last executing test programs: 7.204961871s ago: executing program 3 (id=2692): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) 7.158937516s ago: executing program 3 (id=2693): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x805, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 6.987374163s ago: executing program 3 (id=2694): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}, 0x0) 6.901560352s ago: executing program 3 (id=2696): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000440)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@shortname_win95}, {@fat=@tz_utc}, {@utf8}, {}, {@fat=@flush}]}, 0x0, 0x291, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0) 5.43434697s ago: executing program 1 (id=2706): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") 5.046324629s ago: executing program 1 (id=2707): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 4.74843234s ago: executing program 1 (id=2708): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f000000aa00)=ANY=[@ANYBLOB="4c595e2f83c7b598f19c108a635722e4319a35d918833d2f87f9181726a8a7260c8e9d54dc28705ed6a6a7b4218f73da8f5d43a01aebd3390758bf9989c919b291b6ee23e191e0828eeea38d4bc8bf5b090721b21056ec0cef341319f3636fae14349fe7d0d1be06487d190829a3d91de239e3b23b9234be95f4db864622c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000000440)={&(0x7f00000003c0)=""/82, 0x52}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r4, 0x148}], 0x1, &(0x7f0000000300)={r5, r6+10000000}, &(0x7f0000000380)={[0xd]}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") 3.112499775s ago: executing program 3 (id=2711): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 2.883746609s ago: executing program 4 (id=2712): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 2.67288017s ago: executing program 4 (id=2714): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x200898, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.47137142s ago: executing program 1 (id=2715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) 2.424523115s ago: executing program 4 (id=2716): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000800)=[{&(0x7f0000000140)="5fe4", 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) 2.268558471s ago: executing program 1 (id=2717): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101029b95de207d077a621000010203010902"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2.228419165s ago: executing program 4 (id=2718): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) 2.07479057s ago: executing program 4 (id=2719): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 1.796493739s ago: executing program 3 (id=2721): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000440)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@shortname_win95}, {@fat=@tz_utc}, {@utf8}, {}, {@fat=@flush}]}, 0x0, 0x291, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0) 1.768401571s ago: executing program 2 (id=2722): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) fstat(r6, &(0x7f0000003200)) 1.756477082s ago: executing program 4 (id=2723): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x493, &(0x7f0000000740)="$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") 1.596428549s ago: executing program 2 (id=2724): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1.556053233s ago: executing program 2 (id=2725): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) 1.073320892s ago: executing program 2 (id=2726): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") r3 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r3, 0x0, 0x0) 972.522632ms ago: executing program 0 (id=2727): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) 847.324474ms ago: executing program 0 (id=2728): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, 0x0, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x181c800, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 679.683421ms ago: executing program 0 (id=2729): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) 553.748654ms ago: executing program 0 (id=2730): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) 403.576569ms ago: executing program 2 (id=2731): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 381.687912ms ago: executing program 0 (id=2732): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/119) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./bus\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ftruncate(r5, 0x81fd) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc) 168.619053ms ago: executing program 2 (id=2733): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0, @ANYRES64=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 167.417793ms ago: executing program 1 (id=2734): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c6d6f64653d61646170746976652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d656e61626c652c6163746976655f6c6f67733d362c6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f61636c2c6d6f64653d61646170746976652c6e6f696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c67727071756f74613d2f6465762f75686964002c61636c2c0032f4ee2f6560cdca2b9483944e9645733866c506b49c56b50344a658491dfe1afc3bb0de511c48132c86a775315723c53de2957513b9e639dfab8b7e4f4097c16f12b630a63e3ee7aa89cfa87acb9e9436e3d4feae3c1c3fedb8759e622019ece82c31d9fe60c2e3300afffbbda9aa8515e815ffc77756449aee7d4dc8354a136775201fe90e0663c422eb5a7e10e72601606e640c6714946801fccf68f802ff1c466e968c229e988c70dbe2c74169c0e96f9117a800ef78cef7bea512401010266195fc419fabbb4304582cd727de0f01694c0e22f6bca0650e3f3e4c4aefef27a417b89a0ce12bce1898cc08bbacc339f2655241746a085213fe4d6edc276928e2b0d4663583ccad22e450718285ed6a84bad0c7d117de297a02d83173a5a3d62192e8b6882f1a34b2200fdb7de25a9c0657778fdf670dfbd28483194c7b288bd257fa84f4a9564651ee61761f4a364803b5aea822e4c5b52b5676bdba4d9bdcbf1b7ddda716f223a1bc6d1c5a150fa64e72f580f7bf672ce6c6d30f8bcf091186a89ff219d2272ff5f2c0b4f63cb92f4708d6d81bc1935a791bd1c3670ba93b4a4db772e29f150122528cbe24284f0d1064ba237debaa65d481756e427ad570171d1e9445fe5c06dd6335167686a2cf8f226eb57ebe530d4e72"], 0x1, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = gettid() syz_open_procfs(r6, &(0x7f0000000040)='timerslack_ns\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3020021, 0x0, 0x10, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 0s ago: executing program 0 (id=2735): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) kernel console output (not intermixed with test programs): s error (device loop4): ext4_orphan_get:1406: comm syz.4.712: couldn't read orphan inode 15 (err -117) [ 184.139767][ T5987] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.443532][ T6020] fuse: Unknown parameter 'grou00000000000000000000' [ 185.741382][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 186.555595][ T6035] binder: 6034:6035 ioctl c0306201 200000000080 returned -14 [ 187.026525][ T6054] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 188.075208][ T6056] binder: 6055:6056 ioctl c0306201 200000000080 returned -14 [ 190.203549][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.749'. [ 190.774964][ T6087] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 192.063625][ T4238] Bluetooth: hci0: command 0x0406 tx timeout [ 192.069751][ T4238] Bluetooth: hci2: command 0x0406 tx timeout [ 192.075852][ T4238] Bluetooth: hci1: command 0x0406 tx timeout [ 192.081901][ T4238] Bluetooth: hci3: command 0x0406 tx timeout [ 192.087998][ T4238] Bluetooth: hci4: command 0x0406 tx timeout [ 192.187832][ T6101] binder: 6099:6101 ioctl c0306201 200000000080 returned -14 [ 193.392186][ T4252] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 193.606123][ T6138] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 193.812764][ T4252] usb 5-1: unable to get BOS descriptor or descriptor too short [ 193.890213][ T4252] usb 5-1: not running at top speed; connect to a high speed hub [ 194.083278][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.096446][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.114447][ T4252] usb 5-1: config 0 has no interfaces? [ 194.408540][ T4252] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 194.448960][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.489495][ T4252] usb 5-1: Product: syz [ 194.504983][ T4252] usb 5-1: Manufacturer: syz [ 194.540422][ T4252] usb 5-1: SerialNumber: syz [ 194.571600][ T4252] usb 5-1: config 0 descriptor?? [ 195.612934][ T7] usb 5-1: USB disconnect, device number 4 [ 197.103389][ T4273] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 197.527999][ T4273] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 197.571399][ T4273] usb 4-1: config 0 has no interface number 0 [ 197.792412][ T4273] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 197.815019][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.847888][ T4273] usb 4-1: Product: syz [ 197.867913][ T6212] loop1: detected capacity change from 0 to 512 [ 197.877998][ T4273] usb 4-1: Manufacturer: syz [ 197.901215][ T4273] usb 4-1: SerialNumber: syz [ 197.931482][ T4273] usb 4-1: config 0 descriptor?? [ 198.262381][ T4273] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 198.318694][ T4273] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 198.518828][ T4273] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 198.867352][ T4273] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 198.889249][ T4273] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 199.020156][ T4273] usb 4-1: USB disconnect, device number 4 [ 199.038615][ T4273] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 199.048720][ T4273] keyspan 4-1:0.133: device disconnected [ 199.671775][ T6232] fuse: Unknown parameter 'group_id00000000000000000000' [ 200.540545][ T6250] netlink: 'syz.1.827': attribute type 4 has an invalid length. [ 200.905099][ T6260] fuse: Unknown parameter 'group_id00000000000000000000' [ 201.659200][ T4295] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 202.032296][ T4295] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 202.043961][ T4295] usb 1-1: config 0 has no interface number 0 [ 202.232277][ T4295] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 202.257432][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.285936][ T4295] usb 1-1: Product: syz [ 202.302791][ T4295] usb 1-1: Manufacturer: syz [ 202.322144][ T4295] usb 1-1: SerialNumber: syz [ 202.356324][ T4295] usb 1-1: config 0 descriptor?? [ 202.634628][ T4295] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 202.673195][ T4295] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 202.691354][ T4295] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 202.720152][ T4295] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 202.742205][ T4295] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 202.840946][ T4295] usb 1-1: USB disconnect, device number 7 [ 202.865543][ T4295] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 202.905727][ T4295] keyspan 1-1:0.133: device disconnected [ 204.595289][ T6307] fuse: Unknown parameter 'group_id00000000000000000000' [ 205.736808][ T6338] fuse: Bad value for 'user_id' [ 208.568332][ T6402] netlink: 'syz.0.883': attribute type 4 has an invalid length. [ 208.969563][ T6414] loop0: detected capacity change from 0 to 512 [ 211.943986][ T6467] 9pnet: Insufficient options for proto=fd [ 212.264827][ T6477] loop4: detected capacity change from 0 to 512 [ 212.343836][ T6477] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.924: inode has both inline data and extents flags [ 212.368361][ T6477] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.924: couldn't read orphan inode 15 (err -117) [ 212.440622][ T6477] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.333558][ T6503] loop4: detected capacity change from 0 to 512 [ 214.470926][ T6513] loop4: detected capacity change from 0 to 512 [ 214.672216][ T6513] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.939: inode has both inline data and extents flags [ 214.744337][ T6513] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.939: couldn't read orphan inode 15 (err -117) [ 214.785745][ T6513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.424615][ T6533] loop2: detected capacity change from 0 to 512 [ 217.210693][ T6566] loop0: detected capacity change from 0 to 2048 [ 217.222267][ T4295] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 217.447977][ T6566] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.558331][ T26] audit: type=1800 audit(1763193575.117:5): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.960" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 217.632328][ T4295] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.704504][ T4295] usb 2-1: not running at top speed; connect to a high speed hub [ 217.816821][ T4295] usb 2-1: config 0 has no interfaces? [ 217.993014][ T4295] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 218.101872][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.117881][ T4295] usb 2-1: Product: syz [ 218.132063][ T4295] usb 2-1: Manufacturer: syz [ 218.136782][ T4295] usb 2-1: SerialNumber: syz [ 218.151326][ T4295] usb 2-1: config 0 descriptor?? [ 218.398087][ T4295] usb 2-1: USB disconnect, device number 6 [ 222.001247][ T6639] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 224.406220][ T6647] netlink: 272 bytes leftover after parsing attributes in process `syz.2.994'. [ 225.613792][ T6685] loop1: detected capacity change from 0 to 512 [ 225.728882][ T6685] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1013: inode has both inline data and extents flags [ 225.834430][ T6685] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1013: couldn't read orphan inode 15 (err -117) [ 225.872440][ T6685] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.155585][ T6701] loop4: detected capacity change from 0 to 512 [ 226.221555][ T6700] loop1: detected capacity change from 0 to 2048 [ 226.475003][ T6700] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.385387][ T6714] overlayfs: failed to resolve './file0': -2 [ 227.677804][ T6721] loop4: detected capacity change from 0 to 128 [ 227.996792][ T6727] netlink: 'syz.4.1026': attribute type 4 has an invalid length. [ 230.189962][ T6812] loop2: detected capacity change from 0 to 128 [ 230.494376][ T6821] loop4: detected capacity change from 0 to 512 [ 230.582113][ T1108] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 230.633254][ T6821] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.1066: ea_inode with extended attributes [ 230.728727][ T6821] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1066: error while reading EA inode 11 err=-117 [ 230.782563][ T1108] usb 4-1: device descriptor read/64, error -71 [ 230.782934][ T6821] EXT4-fs (loop4): 1 orphan inode deleted [ 230.855658][ T6821] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 231.062070][ T1108] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 231.175003][ T6835] binder: 6834:6835 ioctl c0306201 200000000080 returned -14 [ 231.252359][ T1108] usb 4-1: device descriptor read/64, error -71 [ 231.756211][ T1108] usb usb4-port1: attempt power cycle [ 232.172164][ T1108] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 232.292332][ T1108] usb 4-1: device descriptor read/8, error -71 [ 232.572220][ T1108] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 232.672253][ T1108] usb 4-1: device descriptor read/8, error -71 [ 232.792407][ T1108] usb usb4-port1: unable to enumerate USB device [ 232.836789][ T6862] binder: 6861:6862 ioctl c0306201 200000000080 returned -14 [ 237.622080][ T1108] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 238.042376][ T1108] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.092276][ T1108] usb 3-1: not running at top speed; connect to a high speed hub [ 238.172253][ T1108] usb 3-1: config 0 has no interfaces? [ 238.335817][ T1108] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 238.396697][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.412071][ T1108] usb 3-1: Product: syz [ 238.416321][ T1108] usb 3-1: Manufacturer: syz [ 238.420938][ T1108] usb 3-1: SerialNumber: syz [ 238.443571][ T1108] usb 3-1: config 0 descriptor?? [ 238.691828][ T1108] usb 3-1: USB disconnect, device number 7 [ 239.204272][ T6945] 9pnet: Insufficient options for proto=fd [ 239.296242][ T6947] loop4: detected capacity change from 0 to 2048 [ 239.423316][ T6947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.450536][ T26] audit: type=1800 audit(1763193597.007:6): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1122" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 239.861850][ T6964] loop1: detected capacity change from 