last executing test programs: 18.10649592s ago: executing program 0 (id=1130): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000180)={0x401, 0x6}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000002200)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x5e22, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x3}, @ib={0x1b, 0xc, 0x8, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x4}}}, 0x118) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@map_acorn}, {@map_normal}, {@map_off}, {@utf8}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@overriderock}, {@unhide}, {@cruft}]}, 0x5, 0xa41, &(0x7f0000000700)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r5, 0x2}}, 0x18) 14.832245464s ago: executing program 0 (id=1142): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000000000000001) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000019400)={0x8, 0xff, 0x7, 0x6, 0x1}) personality(0xfe47fef9f5ef7379) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) personality(0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x71, &(0x7f0000019440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60000000003b3affac8b2bf17793f13f2ed53d1699fe8000000000000000000000000000aaff0200000000000000000000000000010401907800000001637c364d00062fffff021000000000000000000000000001fc00000000000000000000000000000033001a4066000000fe082f"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f000001b500), 0xb0100, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f000001b4c0), 0x0, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000000180)=""/104, 0x68}], 0x2}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 10.071761582s ago: executing program 0 (id=1136): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00') pread64(r4, &(0x7f0000000480)=""/177, 0xb1, 0xa6) unshare(0x26020480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x2000000, 0x0, 0x73130305, 0x33565347, 0x0, 0x0, 0x25, 0x0, 0x0, 0x7, 0x1}}) 10.071394002s ago: executing program 2 (id=1138): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c2e0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x4080) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYBLOB="090626bd7000fcdbc625010000000e0001006e657464657673696d0000000f0002006e3531673d20a3c5a040e713", @ANYRES32=r2, @ANYRESDEC=r6, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x1}) r7 = accept4(r0, 0x0, 0x0, 0x80800) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r8, 0x80044323, &(0x7f0000000180)) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4, 0x8) 8.460850518s ago: executing program 0 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40001) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) epoll_pwait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7fffffff, &(0x7f0000000380)={[0x6]}, 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x86808, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c776664ee6f", @ANYBLOB, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',smackfstransmute=\x00,fscontext=user_u,func=BPRM_CHECK,subj_type=\x00,smackfsroot=vfat\x00,permit_directio,\x00']) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) 7.51262052s ago: executing program 1 (id=1144): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c2e0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x4080) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYBLOB="090626bd7000fcdbc625010000000e0001006e657464657673696d0000000f0002006e3531673d20a3c5a040e713", @ANYRES32=r2, @ANYRESDEC=r6, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) r7 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000180)) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4, 0x8) 7.50325s ago: executing program 2 (id=1145): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffe, 0x303000) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') ioctl$FIOCLEX(r3, 0x5451) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, &(0x7f0000000040)=0x1000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24000000) 6.6018682s ago: executing program 0 (id=1146): socket(0x1, 0x803, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af"}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getitimer(0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca3808e8b8bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007c7afd75fabaf66450709ff061959d02d4f6e0c120fdfaad713688d9af3e70e752f3698b8cd0d75efd5eb50f5c4ef48aa62b641104abb1ce0e8ebcea9485d77bb9b523a47f1de80c1456f62e1387435d3f41d2d6c9e04c1f51401aa6b5204972b93c5783233a1002a1c0d9680c43f078cb2fac20df2296408b52ac0338cee4c92445b44b8d802184f15b34dcd5be61c6f55f73559", 0x17a}], 0x1}}], 0x1, 0x42054) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.067309042s ago: executing program 2 (id=1147): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x1000000000000}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r1, &(0x7f00000003c0)=""/224, 0xe0) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060108000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008001240"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0) waitid(0x0, r5, 0x0, 0xa100000e, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.448785546s ago: executing program 3 (id=1148): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x2040000, 0x0) socket(0x1, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x5, @pix={0xb78d0f0, 0x27, 0x47425247, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x3, 0x2, 0x7}}) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0xa8, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x94, 0x1, [@m_mpls={0x90, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x61, 0x4, "d90300f75efe2ddbc3d652a8526a30c3a8bcf3a1ba0bd1b0e53184b0b68ab1ca011d9bca8b03f9df80ec730321f7fd578a0512d6b7f1093fdfd80b3b1537ecab9dc083fe4eda4fe256617ec8584986207f2ec2c9bfccfb90a5b393a741"}, {0xc}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xeb756673eed151e1}, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000000)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 5.436973507s ago: executing program 1 (id=1149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00000000000000", 0x8) 5.416055627s ago: executing program 0 (id=1150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r7, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r1, r8, 0x0) 4.548163167s ago: executing program 1 (id=1151): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040)={0x4100, 0x0, 0x10}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(0xffffffffffffffff, 