2: unable to read partition table [ 284.153796][ T3913] loop2: partition table beyond EOD, truncated [ 284.180313][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 284.288542][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 284.379594][ T8053] binder: 8052:8053 ioctl c0306201 0 returned -14 [ 284.391207][ T8053] binder: 8052:8053 got transaction to invalid handle, 1 [ 284.393134][ T8053] binder: 8053:8052 cannot find target node [ 284.394803][ T8053] binder: 8052:8053 transaction async to 0:0 failed 52/29201/-22, size 5234-0 line 3054 [ 284.412943][ T8055] device vlan0 entered promiscuous mode [ 284.415773][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 284.423632][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 284.520253][ T8057] 9pnet_fd: Insufficient options for proto=fd [ 284.879953][ T8068] loop3: detected capacity change from 0 to 8192 [ 284.894505][ T8077] loop4: detected capacity change from 0 to 512 [ 284.911085][ T8068] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.954365][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1275'. [ 284.958988][ T8078] loop2: detected capacity change from 0 to 7 [ 284.962067][ T8078] ldm_validate_partition_table(): Disk read failed. [ 284.967505][ T8078] Dev loop2: unable to read RDB block 0 [ 284.969777][ T8078] loop2: unable to read partition table [ 284.971547][ T8078] loop2: partition table beyond EOD, truncated [ 284.973182][ T8078] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 284.994016][ T8077] EXT4-fs (loop4): 1 orphan inode deleted [ 284.998021][ T8077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.004921][ T177] __quota_error: 58 callbacks suppressed [ 285.004934][ T177] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 285.010513][ T177] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:3: Failed to release dquot type 1 [ 285.079093][ T8086] binder: 8085:8086 ioctl c0306201 0 returned -14 [ 285.085193][ T8086] binder: 8085:8086 got transaction to invalid handle, 1 [ 285.087382][ T8086] binder: 8086:8085 cannot find target node [ 285.090484][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 285.091262][ T8086] binder: 8085:8086 transaction async to 0:0 failed 56/29201/-22, size 5234-0 line 3054 [ 285.102582][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.173603][ T3913] ldm_validate_partition_table(): Disk read failed. [ 285.180847][ T8089] 9pnet_fd: Insufficient options for proto=fd [ 285.191624][ T3913] Dev loop2: unable to read RDB block 0 [ 285.200380][ T3913] loop2: unable to read partition table [ 285.210024][ T3913] loop2: partition table beyond EOD, truncated [ 285.252217][ T8094] 9pnet_fd: Insufficient options for proto=fd [ 285.421771][ T8099] loop1: detected capacity change from 0 to 512 [ 285.424323][ T8099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.444672][ T8099] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 285.447500][ T8099] EXT4-fs (loop1): orphan cleanup on readonly fs [ 285.449838][ T8099] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 285.452765][ T8099] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 285.513815][ T8099] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1284: Failed to acquire dquot type 1 [ 285.587754][ T8099] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1284: bg 0: block 40: padding at end of block bitmap is not set [ 285.622839][ T8099] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 285.688491][ T8099] EXT4-fs (loop1): 1 truncate cleaned up [ 285.690179][ T8099] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 285.756787][ T4304] EXT4-fs (loop1): unmounting filesystem. [ 285.881183][ T8114] loop4: detected capacity change from 0 to 512 [ 285.941303][ T8114] EXT4-fs (loop4): 1 orphan inode deleted [ 285.955523][ T4842] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 285.958309][ T4842] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:13: Failed to release dquot type 1 [ 285.967162][ T8114] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 286.112023][ T8120] binder: 8117:8120 got transaction to invalid handle, 1 [ 286.121013][ T8120] binder: 8120:8117 cannot find target node [ 286.130652][ T8120] binder: 8117:8120 transaction async to 0:0 failed 60/29201/-22, size 5234-0 line 3054 [ 286.142791][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 286.149747][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 