0 to 512 [ 240.920490][ T6980] 9pnet: Insufficient options for proto=fd [ 240.930079][ T6982] fuse: Unknown parameter 'user_id00000000000000000000' [ 241.639316][ T7001] overlayfs: failed to resolve './file0': -2 [ 241.899508][ T7010] loop3: detected capacity change from 0 to 512 [ 242.042577][ T7010] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.1148: ea_inode with extended attributes [ 242.159545][ T7010] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1148: error while reading EA inode 11 err=-117 [ 242.244613][ T7010] EXT4-fs (loop3): 1 orphan inode deleted [ 242.250393][ T7010] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 242.409582][ T7025] loop5: detected capacity change from 0 to 7 [ 242.462279][ T7025] Dev loop5: unable to read RDB block 7 [ 242.491915][ T7025] loop5: unable to read partition table [ 242.549752][ T7025] loop5: partition table beyond EOD, truncated [ 242.572274][ T7025] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 242.803982][ T7036] loop3: detected capacity change from 0 to 128 [ 242.812314][ T4239] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 243.182210][ T4239] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.212114][ T4239] usb 1-1: config 0 has no interfaces? [ 243.393506][ T4239] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 243.411028][ T4239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.438370][ T4239] usb 1-1: Product: syz [ 243.449073][ T4239] usb 1-1: Manufacturer: syz [ 243.459191][ T4239] usb 1-1: SerialNumber: syz [ 243.489850][ T4239] usb 1-1: config 0 descriptor?? [ 243.768519][ T4273] usb 1-1: USB disconnect, device number 8 [ 245.914677][ T7072] netlink: 'syz.1.1175': attribute type 4 has an invalid length. [ 247.279012][ T7103] loop4: detected capacity change from 0 to 512 [ 248.620314][ T7122] loop2: detected capacity change from 0 to 2048 [ 248.716229][ T7122] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.876191][ T26] audit: type=1800 audit(1763193606.437:7): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1197" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 250.489051][ T7152] binder: 7151:7152 ioctl c0306201 200000000080 returned -14 [ 252.053762][ T7206] 9pnet: Insufficient options for proto=fd [ 252.242110][ T4252] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 252.508292][ T7222] loop3: detected capacity change from 0 to 2048 [ 252.612282][ T4252] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 252.636598][ T4252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.656269][ T7222] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.719787][ T4252] usb 3-1: config 0 has no interface number 0 [ 252.745521][ T26] audit: type=1800 audit(1763193610.297:8): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1243" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 252.947255][ T4252] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 252.983983][ T4252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.995058][ T7237] netlink: 'syz.1.1249': attribute type 4 has an invalid length. [ 253.018913][ T4252] usb 3-1: Product: syz [ 253.036840][ T4252] usb 3-1: Manufacturer: syz [ 253.060674][ T4252] usb 3-1: SerialNumber: syz [ 253.068078][ T4252] usb 3-1: config 0 descriptor?? [ 253.255131][ T7245] loop0: detected capacity change from 0 to 128 [ 253.383527][ T4252] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 253.391582][ T4252] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 253.432960][ T4252] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 253.462104][ T4252] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 253.469911][ T4252] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 253.885419][ T4252] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 253.922115][ T4252] usb 3-1: USB disconnect, device number 8 [ 253.954799][ T4252] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 253.995498][ T4252] keyspan 3-1:0.133: device disconnected [ 254.008571][ T7260] netlink: 'syz.2.1261': attribute type 4 has an invalid length. [ 254.372296][ T4295] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 254.782332][ T4295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.822331][ T4295] usb 1-1: not running at top speed; connect to a high speed hub [ 254.918141][ T4295] usb 1-1: config 0 has no interfaces? [ 255.087258][ T4295] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 255.112690][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.149197][ T4295] usb 1-1: Product: syz [ 255.162060][ T4295] usb 1-1: Manufacturer: syz [ 255.172081][ T4295] usb 1-1: SerialNumber: syz [ 255.188999][ T4295] usb 1-1: config 0 descriptor?? [ 255.445636][ T4295] usb 1-1: USB disconnect, device number 9 [ 255.515331][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.521691][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.647078][ T7285] loop4: detected capacity change from 0 to 512 [ 256.180584][ T7290] loop0: detected capacity change from 0 to 128 [ 257.146206][ T7304] fuse: Unknown parameter 'fd0x0000000000000009' [ 257.393708][ T7312] loop0: detected capacity change from 0 to 512 [ 258.314273][ T7331] loop3: detected capacity change from 0 to 512 [ 258.503195][ T7331] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.1293: ea_inode with extended attributes [ 258.602339][ T7331] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1293: error while reading EA inode 11 err=-117 [ 258.642877][ T7331] EXT4-fs (loop3): 1 orphan inode deleted [ 258.653961][ T7331] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 259.066634][ T7357] loop3: detected capacity change from 0 to 512 [ 259.104767][ T7359] 9pnet: Insufficient options for proto=fd [ 259.214612][ T7357] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1305: inode has both inline data and extents flags [ 259.257082][ T7357] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1305: couldn't read orphan inode 15 (err -117) [ 259.288722][ T7357] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.906019][ T7384] 9pnet: Insufficient options for proto=fd [ 260.762077][ T4193] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 261.173190][ T4193] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 261.195000][ T4193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.240688][ T4193] usb 4-1: config 0 has no interface number 0 [ 261.440246][ T4193] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 261.459562][ T4193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.482165][ T4193] usb 4-1: Product: syz [ 261.486365][ T4193] usb 4-1: Manufacturer: syz [ 261.501212][ T4193] usb 4-1: SerialNumber: syz [ 261.552183][ T4193] usb 4-1: config 0 descriptor?? [ 261.863463][ T4193] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 261.871181][ T4193] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 261.887578][ T4193] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 261.898957][ T4193] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 261.899921][ T7437] 9pnet: Insufficient options for proto=fd [ 261.907257][ T4193] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 261.929163][ T4193] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 262.067541][ T4193] usb 4-1: USB disconnect, device number 9 [ 262.093597][ T4193] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 262.114635][ T4193] keyspan 4-1:0.133: device disconnected [ 262.315944][ T7445] binder: 7444:7445 ioctl c0306201 200000000080 returned -14 [ 263.024004][ T7468] binder: 7467:7468 ioctl c0306201 200000000080 returned -14 [ 263.475289][ T4193] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 263.541923][ T7482] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 263.881911][ T7492] binder: 7491:7492 ioctl c0306201 200000000080 returned -14 [ 263.902261][ T4193] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.922264][ T4193] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.013570][ T7496] binder: 7495:7496 ioctl c0306201 200000000080 returned -14 [ 264.142385][ T4193] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 264.160643][ T4193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.195101][ T4193] usb 3-1: Product: syz [ 264.208368][ T4193] usb 3-1: Manufacturer: syz [ 264.222093][ T4193] usb 3-1: SerialNumber: syz [ 264.245279][ T4193] usb 3-1: config 0 descriptor?? [ 264.748544][ T4193] usb 3-1: USB disconnect, device number 9 [ 265.551242][ T7541] netlink: 'syz.4.1377': attribute type 4 has an invalid length. [ 266.012159][ T4295] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 266.370076][ T7560] loop3: detected capacity change from 0 to 512 [ 266.387848][ T4295] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 266.397692][ T4295] usb 5-1: config 0 has no interface number 0 [ 266.404283][ T13] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 266.412195][ T4295] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.542986][ T7560] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1401: inode has both inline data and extents flags [ 266.574916][ T7560] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1401: couldn't read orphan inode 15 (err -117) [ 266.582871][ T4295] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 266.602101][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.610240][ T4295] usb 5-1: Product: syz [ 266.614699][ T4295] usb 5-1: Manufacturer: syz [ 266.619312][ T4295] usb 5-1: SerialNumber: syz [ 266.633134][ T4295] usb 5-1: config 0 descriptor?? [ 266.642235][ T7560] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.784517][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.798513][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.899401][ T7564] loop3: detected capacity change from 0 to 2048 [ 266.928339][ T4295] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 266.942527][ T4295] keyspan 5-1:0.133: unsupported endpoint type 0 [ 266.959993][ T4295] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 266.972253][ T13] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 266.981482][ T4295] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 267.008021][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.022121][ T4295] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 267.040200][ T13] usb 3-1: Product: syz [ 267.044912][ T13] usb 3-1: Manufacturer: syz [ 267.049638][ T13] usb 3-1: SerialNumber: syz [ 267.052678][ T7564] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.056313][ T4295] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 267.090781][ T13] usb 3-1: config 0 descriptor?? [ 267.105813][ T26] audit: type=1800 audit(1763193624.667:9): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1402" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 267.201621][ T4295] usb 5-1: USB disconnect, device number 5 [ 267.384731][ T4295] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 267.395892][ T4295] keyspan 5-1:0.133: device disconnected [ 268.162126][ T7575] netlink: 'syz.4.1405': attribute type 4 has an invalid length. [ 268.752061][ T4295] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 268.985019][ T7600] loop4: detected capacity change from 0 to 2048 [ 269.065642][ T7600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.098499][ T26] audit: type=1800 audit(1763193626.657:10): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1418" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 269.122262][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 269.133618][ T4295] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 269.143210][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.153792][ T4295] usb 2-1: config 0 descriptor?? [ 269.168717][ T13] usb 3-1: USB disconnect, device number 10 [ 269.175533][ T7590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 269.492278][ T4295] usbhid 2-1:0.0: can't add hid device: -71 [ 269.498346][ T4295] usbhid: probe of 2-1:0.0 failed with error -71 [ 269.566644][ T4295] usb 2-1: USB disconnect, device number 7 [ 269.808952][ T7614] binder: 7613:7614 ioctl c0306201 200000000080 returned -14 [ 272.028905][ T7646] loop0: detected capacity change from 0 to 512 [ 272.350421][ T7646] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1440: inode has both inline data and extents flags [ 272.400178][ T7646] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1440: couldn't read orphan inode 15 (err -117) [ 272.657512][ T7646] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.409859][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 273.439324][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.497748][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.519616][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.546081][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.782086][ T13] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 275.152198][ T13] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 275.180772][ T13] usb 2-1: config 0 has no interface number 0 [ 275.201064][ T13] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.382300][ T13] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 275.391735][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.422236][ T13] usb 2-1: Product: syz [ 275.426443][ T13] usb 2-1: Manufacturer: syz [ 275.431061][ T13] usb 2-1: SerialNumber: syz [ 275.484426][ T13] usb 2-1: config 0 descriptor?? [ 275.763423][ T13] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 275.792105][ T13] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 275.800003][ T13] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 275.840127][ T13] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 275.882344][ T13] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 275.920744][ T13] usb 2-1: USB disconnect, device number 8 [ 275.975227][ T13] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 276.012697][ T13] keyspan 2-1:0.133: device disconnected [ 277.027920][ T7689] loop3: detected capacity change from 0 to 256 [ 277.091235][ T7689] FAT-fs (loop3): Directory bread(block 64) failed [ 277.132144][ T7689] FAT-fs (loop3): Directory bread(block 65) failed [ 277.142912][ T7689] FAT-fs (loop3): Directory bread(block 66) failed [ 277.170732][ T7689] FAT-fs (loop3): Directory bread(block 67) failed [ 277.188369][ T7689] FAT-fs (loop3): Directory bread(block 68) failed [ 277.198464][ T7689] FAT-fs (loop3): Directory bread(block 69) failed [ 277.217045][ T7689] FAT-fs (loop3): Directory bread(block 70) failed [ 277.227127][ T7689] FAT-fs (loop3): Directory bread(block 71) failed [ 277.239722][ T7689] FAT-fs (loop3): Directory bread(block 72) failed [ 277.259880][ T7689] FAT-fs (loop3): Directory bread(block 73) failed [ 277.369745][ T26] audit: type=1800 audit(1763193634.927:11): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1459" name="bus" dev="loop3" ino=1048626 res=0 errno=0 [ 277.389711][ T7689] attempt to access beyond end of device [ 277.389711][ T7689] loop3: rw=2049, want=1876, limit=256 [ 278.326876][ T7708] binder: 7707:7708 ioctl c0306201 200000000080 returned -14 [ 278.823326][ T7717] overlayfs: failed to resolve './file0': -2 [ 280.501775][ T7742] 9pnet: Insufficient options for proto=fd [ 280.719784][ T7752] loop5: detected capacity change from 0 to 7 [ 280.751671][ T7752] Dev loop5: unable to read RDB block 7 [ 280.782090][ T7752] loop5: unable to read partition table [ 280.803815][ T7756] loop0: detected capacity change from 0 to 512 [ 280.814632][ T7752] loop5: partition table beyond EOD, truncated [ 280.841853][ T7752] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 280.914533][ T7756] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.1488: ea_inode with extended attributes [ 281.027795][ T7756] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1488: error while reading EA inode 11 err=-117 [ 281.115686][ T7756] EXT4-fs (loop0): 1 orphan inode deleted [ 281.151269][ T7766] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 281.152070][ T7756] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 282.206741][ T4193] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 282.638855][ T4193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 282.656620][ T4193] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 282.686757][ T4193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.709028][ T4193] usb 2-1: config 0 descriptor?? [ 282.747289][ T7795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 282.919031][ T7799] loop5: detected capacity change from 0 to 7 [ 282.939728][ T4488] Dev loop5: unable to read RDB block 7 [ 282.952742][ T4488] loop5: unable to read partition table [ 282.969297][ T4488] loop5: partition table