0x8000000000000000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x9}, 0x1, 0x0, 0x0, 0x4c001}, 0x10) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x50, 0x6, "afc4871ac5d882811d5064c0500dc7eaa3d8cc853e20136eaffaf991e6c11cdc7189577644c834190f243542a0ff9e5c348045cc4b20eea39ef42d6fa279fc59560990ccf6c3a76c195bd605"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x5c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xea}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xfd}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xba}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x27}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xaf}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x18c}}, 0x24000000) 4.150696305s ago: executing program 1 (id=1152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 4.045478208s ago: executing program 2 (id=1153): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c2e0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x4080) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYBLOB="090626bd7000fcdbc625010000000e0001006e657464657673696d0000000f0002006e3531673d20a3c5a040e713", @ANYRES32=r2, @ANYRESDEC=r6, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x1}) r7 = accept4(r0, 0x0, 0x0, 0x80800) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r8, 0x80044323, &(0x7f0000000180)) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4, 0x8) 3.988767599s ago: executing program 1 (id=1154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) setitimer(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x48000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfbfffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "1853b7479f637a06", "171c2ee2d3e5d8dfa6efb7c36605176f8803dd806937b05696341ab3344b4669", "cd327e23", "86898c6440009f24"}, 0x38) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x19, 0x0, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) 3.95691772s ago: executing program 3 (id=1155): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'batadv_slave_1\x00', 0x1a003}) r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000180)={0x0, 0xb, "004004", 0x5a, 0x40}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r5, &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006a80)={0x2c, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.62024706s ago: executing program 3 (id=1156): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000", 0x17}], 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x810) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg(r3, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000005140)=[{0x0}, {&(0x7f0000004140)="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", 0x5e0}], 0x2}}], 0x1, 0x4000001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) listen(0xffffffffffffffff, 0x800) accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 2.257069419s ago: executing program 2 (id=1157): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c2e0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x4080) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYBLOB="090626bd7000fcdbc625010000000e0001006e657464657673696d0000000f0002006e3531673d20a3c5a040e713", @ANYRES32=r2, @ANYRESDEC=r6, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) r7 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r7, 0x80044323, &(0x7f0000000180)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4, 0x8) 1.228711112s ago: executing program 1 (id=1158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x7a, 0x0, 0x9}, 0x28) 1.140757084s ago: executing program 3 (id=1159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00000000000000", 0x8) 1.042875666s ago: executing program 2 (id=1160): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast2, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af2144a011a00", 0x0, 0x1, 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x80000001, 0x2, 0x614, 0x1, 0xb5, 0x8, 0x4}, 0x9c) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x20502, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.033500676s ago: executing program 3 (id=1161): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000040)={0x4100, 0x0, 0x10}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(0xffffffffffffffff, 0x8000000000000000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x9}, 0x1, 0x0, 0x0, 0x4c001}, 0x10) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x50, 0x6, "afc4871ac5d882811d5064c0500dc7eaa3d8cc853e20136eaffaf991e6c11cdc7189577644c834190f243542a0ff9e5c348045cc4b20eea39ef42d6fa279fc59560990ccf6c3a76c195bd605"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x5c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xea}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xfd}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xba}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x27}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xaf}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x18c}}, 0x24000000) 0s ago: executing program 3 (id=1162): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): d files will use data=ordered instead of data journaling mode [ 360.095681][ T7457] EXT4-fs (loop2): 1 truncate cleaned up [ 360.107158][ T7457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.259055][ T7469] loop1: detected capacity change from 0 to 2048 [ 361.593044][ T7469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.388019][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 362.773851][ T7472] loop0: detected capacity change from 0 to 4096 [ 363.077533][ T7472] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 364.375323][ T7472] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 367.184856][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.370538][ T7505] syzkaller0: entered promiscuous mode [ 367.379254][ T7505] syzkaller0: entered allmulticast mode [ 370.983918][ T7533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.332'. [ 371.184542][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.192228][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.704849][ T7544] loop3: detected capacity change from 0 to 512 [ 371.937704][ T7544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 372.333812][ T7544] EXT4-fs (loop3): 1 truncate cleaned up [ 372.497046][ T7544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.522494][ T7569] ALSA: mixer_oss: invalid OSS volume '' [ 376.138751][ T7572] syzkaller0: entered promiscuous mode [ 376.144408][ T7572] syzkaller0: entered allmulticast mode [ 377.935391][ T7584] loop0: detected capacity change from 0 to 2048 [ 378.207058][ T7584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.330329][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.420588][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 379.160538][ T7592] kernel read not supported for file /file1 (pid: 7592 comm: syz.2.345) [ 379.174684][ T28] audit: type=1800 audit(1783399496.956:157): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.345" name="file1" dev="mqueue" ino=11120 res=0 errno=0 [ 381.306199][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.312734][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.886496][ T7628] loop0: detected capacity change from 0 to 1024 [ 386.653423][ T7640] syzkaller0: entered promiscuous mode [ 386.661766][ T7640] syzkaller0: entered allmulticast mode [ 387.845012][ T7648] ALSA: mixer_oss: invalid OSS volume 'u' [ 387.963738][ T7656] loop2: detected capacity change from 0 to 1024 [ 388.025344][ T7656] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.086781][ T7656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.132787][ T7656] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 388.205749][ T7656] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 389.551696][ T7668] loop0: detected capacity change from 0 to 512 [ 389.573595][ T7668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 389.809612][ T7668] EXT4-fs (loop0): 1 truncate cleaned up [ 389.819332][ T7668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.055182][ T7678] loop2: detected capacity change from 0 to 512 [ 391.145368][ T7678] EXT4-fs: Ignoring removed bh option [ 391.220615][ T7678] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 391.336896][ T7678] EXT4-fs (loop2): 1 truncate cleaned up [ 391.450224][ T7678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.801134][ T7678] IPVS: Error connecting to the multicast addr [ 394.175102][ T7700] syzkaller0: entered promiscuous mode [ 394.196604][ T7700] syzkaller0: entered allmulticast mode [ 394.242205][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.296374][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.501803][ T7710] syzkaller0: entered promiscuous mode [ 395.507509][ T7710] syzkaller0: entered allmulticast mode [ 396.706631][ T7723] loop3: detected capacity change from 0 to 128 [ 396.884013][ T7723] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.094568][ T7723] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.913965][ T7723] syz.3.373 (pid 7723) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 398.099730][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.534255][ T7742] loop3: detected capacity change from 0 to 512 [ 398.661530][ T7742] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 399.104930][ T7742] EXT4-fs (loop3): 1 truncate cleaned up [ 399.213545][ T7742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.634761][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.253904][ T7754] syzkaller0: entered promiscuous mode [ 400.316779][ T7754] syzkaller0: entered allmulticast mode [ 401.769450][ T7765] loop3: detected capacity change from 0 to 4096 [ 406.256135][ T7784] loop0: detected capacity change from 0 to 512 [ 406.344833][ T7784] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 407.048020][ T7784] EXT4-fs (loop0): 1 truncate cleaned up [ 407.140114][ T7784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.550928][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.739386][ T7825] xt_l2tp: v2 sid > 0xffff: 117440512 [ 413.170539][ T7842] loop1: detected capacity change from 0 to 512 [ 413.216178][ T7842] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 413.351569][ T7842] EXT4-fs (loop1): 1 truncate cleaned up [ 413.457126][ T7842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.320338][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.777116][ T7863] pim6reg: entered allmulticast mode [ 415.821410][ T7863] pim6reg: left allmulticast mode [ 419.879439][ T7887] loop0: detected capacity change from 0 to 512 [ 419.897435][ T7887] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 419.960802][ T7887] EXT4-fs (loop0): 1 truncate cleaned up [ 419.967808][ T7887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.700880][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.013160][ T7928] befs: (nullb0): invalid magic header [ 425.308093][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 425.511047][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.181620][ T7936] qrtr: Invalid version 0 [ 429.189975][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 429.199905][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.211655][ T8] usb 1-1: config 0 descriptor?? [ 429.260636][ T8] usb 1-1: can't set config #0, error -71 [ 429.285289][ T8] usb 1-1: USB disconnect, device number 7 [ 429.646145][ T7944] loop3: detected capacity change from 0 to 512 [ 430.122356][ T7944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 430.689568][ T7944] EXT4-fs (loop3): 1 truncate cleaned up [ 430.697444][ T7944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.198981][ T5783] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 433.221080][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.730336][ T5783] Bluetooth: hci3: Malformed LE Event: 0x0d [ 442.740861][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.747531][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.754029][ T28] audit: type=1326 audit(1783399560.536:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8005 comm="syz.3.438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff80ef9de59 code=0x0 [ 443.306105][ T8009] loop1: detected capacity change from 0 to 512 [ 443.943730][ T8009] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 444.202992][ T8009] EXT4-fs (loop1): 1 truncate cleaned up [ 444.303839][ T8009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.136576][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.794064][ T8048] loop3: detected capacity change from 0 to 256 [ 451.936181][ T8048] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.947465][ T8048] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 452.549114][ T8048] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 453.239498][ T8069] IPVS: Error connecting to the multicast addr [ 455.312680][ T8080] pim6reg: entered allmulticast mode [ 455.355847][ T8080] pim6reg: left allmulticast mode [ 456.336308][ T8085] loop1: detected capacity change from 0 to 128 [ 456.520214][ T8085] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.621561][ T8085] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 458.317272][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 462.037760][ T8116] netlink: 60 bytes leftover after parsing attributes in process `syz.1.458'. [ 462.289288][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.298089][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.294450][ T8127] loop3: detected capacity change from 0 to 1024 [ 463.307376][ T8127] EXT4-fs: Ignoring removed mblk_io_submit option [ 463.352277][ T8127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.367141][ T8127] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 463.408907][ T8127] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 465.346920][ T8152] kernel read not supported for file /file1 (pid: 8152 comm: syz.1.464) [ 465.502400][ T28] audit: type=1800 audit(1783399583.146:159): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.464" name="file1" dev="mqueue" ino=12838 res=0 errno=0 [ 467.156190][ T8156] syzkaller0: entered promiscuous mode [ 467.178097][ T8156] syzkaller0: entered allmulticast mode [ 469.291914][ T8177] ALSA: mixer_oss: invalid OSS volume '' [ 470.274799][ T8174] loop1: detected capacity change from 0 to 1024 [ 472.738024][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 473.340120][ T8204] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.349190][ T8204] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.358748][ T8204] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.367501][ T8204] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.437302][ T8204] vxlan0: entered promiscuous mode [ 474.619708][ T8213] loop1: detected capacity change from 0 to 1024 [ 474.638929][ T8213] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.733029][ T8213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.868941][ T8213] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 474.992042][ T8213] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 475.096250][ T8217] NILFS (nullb0): couldn't find nilfs on the device [ 481.796816][ T8239] ALSA: mixer_oss: invalid OSS volume '' [ 485.489119][ T8278] loop0: detected capacity change from 0 to 1024 [ 485.562559][ T8278] EXT4-fs: Ignoring removed mblk_io_submit option [ 485.799882][ T8278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 486.364623][ T8278] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 486.507916][ T8278] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 487.512888][ T8295] batadv_slave_1: entered promiscuous mode [ 488.114270][ T8291] batadv_slave_1: left promiscuous mode [ 493.992956][ T8327] ALSA: mixer_oss: invalid OSS volume '' [ 496.391815][ T8343] loop0: detected capacity change from 0 to 128 [ 496.601263][ T8351] xt_l2tp: v2 sid > 0xffff: 117440512 [ 496.871251][ T8343] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 497.158690][ T8343] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 498.073677][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.361101][ T8364] NILFS (nullb0): couldn't find nilfs on the device [ 500.096627][ T8374] qrtr: Invalid version 0 [ 500.891010][ T8376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.511'. [ 502.356597][ T8380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 502.362849][ T8380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.369081][ T8380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 502.375209][ T8380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.848548][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 504.033528][ T8399] loop2: detected capacity change from 0 to 4096 [ 504.171682][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.178364][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.228175][ T8399] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 504.333930][ T8399] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 504.398712][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 504.404850][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 504.404864][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 504.425303][ T8403] NILFS (nullb0): couldn't find nilfs on the device [ 505.870783][ T8414] pim6reg: entered allmulticast mode [ 505.910743][ T8414] pim6reg: left allmulticast mode [ 507.327608][ T5782] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 508.000550][ T8427] befs: (nullb0): invalid magic header [ 509.178453][ T8430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 509.184696][ T8430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 509.190949][ T8430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 509.197079][ T8430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 509.287045][ T5822] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 509.546136][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.559693][ T5822] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 510.586790][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.639432][ T5822] usb 4-1: config 0 descriptor?? [ 510.645212][ T5822] usb 4-1: can't set config #0, error -71 [ 510.676687][ T5822] usb 4-1: USB disconnect, device number 10 [ 510.922323][ T8448] netlink: 'syz.0.528': attribute type 9 has an invalid length. [ 511.331097][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 511.341282][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 511.347605][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 511.357496][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 512.358430][ T8456] NILFS (nullb0): couldn't find nilfs on the device [ 512.646052][ T8458] befs: (nullb0): invalid magic header [ 513.315091][ T8462] NILFS (nullb0): couldn't find nilfs on the device [ 513.516790][ T5844] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 513.720619][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.773634][ T5844] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 513.850707][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.013972][ T5844] usb 1-1: config 0 descriptor?? [ 514.233554][ T5844] pwc: Askey VC010 type 2 USB webcam detected. [ 514.525489][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.534538][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.545669][ T5844] pwc: recv_control_msg error -32 req 02 val 2b00 [ 514.681900][ T8469] NILFS (nullb0): couldn't find nilfs on the device [ 514.770007][ T5844] pwc: recv_control_msg error -32 req 02 val 2700 [ 515.760367][ T8474] loop2: detected capacity change from 0 to 512 [ 515.793229][ T8474] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 515.793263][ T8474] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 515.799381][ T8474] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.533: Invalid inode table block 1 in block_group 0 [ 515.812914][ T8474] EXT4-fs (loop2): get root inode failed [ 515.812934][ T8474] EXT4-fs (loop2): mount failed [ 516.159911][ T5844] pwc: recv_control_msg error -71 req 04 val 1000 [ 516.177905][ T5844] pwc: recv_control_msg error -71 req 04 val 1300 [ 516.185145][ T5844] pwc: recv_control_msg error -71 req 04 val 1400 [ 516.198295][ T5844] pwc: recv_control_msg error -71 req 02 val 2000 [ 516.218271][ T5844] pwc: recv_control_msg error -71 req 02 val 2100 [ 516.225703][ T5844] pwc: recv_control_msg error -71 req 04 val 1500 [ 516.248359][ T5844] pwc: recv_control_msg error -71 req 02 val 2500 [ 516.255324][ T5844] pwc: recv_control_msg error -71 req 02 val 2400 [ 516.277910][ T5844] pwc: recv_control_msg error -71 req 02 val 2600 [ 516.340796][ T5844] pwc: recv_control_msg error -71 req 02 val 2900 [ 516.410193][ T5844] pwc: recv_control_msg error -71 req 02 val 2800 [ 516.437166][ T5844] pwc: recv_control_msg error -71 req 04 val 1100 [ 516.569350][ T5844] pwc: recv_control_msg error -71 req 04 val 1200 [ 516.955169][ T8487] befs: (nullb0): invalid magic header [ 517.028549][ T5844] pwc: Registered as video103. [ 517.035556][ T5844] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 518.090602][ T5844] usb 1-1: USB disconnect, device number 8 [ 518.245029][ T5852] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 518.460716][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.507977][ T5852] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 518.547852][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.574480][ T5852] usb 2-1: config 0 descriptor?? [ 518.592789][ T5852] pwc: Askey VC010 type 2 USB webcam detected. [ 518.702136][ T8505] netlink: 'syz.3.539': attribute type 9 has an invalid length. [ 518.995599][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.004643][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.012789][ T5852] pwc: recv_control_msg error -32 req 02 val 2b00 [ 519.604922][ T5852] pwc: recv_control_msg error -32 req 02 val 2700 [ 519.940629][ T8511] NILFS (nullb0): couldn't find nilfs on the device [ 520.184561][ T8513] tipc: Can't bind to reserved service type 1 [ 520.875509][ T5852] pwc: recv_control_msg error -71 req 04 val 1000 [ 520.908562][ T5852] pwc: recv_control_msg error -71 req 04 val 1300 [ 520.943286][ T5852] pwc: recv_control_msg error -71 req 04 val 1400 [ 520.999829][ T5852] pwc: recv_control_msg error -71 req 02 val 2000 [ 521.062766][ T5852] pwc: recv_control_msg error -71 req 02 val 2100 [ 521.095374][ T5852] pwc: recv_control_msg error -71 req 04 val 1500 [ 521.122818][ T5852] pwc: recv_control_msg error -71 req 02 val 2500 [ 521.180103][ T5852] pwc: recv_control_msg error -71 req 02 val 2400 [ 521.200969][ T8519] NILFS (nullb0): couldn't find nilfs on the device [ 521.487965][ T5852] pwc: recv_control_msg error -71 req 02 val 2600 [ 521.498135][ T5852] pwc: recv_control_msg error -71 req 02 val 2900 [ 521.498968][ T5852] pwc: recv_control_msg error -71 req 02 val 2800 [ 521.501639][ T5852] pwc: recv_control_msg error -71 req 04 val 1100 [ 521.502906][ T5852] pwc: recv_control_msg error -71 req 04 val 1200 [ 521.504566][ T5852] pwc: Registered as video103. [ 521.506406][ T5852] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 521.683400][ T5852] usb 2-1: USB disconnect, device number 6 [ 522.745738][ T8529] befs: (nullb0): invalid magic header [ 523.924410][ T5852] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 525.849499][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.858907][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.542036][ T28] audit: type=1400 audit(1783399643.536:160): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8536 comm="syz.3.547" [ 526.559883][ T5852] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 526.589861][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.652341][ T5852] usb 2-1: Product: syz [ 526.658198][ T5852] usb 2-1: Manufacturer: syz [ 526.662983][ T5852] usb 2-1: SerialNumber: syz [ 526.685570][ T5852] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 527.059818][ T8550] befs: (nullb0): invalid magic header [ 527.578190][ T5821] usb 2-1: USB disconnect, device number 7 [ 527.778170][ T5822] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 527.793815][ T5821] usb 2-1: ath9k_htc: USB layer deinitialized [ 528.467959][ T8556] trusted_key: syz.0.553 sent an empty control message without MSG_MORE. [ 529.537973][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 529.750130][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.874855][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 529.884381][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.909714][ T9] usb 3-1: config 0 descriptor?? [ 529.918543][ T9] usb 3-1: can't set config #0, error -71 [ 529.940718][ T9] usb 3-1: USB disconnect, device number 10 [ 530.166772][ T8562] NILFS (nullb0): couldn't find nilfs on the device [ 533.621391][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 534.830132][ T8576] loop1: detected capacity change from 0 to 512 [ 535.400284][ T8576] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 535.408413][ T8576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 535.416565][ T8576] System zones: 0-1, 15-15, 18-18, 34-34 [ 535.422923][ T8576] EXT4-fs (loop1): orphan cleanup on readonly fs [ 535.429465][ T8576] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 535.439012][ T8576] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 535.453642][ T8576] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 535.468618][ T8576] EXT4-fs (loop1): 1 truncate cleaned up [ 535.475665][ T8576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 535.644944][ T8581] loop0: detected capacity change from 0 to 512 [ 535.653746][ T8581] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 535.831957][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.874325][ T8581] EXT4-fs (loop0): 1 truncate cleaned up [ 535.916333][ T8581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.248608][ T8588] NILFS (nullb0): couldn't find nilfs on the device [ 537.159831][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.184640][ T8608] syz_tun: entered allmulticast mode [ 539.200396][ T8608] dvmrp8: entered allmulticast mode [ 539.248358][ T8609] befs: (nullb0): invalid magic header [ 539.524771][ T8613] loop1: detected capacity change from 0 to 8 [ 539.531356][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 