286.241782][ T8125] team0: No ports can be present during mode change [ 286.270296][ T8127] loop1: detected capacity change from 0 to 512 [ 286.274991][ T8127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.279720][ T8127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.298078][ T8127] EXT4-fs (loop1): 1 truncate cleaned up [ 286.306612][ T8127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 286.367027][ T8127] EXT4-fs (loop1): shut down requested (0) [ 286.772786][ T8137] loop0: detected capacity change from 0 to 2048 [ 286.785720][ T8137] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.792940][ T4304] EXT4-fs (loop1): unmounting filesystem. [ 286.839712][ T8137] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 286.980579][ T8140] loop2: detected capacity change from 0 to 1024 [ 287.008934][ T8140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.054283][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1297'. [ 287.181029][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 287.202898][ T8149] loop3: detected capacity change from 0 to 512 [ 287.262767][ T8149] EXT4-fs (loop3): 1 orphan inode deleted [ 287.264820][ T8149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.268245][ T8151] loop4: detected capacity change from 0 to 8192 [ 287.289266][ T4861] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 287.292003][ T4861] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:14: Failed to release dquot type 1 [ 287.333275][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 287.393383][ T8159] binder: 8158:8159 got transaction to invalid handle, 1 [ 287.409409][ T8159] binder: 8159:8158 cannot find target node [ 288.206228][ T8168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.209434][ T8168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 288.846045][ T8168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.848887][ T8168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 289.847107][ T8168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.850083][ T8168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 289.865519][ T8186] loop2: detected capacity change from 0 to 7 [ 289.878295][ C0] blk_print_req_error: 125 callbacks suppressed [ 289.878312][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.879796][ T8185] IPVS: stopping master sync thread 8188 ... [ 289.880176][ C0] buffer_io_error: 125 callbacks suppressed [ 289.880186][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 289.889535][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.892052][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 289.894209][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1313'. [ 289.909952][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.912824][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 289.924929][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.927627][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 289.930283][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.932907][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 289.935667][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.938327][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 289.958654][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.961451][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 289.963753][ T8186] ldm_validate_partition_table(): Disk read failed. [ 289.975136][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.977898][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 289.995082][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 289.997811][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 290.003281][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 290.005949][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 290.008397][ T8186] Dev loop2: unable to read RDB block 0 [ 290.009690][ T8168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.010573][ T8186] loop2: unable to read partition table [ 290.012971][ T8168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 290.014600][ T8186] loop2: partition table beyond EOD, truncated [ 290.018894][ T8186] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 290.274723][ T8168] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 290.277268][ T8168] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.283794][ T8168] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 290.286298][ T8168] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.293289][ T8168] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 290.295734][ T8168] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.323233][ T8168] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 290.325926][ T8168] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.493106][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 290.535887][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 291.217599][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 291.221322][ T8220] loop2: detected capacity change from 0 to 7 [ 291.235348][ T8220] ldm_validate_partition_table(): Disk read failed. [ 291.237942][ T8220] Dev loop2: unable to read RDB block 0 [ 291.240222][ T8220] loop2: unable to read partition table [ 291.241914][ T8220] loop2: partition table beyond EOD, truncated [ 291.243629][ T8220] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 291.446471][ T8238] loop4: detected capacity change from 0 to 164 [ 291.623046][ T8243] netlink: 'syz.4.1337': attribute type 21 has an invalid length. [ 291.633978][ T8243] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.763791][ T8249] device syzkaller1 entered promiscuous mode [ 292.025981][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1344'. [ 292.029802][ T8258] loop2: detected capacity change from 0 to 7 [ 292.033315][ T8258] ldm_validate_partition_table(): Disk read failed. [ 292.042320][ T8258] Dev loop2: unable to read RDB block 0 [ 292.044642][ T8258] loop2: unable to read partition table [ 292.046329][ T8258] loop2: partition table beyond EOD, truncated [ 292.048131][ T8258] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 292.433007][ T8271] lo speed is unknown, defaulting to 1000 [ 293.332257][ T8278] loop0: detected capacity change from 0 to 512 [ 293.450059][ T8278] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 293.453536][ T8278] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 293.480775][ T8278] EXT4-fs (loop0): mount failed [ 293.700125][ T8282] loop1: detected capacity change from 0 to 8192 [ 294.526906][ T8293] device macvlan1 entered promiscuous mode [ 294.697115][ T8300] loop1: detected capacity change from 0 to 128 [ 294.732424][ T8293] device ipvlan0 entered promiscuous mode [ 294.746675][ T8299] loop2: detected capacity change from 0 to 7 [ 294.768039][ T8299] ldm_validate_partition_table(): Disk read failed. [ 294.771036][ T8299] Dev loop2: unable to read RDB block 0 [ 294.773404][ T8299] loop2: unable to read partition table [ 294.775175][ T8299] loop2: partition table beyond EOD, truncated [ 294.776846][ T8299] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 294.858607][ T8300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 295.123001][ T8293] device ipvlan0 left promiscuous mode [ 295.144983][ T8293] device macvlan1 left promiscuous mode [ 295.785179][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'. [ 296.960485][ T4304] EXT4-fs (loop1): unmounting filesystem. [ 297.180200][ T8317] loop4: detected capacity change from 0 to 1024 [ 297.203130][ T8317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 297.278059][ T8317] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.539755][ T4311] EXT4-fs (loop4): unmounting filesystem. [ 297.779268][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1375'. [ 297.783707][ T8342] loop2: detected capacity change from 0 to 7 [ 297.797009][ C0] blk_print_req_error: 50 callbacks suppressed [ 297.797025][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 297.801335][ C0] buffer_io_error: 50 callbacks suppressed [ 297.801345][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 297.876671][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 297.879581][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.075392][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 298.078435][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.179576][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 298.182297][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.305068][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 298.307667][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.393576][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 298.396284][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.442101][ T27] audit: type=1326 audit(298.400:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 