beyond EOD, truncated [ 282.991608][ T7799] Dev loop5: unable to read RDB block 7 [ 283.006287][ T7799] loop5: unable to read partition table [ 283.032534][ T7799] loop5: partition table beyond EOD, truncated [ 283.048538][ T7799] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 283.088261][ T4193] usbhid 2-1:0.0: can't add hid device: -71 [ 283.094697][ T3561] Dev loop5: unable to read RDB block 7 [ 283.100572][ T3561] loop5: unable to read partition table [ 283.112192][ T4193] usbhid: probe of 2-1:0.0 failed with error -71 [ 283.129067][ T3561] loop5: partition table beyond EOD, truncated [ 283.136112][ T4193] usb 2-1: USB disconnect, device number 9 [ 283.802955][ T7816] 9pnet: Insufficient options for proto=fd [ 283.898401][ T7819] loop0: detected capacity change from 0 to 128 [ 285.186810][ T7850] loop0: detected capacity change from 0 to 512 [ 285.316440][ T7850] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1529: inode has both inline data and extents flags [ 285.415324][ T7850] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1529: couldn't read orphan inode 15 (err -117) [ 285.507055][ T7850] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 285.796096][ T7862] loop2: detected capacity change from 0 to 256 [ 286.019138][ T7862] FAT-fs (loop2): Directory bread(block 64) failed [ 286.054499][ T7862] FAT-fs (loop2): Directory bread(block 65) failed [ 286.106562][ T7862] FAT-fs (loop2): Directory bread(block 66) failed [ 286.122111][ T7862] FAT-fs (loop2): Directory bread(block 67) failed [ 286.149262][ T7862] FAT-fs (loop2): Directory bread(block 68) failed [ 286.182169][ T7862] FAT-fs (loop2): Directory bread(block 69) failed [ 286.199165][ T7862] FAT-fs (loop2): Directory bread(block 70) failed [ 286.219432][ T7862] FAT-fs (loop2): Directory bread(block 71) failed [ 286.231582][ T7862] FAT-fs (loop2): Directory bread(block 72) failed [ 286.251863][ T7862] FAT-fs (loop2): Directory bread(block 73) failed [ 286.410326][ T7874] overlayfs: missing 'workdir' [ 286.420392][ T26] audit: type=1800 audit(1763193643.977:12): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1521" name="bus" dev="loop2" ino=1048627 res=0 errno=0 [ 287.608785][ T7905] loop4: detected capacity change from 0 to 128 [ 290.452292][ T13] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 290.852206][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.902243][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 290.982204][ T13] usb 3-1: config 0 has no interfaces? [ 291.142131][ T13] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 291.163635][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.199753][ T13] usb 3-1: Product: syz [ 291.212105][ T13] usb 3-1: Manufacturer: syz [ 291.226864][ T13] usb 3-1: SerialNumber: syz [ 291.246639][ T13] usb 3-1: config 0 descriptor?? [ 291.506217][ T4273] usb 3-1: USB disconnect, device number 11 [ 292.853704][ T7999] loop2: detected capacity change from 0 to 512 [ 293.136447][ T4193] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 294.272233][ T4193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.295939][ T4193] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 294.446353][ T8025] loop2: detected capacity change from 0 to 512 [ 294.512322][ T4193] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 294.536405][ T4193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.589102][ T8025] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1605: inode has both inline data and extents flags [ 294.619709][ T4193] usb 5-1: Product: syz [ 294.652490][ T4193] usb 5-1: Manufacturer: syz [ 294.666888][ T8025] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1605: couldn't read orphan inode 15 (err -117) [ 294.699638][ T4193] usb 5-1: SerialNumber: syz [ 294.737806][ T4193] usb 5-1: config 0 descriptor?? [ 294.772369][ T8025] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.070127][ T4193] usb 5-1: USB disconnect, device number 6 [ 295.079878][ T8040] loop0: detected capacity change from 0 to 512 [ 296.314491][ T26] audit: type=1326 audit(1763193653.877:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 296.402836][ T26] audit: type=1326 audit(1763193653.877:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 296.504432][ T26] audit: type=1326 audit(1763193653.907:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 296.559370][ T26] audit: type=1326 audit(1763193653.907:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 296.649798][ T26] audit: type=1326 audit(1763193653.907:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 296.686637][ T26] audit: type=1326 audit(1763193653.927:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 296.716726][ T26] audit: type=1326 audit(1763193653.927:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 296.786998][ T26] audit: type=1326 audit(1763193653.927:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 296.812350][ T4295] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 297.032235][ T13] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 297.172332][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 297.195138][ T4295] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 297.224933][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.263739][ T4295] usb 5-1: config 0 descriptor?? [ 297.292287][ T8062] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 297.406645][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.432215][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.612191][ T4295] usbhid 5-1:0.0: can't add hid device: -71 [ 297.618335][ T13] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 297.627845][ T4295] usbhid: probe of 5-1:0.0 failed with error -71 [ 297.644484][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.674864][ T4295] usb 5-1: USB disconnect, device number 7 [ 297.684975][ T13] usb 3-1: Product: syz [ 297.689173][ T13] usb 3-1: Manufacturer: syz [ 297.710368][ T13] usb 3-1: SerialNumber: syz [ 297.739371][ T13] usb 3-1: config 0 descriptor?? [ 297.938781][ T8073] loop1: detected capacity change from 0 to 512 [ 298.052237][ T13] usb 3-1: USB disconnect, device number 12 [ 299.134602][ T8085] loop1: detected capacity change from 0 to 256 [ 299.232706][ T8085] FAT-fs (loop1): Directory bread(block 64) failed [ 299.266569][ T8085] FAT-fs (loop1): Directory bread(block 65) failed [ 299.302551][ T8085] FAT-fs (loop1): Directory bread(block 66) failed [ 299.331329][ T8085] FAT-fs (loop1): Directory bread(block 67) failed [ 299.360190][ T8085] FAT-fs (loop1): Directory bread(block 68) failed [ 299.398688][ T8085] FAT-fs (loop1): Directory bread(block 69) failed [ 299.425225][ T8085] FAT-fs (loop1): Directory bread(block 70) failed [ 299.453210][ T8085] FAT-fs (loop1): Directory bread(block 71) failed [ 299.486011][ T8085] FAT-fs (loop1): Directory bread(block 72) failed [ 299.506651][ T8085] FAT-fs (loop1): Directory bread(block 73) failed [ 299.887621][ T8103] loop1: detected capacity change from 0 to 2048 [ 299.931512][ T8107] loop2: detected capacity change from 0 to 512 [ 300.107588][ T8103] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.212341][ T26] audit: type=1800 audit(1763193657.777:21): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1637" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 301.333662][ T8124] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1642'. [ 301.945330][ T8134] overlayfs: failed to resolve './file1': -2 [ 303.623909][ T8171] loop2: detected capacity change from 0 to 512 [ 307.291579][ T8220] loop2: detected capacity change from 0 to 512 [ 307.936066][ T8230] loop5: detected capacity change from 0 to 7 [ 307.960878][ T4345] Dev loop5: unable to read RDB block 7 [ 307.972486][ T4345] loop5: unable to read partition table [ 307.989005][ T4345] loop5: partition table beyond EOD, truncated [ 308.020272][ T8230] Dev loop5: unable to read RDB block 7 [ 308.032125][ T8230] loop5: unable to read partition table [ 308.053580][ T8230] loop5: partition table beyond EOD, truncated [ 308.085991][ T8230] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 309.886841][ T8262] loop2: detected capacity change from 0 to 256 [ 309.902664][ T8264] binder: 8263:8264 ioctl c0306201 200000000080 returned -14 [ 310.087944][ T8262] FAT-fs (loop2): Directory bread(block 64) failed [ 310.102043][ T8262] FAT-fs (loop2): Directory bread(block 65) failed [ 310.109212][ T8262] FAT-fs (loop2): Directory bread(block 66) failed [ 310.155582][ T8262] FAT-fs (loop2): Directory bread(block 67) failed [ 310.174832][ T8262] FAT-fs (loop2): Directory bread(block 68) failed [ 310.181518][ T8262] FAT-fs (loop2): Directory bread(block 69) failed [ 310.219779][ T8262] FAT-fs (loop2): Directory bread(block 70) failed [ 310.236931][ T8262] FAT-fs (loop2): Directory bread(block 71) failed [ 310.256586][ T8262] FAT-fs (loop2): Directory bread(block 72) failed [ 310.286427][ T8262] FAT-fs (loop2): Directory bread(block 73) failed [ 310.456986][ T26] audit: type=1800 audit(1763193668.017:22): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1706" name="bus" dev="loop2" ino=1048628 res=0 errno=0 [ 310.994021][ T8276] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1710'. [ 311.603020][ T8292] binder: 8291:8292 ioctl c0306201 200000000080 returned -14 [ 311.805002][ T8298] loop0: detected capacity change from 0 to 256 [ 311.898181][ T8298] FAT-fs (loop0): Directory bread(block 64) failed [ 311.919073][ T8298] FAT-fs (loop0): Directory bread(block 65) failed [ 311.938904][ T8298] FAT-fs (loop0): Directory bread(block 66) failed [ 311.977604][ T8298] FAT-fs (loop0): Directory bread(block 67) failed [ 312.008059][ T8298] FAT-fs (loop0): Directory bread(block 68) failed [ 312.031821][ T8298] FAT-fs (loop0): Directory bread(block 69) failed [ 312.053557][ T8298] FAT-fs (loop0): Directory bread(block 70) failed [ 312.074363][ T8298] FAT-fs (loop0): Directory bread(block 71) failed [ 312.094629][ T8298] FAT-fs (loop0): Directory bread(block 72) failed [ 312.117433][ T8298] FAT-fs (loop0): Directory bread(block 73) failed [ 312.243293][ T26] audit: type=1800 audit(1763193669.807:23): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1720" name="bus" dev="loop0" ino=1048629 res=0 errno=0 [ 312.837254][ T8324] loop1: detected capacity change from 0 to 2048 [ 312.919951][ T8328] loop2: detected capacity change from 0 to 256 [ 312.945098][ T8324] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.989130][ T26] audit: type=1800 audit(1763193670.547:24): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1733" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 313.198960][ T8328] FAT-fs (loop2): Directory bread(block 64) failed [ 313.217703][ T8328] FAT-fs (loop2): Directory bread(block 65) failed [ 313.266984][ T8328] FAT-fs (loop2): Directory bread(block 66) failed [ 313.282249][ T8328] FAT-fs (loop2): Directory bread(block 67) failed [ 313.288872][ T8328] FAT-fs (loop2): Directory bread(block 68) failed [ 313.411754][ T8328] FAT-fs (loop2): Directory bread(block 69) failed [ 313.726923][ T8328] FAT-fs (loop2): Directory bread(block 70) failed [ 313.796664][ T8328] FAT-fs (loop2): Directory bread(block 71) failed [ 313.834570][ T8328] FAT-fs (loop2): Directory bread(block 72) failed [ 313.910025][ T8328] FAT-fs (loop2): Directory bread(block 73) failed [ 314.029274][ T26] audit: type=1800 audit(1763193671.587:25): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1735" name="bus" dev="loop2" ino=1048630 res=0 errno=0 [ 314.248571][ T4584] attempt to access beyond end of device [ 314.248571][ T4584] loop2: rw=1, want=1876, limit=256 [ 314.411128][ T8361] loop0: detected capacity change from 0 to 256 [ 314.504653][ T8361] FAT-fs (loop0): Directory bread(block 64) failed [ 314.540373][ T8361] FAT-fs (loop0): Directory bread(block 65) failed [ 314.547503][ T8361] FAT-fs (loop0): Directory bread(block 66) failed [ 314.559017][ T8361] FAT-fs (loop0): Directory bread(block 67) failed [ 314.566184][ T8361] FAT-fs (loop0): Directory bread(block 68) failed [ 314.577841][ T8361] FAT-fs (loop0): Directory bread(block 69) failed [ 314.596870][ T8361] FAT-fs (loop0): Directory bread(block 70) failed [ 314.616647][ T8361] FAT-fs (loop0): Directory bread(block 71) failed [ 314.642312][ T8361] FAT-fs (loop0): Directory bread(block 72) failed [ 314.659170][ T8361] FAT-fs (loop0): Directory bread(block 73) failed [ 314.767082][ T26] audit: type=1800 audit(1763193672.327:26): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1748" name="bus" dev="loop0" ino=1048631 res=0 errno=0 [ 314.805666][ T8361] attempt to access beyond end of device [ 314.805666][ T8361] loop0: rw=2049, want=1876, limit=256 [ 314.983271][ T8373] loop2: detected capacity change from 0 to 2048 [ 315.066512][ T8373] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 315.087587][ T26] audit: type=1800 audit(1763193672.647:27): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1753" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 316.487810][ T8404] loop0: detected capacity change from 0 to 512 [ 316.591229][ T8404] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1765: inode has both inline data and extents flags [ 316.612688][ T8404] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1765: couldn't read orphan inode 15 (err -117) [ 316.670939][ T8404] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 316.957932][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.964392][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.486390][ T8431] loop0: detected capacity change from 0 to 2048 [ 317.494528][ T8434] loop5: detected capacity change from 0 to 7 [ 317.515560][ T4345] Dev loop5: unable to read RDB block 7 [ 317.521300][ T4345] loop5: unable to read partition table [ 317.535848][ T4345] loop5: partition table beyond EOD, truncated [ 317.559496][ T8434] Dev loop5: unable to read RDB block 7 [ 317.582965][ T8434] loop5: unable to read partition table [ 317.594674][ T8434] loop5: partition table beyond EOD, truncated [ 317.610362][ T4488] Alternate GPT is invalid, using primary GPT. [ 317.612675][ T8434] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 317.638821][ T3561] Dev loop5: unable to read RDB block 7 [ 317.639303][ T4488] loop0: p2 p3 p7 [ 317.647293][ T3561] loop5: unable to read partition table [ 317.660819][ T3561] loop5: partition table beyond EOD, truncated [ 317.712401][ T8431] Alternate GPT is invalid, using primary GPT. [ 317.718752][ T8431] loop0: p2 p3 p7 [ 317.847632][ T3561] Alternate GPT is invalid, using primary GPT. [ 317.854561][ T8442] binder: 8441:8442 ioctl c0306201 200000000080 returned -14 [ 317.858373][ T3561] loop0: p2 p3 p7 [ 318.021801][ T8453] loop1: detected capacity change from 0 to 256 [ 318.101525][ T8453] FAT-fs (loop1): Directory bread(block 64) failed [ 318.119615][ T8453] FAT-fs (loop1): Directory bread(block 65) failed [ 318.136839][ T8453] FAT-fs (loop1): Directory bread(block 66) failed [ 318.151558][ T8453] FAT-fs (loop1): Directory bread(block 67) failed [ 318.169948][ T8453] FAT-fs (loop1): Directory bread(block 68) failed [ 318.191734][ T8453] FAT-fs (loop1): Directory bread(block 69) failed [ 318.202618][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 318.211708][ T8453] FAT-fs (loop1): Directory bread(block 70) failed [ 318.225286][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 318.239185][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 318.256742][ T8453] FAT-fs (loop1): Directory bread(block 71) failed [ 318.268140][ T8453] FAT-fs (loop1): Directory bread(block 72) failed [ 318.277451][ T8453] FAT-fs (loop1): Directory bread(block 73) failed [ 318.289573][ T8463] loop4: detected capacity change from 0 to 128 [ 318.341315][ T26] audit: type=1800 audit(1763193675.897:28): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1787" name="bus" dev="loop1" ino=1048632 res=0 errno=0 [ 318.355614][ T8453] attempt to access beyond end of device [ 318.355614][ T8453] loop1: rw=2049, want=1876, limit=256 [ 318.584669][ T8474] loop5: detected capacity change from 0 to 7 [ 318.593974][ T4345] Dev loop5: unable to read RDB block 7 [ 318.612090][ T4345] loop5: unable to read partition table [ 318.618934][ T4345] loop5: partition table beyond EOD, truncated [ 318.629979][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 318.643895][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 318.656955][ T8474] Dev loop5: unable to read RDB block 7 [ 318.661250][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 318.683953][ T8474] loop5: unable to read partition table [ 318.721776][ T8474] loop5: partition table beyond EOD, truncated [ 318.741044][ T8474] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 318.830519][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 318.848545][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 318.855045][ T8479] binder: 8478:8479 ioctl c0306201 200000000080 returned -14 [ 318.871720][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 319.287872][ T8495] binder: 8493:8495 ioctl c0306201 200000000080 returned -14 [ 319.627976][ T8505] loop5: detected capacity change from 0 to 7 [ 319.646957][ T8505] Dev loop5: unable to read RDB block 7 [ 319.662975][ T8505] loop5: unable to read partition table [ 319.678065][ T8505] loop5: partition table beyond EOD, truncated [ 319.702735][ T8505] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 319.810280][ T8510] loop5: detected capacity change from 0 to 7 [ 319.830456][ T8510] Dev loop5: unable to read RDB block 7 [ 319.868717][ T8510] loop5: unable to read partition table [ 319.888987][ T8510] loop5: partition table beyond EOD, truncated [ 319.907627][ T8510] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 320.229156][ T8520] binder: 8519:8520 ioctl c0306201 200000000080 returned -14 [ 320.427126][ T8525] loop3: detected capacity change from 0 to 512 [ 321.117556][ T8541] device syzkaller0 entered promiscuous mode [ 322.873496][ T8574] loop2: detected capacity change from 0 to 512 [ 323.916509][ T4273] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 324.196497][ T4273] usb 1-1: Using ep0 maxpacket: 8 [ 324.338065][ T4273] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 324.361568][ T4273] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 324.384846][ T4273] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.401860][ T4273] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 324.422031][ T4273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.439496][ T4273] usb 1-1: config 0 descriptor?? [ 324.803568][ T4273] usbhid 1-1:0.0: can't add hid device: -71 [ 324.809595][ T4273] usbhid: probe of 1-1:0.0 failed with error -71 [ 324.850674][ T4273] usb 1-1: USB disconnect, device number 10 [ 324.991360][ T8597] loop2: detected capacity change from 0 to 128 [ 325.643691][ T8613] loop4: detected capacity change from 0 to 128 [ 325.800442][ T8617] loop2: detected capacity change from 0 to 512 [ 326.141014][ T8623] netlink: 'syz.4.1863': attribute type 4 has an invalid length. [ 326.240209][ T8625] loop3: detected capacity change from 0 to 512 [ 326.318898][ T8625] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1865: inode has both inline data and extents flags [ 326.352820][ T8625] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1865: couldn't read orphan inode 15 (err -117) [ 326.399467][ T8625] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.857600][ T8639] loop1: detected capacity change from 0 to 128 [ 327.061385][ T8643] binder: 8642:8643 ioctl c0306201 200000000080 returned -14 [ 327.461620][ T8651] loop3: detected capacity change from 0 to 256 [ 327.569253][ T8651] FAT-fs (loop3): Directory bread(block 64) failed [ 327.593802][ T8651] FAT-fs (loop3): Directory bread(block 65) failed [ 327.620878][ T8651] FAT-fs (loop3): Directory bread(block 66) failed [ 327.646793][ T8651] FAT-fs (loop3): Directory bread(block 67) failed [ 327.667071][ T8651] FAT-fs (loop3): Directory bread(block 68) failed [ 327.688433][ T8651] FAT-fs (loop3): Directory bread(block 69) failed [ 327.712148][ T8651] FAT-fs (loop3): Directory bread(block 70) failed [ 327.739428][ T8651] FAT-fs (loop3): Directory bread(block 71) failed [ 327.752689][ T8651] FAT-fs (loop3): Directory bread(block 72) failed [ 327.779974][ T8651] FAT-fs (loop3): Directory bread(block 73) failed [ 327.897963][ T26] audit: type=1800 audit(1763193685.457:29): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1876" name="bus" dev="loop3" ino=1048634 res=0 errno=0 [ 327.918743][ T8651] attempt to access beyond end of device [ 327.918743][ T8651] loop3: rw=2049, want=1876, limit=256 [ 328.612048][ T4273] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 328.901196][ T8682] loop2: detected capacity change from 0 to 512 [ 329.042318][ T4273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 329.106778][ T4273] usb 5-1: not running at top speed; connect to a high speed hub [ 329.222328][ T4273] usb 5-1: config 0 has no interfaces? [ 329.412250][ T4273] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 329.441668][ T4273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.461981][ T4273] usb 5-1: Product: syz [ 329.466180][ T4273] usb 5-1: Manufacturer: syz [ 329.493159][ T4273] usb 5-1: SerialNumber: syz [ 329.513289][ T4273] usb 5-1: config 0 descriptor?? [ 329.786697][ T4273] usb 5-1: USB disconnect, device number 8 [ 329.786946][ T8693] netlink: 'syz.0.1892': attribute type 4 has an invalid length. [ 330.957703][ T8717] binder: 8716:8717 ioctl c0306201 200000000080 returned -14 [ 331.113584][ T8720] netlink: 'syz.0.1904': attribute type 4 has an invalid length. [ 331.922043][ T4252] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 332.332193][ T4252] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.373335][ T4252] usb 1-1: not running at top speed; connect to a high speed hub [ 332.482255][ T4252] usb 1-1: config 0 has no interfaces? [ 332.507960][ T8735] loop4: detected capacity change from 0 to 512 [ 332.608430][ T8739] loop5: detected capacity change from 0 to 7 [ 332.631541][ T8739] Dev loop5: unable to read RDB block 7 [ 332.638476][ T8739] loop5: unable to read partition table [ 332.645578][ T4252] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 332.663509][ T4252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.679970][ T8739] loop5: partition table beyond EOD, truncated [ 332.692159][ T4252] usb 1-1: Product: syz [ 332.692203][ T8739] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 332.696341][ T4252] usb 1-1: Manufacturer: syz [ 332.696360][ T4252] usb 1-1: SerialNumber: syz [ 332.727792][ T4252] usb 1-1: config 0 descriptor?? [ 332.742971][ T8735] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.1910: ea_inode with extended attributes [ 332.767551][ T8735] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1910: error while reading EA inode 11 err=-117 [ 332.811338][ T3561] Dev loop5: unable to read RDB block 7 [ 332.819111][ T3561] loop5: unable to read partition table [ 332.824258][ T8735] EXT4-fs (loop4): 1 orphan inode deleted [ 332.829372][ T3561] loop5: partition table beyond EOD, truncated [ 332.831062][ T8735] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 332.977962][ T4252] usb 1-1: USB disconnect, device number 11 [ 333.099183][ T26] audit: type=1326 audit(1763193690.657:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 333.192445][ T26] audit: type=1326 audit(1763193690.657:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 333.275860][ T26] audit: type=1326 audit(1763193690.657:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 333.348830][ T26] audit: type=1326 audit(1763193690.657:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 333.472114][ T26] audit: type=1326 audit(1763193690.657:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 333.502037][ T26] audit: type=1326 audit(1763193690.657:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 334.281672][ T26] audit: type=1326 audit(1763193690.657:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 334.367443][ T26] audit: type=1326 audit(1763193690.657:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 334.390297][ T26] audit: type=1326 audit(1763193690.657:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 334.413533][ T26] audit: type=1326 audit(1763193690.657:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79bc056c9 code=0x7ffc0000 [ 334.759036][ T8764] loop3: detected capacity change from 0 to 256 [ 334.929163][ T8767] loop5: detected capacity change from 0 to 7 [ 334.932446][ T8764] FAT-fs (loop3): Directory bread(block 64) failed [ 334.986864][ T8477] Dev loop5: unable to read RDB block 7 [ 335.007068][ T8764] FAT-fs (loop3): Directory bread(block 65) failed [ 335.013613][ T8477] loop5: unable to read partition table [ 335.032111][ T8764] FAT-fs (loop3): Directory bread(block 66) failed [ 335.038689][ T8764] FAT-fs (loop3): Directory bread(block 67) failed [ 335.038720][ T8477] loop5: partition table beyond EOD, truncated [ 335.079903][ T8764] FAT-fs (loop3): Directory bread(block 68) failed [ 335.088926][ T8767] Dev loop5: unable to read RDB block 7 [ 335.094769][ T8767] loop5: unable to read partition table [ 335.122233][ T8767] loop5: partition table beyond EOD, truncated [ 335.135074][ T8764] FAT-fs (loop3): Directory bread(block 69) failed [ 335.141756][ T8764] FAT-fs (loop3): Directory bread(block 70) failed [ 335.148607][ T8767] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 335.186561][ T8764] FAT-fs (loop3): Directory bread(block 71) failed [ 335.208483][ T8764] FAT-fs (loop3): Directory bread(block 72) failed [ 335.236658][ T8764] FAT-fs (loop3): Directory bread(block 73) failed [ 335.598575][ T8772] binder: 8771:8772 ioctl c0306201 200000000080 returned -14 [ 335.720380][ T8776] loop1: detected capacity change from 0 to 512 [ 335.850754][ T8776] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.1923: ea_inode with extended attributes [ 335.877694][ T8776] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1923: error while reading EA inode 11 err=-117 [ 335.910747][ T8776] EXT4-fs (loop1): 1 orphan inode deleted [ 335.932008][ T8776] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 336.520514][ T8801] loop3: detected capacity change from 0 to 2048 [ 336.617345][ T4345] Alternate GPT is invalid, using primary GPT. [ 336.631067][ T4345] loop3: p2 p3 p7 [ 336.713857][ T8801] Alternate GPT is invalid, using primary GPT. [ 336.720288][ T8801] loop3: p2 p3 p7 [ 336.941757][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 336.941892][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 336.983265][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 337.032403][ T8805] binder: 8804:8805 ioctl c0306201 200000000080 returned -14 [ 337.060999][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 337.061145][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 337.097824][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 337.204744][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 337.215385][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 337.222112][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 338.670943][ T8828] binder: 8827:8828 ioctl c0306201 200000000080 returned -14 [ 338.859201][ T8830] loop3: detected capacity change from 0 to 512 [ 338.951469][ T8830] __quota_error: 7 callbacks suppressed [ 338.951487][ T8830] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 339.024061][ T8838] loop5: detected capacity change from 0 to 7 [ 339.031230][ T8830] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 339.041507][ T8838] Dev loop5: unable to read RDB block 7 [ 339.048211][ T8838] loop5: unable to read partition table [ 339.054121][ T8838] loop5: partition table beyond EOD, truncated [ 339.060601][ T8830] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1951: Failed to acquire dquot type 1 [ 339.062207][ T8838] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 339.119273][ T8830] EXT4-fs (loop3): 1 truncate cleaned up [ 339.125912][ T8830] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,resuid=0x0000000000000000,nodelalloc,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 339.199692][ T8830] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.613352][ T8847] loop3: detected capacity change from 0 to 256 [ 339.814154][ T8847] FAT-fs (loop3): Directory bread(block 64) failed [ 339.837376][ T8847] FAT-fs (loop3): Directory bread(block 65) failed [ 339.864469][ T8847] FAT-fs (loop3): Directory bread(block 66) failed [ 339.934184][ T8847] FAT-fs (loop3): Directory bread(block 67) failed [ 339.941536][ T8847] FAT-fs (loop3): Directory bread(block 68) failed [ 340.010976][ T8847] FAT-fs (loop3): Directory bread(block 69) failed [ 340.059034][ T8847] FAT-fs (loop3): Directory bread(block 70) failed [ 340.101537][ T8847] FAT-fs (loop3): Directory bread(block 71) failed [ 340.124923][ T8847] FAT-fs (loop3): Directory bread(block 72) failed [ 340.131504][ T8847] FAT-fs (loop3): Directory bread(block 73) failed [ 340.176206][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 340.411997][ T26] audit: type=1800 audit(1763193697.967:47): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1958" name="bus" dev="loop3" ino=1048636 res=0 errno=0 [ 340.555031][ T3077] attempt to access beyond end of device [ 340.555031][ T3077] loop3: rw=1, want=1876, limit=256 [ 341.048013][ T8871] loop1: detected capacity change from 0 to 512 [ 341.177413][ T8871] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.1961: ea_inode with extended attributes [ 341.248433][ T8871] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1961: error while reading EA inode 11 err=-117 [ 341.324197][ T8871] EXT4-fs (loop1): 1 orphan inode deleted [ 341.330119][ T8871] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 341.843075][ T8889] loop0: detected capacity change from 0 to 512 [ 341.928253][ T8889] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.1972: ea_inode with extended attributes [ 341.992182][ T4239] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 342.018971][ T8889] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1972: error while reading EA inode 11 err=-117 [ 342.092671][ T8889] EXT4-fs (loop0): 1 orphan inode deleted [ 342.098454][ T8889] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 342.412268][ T4239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 342.446556][ T4239] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 342.472324][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.498594][ T4239] usb 3-1: config 0 descriptor?? [ 342.563477][ T8885] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 342.740521][ T8908] loop1: detected capacity change from 0 to 512 [ 342.798878][ T8908] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.1980: ea_inode with extended attributes [ 342.912245][ T4239] usbhid 3-1:0.0: can't add hid device: -71 [ 342.918289][ T4239] usbhid: probe of 3-1:0.0 failed with error -71 [ 342.947675][ T8908] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1980: error while reading EA inode 11 err=-117 [ 342.962674][ T8908] EXT4-fs (loop1): 1 orphan inode deleted [ 342.979858][ T8908] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 342.984846][ T4239] usb 3-1: USB disconnect, device number 13 [ 343.382323][ T8928] loop4: detected capacity change from 0 to 2048 [ 343.531161][ T8928] Alternate GPT is invalid, using primary GPT. [ 343.546235][ T8928] loop4: p2 p3 p7 [ 343.701128][ T8935] loop1: detected capacity change from 0 to 256 [ 344.988426][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 345.004515][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 345.080006][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 345.639189][ T8949] loop4: detected capacity change from 0 to 2048 [ 345.850540][ T8949] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 345.931412][ T26] audit: type=1800 audit(1763193703.487:48): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1996" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 346.680702][ T8965] loop1: detected capacity change from 0 to 128 [ 347.225688][ T8980] loop3: detected capacity change from 0 to 256 [ 347.328740][ T8980] FAT-fs (loop3): Directory bread(block 64) failed [ 347.362401][ T8980] FAT-fs (loop3): Directory bread(block 65) failed [ 347.369068][ T8980] FAT-fs (loop3): Directory bread(block 66) failed [ 347.425239][ T8980] FAT-fs (loop3): Directory bread(block 67) failed [ 347.432316][ T8980] FAT-fs (loop3): Directory bread(block 68) failed [ 347.438894][ T8980] FAT-fs (loop3): Directory bread(block 69) failed [ 347.532213][ T8980] FAT-fs (loop3): Directory bread(block 70) failed [ 347.549137][ T8980] FAT-fs (loop3): Directory bread(block 71) failed [ 347.596102][ T8980] FAT-fs (loop3): Directory bread(block 72) failed [ 347.626306][ T8980] FAT-fs (loop3): Directory bread(block 73) failed [ 347.791145][ T26] audit: type=1800 audit(1763193705.347:49): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1995" name="bus" dev="loop3" ino=1048637 res=0 errno=0 [ 347.800510][ T8996] loop2: detected capacity change from 0 to 2048 [ 347.861004][ T8980] attempt to access beyond end of device [ 347.861004][ T8980] loop3: rw=2049, want=1876, limit=256 [ 347.991438][ T8996] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 