539.581098][ T8604] syz_tun: left allmulticast mode [ 539.641069][ T8613] SQUASHFS error: Failed to read block 0x6de: -5 [ 539.647882][ T8613] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 539.655336][ T8613] SQUASHFS error: Unable to read inode 0x11f [ 540.112055][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.427933][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 540.437074][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.529679][ T9] usb 1-1: config 0 descriptor?? [ 540.557086][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 540.939938][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 540.943139][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.955377][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.985528][ T8620] NILFS (nullb0): couldn't find nilfs on the device [ 541.166878][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 542.539011][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 542.556828][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 542.568386][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 542.579846][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 542.586905][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 542.595892][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 542.604170][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 542.615493][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 542.622536][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 542.634227][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 542.641399][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 542.649574][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 542.656674][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 542.666539][ T9] pwc: Registered as video103. [ 542.673560][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 542.688484][ T9] usb 1-1: USB disconnect, device number 9 [ 542.781653][ T8632] loop0: detected capacity change from 0 to 512 [ 542.819912][ T8632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 543.051708][ T8632] EXT4-fs (loop0): 1 truncate cleaned up [ 543.094900][ T8632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.619081][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.649460][ T8631] input: syz1 as /devices/virtual/input/input18 [ 544.676388][ T5782] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 547.091765][ T8667] NILFS (nullb0): couldn't find nilfs on the device [ 548.881510][ T8680] befs: (nullb0): invalid magic header [ 549.177991][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 550.007854][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.025511][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 550.061592][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.103154][ T9] usb 3-1: config 0 descriptor?? [ 550.138654][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 550.193531][ T8691] NILFS (nullb0): couldn't find nilfs on the device [ 550.669974][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.679011][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.774621][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 551.274893][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 551.746878][ T8702] syz.0.584 uses obsolete (PF_INET,SOCK_PACKET) [ 552.781685][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 552.796396][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 552.804597][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 552.819807][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 552.834384][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 552.847292][ T8713] loop1: detected capacity change from 0 to 256 [ 552.854267][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 552.864658][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 552.885339][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 552.912359][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 553.118248][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 553.140816][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 553.184673][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 553.408262][ T8718] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 553.695707][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 553.708445][ T9] pwc: Registered as video103. [ 553.721667][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 553.904715][ T9] usb 3-1: USB disconnect, device number 11 [ 555.184769][ T8739] loop1: detected capacity change from 0 to 512 [ 555.267524][ T8739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 555.471871][ T8739] EXT4-fs (loop1): 1 truncate cleaned up [ 555.496200][ T8739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.699968][ T8747] NILFS (nullb0): couldn't find nilfs on the device [ 556.675536][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.164569][ T8755] befs: (nullb0): invalid magic header [ 558.366197][ T5782] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 558.373191][ T55] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 558.589192][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.635295][ T55] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 558.677861][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.699298][ T55] usb 2-1: config 0 descriptor?? [ 558.741246][ T55] pwc: Askey VC010 type 2 USB webcam detected. [ 559.109864][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.118801][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.437633][ T55] pwc: recv_control_msg error -32 req 02 val 2b00 [ 559.454578][ T55] pwc: recv_control_msg error -32 req 02 val 2700 [ 560.838147][ T55] pwc: recv_control_msg error -71 req 04 val 1000 [ 561.147902][ T55] pwc: recv_control_msg error -71 req 04 val 1300 [ 561.174408][ T55] pwc: recv_control_msg error -71 req 04 val 1400 [ 561.184984][ T55] pwc: recv_control_msg error -71 req 02 val 2000 [ 561.435749][ T55] pwc: recv_control_msg error -71 req 02 val 2100 [ 561.471952][ T55] pwc: recv_control_msg error -71 req 04 val 1500 [ 561.503450][ T55] pwc: recv_control_msg error -71 req 02 val 2500 [ 561.538072][ T55] pwc: recv_control_msg error -71 req 02 val 2400 [ 561.573434][ T55] pwc: recv_control_msg error -71 req 02 val 2600 [ 561.606638][ T55] pwc: recv_control_msg error -71 req 02 val 2900 [ 561.643963][ T55] pwc: recv_control_msg error -71 req 02 val 2800 [ 561.681877][ T55] pwc: recv_control_msg error -71 req 04 val 1100 [ 561.734381][ T55] pwc: recv_control_msg error -71 req 04 val 1200 [ 