298.480503][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 298.483140][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.485488][ T8342] ldm_validate_partition_table(): Disk read failed. [ 298.514509][ T27] audit: type=1326 audit(298.420:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 298.589271][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 298.591844][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.629957][ T27] audit: type=1326 audit(298.420:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 298.704721][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 298.707437][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.764492][ T27] audit: type=1326 audit(298.550:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 298.821534][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 298.824210][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.898536][ T27] audit: type=1326 audit(298.590:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 298.941586][ T8342] Dev loop2: unable to read RDB block 0 [ 298.958444][ T8342] loop2: unable to read partition table [ 298.960202][ T8342] loop2: partition table beyond EOD, truncated [ 298.961907][ T8342] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.338141][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'. [ 299.649333][ T27] audit: type=1326 audit(298.640:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 299.694048][ T27] audit: type=1326 audit(298.670:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 299.724142][ T27] audit: type=1326 audit(298.750:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 299.789494][ T27] audit: type=1326 audit(299.600:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 299.840225][ T27] audit: type=1326 audit(299.610:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 299.880862][ T27] audit: type=1326 audit(299.610:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 299.891758][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.906596][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.076441][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 300.079053][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 300.127892][ T8355] device bond0 entered promiscuous mode [ 300.142669][ T8355] device bond_slave_0 entered promiscuous mode [ 300.145790][ T8355] device bond_slave_1 entered promiscuous mode [ 300.255229][ T8355] device bond0 left promiscuous mode [ 300.256870][ T8355] device bond_slave_0 left promiscuous mode [ 300.258641][ T8355] device bond_slave_1 left promiscuous mode [ 300.477324][ T8368] loop0: detected capacity change from 0 to 128 [ 300.480891][ T8366] loop3: detected capacity change from 0 to 1024 [ 300.514334][ T8366] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.1386: Failed to acquire dquot type 0 [ 300.523059][ T8366] EXT4-fs (loop3): 1 truncate cleaned up [ 300.525231][ T8366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 300.566639][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 300.648836][ T8379] hub 9-0:1.0: USB hub found [ 300.652748][ T8379] hub 9-0:1.0: 8 ports detected [ 300.921180][ T8385] loop0: detected capacity change from 0 to 512 [ 300.960411][ T8385] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1393: invalid indirect mapped block 256 (level 2) [ 300.990352][ T8385] EXT4-fs (loop0): 2 truncates cleaned up [ 300.992017][ T8385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 301.078692][ T4299] EXT4-fs (loop0): unmounting filesystem. [ 301.690241][ T8408] loop3: detected capacity change from 0 to 128 [ 301.800140][ T8413] loop2: detected capacity change from 0 to 128 [ 301.934562][ T8413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 302.541043][ T8410] loop0: detected capacity change from 0 to 764 [ 302.678740][ T8416] syz.3.1401: attempt to access beyond end of device [ 302.678740][ T8416] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 303.691648][ T8440] binder: tried to use weak ref as strong ref [ 303.693451][ T8440] binder: 8439:8440 Acquire 1 refcount change on invalid ref 0 ret -22 [ 303.732701][ T8440] binder: 8439:8440 got transaction to invalid handle, 1 [ 303.768231][ T8440] binder_debug: 2 callbacks suppressed [ 303.768244][ T8440] binder: 8440:8439 cannot find target node [ 303.771469][ T8440] binder: 8439:8440 transaction async to 0:0 failed 67/29201/-22, size 5234-0 line 3054 [ 