348.132749][ T26] audit: type=1800 audit(1763193705.697:50): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2014" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 348.245224][ T9005] loop5: detected capacity change from 0 to 7 [ 348.301520][ T9005] Dev loop5: unable to read RDB block 7 [ 348.334956][ T9005] loop5: unable to read partition table [ 348.340819][ T9005] loop5: partition table beyond EOD, truncated [ 348.347201][ T9005] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 349.367743][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 349.678572][ T9023] loop3: detected capacity change from 0 to 2048 [ 349.768463][ T4345] Alternate GPT is invalid, using primary GPT. [ 349.788568][ T4345] loop3: p2 p3 p7 [ 349.840953][ T9023] Alternate GPT is invalid, using primary GPT. [ 349.872241][ T9023] loop3: p2 p3 p7 [ 350.033286][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 350.056484][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 350.069481][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 350.136932][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 350.150027][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 350.163566][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 350.294111][ T9036] loop3: detected capacity change from 0 to 512 [ 350.384752][ T9036] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.2030: ea_inode with extended attributes [ 350.520530][ T9036] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2030: error while reading EA inode 11 err=-117 [ 350.597310][ T9036] EXT4-fs (loop3): 1 orphan inode deleted [ 350.611957][ T9036] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 351.089417][ T9058] binder: 9057:9058 ioctl c0306201 0 returned -14 [ 352.080112][ T9093] loop1: detected capacity change from 0 to 2048 [ 352.189287][ T9093] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.222444][ T26] audit: type=1800 audit(1763193709.787:51): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2056" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 352.249770][ T9097] loop4: detected capacity change from 0 to 256 [ 352.619972][ T9097] FAT-fs (loop4): Directory bread(block 64) failed [ 352.645827][ T9097] FAT-fs (loop4): Directory bread(block 65) failed [ 352.695167][ T9097] FAT-fs (loop4): Directory bread(block 66) failed [ 352.773239][ T9097] FAT-fs (loop4): Directory bread(block 67) failed [ 352.826069][ T9097] FAT-fs (loop4): Directory bread(block 68) failed [ 352.832892][ T9097] FAT-fs (loop4): Directory bread(block 69) failed [ 352.839501][ T9097] FAT-fs (loop4): Directory bread(block 70) failed [ 352.846136][ T9097] FAT-fs (loop4): Directory bread(block 71) failed [ 352.853094][ T9097] FAT-fs (loop4): Directory bread(block 72) failed [ 352.859651][ T9097] FAT-fs (loop4): Directory bread(block 73) failed [ 352.986236][ T26] audit: type=1800 audit(1763193710.547:52): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2057" name="bus" dev="loop4" ino=1048638 res=0 errno=0 [ 353.079959][ T4373] attempt to access beyond end of device [ 353.079959][ T4373] loop4: rw=1, want=1876, limit=256 [ 353.823072][ T9116] loop1: detected capacity change from 0 to 2048 [ 353.878518][ T9116] Alternate GPT is invalid, using primary GPT. [ 353.888569][ T9116] loop1: p2 p3 p7 [ 354.044323][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 354.057367][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 354.093452][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 354.104537][ T9124] loop1: detected capacity change from 0 to 256 [ 354.177713][ T9124] FAT-fs (loop1): Directory bread(block 64) failed [ 354.197123][ T9124] FAT-fs (loop1): Directory bread(block 65) failed [ 354.218928][ T9124] FAT-fs (loop1): Directory bread(block 66) failed [ 354.243004][ T9124] FAT-fs (loop1): Directory bread(block 67) failed [ 354.265337][ T9124] FAT-fs (loop1): Directory bread(block 68) failed [ 354.286779][ T9124] FAT-fs (loop1): Directory bread(block 69) failed [ 354.317256][ T9124] FAT-fs (loop1): Directory bread(block 70) failed [ 354.336510][ T9124] FAT-fs (loop1): Directory bread(block 71) failed [ 354.363114][ T9124] FAT-fs (loop1): Directory bread(block 72) failed [ 354.369769][ T9124] FAT-fs (loop1): Directory bread(block 73) failed [ 354.507298][ T26] audit: type=1800 audit(1763193712.067:53): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2069" name="bus" dev="loop1" ino=1048639 res=0 errno=0 [ 354.578082][ T390] attempt to access beyond end of device [ 354.578082][ T390] loop1: rw=1, want=1876, limit=256 [ 355.185244][ T9141] loop5: detected capacity change from 0 to 7 [ 355.245248][ T9141] Dev loop5: unable to read RDB block 7 [ 355.258858][ T9141] loop5: unable to read partition table [ 355.264977][ T9141] loop5: partition table beyond EOD, truncated [ 355.289090][ T9141] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 355.312271][ T9143] binder: 9142:9143 ioctl c0306201 0 returned -14 [ 355.326828][ T3561] Dev loop5: unable to read RDB block 7 [ 355.332770][ T3561] loop5: unable to read partition table [ 355.342228][ T3561] loop5: partition table beyond EOD, truncated [ 355.483953][ T9147] loop1: detected capacity change from 0 to 256 [ 355.599415][ T9147] FAT-fs (loop1): Directory bread(block 64) failed [ 355.626660][ T9147] FAT-fs (loop1): Directory bread(block 65) failed [ 355.656694][ T9147] FAT-fs (loop1): Directory bread(block 66) failed [ 355.695491][ T9147] FAT-fs (loop1): Directory bread(block 67) failed [ 355.728155][ T9147] FAT-fs (loop1): Directory bread(block 68) failed [ 355.762001][ T9147] FAT-fs (loop1): Directory bread(block 69) failed [ 355.789060][ T9147] FAT-fs (loop1): Directory bread(block 70) failed [ 355.814189][ T9147] FAT-fs (loop1): Directory bread(block 71) failed [ 355.847187][ T9147] FAT-fs (loop1): Directory bread(block 72) failed [ 355.870951][ T9147] FAT-fs (loop1): Directory bread(block 73) failed [ 356.007492][ T26] audit: type=1800 audit(1763193713.567:54): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2081" name="bus" dev="loop1" ino=1048640 res=0 errno=0 [ 356.819202][ T9171] loop4: detected capacity change from 0 to 512 [ 356.821663][ T9173] loop3: detected capacity change from 0 to 2048 [ 356.987465][ T9171] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.2089: ea_inode with extended attributes [ 357.022829][ T9173] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 357.097402][ T9171] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2089: error while reading EA inode 11 err=-117 [ 357.112319][ T26] audit: type=1800 audit(1763193714.677:55): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2088" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 357.225082][ T9171] EXT4-fs (loop4): 1 orphan inode deleted [ 357.230869][ T9171] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 358.279033][ T9190] loop3: detected capacity change from 0 to 2048 [ 358.370962][ T9190] Alternate GPT is invalid, using primary GPT. [ 358.420402][ T9190] loop3: p2 p3 p7 [ 358.702529][ T9198] loop1: detected capacity change from 0 to 128 [ 358.766474][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 358.787307][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 358.808227][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 358.883195][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 358.894819][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 358.908511][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 360.023774][ T9226] binder: BINDER_SET_CONTEXT_MGR already set [ 360.071324][ T9226] binder: 9225:9226 ioctl 4018620d 200000000040 returned -16 [ 360.380868][ T9242] loop1: detected capacity change from 0 to 128 [ 360.634491][ T9246] loop3: detected capacity change from 0 to 512 [ 360.736663][ T9246] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.2120: ea_inode with extended attributes [ 360.754421][ T9246] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2120: error while reading EA inode 11 err=-117 [ 360.787142][ T9246] EXT4-fs (loop3): 1 orphan inode deleted [ 360.795747][ T9246] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 361.026021][ T9257] binder: BINDER_SET_CONTEXT_MGR already set [ 361.061988][ T9257] binder: 9256:9257 ioctl 4018620d 200000000040 returned -16 [ 361.617610][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2128'. [ 364.467239][ T9293] loop3: detected capacity change from 0 to 2048 [ 364.609112][ T9293] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.724299][ T26] audit: type=1800 audit(1763193722.287:56): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2142" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 364.753103][ T9299] loop2: detected capacity change from 0 to 2048 [ 364.991487][ T8477] Alternate GPT is invalid, using primary GPT. [ 365.030541][ T8477] loop2: p2 p3 p7 [ 365.706837][ T9299] Alternate GPT is invalid, using primary GPT. [ 365.716392][ T9299] loop2: p2 p3 p7 [ 365.894550][ T9315] loop2: detected capacity change from 0 to 512 [ 365.934062][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 365.946952][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 365.947719][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 365.975735][ T9315] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2148: inode has both inline data and extents flags [ 366.040158][ T9315] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2148: couldn't read orphan inode 15 (err -117) [ 366.093429][ T9315] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 366.116085][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 366.116203][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 366.159306][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 366.491368][ T9330] loop2: detected capacity change from 0 to 256 [ 369.242520][ T9366] loop3: detected capacity change from 0 to 2048 [ 369.377676][ T9366] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 369.473906][ T26] audit: type=1800 audit(1763193727.037:57): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2173" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 369.525896][ T9371] loop0: detected capacity change from 0 to 256 [ 371.298649][ T9391] loop5: detected capacity change from 0 to 7 [ 371.353353][ T9391] Dev loop5: unable to read RDB block 7 [ 371.376770][ T9391] loop5: unable to read partition table [ 371.392133][ T9391] loop5: partition table beyond EOD, truncated [ 371.413349][ T9391] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 372.438821][ T9407] loop2: detected capacity change from 0 to 256 [ 373.630488][ T9411] loop3: detected capacity change from 0 to 256 [ 373.774607][ T9411] FAT-fs (loop3): Directory bread(block 64) failed [ 373.842468][ T9411] FAT-fs (loop3): Directory bread(block 65) failed [ 373.849147][ T9411] FAT-fs (loop3): Directory bread(block 66) failed [ 373.919880][ T9411] FAT-fs (loop3): Directory bread(block 67) failed [ 373.958218][ T9411] FAT-fs (loop3): Directory bread(block 68) failed [ 373.995431][ T9411] FAT-fs (loop3): Directory bread(block 69) failed [ 374.032172][ T9411] FAT-fs (loop3): Directory bread(block 70) failed [ 374.069243][ T9411] FAT-fs (loop3): Directory bread(block 71) failed [ 374.109859][ T9411] FAT-fs (loop3): Directory bread(block 72) failed [ 374.152217][ T9411] FAT-fs (loop3): Directory bread(block 73) failed [ 374.432284][ T26] audit: type=1800 audit(1763193731.947:58): pid=9411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2190" name="bus" dev="loop3" ino=1048641 res=0 errno=0 [ 376.073709][ T9451] loop2: detected capacity change from 0 to 256 [ 378.395123][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.401511][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.526701][ T9491] loop2: detected capacity change from 0 to 256 [ 379.731527][ T9491] FAT-fs (loop2): Directory bread(block 64) failed [ 379.742315][ T9491] FAT-fs (loop2): Directory bread(block 65) failed [ 379.755580][ T9491] FAT-fs (loop2): Directory bread(block 66) failed [ 379.782204][ T9491] FAT-fs (loop2): Directory bread(block 67) failed [ 379.788858][ T9491] FAT-fs (loop2): Directory bread(block 68) failed [ 379.808622][ T9491] FAT-fs (loop2): Directory bread(block 69) failed [ 379.831589][ T9491] FAT-fs (loop2): Directory bread(block 70) failed [ 379.852019][ T9491] FAT-fs (loop2): Directory bread(block 71) failed [ 379.858647][ T9491] FAT-fs (loop2): Directory bread(block 72) failed [ 379.897768][ T9491] FAT-fs (loop2): Directory bread(block 73) failed [ 380.062144][ T26] audit: type=1800 audit(1763193737.617:59): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2222" name="bus" dev="loop2" ino=1048642 res=0 errno=0 [ 380.111393][ T9491] attempt to access beyond end of device [ 380.111393][ T9491] loop2: rw=2049, want=1876, limit=256 [ 380.676155][ T9538] loop2: detected capacity change from 0 to 512 [ 380.764098][ T9538] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2244: inode has both inline data and extents flags [ 380.826550][ T9538] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2244: couldn't read orphan inode 15 (err -117) [ 380.918255][ T9538] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 381.302663][ T9554] loop4: detected capacity change from 0 to 256 [ 381.308557][ T9550] loop2: detected capacity change from 0 to 2048 [ 381.436060][ T9554] FAT-fs (loop4): Directory bread(block 64) failed [ 381.460273][ T9550] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.474672][ T9554] FAT-fs (loop4): Directory bread(block 65) failed [ 381.481297][ T9554] FAT-fs (loop4): Directory bread(block 66) failed [ 381.495316][ T9554] FAT-fs (loop4): Directory bread(block 67) failed [ 381.519828][ T9554] FAT-fs (loop4): Directory bread(block 68) failed [ 381.534337][ T26] audit: type=1800 audit(1763193739.097:60): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2248" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 381.622115][ T9554] FAT-fs (loop4): Directory bread(block 69) failed [ 381.632512][ T9554] FAT-fs (loop4): Directory bread(block 70) failed [ 381.668722][ T9554] FAT-fs (loop4): Directory bread(block 71) failed [ 381.686979][ T9554] FAT-fs (loop4): Directory bread(block 72) failed [ 381.706730][ T9554] FAT-fs (loop4): Directory bread(block 73) failed [ 382.312146][ T26] audit: type=1800 audit(1763193739.847:61): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2249" name="bus" dev="loop4" ino=1048643 res=0 errno=0 [ 383.560062][ T9588] loop4: detected capacity change from 0 to 2048 [ 383.647535][ T9588] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.725106][ T26] audit: type=1800 audit(1763193741.287:62): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2264" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 387.026672][ T9622] loop1: detected capacity change from 0 to 128 [ 389.330544][ T9666] loop0: detected capacity change from 0 to 512 [ 389.454998][ T9666] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.2298: ea_inode with extended attributes [ 389.538828][ T9666] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2298: error while reading EA inode 11 err=-117 [ 389.632623][ T9666] EXT4-fs (loop0): 1 orphan inode deleted [ 389.648507][ T9666] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 391.331606][ T9724] loop1: detected capacity change from 0 to 512 [ 391.450427][ T9724] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.2322: ea_inode with extended attributes [ 391.486865][ T9724] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2322: error while reading EA inode 11 err=-117 [ 391.520687][ T9724] EXT4-fs (loop1): 1 orphan inode deleted [ 391.533423][ T9724] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 392.226066][ T9744] loop3: detected capacity change from 0 to 256 [ 392.391420][ T9744] FAT-fs (loop3): Directory bread(block 64) failed [ 392.418428][ T9744] FAT-fs (loop3): Directory bread(block 65) failed [ 392.466480][ T9744] FAT-fs (loop3): Directory bread(block 66) failed [ 392.496920][ T9744] FAT-fs (loop3): Directory bread(block 67) failed [ 392.526683][ T9744] FAT-fs (loop3): Directory bread(block 68) failed [ 392.552118][ T9744] FAT-fs (loop3): Directory bread(block 69) failed [ 392.559375][ T9744] FAT-fs (loop3): Directory bread(block 70) failed [ 392.576356][ T9744] FAT-fs (loop3): Directory bread(block 71) failed [ 392.611936][ T9744] FAT-fs (loop3): Directory bread(block 72) failed [ 392.618512][ T9744] FAT-fs (loop3): Directory bread(block 73) failed [ 392.738737][ T26] audit: type=1800 audit(1763193750.297:63): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2325" name="bus" dev="loop3" ino=1048644 res=0 errno=0 [ 394.043190][ T9794] loop5: detected capacity change from 0 to 7 [ 394.074620][ T9794] Dev loop5: unable to read RDB block 7 [ 394.103672][ T9794] loop5: unable to read partition table [ 394.132630][ T9794] loop5: partition table beyond EOD, truncated [ 394.171959][ T9794] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 395.327301][ T9841] loop2: detected capacity change from 0 to 128 [ 396.266178][ T9874] loop0: detected capacity change from 0 to 256 [ 396.361205][ T9874] FAT-fs (loop0): Directory bread(block 64) failed [ 396.380454][ T9874] FAT-fs (loop0): Directory bread(block 65) failed [ 396.407379][ T9874] FAT-fs (loop0): Directory bread(block 66) failed [ 396.430701][ T9874] FAT-fs (loop0): Directory bread(block 67) failed [ 396.455246][ T9874] FAT-fs (loop0): Directory bread(block 68) failed [ 396.461835][ T9874] FAT-fs (loop0): Directory bread(block 69) failed [ 396.495160][ T9874] FAT-fs (loop0): Directory bread(block 70) failed [ 396.502182][ T9874] FAT-fs (loop0): Directory bread(block 71) failed [ 396.508804][ T9874] FAT-fs (loop0): Directory bread(block 72) failed [ 396.515799][ T9874] FAT-fs (loop0): Directory bread(block 73) failed [ 396.628059][ T26] audit: type=1800 audit(1763193754.187:64): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2393" name="bus" dev="loop0" ino=1048645 res=0 errno=0 [ 396.659515][ T9885] loop2: detected capacity change from 0 to 512 [ 396.767368][ T9885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #11: comm syz.2.2398: ea_inode with extended attributes [ 396.799152][ T9892] loop5: detected capacity change from 0 to 7 [ 396.808552][ T4488] Dev loop5: unable to read RDB block 7 [ 396.816938][ T9885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2398: error while reading EA inode 11 err=-117 [ 396.820104][ T4488] loop5: unable to read partition table [ 396.850350][ T9885] EXT4-fs (loop2): 1 orphan inode deleted [ 396.858771][ T9885] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 396.902100][ T4488] loop5: partition table beyond EOD, truncated [ 396.937680][ T9892] Dev loop5: unable to read RDB block 7 [ 396.949773][ T9892] loop5: unable to read partition table [ 396.968859][ T9892] loop5: partition table beyond EOD, truncated [ 397.011621][ T9892] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 397.182570][ T9902] loop2: detected capacity change from 0 to 256 [ 399.155504][ T9928] loop5: detected capacity change from 0 to 7 [ 399.195444][ T4345] Dev loop5: unable to read RDB block 7 [ 399.201080][ T4345] loop5: unable to read partition table [ 399.228339][ T4345] loop5: partition table beyond EOD, truncated [ 399.238857][ T9928] Dev loop5: unable to read RDB block 7 [ 399.246961][ T9928] loop5: unable to read partition table [ 399.266352][ T9928] loop5: partition table beyond EOD, truncated [ 399.322232][ T9928] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 399.907485][ T9962] binder: 9961:9962 ioctl c018620c 200000000240 returned -1 [ 399.950237][ T9964] loop5: detected capacity change from 0 to 7 [ 399.972679][ T9964] Dev loop5: unable to read RDB block 7 [ 399.988518][ T9964] loop5: unable to read partition table [ 400.004289][ T9964] loop5: partition table beyond EOD, truncated [ 400.026686][ T9964] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 400.216321][ T9978] loop1: detected capacity change from 0 to 256 [ 400.270226][ T9983] loop4: detected capacity change from 0 to 512 [ 400.297567][ T9978] FAT-fs (loop1): Directory bread(block 64) failed [ 400.312451][ T9978] FAT-fs (loop1): Directory bread(block 65) failed [ 400.344431][ T9978] FAT-fs (loop1): Directory bread(block 66) failed [ 400.366289][ T9978] FAT-fs (loop1): Directory bread(block 67) failed [ 400.391643][ T9978] FAT-fs (loop1): Directory bread(block 68) failed [ 400.404652][ T9983] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.2442: ea_inode with extended attributes [ 400.447976][ T9978] FAT-fs (loop1): Directory bread(block 69) failed [ 400.455040][ T9978] FAT-fs (loop1): Directory bread(block 70) failed [ 400.461687][ T9978] FAT-fs (loop1): Directory bread(block 71) failed [ 400.468548][ T9978] FAT-fs (loop1): Directory bread(block 72) failed [ 400.476039][ T9978] FAT-fs (loop1): Directory bread(block 73) failed [ 400.486232][ T9983] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2442: error while reading EA inode 11 err=-117 [ 400.519550][ T9983] EXT4-fs (loop4): 1 orphan inode deleted [ 400.525677][ T9983] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 400.594065][ T26] audit: type=1800 audit(1763193758.157:65): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2440" name="bus" dev="loop1" ino=1048646 res=0 errno=0 [ 401.021977][T10016] loop5: detected capacity change from 0 to 7 [ 401.032927][T10016] Dev loop5: unable to read RDB block 7 [ 401.105937][T10016] loop5: unable to read partition table [ 401.113776][T10016] loop5: partition table beyond EOD, truncated [ 401.141690][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2453'. [ 401.157151][T10016] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 401.381401][T10028] loop0: detected capacity change from 0 to 256 [ 401.574258][T10028] attempt to access beyond end of device [ 401.574258][T10028] loop0: rw=2049, want=324, limit=256 [ 401.666171][T10028] attempt to access beyond end of device [ 401.666171][T10028] loop0: rw=2049, want=260, limit=256 [ 401.709618][T10028] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 402.210913][T10059] loop5: detected capacity change from 0 to 7 [ 402.231708][T10059] Dev loop5: unable to read RDB block 7 [ 402.248905][T10059] loop5: unable to read partition table [ 402.269365][T10059] loop5: partition table beyond EOD, truncated [ 402.283909][T10059] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 402.332037][ T7] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 402.732204][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 402.772206][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 402.852209][ T7] usb 3-1: config 0 has no interfaces? [ 403.012414][ T7] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 403.031723][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.050401][ T7] usb 3-1: Product: syz [ 403.054933][ T7] usb 3-1: Manufacturer: syz [ 403.059551][ T7] usb 3-1: SerialNumber: syz [ 403.081606][ T7] usb 3-1: config 0 descriptor?? [ 403.349735][ T7] usb 3-1: USB disconnect, device number 14 [ 404.600763][T10081] loop5: detected capacity change from 0 to 7 [ 404.615118][T10081] Dev loop5: unable to read RDB block 7 [ 404.620766][T10081] loop5: unable to read partition table [ 404.652147][T10081] loop5: partition table beyond EOD, truncated [ 404.662728][T10081] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 404.803887][T10085] loop5: detected capacity change from 0 to 7 [ 404.836416][ T4345] Dev loop5: unable to read RDB block 7 [ 404.852571][ T4345] loop5: unable to read partition table [ 404.858381][ T4345] loop5: partition table beyond EOD, truncated [ 404.889367][T10085] Dev loop5: unable to read RDB block 7 [ 404.895366][T10085] loop5: unable to read partition table [ 404.912281][T10085] loop5: partition table beyond EOD, truncated [ 404.931133][T10085] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 404.968477][ T3561] Dev loop5: unable to read RDB block 7 [ 404.978377][ T3561] loop5: unable to read partition table [ 404.998724][ T3561] loop5: partition table beyond EOD, truncated [ 405.331046][T10092] loop1: detected capacity change from 0 to 256 [ 405.408993][T10092] FAT-fs (loop1): Directory bread(block 64) failed [ 405.422006][T10092] FAT-fs (loop1): Directory bread(block 65) failed [ 405.438989][T10092] FAT-fs (loop1): Directory bread(block 66) failed [ 405.459166][T10092] FAT-fs (loop1): Directory bread(block 67) failed [ 405.465873][T10092] FAT-fs (loop1): Directory bread(block 68) failed [ 405.482227][T10092] FAT-fs (loop1): Directory bread(block 69) failed [ 405.492123][T10092] FAT-fs (loop1): Directory bread(block 70) failed [ 405.509224][T10092] FAT-fs (loop1): Directory bread(block 71) failed [ 405.519436][T10092] FAT-fs (loop1): Directory bread(block 72) failed [ 405.549728][T10092] FAT-fs (loop1): Directory bread(block 73) failed [ 405.729245][ T26] audit: type=1800 audit(1763193763.287:66): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2480" name="bus" dev="loop1" ino=1048648 res=0 errno=0 [ 408.150629][T10125] loop0: detected capacity change from 0 to 256 [ 410.049669][T10131] loop0: detected capacity change from 0 to 256 [ 410.188292][T10131] FAT-fs (loop0): Directory bread(block 64) failed [ 410.203964][T10131] FAT-fs (loop0): Directory bread(block 65) failed [ 410.210594][T10131] FAT-fs (loop0): Directory bread(block 66) failed [ 410.274079][T10131] FAT-fs (loop0): Directory bread(block 67) failed [ 410.280711][T10131] FAT-fs (loop0): Directory bread(block 68) failed [ 410.314376][T10131] FAT-fs (loop0): Directory bread(block 69) failed [ 410.321001][T10131] FAT-fs (loop0): Directory bread(block 70) failed [ 410.338170][T10131] FAT-fs (loop0): Directory bread(block 71) failed [ 410.358460][T10131] FAT-fs (loop0): Directory bread(block 72) failed [ 410.391549][T10131] FAT-fs (loop0): Directory bread(block 73) failed [ 410.563836][ T26] audit: type=1800 audit(1763193768.127:67): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2502" name="bus" dev="loop0" ino=1048649 res=0 errno=0 [ 410.907114][T10152] loop1: detected capacity change from 0 to 256 [ 411.047934][T10152] attempt to access beyond end of device [ 411.047934][T10152] loop1: rw=2049, want=324, limit=256 [ 411.080366][T10153] attempt to access beyond end of device [ 411.080366][T10153] loop1: rw=2049, want=260, limit=256 [ 411.132710][T10153] Buffer I/O error on dev loop1, logical block 64, lost async page write [ 412.829685][T10178] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 412.911460][T10178] loop1: detected capacity change from 0 to 1024 [ 413.001106][T10178] EXT4-fs (loop1): Ignoring removed bh option [ 413.333116][T10178] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 414.808376][T10189] loop3: detected capacity change from 0 to 2048 [ 414.976410][T10189] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 415.073115][ T26] audit: type=1800 audit(1763193772.627:68): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2524" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 415.681871][T10201] loop1: detected capacity change from 0 to 512 [ 415.831724][T10201] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.2529: ea_inode with extended attributes [ 415.890821][T10206] loop5: detected capacity change from 0 to 7 [ 415.930071][T10201] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2529: error while reading EA inode 11 err=-117 [ 415.947013][T10206] Dev loop5: unable to read RDB block 7 [ 415.976586][T10206] loop5: unable to read partition table [ 416.002130][T10201] EXT4-fs (loop1): 1 orphan inode deleted [ 416.008001][T10201] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 416.037071][T10206] loop5: partition table beyond EOD, truncated [ 416.060819][T10206] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 416.383576][T10223] loop4: detected capacity change from 0 to 256 [ 417.817154][T10237] loop0: detected capacity change from 0 to 2048 [ 418.049345][T10237] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.146279][ T26] audit: type=1800 audit(1763193775.707:69): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2542" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 418.439120][T10248] loop1: detected capacity change from 0 to 1024 [ 418.761399][T10248] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.814840][T10248] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.962828][T10248] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.2546: inode has both inline data and extents flags [ 419.054230][T10256] loop4: detected capacity change from 0 to 2048 [ 419.121458][T10260] loop5: detected capacity change from 0 to 7 [ 419.139068][T10260] Dev loop5: unable to read RDB block 7 [ 419.152178][T10260] loop5: unable to read partition table [ 419.169149][T10260] loop5: partition table beyond EOD, truncated [ 419.191470][ T8477] Alternate GPT is invalid, using primary GPT. [ 419.206735][ T8477] loop4: p2 p3 p7 [ 419.227601][T10260] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 419.272750][T10256] Alternate GPT is invalid, using primary GPT. [ 419.280369][T10256] loop4: p2 p3 p7 [ 419.478693][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 419.491479][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 419.507796][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 419.604072][T10281] loop4: detected capacity change from 0 to 128 [ 419.612739][T10283] loop3: detected capacity change from 0 to 256 [ 419.727537][T10283] FAT-fs (loop3): Directory bread(block 64) failed [ 419.772386][T10283] FAT-fs (loop3): Directory bread(block 65) failed [ 419.779072][T10283] FAT-fs (loop3): Directory bread(block 66) failed [ 419.805682][T10291] loop2: detected capacity change from 0 to 512 [ 419.821825][T10283] FAT-fs (loop3): Directory bread(block 67) failed [ 419.842919][T10283] FAT-fs (loop3): Directory bread(block 68) failed [ 419.849667][T10283] FAT-fs (loop3): Directory bread(block 69) failed [ 419.864930][T10283] FAT-fs (loop3): Directory bread(block 70) failed [ 419.888494][T10283] FAT-fs (loop3): Directory bread(block 71) failed [ 419.903799][T10291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #11: comm syz.2.2565: ea_inode with extended attributes [ 419.915910][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 419.928277][T10283] FAT-fs (loop3): Directory bread(block 72) failed [ 419.928680][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 419.934893][T10283] FAT-fs (loop3): Directory bread(block 73) failed [ 419.964768][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 419.966431][T10291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2565: error while reading EA inode 11 err=-117 [ 419.998112][T10291] EXT4-fs (loop2): 1 orphan inode deleted [ 420.003792][ T26] audit: type=1800 audit(1763193777.557:70): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2560" name="bus" dev="loop3" ino=1048651 res=0 errno=0 [ 420.026052][T10291] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 420.085864][T10283] attempt to access beyond end of device [ 420.085864][T10283] loop3: rw=2049, want=1876, limit=256 [ 420.325245][T10303] overlayfs: failed to resolve './file1': -2 [ 420.672703][T10315] loop4: detected capacity change from 0 to 128 [ 421.091659][T10329] loop2: detected capacity change from 0 to 256 [ 421.857339][T10329] FAT-fs (loop2): Directory bread(block 64) failed [ 421.892074][T10329] FAT-fs (loop2): Directory bread(block 65) failed [ 421.950548][T10329] FAT-fs (loop2): Directory bread(block 66) failed [ 421.967972][T10341] loop4: detected capacity change from 0 to 256 [ 422.012251][T10329] FAT-fs (loop2): Directory bread(block 67) failed [ 422.080303][T10329] FAT-fs (loop2): Directory bread(block 68) failed [ 422.103696][T10344] overlayfs: failed to resolve './file1': -2 [ 422.119937][T10341] FAT-fs (loop4): Directory bread(block 64) failed [ 422.135930][T10329] FAT-fs (loop2): Directory bread(block 69) failed [ 422.149701][T10341] FAT-fs (loop4): Directory bread(block 65) failed [ 422.202848][T10329] FAT-fs (loop2): Directory bread(block 70) failed [ 422.210133][T10341] FAT-fs (loop4): Directory bread(block 66) failed [ 422.288276][T10329] FAT-fs (loop2): Directory bread(block 71) failed [ 422.302001][T10341] FAT-fs (loop4): Directory bread(block 67) failed [ 422.388706][T10329] FAT-fs (loop2): Directory bread(block 72) failed [ 422.395878][T10341] FAT-fs (loop4): Directory bread(block 68) failed [ 422.456602][T10329] FAT-fs (loop2): Directory bread(block 73) failed [ 422.463586][T10341] FAT-fs (loop4): Directory bread(block 69) failed [ 422.541433][T10341] FAT-fs (loop4): Directory bread(block 70) failed [ 422.622015][T10341] FAT-fs (loop4): Directory bread(block 71) failed [ 422.670493][T10341] FAT-fs (loop4): Directory bread(block 72) failed [ 422.727005][T10341] FAT-fs (loop4): Directory bread(block 73) failed [ 422.888391][ T26] audit: type=1800 audit(1763193780.447:71): pid=10329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2582" name="bus" dev="loop2" ino=1048652 res=0 errno=0 [ 422.965529][ T26] audit: type=1800 audit(1763193780.527:72): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2583" name="bus" dev="loop4" ino=1048653 res=0 errno=0 [ 423.249168][T10365] loop5: detected capacity change from 0 to 7 [ 423.272063][T10365] Dev