303.835293][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.879947][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 304.434711][ T8463] random: crng reseeded on system resumption [ 304.450461][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 304.450475][ T27] audit: type=1326 audit(304.420:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 304.461528][ T27] audit: type=1326 audit(304.430:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=440 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 304.469135][ T27] audit: type=1326 audit(304.430:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 304.475403][ T27] audit: type=1326 audit(304.430:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 304.481468][ T27] audit: type=1326 audit(304.430:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 304.487540][ T27] audit: type=1326 audit(304.430:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 304.493352][ T27] audit: type=1326 audit(304.430:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5a7a8 code=0x7ffc0000 [ 304.514571][ T8463] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 304.517204][ T8463] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.550619][ T27] audit: type=1326 audit(304.430:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff8ab5cc68 code=0x7ffc0000 [ 304.572058][ T8470] netlink: 'syz.3.1422': attribute type 10 has an invalid length. [ 304.574535][ T8470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1422'. [ 304.584087][ T27] audit: type=1326 audit(304.430:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff8ab5cb6c code=0x7ffc0000 [ 304.590078][ T27] audit: type=1326 audit(304.430:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff8ab5cb6c code=0x7ffc0000 [ 304.612111][ T8472] binder: tried to use weak ref as strong ref [ 304.616756][ T8472] binder: 8471:8472 Acquire 1 refcount change on invalid ref 0 ret -22 [ 304.619889][ T8472] binder: 8471:8472 got transaction to invalid handle, 1 [ 304.623235][ T8472] binder: 8472:8471 cannot find target node [ 304.676755][ T8472] binder: 8471:8472 transaction async to 0:0 failed 70/29201/-22, size 5234-0 line 3054 [ 304.685073][ T8474] loop2: detected capacity change from 0 to 128 [ 304.738087][ T8474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 304.802083][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.652490][ T8477] loop1: detected capacity change from 0 to 1024 [ 305.672188][ T8477] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 305.682183][ T8477] EXT4-fs (loop1): orphan cleanup on readonly fs [ 305.695834][ T8477] [ 305.696557][ T8477] ====================================================== [ 305.698412][ T8477] WARNING: possible circular locking dependency detected [ 305.700299][ T8477] 6.1.141-syzkaller #0 Not tainted [ 305.701723][ T8477] ------------------------------------------------------ [ 305.703805][ T8477] syz.1.1427/8477 is trying to acquire lock: [ 305.705531][ T8477] ffff0000c0562aa8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x7c4/0x1770 [ 305.708215][ T8477] [ 305.708215][ T8477] but task is already holding lock: [ 305.710331][ T8477] ffff0000ddff0208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x114/0x180 [ 305.713148][ T8477] [ 305.713148][ T8477] which lock already depends on the new lock. [ 305.713148][ T8477] [ 305.716033][ T8477] [ 305.716033][ T8477] the existing dependency chain (in reverse order) is: [ 305.718522][ T8477] [ 305.718522][ T8477] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 305.720796][ T8477] down_read+0x64/0x304 [ 305.722069][ T8477] v2_read_dquot+0x4c/0x118 [ 305.723486][ T8477] dquot_acquire+0x120/0x4e0 [ 305.724906][ T8477] ext4_acquire_dquot+0x270/0x428 [ 305.726456][ T8477] dqget+0x654/0xccc [ 305.727696][ T8477] __dquot_initialize+0x2d4/0xa80 [ 305.729213][ T8477] dquot_initialize+0x24/0x34 [ 305.730694][ T8477] ext4_process_orphan+0x5c/0x2b4 [ 305.732242][ T8477] ext4_orphan_cleanup+0x908/0x104c [ 305.733852][ T8477] ext4_fill_super+0x62f8/0x6788 [ 305.735396][ T8477] get_tree_bdev+0x358/0x544 [ 305.736802][ T8477] ext4_get_tree+0x28/0x38 [ 305.738134][ T8477] vfs_get_tree+0x90/0x274 [ 305.739465][ T8477] do_new_mount+0x228/0x810 [ 305.740824][ T8477] path_mount+0x5b4/0xe78 [ 305.742182][ T8477] __arm64_sys_mount+0x49c/0x584 [ 305.743687][ T8477] invoke_syscall+0x98/0x2bc [ 305.745065][ T8477] el0_svc_common+0x138/0x258 [ 