loop5: unable to read RDB block 7 [ 423.293356][T10365] loop5: unable to read partition table [ 423.336585][T10365] loop5: partition table beyond EOD, truncated [ 423.351974][T10365] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 423.607245][T10384] loop1: detected capacity change from 0 to 256 [ 423.649952][T10386] loop4: detected capacity change from 0 to 256 [ 423.683481][T10389] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2606'. [ 423.708406][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2606'. [ 423.769116][T10384] FAT-fs (loop1): Directory bread(block 64) failed [ 423.776507][T10386] FAT-fs (loop4): Directory bread(block 64) failed [ 423.791950][T10384] FAT-fs (loop1): Directory bread(block 65) failed [ 423.810245][T10386] FAT-fs (loop4): Directory bread(block 65) failed [ 423.817019][ T21] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 423.852151][T10384] FAT-fs (loop1): Directory bread(block 66) failed [ 423.870308][T10386] FAT-fs (loop4): Directory bread(block 66) failed [ 423.870340][T10384] FAT-fs (loop1): Directory bread(block 67) failed [ 423.926225][T10386] FAT-fs (loop4): Directory bread(block 67) failed [ 423.932163][T10384] FAT-fs (loop1): Directory bread(block 68) failed [ 423.944996][T10384] FAT-fs (loop1): Directory bread(block 69) failed [ 423.955450][T10386] FAT-fs (loop4): Directory bread(block 68) failed [ 423.994501][T10384] FAT-fs (loop1): Directory bread(block 70) failed [ 424.005512][T10386] FAT-fs (loop4): Directory bread(block 69) failed [ 424.023790][T10384] FAT-fs (loop1): Directory bread(block 71) failed [ 424.025870][T10386] FAT-fs (loop4): Directory bread(block 70) failed [ 424.065152][T10384] FAT-fs (loop1): Directory bread(block 72) failed [ 424.071737][T10384] FAT-fs (loop1): Directory bread(block 73) failed [ 424.072230][T10386] FAT-fs (loop4): Directory bread(block 71) failed [ 424.212159][T10386] FAT-fs (loop4): Directory bread(block 72) failed [ 424.218739][T10386] FAT-fs (loop4): Directory bread(block 73) failed [ 424.682280][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 424.793796][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 425.081967][ T26] audit: type=1800 audit(1763193782.607:73): pid=10384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2604" name="bus" dev="loop1" ino=1048654 res=0 errno=0 [ 425.142835][ T21] usb 3-1: config 0 has no interfaces? [ 425.234909][T10409] loop5: detected capacity change from 0 to 7 [ 425.261460][ T26] audit: type=1800 audit(1763193782.667:74): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2603" name="bus" dev="loop4" ino=1048655 res=0 errno=0 [ 425.285077][T10409] Dev loop5: unable to read RDB block 7 [ 425.290681][T10409] loop5: unable to read partition table [ 425.322367][T10409] loop5: partition table beyond EOD, truncated [ 425.352016][T10409] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 425.373410][ T4584] attempt to access beyond end of device [ 425.373410][ T4584] loop4: rw=1, want=1876, limit=256 [ 425.384558][ T21] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 425.408161][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.434696][ T21] usb 3-1: Product: syz [ 425.438897][ T21] usb 3-1: Manufacturer: syz [ 425.452902][ T21] usb 3-1: SerialNumber: syz [ 425.471564][ T21] usb 3-1: config 0 descriptor?? [ 425.745695][ T4193] usb 3-1: USB disconnect, device number 15 [ 426.051297][T10440] loop4: detected capacity change from 0 to 256 [ 426.112742][T10442] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2620'. [ 426.157213][T10440] FAT-fs (loop4): Directory bread(block 64) failed [ 426.176806][T10443] loop0: detected capacity change from 0 to 512 [ 426.176908][T10440] FAT-fs (loop4): Directory bread(block 65) failed [ 426.201430][T10440] FAT-fs (loop4): Directory bread(block 66) failed [ 426.209656][T10440] FAT-fs (loop4): Directory bread(block 67) failed [ 426.221368][T10440] FAT-fs (loop4): Directory bread(block 68) failed [ 426.228670][T10440] FAT-fs (loop4): Directory bread(block 69) failed [ 426.277321][T10440] FAT-fs (loop4): Directory bread(block 70) failed [ 426.301508][T10443] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.2626: ea_inode with extended attributes [ 426.452250][T10440] FAT-fs (loop4): Directory bread(block 71) failed [ 426.459234][T10443] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2626: error while reading EA inode 11 err=-117 [ 426.492732][T10440] FAT-fs (loop4): Directory bread(block 72) failed [ 426.499337][T10440] FAT-fs (loop4): Directory bread(block 73) failed [ 426.542422][T10443] EXT4-fs (loop0): 1 orphan inode deleted [ 426.560923][T10443] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 426.734896][ T26] audit: type=1800 audit(1763193784.297:75): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2624" name="bus" dev="loop4" ino=1048656 res=0 errno=0 [ 426.841276][T10450] loop5: detected capacity change from 0 to 7 [ 426.871777][T10450] Dev loop5: unable to read RDB block 7 [ 426.891171][T10450] loop5: unable to read partition table [ 426.923704][T10450] loop5: partition table beyond EOD, truncated [ 426.950596][T10450] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 427.022130][ T3561] Dev loop5: unable to read RDB block 7 [ 427.042034][ T3561] loop5: unable to read partition table [ 427.047852][ T3561] loop5: partition table beyond EOD, truncated [ 429.245778][T10487] loop5: detected capacity change from 0 to 7 [ 429.299489][ T4345] Dev loop5: unable to read RDB block 7 [ 429.312946][ T4345] loop5: unable to read partition table [ 429.350164][ T4345] loop5: partition table beyond EOD, truncated [ 429.548449][T10487] Dev loop5: unable to read RDB block 7 [ 429.583127][T10487] loop5: unable to read partition table [ 429.612228][T10487] loop5: partition table beyond EOD, truncated [ 429.692224][T10487] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 430.069762][T10508] 9pnet: Insufficient options for proto=fd [ 430.303964][T10518] kvm: apic: phys broadcast and lowest prio [ 430.611345][T10527] loop5: detected capacity change from 0 to 7 [ 430.632162][ T21] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 430.651284][ T4345] Dev loop5: unable to read RDB block 7 [ 430.657067][ T4345] loop5: unable to read partition table [ 430.673318][T10528] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2660'. [ 430.674522][ T4345] loop5: partition table beyond EOD, truncated [ 430.733317][T10527] Dev loop5: unable to read RDB block 7 [ 430.739263][T10527] loop5: unable to read partition table [ 430.779845][T10527] loop5: partition table beyond EOD, truncated [ 430.807330][T10527] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 431.052317][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 431.102109][ T21] usb 5-1: not running at top speed; connect to a high speed hub [ 431.196734][ T21] usb 5-1: config 0 has no interfaces? [ 431.392333][ T21] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 431.421970][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.440230][ T21] usb 5-1: Product: syz [ 431.450351][ T21] usb 5-1: Manufacturer: syz [ 431.476805][ T21] usb 5-1: SerialNumber: syz [ 431.501699][ T21] usb 5-1: config 0 descriptor?? [ 431.760859][ T4193] usb 5-1: USB disconnect, device number 9 [ 432.398701][T10544] loop0: detected capacity change from 0 to 512 [ 432.538571][T10544] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.2669: ea_inode with extended attributes [ 432.583181][T10544] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2669: error while reading EA inode 11 err=-117 [ 432.601109][T10552] loop5: detected capacity change from 0 to 7 [ 432.626692][T10544] EXT4-fs (loop0): 1 orphan inode deleted [ 432.645579][T10544] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 432.659442][T10552] Dev loop5: unable to read RDB block 7 [ 432.709779][T10554] loop1: detected capacity change from 0 to 2048 [ 432.784661][T10552] loop5: unable to read partition table [ 432.790497][T10552] loop5: partition table beyond EOD, truncated [ 432.838089][T10554] Alternate GPT is invalid, using primary GPT. [ 432.860931][T10554] loop1: p2 p3 p7 [ 432.882862][T10552] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 433.049516][T10565] kvm: apic: phys broadcast and lowest prio [ 433.115915][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 433.139680][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 433.153788][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 433.596436][T10582] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2683'. [ 434.641154][T10599] loop2: detected capacity change from 0 to 2048 [ 434.729546][ T4345] Alternate GPT is invalid, using primary GPT. [ 434.750303][ T4345] loop2: p2 p3 p7 [ 434.790987][T10599] Alternate GPT is invalid, using primary GPT. [ 434.806489][T10599] loop2: p2 p3 p7 [ 435.045102][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 435.045689][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 435.067577][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 435.160752][T10609] kvm: apic: phys broadcast and lowest prio [ 435.161469][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 435.171694][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 435.180912][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 435.304245][ T8477] udevd[8477]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 436.156985][ T26] audit: type=1326 audit(1763193793.717:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.237103][ T26] audit: type=1326 audit(1763193793.717:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.324784][ T26] audit: type=1326 audit(1763193793.747:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.392000][ T26] audit: type=1326 audit(1763193793.747:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.482457][ T26] audit: type=1326 audit(1763193793.747:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.527803][T10626] loop1: detected capacity change from 0 to 2048 [ 436.543366][ T26] audit: type=1326 audit(1763193793.747:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.598066][ T26] audit: type=1326 audit(1763193793.747:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.642317][ T26] audit: type=1326 audit(1763193793.747:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.678962][T10626] Alternate GPT is invalid, using primary GPT. [ 436.696444][T10626] loop1: p2 p3 p7 [ 436.778732][ T26] audit: type=1326 audit(1763193793.747:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1712e246c9 code=0x7ffc0000 [ 436.831998][ T26] audit: type=1326 audit(1763193793.747:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 437.502615][T10635] loop1: detected capacity change from 0 to 1024 [ 437.641369][T10635] EXT4-fs (loop1): Ignoring removed bh option [ 437.936065][T10635] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 439.108122][T10647] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2710'. [ 439.835299][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.841761][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.851550][T10663] loop5: detected capacity change from 0 to 7 [ 439.921193][T10663] Dev loop5: unable to read RDB block 7 [ 439.953255][ T4239] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 439.970537][T10665] kvm: apic: phys broadcast and lowest prio [ 439.971584][T10663] loop5: unable to read partition table [ 440.007176][T10663] loop5: partition table beyond EOD, truncated [ 440.026611][T10663] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 440.364216][T10678] loop2: detected capacity change from 0 to 256 [ 440.412182][ T4239] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.454432][T10678] FAT-fs (loop2): Directory bread(block 64) failed [ 440.454593][ T4239] usb 2-1: not running at top speed; connect to a high speed hub [ 440.461011][T10678] FAT-fs (loop2): Directory bread(block 65) failed [ 440.502103][T10678] FAT-fs (loop2): Directory bread(block 66) failed [ 440.518892][T10678] FAT-fs (loop2): Directory bread(block 67) failed [ 440.532197][T10678] FAT-fs (loop2): Directory bread(block 68) failed [ 440.538792][T10678] FAT-fs (loop2): Directory bread(block 69) failed [ 440.562094][T10678] FAT-fs (loop2): Directory bread(block 70) failed [ 440.568689][T10678] FAT-fs (loop2): Directory bread(block 71) failed [ 440.582295][ T4239] usb 2-1: config 0 has no interfaces? [ 440.594678][T10678] FAT-fs (loop2): Directory bread(block 72) failed [ 440.611492][T10678] FAT-fs (loop2): Directory bread(block 73) failed [ 440.776692][ T4239] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 440.806495][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.836411][ T4239] usb 2-1: Product: syz [ 440.840620][ T4239] usb 2-1: Manufacturer: syz [ 440.851996][ T4239] usb 2-1: SerialNumber: syz [ 440.870021][ T4239] usb 2-1: config 0 descriptor?? [ 440.905593][T10680] loop2: detected capacity change from 0 to 256 [ 441.001096][T10680] FAT-fs (loop2): Directory bread(block 64) failed [ 441.020052][T10680] FAT-fs (loop2): Directory bread(block 65) failed [ 441.063990][T10680] FAT-fs (loop2): Directory bread(block 66) failed [ 441.089388][T10680] FAT-fs (loop2): Directory bread(block 67) failed [ 441.106369][T10680] FAT-fs (loop2): Directory bread(block 68) failed [ 441.129935][T10680] FAT-fs (loop2): Directory bread(block 69) failed [ 441.146661][ T4239] usb 2-1: USB disconnect, device number 10 [ 441.162649][T10680] FAT-fs (loop2): Directory bread(block 70) failed [ 441.203871][T10680] FAT-fs (loop2): Directory bread(block 71) failed [ 441.211299][T10680] FAT-fs (loop2): Directory bread(block 72) failed [ 441.223383][T10680] FAT-fs (loop2): Directory bread(block 73) failed [ 441.348274][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 441.348290][ T26] audit: type=1800 audit(1763193798.907:89): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2726" name="bus" dev="loop2" ino=1048658 res=0 errno=0 [ 441.398035][T10680] attempt to access beyond end of device [ 441.398035][T10680] loop2: rw=2049, want=1876, limit=256 [ 441.559917][T10692] loop0: detected capacity change from 0 to 256 [ 441.668003][T10692] attempt to access beyond end of device [ 441.668003][T10692] loop0: rw=2049, want=324, limit=256 [ 441.737030][T10697] attempt to access beyond end of device [ 441.737030][T10697] loop0: rw=2049, want=260, limit=256 [ 441.808402][T10697] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 441.992012][ C0] ------------[ cut here ]------------ [ 441.993229][ C0] [ 441.993235][ C0] ====================================================== [ 441.993241][ C0] WARNING: possible circular locking dependency detected [ 441.993252][ C0] syzkaller #0 Not tainted [ 441.993261][ C0] ------------------------------------------------------ [ 441.993267][ C0] syz-executor/4187 is trying to acquire lock: [ 441.993277][ C0] ffffffff8c1111c0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 441.993333][ C0] [ 441.993333][ C0] but task is already holding lock: [ 441.993338][ C0] ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 441.993378][ C0] [ 441.993378][ C0] which lock already depends on the new lock. [ 441.993378][ C0] [ 441.993383][ C0] [ 441.993383][ C0] the existing dependency chain (in reverse order) is: [ 441.993389][ C0] [ 441.993389][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 441.993410][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 441.993428][ C0] hrtimer_start_range_ns+0xff/0xc20 [ 441.993445][ C0] enqueue_task_rt+0x60c/0xc00 [ 441.993461][ C0] enqueue_task+0x182/0x2b0 [ 441.993478][ C0] ttwu_do_activate+0x1b7/0x370 [ 441.993495][ C0] sched_ttwu_pending+0x272/0x5d0 [ 441.993511][ C0] __sysvec_call_function_single+0x98/0x240 [ 441.993530][ C0] sysvec_call_function_single+0x98/0xc0 [ 441.993548][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 441.993565][ C0] default_idle+0xb/0x10 [ 441.993579][ C0] default_idle_call+0x81/0xc0 [ 441.993593][ C0] do_idle+0x21b/0x5b0 [ 441.993610][ C0] cpu_startup_entry+0x14/0x20 [ 441.993626][ C0] start_secondary+0x31f/0x430 [ 441.993644][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 441.993666][ C0] [ 441.993666][ C0] -> #5 (&rt_b->rt_runtime_lock){-.-.}-{2:2}: [ 441.993690][ C0] _raw_spin_lock+0x2a/0x40 [ 441.993705][ C0] rq_online_rt+0x125/0x310 [ 441.993720][ C0] sched_cpu_activate+0x4ae/0x650 [ 441.993735][ C0] cpuhp_invoke_callback+0x431/0x830 [ 441.993754][ C0] cpuhp_thread_fun+0x39a/0x7d0 [ 441.993771][ C0] smpboot_thread_fn+0x4f6/0x970 [ 441.993789][ C0] kthread+0x436/0x520 [ 441.993802][ C0] ret_from_fork+0x1f/0x30 [ 441.993818][ C0] [ 441.993818][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 441.993840][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 441.993856][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 441.993873][ C0] task_fork_fair+0x5c/0x350 [ 441.993887][ C0] sched_cgroup_fork+0x2c6/0x320 [ 441.993904][ C0] copy_process+0x22d1/0x3e00 [ 441.993919][ C0] kernel_clone+0x219/0x930 [ 441.993934][ C0] kernel_thread+0xc8/0x120 [ 441.993948][ C0] rest_init+0x21/0x330 [ 441.993964][ C0] start_kernel+0x486/0x530 [ 441.993988][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 441.994007][ C0] [ 441.994007][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 441.994031][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 441.994047][ C0] try_to_wake_up+0x5c/0x1050 [ 441.994065][ C0] __wake_up_common+0x2a4/0x4e0 [ 441.994084][ C0] __wake_up+0x108/0x180 [ 441.994100][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 441.994119][ C0] serial8250_tx_chars+0x629/0x830 [ 441.994138][ C0] serial8250_handle_irq+0x519/0x610 [ 441.994157][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 441.994177][ C0] serial8250_interrupt+0x9b/0x1c0 [ 441.994195][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 441.994211][ C0] handle_irq_event+0xa5/0x220 [ 441.994227][ C0] handle_edge_irq+0x243/0xb20 [ 441.994244][ C0] __common_interrupt+0xd7/0x1e0 [ 441.994260][ C0] common_interrupt+0xb0/0xd0 [ 441.994275][ C0] asm_common_interrupt+0x22/0x40 [ 441.994291][ C0] unwind_next_frame+0x9c4/0x1d90 [ 441.994307][ C0] arch_stack_walk+0x10c/0x140 [ 441.994324][ C0] stack_trace_save+0x98/0xe0 [ 441.994338][ C0] kasan_set_track+0x4b/0x70 [ 441.994354][ C0] kasan_set_free_info+0x1f/0x40 [ 441.994371][ C0] ____kasan_slab_free+0xd5/0x110 [ 441.994387][ C0] slab_free_freelist_hook+0xea/0x170 [ 441.994403][ C0] kmem_cache_free+0x8f/0x210 [ 441.994428][ C0] unlink_anon_vmas+0x611/0x660 [ 441.994442][ C0] free_pgtables+0x74/0x2a0 [ 441.994478][ C0] exit_mmap+0x39e/0x5f0 [ 441.994495][ C0] __mmput+0x115/0x3b0 [ 441.994511][ C0] exit_mm+0x567/0x6c0 [ 441.994528][ C0] do_exit+0x5a1/0x20a0 [ 441.994546][ C0] do_group_exit+0x12e/0x300 [ 441.994564][ C0] __x64_sys_exit_group+0x3b/0x40 [ 441.994583][ C0] do_syscall_64+0x4c/0xa0 [ 441.994598][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.994615][ C0] [ 441.994615][ C0] -> #2 (&tty->write_wait){-...}-{2:2}: [ 441.994636][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 441.994652][ C0] __wake_up+0xed/0x180 [ 441.994667][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 441.994684][ C0] serial8250_tx_chars+0x629/0x830 [ 441.994701][ C0] serial8250_handle_irq+0x519/0x610 [ 441.994718][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 441.994737][ C0] serial8250_interrupt+0x9b/0x1c0 [ 441.994753][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 441.994770][ C0] handle_irq_event+0xa5/0x220 [ 441.994785][ C0] handle_edge_irq+0x243/0xb20 [ 441.994802][ C0] __common_interrupt+0xd7/0x1e0 [ 441.994817][ C0] common_interrupt+0xb0/0xd0 [ 441.994833][ C0] asm_common_interrupt+0x22/0x40 [ 441.994848][ C0] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 441.994863][ C0] uart_write+0x62f/0x880 [ 441.994878][ C0] n_tty_write+0xd21/0x1210 [ 441.994892][ C0] file_tty_write+0x557/0x910 [ 441.994909][ C0] vfs_write+0x712/0xd00 [ 441.994923][ C0] ksys_write+0x14d/0x250 [ 441.994937][ C0] do_syscall_64+0x4c/0xa0 [ 441.994952][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.994969][ C0] [ 441.994969][ C0] -> #1 (&port_lock_key){-...}-{2:2}: [ 441.994998][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 441.995014][ C0] serial8250_console_write+0x170/0xf80 [ 441.995034][ C0] console_unlock+0xc86/0x1200 [ 441.995048][ C0] vprintk_emit+0xc0/0x150 [ 441.995066][ C0] _printk+0xcc/0x110 [ 441.995083][ C0] register_console+0x682/0x960 [ 441.995098][ C0] univ8250_console_init+0x41/0x50 [ 441.995116][ C0] console_init+0x177/0x5d0 [ 441.995130][ C0] start_kernel+0x2f9/0x530 [ 441.995145][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 441.995163][ C0] [ 441.995163][ C0] -> #0 (console_owner){-...}-{0:0}: [ 441.995184][ C0] __lock_acquire+0x2c33/0x7c60 [ 441.995202][ C0] lock_acquire+0x197/0x3f0 [ 441.995219][ C0] console_lock_spinning_enable+0x51/0x60 [ 441.995234][ C0] console_unlock+0x9f8/0x1200 [ 441.995248][ C0] vprintk_emit+0xc0/0x150 [ 441.995265][ C0] _printk+0xcc/0x110 [ 441.995281][ C0] report_bug+0x1e5/0x2e0 [ 441.995298][ C0] handle_bug+0x3a/0x70 [ 441.995312][ C0] exc_invalid_op+0x16/0x40 [ 441.995327][ C0] asm_exc_invalid_op+0x16/0x20 [ 441.995342][ C0] copy_from_user_nofault+0x160/0x1c0 [ 441.995359][ C0] bpf_probe_read_user+0x26/0x70 [ 441.995376][ C0] bpf_prog_2903cf4cc3d681d2+0x3a/0x73c [ 441.995391][ C0] bpf_trace_run2+0x15b/0x2d0 [ 441.995405][ C0] enqueue_hrtimer+0x314/0x370 [ 441.995424][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 441.995443][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 441.995461][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 441.995478][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 441.995496][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 441.995515][ C0] [ 441.995515][ C0] other info that might help us debug this: [ 441.995515][ C0] [ 441.995520][ C0] Chain exists of: [ 441.995520][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 441.995520][ C0] [ 441.995547][ C0] Possible unsafe locking scenario: [ 441.995547][ C0] [ 441.995551][ C0] CPU0 CPU1 [ 441.995556][ C0] ---- ---- [ 441.995560][ C0] lock(hrtimer_bases.lock); [ 441.995570][ C0] lock(&rt_b->rt_runtime_lock); [ 441.995582][ C0] lock(hrtimer_bases.lock); [ 441.995593][ C0] lock(console_owner); [ 441.995603][ C0] [ 441.995603][ C0] *** DEADLOCK *** [ 441.995603][ C0] [ 441.995607][ C0] 3 locks held by syz-executor/4187: [ 441.995617][ C0] #0: ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 441.995663][ C0] #1: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 441.995705][ C0] #2: ffffffff8c1112a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 441.995748][ C0] [ 441.995748][ C0] stack backtrace: [ 441.995760][ C0] CPU: 0 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 441.995778][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.995797][ C0] Call Trace: [ 441.995803][ C0] [ 441.995811][ C0] dump_stack_lvl+0x168/0x230 [ 441.995834][ C0] ? load_image+0x3b0/0x3b0 [ 441.995854][ C0] ? show_regs_print_info+0x20/0x20 [ 441.995880][ C0] ? print_circular_bug+0x12b/0x1a0 [ 441.995899][ C0] check_noncircular+0x274/0x310 [ 441.995918][ C0] ? add_chain_block+0x940/0x940 [ 441.995934][ C0] ? lockdep_lock+0xdc/0x1e0 [ 441.995954][ C0] ? lockdep_unlock+0x134/0x2d0 [ 441.995974][ C0] ? lockdep_lock+0x1e0/0x1e0 [ 441.996000][ C0] ? mark_lock+0x94/0x320 [ 441.996021][ C0] __lock_acquire+0x2c33/0x7c60 [ 441.996073][ C0] ? verify_lock_unused+0x140/0x140 [ 441.996103][ C0] ? sprintf+0xd6/0x120 [ 441.996127][ C0] lock_acquire+0x197/0x3f0 [ 441.996147][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 441.996166][ C0] ? prb_read_valid+0x60/0x60 [ 441.996187][ C0] ? read_lock_is_recursive+0x10/0x10 [ 441.996208][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 441.996228][ C0] ? __rwlock_init+0x140/0x140 [ 441.996247][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 441.996268][ C0] console_lock_spinning_enable+0x51/0x60 [ 441.996285][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 441.996303][ C0] console_unlock+0x9f8/0x1200 [ 441.996324][ C0] ? console_trylock_spinning+0x350/0x350 [ 441.996350][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 441.996368][ C0] ? vprintk_emit+0xa7/0x150 [ 441.996389][ C0] ? printk_parse_prefix+0x330/0x330 [ 441.996409][ C0] ? vprintk_emit+0xa7/0x150 [ 441.996430][ C0] ? console_trylock+0x70/0x70 [ 441.996446][ C0] ? mark_lock+0x94/0x320 [ 441.996468][ C0] ? mark_lock+0x94/0x320 [ 441.996493][ C0] ? vprintk_emit+0x150/0x150 [ 441.996521][ C0] vprintk_emit+0xc0/0x150 [ 441.996545][ C0] _printk+0xcc/0x110 [ 441.996566][ C0] ? verify_lock_unused+0x140/0x140 [ 441.996589][ C0] ? load_image+0x3b0/0x3b0 [ 441.996611][ C0] ? verify_lock_unused+0x140/0x140 [ 441.996633][ C0] ? find_bug+0xa1/0x350 [ 441.996652][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 441.996672][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 441.996691][ C0] report_bug+0x1e5/0x2e0 [ 441.996714][ C0] handle_bug+0x3a/0x70 [ 441.996731][ C0] exc_invalid_op+0x16/0x40 [ 441.996748][ C0] asm_exc_invalid_op+0x16/0x20 [ 441.996772][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 441.996795][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 441.996813][ C0] RSP: 0000:ffffc90002e8fae0 EFLAGS: 00010006 [ 441.996829][ C0] RAX: ffffffff819ed900 RBX: 0000000000000000 RCX: ffff888076531dc0 [ 441.996844][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.996856][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 441.996869][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff888076533548 [ 441.996883][ C0] R13: dffffc0000000000 R14: ffffc90002e8fb08 R15: 0000000000000000 [ 441.996899][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 441.996926][ C0] bpf_probe_read_user+0x26/0x70 [ 441.996948][ C0] bpf_prog_2903cf4cc3d681d2+0x3a/0x73c [ 441.996999][ C0] bpf_trace_run2+0x15b/0x2d0 [ 441.997017][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 441.997040][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 441.997059][ C0] ? debug_object_activate+0x2d2/0x480 [ 441.997080][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 441.997100][ C0] enqueue_hrtimer+0x314/0x370 [ 441.997123][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 441.997149][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 441.997175][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 441.997196][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 441.997219][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 441.997252][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 441.997273][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 441.997295][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 441.997315][ C0] RIP: 0033:0x7fa79bc37f85 [ 441.997331][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 441.997346][ C0] RSP: 002b:00007ffc812e33d0 EFLAGS: 00000293 [ 441.997362][ C0] RAX: 0000000000000000 RBX: 0000000000000478 RCX: 00007fa79bc37f85 [ 441.997374][ C0] RDX: 00007ffc812e3410 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.997387][ C0] RBP: 00007ffc812e347c R08: 0000000000000000 R09: 0000000000000000 [ 441.997399][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 441.997411][ C0] R13: 00000000000927c0 R14: 000000000006b742 R15: 00007ffc812e34d0 [ 441.997431][ C0] [ 443.362996][ C0] WARNING: CPU: 0 PID: 4187 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 443.372327][ C0] Modules linked in: [ 443.376217][ C0] CPU: 0 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 443.383807][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.393857][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 443.400015][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 443.419617][ C0] RSP: 0000:ffffc90002e8fae0 EFLAGS: 00010006 [ 443.425680][ C0] RAX: ffffffff819ed900 RBX: 0000000000000000 RCX: ffff888076531dc0 [ 443.433655][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.441647][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 443.449791][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff888076533548 [ 443.457760][ C0] R13: dffffc0000000000 R14: ffffc90002e8fb08 R15: 0000000000000000 [ 443.465839][ C0] FS: 000055555db2e500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 443.474763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.481340][ C0] CR2: 00007f17097d5000 CR3: 000000006232e000 CR4: 00000000003506f0 [ 443.489308][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 443.497270][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 443.505235][ C0] Call Trace: [ 443.508514][ C0] [ 443.511445][ C0] bpf_probe_read_user+0x26/0x70 [ 443.516389][ C0] bpf_prog_2903cf4cc3d681d2+0x3a/0x73c [ 443.521953][ C0] bpf_trace_run2+0x15b/0x2d0 [ 443.526720][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 443.532351][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 443.537197][ C0] ? debug_object_activate+0x2d2/0x480 [ 443.542653][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 443.548022][ C0] enqueue_hrtimer+0x314/0x370 [ 443.552785][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 443.557984][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 443.563533][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 443.568727][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 443.574789][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 443.579732][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 443.585711][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 443.591428][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 443.597417][ C0] RIP: 0033:0x7fa79bc37f85 [ 443.601834][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 443.621436][ C0] RSP: 002b:00007ffc812e33d0 EFLAGS: 00000293 [ 443.627501][ C0] RAX: 0000000000000000 RBX: 0000000000000478 RCX: 00007fa79bc37f85 [ 443.635469][ C0] RDX: 00007ffc812e3410 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.643438][ C0] RBP: 00007ffc812e347c R08: 0000000000000000 R09: 0000000000000000 [ 443.651402][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 443.659388][ C0] R13: 00000000000927c0 R14: 000000000006b742 R15: 00007ffc812e34d0 [ 443.667360][ C0] [ 443.670380][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 443.677651][ C0] CPU: 0 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 443.685184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.695236][ C0] Call Trace: [ 443.698533][ C0] [ 443.701474][ C0] dump_stack_lvl+0x168/0x230 [ 443.706153][ C0] ? show_regs_print_info+0x20/0x20 [ 443.711351][ C0] ? load_image+0x3b0/0x3b0 [ 443.715871][ C0] panic+0x2c9/0x7f0 [ 443.719761][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 443.724385][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 443.729980][ C0] __warn+0x248/0x2b0 [ 443.733969][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 443.739520][ C0] report_bug+0x1b7/0x2e0 [ 443.743865][ C0] handle_bug+0x3a/0x70 [ 443.748020][ C0] exc_invalid_op+0x16/0x40 [ 443.752522][ C0] asm_exc_invalid_op+0x16/0x20 [ 443.757549][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 443.763699][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 443.783301][ C0] RSP: 0000:ffffc90002e8fae0 EFLAGS: 00010006 [ 443.789374][ C0] RAX: ffffffff819ed900 RBX: 0000000000000000 RCX: ffff888076531dc0 [ 443.797365][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.805330][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 443.813382][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff888076533548 [ 443.821350][ C0] R13: dffffc0000000000 R14: ffffc90002e8fb08 R15: 0000000000000000 [ 443.829320][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 443.834868][ C0] bpf_probe_read_user+0x26/0x70 [ 443.839894][ C0] bpf_prog_2903cf4cc3d681d2+0x3a/0x73c [ 443.845439][ C0] bpf_trace_run2+0x15b/0x2d0 [ 443.850160][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 443.855878][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 443.860724][ C0] ? debug_object_activate+0x2d2/0x480 [ 443.866186][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 443.871554][ C0] enqueue_hrtimer+0x314/0x370 [ 443.876320][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 443.881516][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 443.887064][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 443.892176][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 443.898240][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 443.903184][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 443.909163][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 443.914790][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 443.920772][ C0] RIP: 0033:0x7fa79bc37f85 [ 443.925196][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 443.944808][ C0] RSP: 002b:00007ffc812e33d0 EFLAGS: 00000293 [ 443.950882][ C0] RAX: 0000000000000000 RBX: 0000000000000478 RCX: 00007fa79bc37f85 [ 443.958869][ C0] RDX: 00007ffc812e3410 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.966848][ C0] RBP: 00007ffc812e347c R08: 0000000000000000 R09: 0000000000000000 [ 443.974828][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 443.982814][ C0] R13: 00000000000927c0 R14: 000000000006b742 R15: 00007ffc812e34d0 [ 443.990842][ C0] [ 445.123514][ C0] Shutting down cpus with NMI [ 445.128641][ C0] Kernel Offset: disabled [ 445.133014][ C0] Rebooting in 86400 seconds..