305.746524][ T8477] do_el0_svc+0x58/0x13c [ 305.747835][ T8477] el0_svc+0x58/0x138 [ 305.749058][ T8477] el0t_64_sync_handler+0x84/0xf0 [ 305.750592][ T8477] el0t_64_sync+0x18c/0x190 [ 305.751983][ T8477] [ 305.751983][ T8477] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 305.754088][ T8477] __mutex_lock_common+0x190/0x1f38 [ 305.755685][ T8477] mutex_lock_nested+0x38/0x44 [ 305.757107][ T8477] dquot_commit+0x50/0x1c4 [ 305.758499][ T8477] ext4_write_dquot+0x1b4/0x31c [ 305.760043][ T8477] ext4_mark_dquot_dirty+0xe8/0x140 [ 305.761646][ T8477] mark_all_dquot_dirty+0x1f8/0x424 [ 305.763192][ T8477] __dquot_free_space+0x744/0xa80 [ 305.764688][ T8477] ext4_free_blocks+0x18c8/0x23cc [ 305.766247][ T8477] ext4_ext_remove_space+0x1698/0x39c4 [ 305.767919][ T8477] ext4_ext_truncate+0x164/0x20c [ 305.769449][ T8477] ext4_truncate+0x9dc/0x1078 [ 305.770857][ T8477] ext4_evict_inode+0xbf0/0x124c [ 305.772341][ T8477] evict+0x3c8/0x810 [ 305.773556][ T8477] iput+0x764/0x7f4 [ 305.774717][ T8477] ext4_process_orphan+0x240/0x2b4 [ 305.776279][ T8477] ext4_orphan_cleanup+0x908/0x104c [ 305.777839][ T8477] ext4_fill_super+0x62f8/0x6788 [ 305.779325][ T8477] get_tree_bdev+0x358/0x544 [ 305.780753][ T8477] ext4_get_tree+0x28/0x38 [ 305.782156][ T8477] vfs_get_tree+0x90/0x274 [ 305.783523][ T8477] do_new_mount+0x228/0x810 [ 305.784930][ T8477] path_mount+0x5b4/0xe78 [ 305.786274][ T8477] __arm64_sys_mount+0x49c/0x584 [ 305.787773][ T8477] invoke_syscall+0x98/0x2bc [ 305.789182][ T8477] el0_svc_common+0x138/0x258 [ 305.790608][ T8477] do_el0_svc+0x58/0x13c [ 305.791933][ T8477] el0_svc+0x58/0x138 [ 305.793154][ T8477] el0t_64_sync_handler+0x84/0xf0 [ 305.794776][ T8477] el0t_64_sync+0x18c/0x190 [ 305.796261][ T8477] [ 305.796261][ T8477] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 305.798428][ T8477] __lock_acquire+0x293c/0x6544 [ 305.799942][ T8477] lock_acquire+0x20c/0x644 [ 305.801352][ T8477] down_write+0x5c/0x88 [ 305.802613][ T8477] ext4_map_blocks+0x7c4/0x1770 [ 305.804138][ T8477] ext4_getblk+0x170/0x654 [ 305.805513][ T8477] ext4_bread+0x3c/0x1b0 [ 305.806852][ T8477] ext4_quota_write+0x228/0x51c [ 305.808352][ T8477] find_free_dqentry+0x548/0xa68 [ 305.809841][ T8477] do_insert_tree+0x578/0xc38 [ 305.811263][ T8477] do_insert_tree+0x794/0xc38 [ 305.812694][ T8477] do_insert_tree+0x794/0xc38 [ 305.814145][ T8477] do_insert_tree+0x794/0xc38 [ 305.815577][ T8477] qtree_write_dquot+0x3bc/0x4c8 [ 305.817085][ T8477] v2_write_dquot+0xf0/0x180 [ 305.818523][ T8477] dquot_acquire+0x2a8/0x4e0 [ 305.819912][ T8477] ext4_acquire_dquot+0x270/0x428 [ 305.821418][ T8477] dqget+0x654/0xccc [ 305.822655][ T8477] __dquot_initialize+0x2d4/0xa80 [ 305.824217][ T8477] dquot_initialize+0x24/0x34 [ 305.825691][ T8477] ext4_process_orphan+0x5c/0x2b4 [ 305.827239][ T8477] ext4_orphan_cleanup+0x908/0x104c [ 305.828804][ T8477] ext4_fill_super+0x62f8/0x6788 [ 305.830344][ T8477] get_tree_bdev+0x358/0x544 [ 305.831783][ T8477] ext4_get_tree+0x28/0x38 [ 305.833131][ T8477] vfs_get_tree+0x90/0x274 [ 305.834514][ T8477] do_new_mount+0x228/0x810 [ 305.835946][ T8477] path_mount+0x5b4/0xe78 [ 305.837291][ T8477] __arm64_sys_mount+0x49c/0x584 [ 305.838848][ T8477] invoke_syscall+0x98/0x2bc [ 305.840306][ T8477] el0_svc_common+0x138/0x258 [ 305.841739][ T8477] do_el0_svc+0x58/0x13c [ 305.843030][ T8477] el0_svc+0x58/0x138 [ 305.844283][ T8477] el0t_64_sync_handler+0x84/0xf0 [ 305.845801][ T8477] el0t_64_sync+0x18c/0x190 [ 305.847210][ T8477] [ 305.847210][ T8477] other info that might help us debug this: [ 305.847210][ T8477] [ 305.850044][ T8477] Chain exists of: [ 305.850044][ T8477] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 305.850044][ T8477] [ 305.853917][ T8477] Possible unsafe locking scenario: [ 305.853917][ T8477] [ 305.856056][ T8477] CPU0 CPU1 [ 305.857548][ T8477] ---- ---- [ 305.858994][ T8477] lock(&s->s_dquot.dqio_sem); [ 305.860345][ T8477] lock(&dquot->dq_lock); [ 305.862254][ T8477] lock(&s->s_dquot.dqio_sem); [ 305.864316][ T8477] lock(&ei->i_data_sem/2); [ 305.865646][ T8477] [ 305.865646][ T8477] *** DEADLOCK *** [ 305.865646][ T8477] [ 305.867907][ T8477] 3 locks held by syz.1.1427/8477: [ 305.869308][ T8477] #0: ffff0000ddff00e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 305.872149][ T8477] #1: ffff0000e348a5e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x60/0x4e0 [ 305.874747][ T8477] #2: ffff0000ddff0208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x114/0x180 [ 305.877594][ T8477] [ 305.877594][ T8477] stack backtrace: [ 305.879219][ T8477] CPU: 0 PID: 8477 Comm: syz.1.1427 Not tainted 6.1.141-syzkaller #0 [ 305.881448][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.884250][ T8477] Call trace: [ 305.885143][ T8477] dump_backtrace+0x1c8/0x1f4 [ 305.886498][ T8477] show_stack+0x2c/0x3c [ 305.887662][ T8477] __dump_stack+0x30/0x40 [ 305.888874][ T8477] dump_stack_lvl+0xf8/0x160 [ 305.890174][ T8477] dump_stack+0x1c/0x5c [ 305.891343][ T8477] print_circular_bug+0x148/0x1b0 [ 305.892725][ T8477] check_noncircular+0x240/0x2d4 [ 305.894097][ T8477] __lock_acquire+0x293c/0x6544 [ 305.895472][ T8477] lock_acquire+0x20c/0x644 [ 305.896699][ T8477] down_write+0x5c/0x88 [ 305.897831][ T8477] ext4_map_blocks+0x7c4/0x1770 [ 305.899252][ T8477] ext4_getblk+0x170/0x654 [ 305.900508][ T8477] ext4_bread+0x3c/0x1b0 [ 305.901744][ T8477] ext4_quota_write+0x228/0x51c [ 305.903093][ T8477] find_free_dqentry+0x548/0xa68 [ 305.904415][ T8477] do_insert_tree+0x578/0xc38 [ 305.905716][ T8477] do_insert_tree+0x794/0xc38 [ 305.907043][ T8477] do_insert_tree+0x794/0xc38 [ 305.908378][ T8477] do_insert_tree+0x794/0xc38 [ 305.909649][ T8477] qtree_write_dquot+0x3bc/0x4c8 [ 305.911019][ T8477] v2_write_dquot+0xf0/0x180 [ 305.912336][ T8477] dquot_acquire+0x2a8/0x4e0 [ 305.913635][ T8477] ext4_acquire_dquot+0x270/0x428 [ 305.915026][ T8477] dqget+0x654/0xccc [ 305.916099][ T8477] __dquot_initialize+0x2d4/0xa80 [ 305.917552][ T8477] dquot_initialize+0x24/0x34 [ 305.918857][ T8477] ext4_process_orphan+0x5c/0x2b4 [ 305.920269][ T8477] ext4_orphan_cleanup+0x908/0x104c [ 305.921746][ T8477] ext4_fill_super+0x62f8/0x6788 [ 305.923145][ T8477] get_tree_bdev+0x358/0x544 [ 305.924460][ T8477] ext4_get_tree+0x28/0x38 [ 305.925720][ T8477] vfs_get_tree+0x90/0x274 [ 305.926951][ T8477] do_new_mount+0x228/0x810 [ 305.928226][ T8477] path_mount+0x5b4/0xe78 [ 305.929428][ T8477] __arm64_sys_mount+0x49c/0x584 [ 305.930820][ T8477] invoke_syscall+0x98/0x2bc [ 305.932139][ T8477] el0_svc_common+0x138/0x258 [ 305.933503][ T8477] do_el0_svc+0x58/0x13c [ 305.934729][ T8477] el0_svc+0x58/0x138 [ 305.935870][ T8477] el0t_64_sync_handler+0x84/0xf0 [ 305.937262][ T8477] el0t_64_sync+0x18c/0x190 [ 305.951983][ T8477] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1427: bg 0: block 10: padding at end of block bitmap is not set [ 305.958485][ T8477] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1427: Failed to acquire dquot type 0 [ 305.962048][ T8477] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1427: Failed to acquire dquot type 0 [ 305.988875][ T8477] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1427: Freeing blocks not in datazone - block = 0, count = 4096 [ 306.000706][ T8470] team0: Port device geneve0 added [ 306.018599][ T8477] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1427: Failed to acquire dquot type 0 [ 306.024803][ T8463] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 306.027578][ T8463] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 306.030629][ T8477] EXT4-fs (loop1): 1 orphan inode deleted [ 306.032653][ T8477] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 306.083130][ T4304] EXT4-fs (loop1): unmounting filesystem. [ 306.119145][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 306.301111][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 306.322366][ T8463] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 306.325470][ T8463] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 306.367067][ T8463] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 306.369725][ T8463] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 306.492135][ T8463] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.494609][ T8463] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 306.499295][ T8463] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.501688][ T8463] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 306.506424][ T8463] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.509249][ T8463] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 306.513900][ T8463] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.516439][ T8463] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 310.265897][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.267894][ T2061] ieee802154 phy1 wpan1: encryption failed: -22