562.217716][ T8783] loop2: detected capacity change from 0 to 512 [ 563.321988][ T8783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 563.398092][ T55] pwc: Registered as video103. [ 563.420760][ T55] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 563.476257][ T8783] EXT4-fs (loop2): 1 truncate cleaned up [ 563.499682][ T8783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.697865][ T55] usb 2-1: USB disconnect, device number 8 [ 564.985005][ T8796] NILFS (nullb0): couldn't find nilfs on the device [ 565.291414][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.627004][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.633548][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.997110][ T8803] NILFS (nullb0): couldn't find nilfs on the device [ 571.299352][ T8837] NILFS (nullb0): couldn't find nilfs on the device [ 572.603563][ T8847] loop0: detected capacity change from 0 to 512 [ 572.754493][ T8847] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 573.050244][ T8847] EXT4-fs (loop0): 1 truncate cleaned up [ 573.057101][ T8847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.079982][ T8848] NILFS (nullb0): couldn't find nilfs on the device [ 573.091284][ T8844] NILFS (nullb0): couldn't find nilfs on the device [ 573.261976][ T8854] loop1: detected capacity change from 0 to 512 [ 573.377979][ T8854] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 573.437540][ T8856] loop2: detected capacity change from 0 to 1024 [ 573.520309][ T8854] EXT4-fs (loop1): 1 truncate cleaned up [ 573.552872][ T8854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.468946][ T8856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.815245][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.815498][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.501546][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.762964][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 577.174754][ T8894] NILFS (nullb0): couldn't find nilfs on the device [ 578.888371][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 578.964774][ T8901] NILFS (nullb0): couldn't find nilfs on the device [ 578.973303][ T8884] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 579.258870][ T8884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 579.437108][ T8884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 579.459368][ T8884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 579.469791][ T8904] NILFS (nullb0): couldn't find nilfs on the device [ 580.023060][ T8914] loop2: detected capacity change from 0 to 512 [ 580.098598][ T8915] loop3: detected capacity change from 0 to 512 [ 581.674226][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 581.674229][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 581.674277][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 581.735509][ T8915] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 581.744138][ T8915] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 581.752332][ T8915] System zones: 0-1, 15-15, 18-18, 34-34 [ 581.758811][ T8915] EXT4-fs (loop3): orphan cleanup on readonly fs [ 581.765773][ T8915] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 581.775260][ T8915] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 581.789881][ T8915] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 581.798767][ T8915] EXT4-fs (loop3): 1 truncate cleaned up [ 581.805843][ T8915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 581.921250][ T8914] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 582.197262][ T8914] EXT4-fs (loop2): 1 truncate cleaned up [ 582.210186][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.223399][ T8914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.318712][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.191525][ T8952] befs: (nullb0): invalid magic header [ 585.467940][ T5821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 585.603619][ T8961] NILFS (nullb0): couldn't find nilfs on the device [ 585.738658][ T8959] loop0: detected capacity change from 0 to 2048 [ 586.178204][ T8963] NILFS (nullb0): couldn't find nilfs on the device [ 587.406521][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.890309][ T8959] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 587.918113][ T8959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.853877][ T5821] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 591.863751][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.874912][ T5821] usb 4-1: config 0 descriptor?? [ 592.006157][ T5821] usb 4-1: can't set config #0, error -71 [ 592.046194][ T5821] usb 4-1: USB disconnect, device number 11 [ 593.602145][ T8989] loop0: detected capacity change from 0 to 512 [ 593.635408][ T8989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 593.688173][ T8989] EXT4-fs (loop0): 1 truncate cleaned up [ 593.767825][ T8995] batadv_slave_1: entered promiscuous mode [ 593.876003][ T8989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.382813][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.452406][ T8991] batadv_slave_1: left promiscuous mode [ 595.831298][ T9004] NILFS (nullb0): couldn't find nilfs on the device [ 595.865729][ T9005] loop1: detected capacity change from 0 to 512 [ 595.873682][ T9006] loop2: detected capacity change from 0 to 256 [ 595.917672][ T9005] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 596.574224][ T9009] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 596.799173][ T9005] EXT4-fs (loop1): 1 truncate cleaned up [ 596.806269][ T9005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.242904][ T9019] befs: (nullb0): invalid magic header [ 597.623954][ T9021] process 'syz.2.648' launched '/dev/fd/11' with NULL argv: empty string added [ 597.718050][ T6330] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 597.974750][ T6330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.985497][ T6330] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 598.001409][ T6330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.164955][ T6330] usb 1-1: config 0 descriptor?? [ 598.294050][ T6330] pwc: Askey VC010 type 2 USB webcam detected. [ 598.663428][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.672326][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.682394][ T6330] pwc: recv_control_msg error -32 req 02 val 2b00 [ 598.894895][ T6330] pwc: recv_control_msg error -32 req 02 val 2700 [ 598.905783][ T28] audit: type=1800 audit(1783399716.686:161): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.648" name="bus" dev="ramfs" ino=15543 res=0 errno=0 [ 598.986859][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.123354][ T9029] bridge_slave_1: left allmulticast mode [ 599.147789][ T9029] bridge_slave_1: left promiscuous mode [ 599.153679][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.222117][ T9029] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 600.461926][ T6330] pwc: recv_control_msg error -71 req 04 val 1000 [ 600.469016][ T6330] pwc: recv_control_msg error -71 req 04 val 1300 [ 600.478300][ T6330] pwc: recv_control_msg error -71 req 04 val 1400 [ 600.487878][ T6330] pwc: recv_control_msg error -71 req 02 val 2000 [ 600.505209][ T6330] pwc: recv_control_msg error -71 req 02 val 2100 [ 600.514378][ T6330] pwc: recv_control_msg error -71 req 04 val 1500 [ 600.521605][ T6330] pwc: recv_control_msg error -71 req 02 val 2500 [ 600.531757][ T6330] pwc: recv_control_msg error -71 req 02 val 2400 [ 600.541855][ T6330] pwc: recv_control_msg error -71 req 02 val 2600 [ 600.557984][ T6330] pwc: recv_control_msg error -71 req 02 val 2900 [ 600.569516][ T6330] pwc: recv_control_msg error -71 req 02 val 2800 [ 600.576601][ T6330] pwc: recv_control_msg error -71 req 04 val 1100 [ 600.599793][ T6330] pwc: recv_control_msg error -71 req 04 val 1200 [ 600.619824][ T6330] pwc: Registered as video103. [ 600.632587][ T6330] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 600.751962][ T6330] usb 1-1: USB disconnect, device number 10 [ 601.640276][ T9050] NILFS (nullb0): couldn't find nilfs on the device [ 601.816297][ T9058] pim6reg: entered allmulticast mode [ 601.859351][ T9058] pim6reg: left allmulticast mode [ 604.067033][ T9071] NILFS (nullb0): couldn't find nilfs on the device [ 604.074967][ T9073] loop0: detected capacity change from 0 to 128 [ 604.092889][ T9073] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 604.105493][ T9073] hpfs: filesystem error: improperly stopped [ 604.111728][ T9073] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 604.119605][ T9073] hpfs: You really don't want any checks? You are crazy... [ 604.127356][ T9073] hpfs: hpfs_map_sector(): read error [ 604.132891][ T9073] hpfs: code page support is disabled [ 604.145881][ T9073] hpfs: hpfs_map_4sectors(): unaligned read [ 604.153031][ T9073] hpfs: hpfs_map_4sectors(): unaligned read [ 604.159103][ T9073] hpfs: filesystem error: unable to find root dir [ 604.624479][ T9079] loop0: detected capacity change from 0 to 512 [ 604.644201][ T9079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 604.709725][ T9079] EXT4-fs (loop0): 1 truncate cleaned up [ 604.716993][ T9079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.392712][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.551937][ T9096] loop3: detected capacity change from 0 to 256 [ 607.578908][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 607.858282][ T9098] befs: (nullb0): invalid magic header [ 608.165857][ T9101] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 609.904450][ T9095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 609.978321][ T9095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 609.984438][ T9095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 609.995199][ T9095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.920991][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.930321][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.839085][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 611.998187][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 611.998285][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 612.011521][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 612.011794][ T5852] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 612.524601][ T5852] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 612.572977][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.596612][ T5852] usb 1-1: Product: syz [ 612.618097][ T5852] usb 1-1: Manufacturer: syz [ 612.622762][ T5852] usb 1-1: SerialNumber: syz [ 612.658152][ T5852] usb 1-1: can't set config #1, error -71 [ 612.674649][ T5852] usb 1-1: USB disconnect, device number 11 [ 619.657054][ T9162] loop0: detected capacity change from 0 to 8 [ 619.737371][ T9162] SQUASHFS error: Failed to read block 0x6de: -5 [ 619.743872][ T9162] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 619.751349][ T9162] SQUASHFS error: Unable to read inode 0x11f [ 620.816832][ T9170] NILFS (nullb0): couldn't find nilfs on the device [ 621.348504][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 621.526332][ T9174] loop3: detected capacity change from 0 to 512 [ 621.561614][ T9167] input: syz1 as /devices/virtual/input/input22 [ 621.636267][ T9174] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 621.713987][ T9174] EXT4-fs (loop3): 1 truncate cleaned up [ 621.721373][ T9174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.859555][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.208215][ T9204] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 626.289746][ T9201] loop1: detected capacity change from 0 to 128 [ 626.992167][ T9201] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 627.004137][ T9201] hpfs: filesystem error: improperly stopped [ 627.010228][ T9201] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 627.017995][ T9201] hpfs: You really don't want any checks? You are crazy... [ 627.025730][ T9201] hpfs: hpfs_map_sector(): read error [ 627.031218][ T9201] hpfs: code page support is disabled [ 627.037646][ T9201] hpfs: hpfs_map_4sectors(): unaligned read [ 627.043867][ T9201] hpfs: hpfs_map_4sectors(): unaligned read [ 627.049851][ T9201] hpfs: filesystem error: unable to find root dir [ 627.317589][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.328422][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.492594][ T9209] loop3: detected capacity change from 0 to 1024 [ 627.517586][ T9213] loop0: detected capacity change from 0 to 256 [ 629.233251][ T9209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.010098][ T9224] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 630.274910][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.656432][ T9228] loop3: detected capacity change from 0 to 512 [ 630.721777][ T9228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 630.848989][ T9228] EXT4-fs (loop3): 1 truncate cleaned up [ 630.858686][ T9228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.014861][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.735371][ T9251] loop1: detected capacity change from 0 to 512 [ 633.895288][ T9253] fuse: Unknown parameter 'fd00000000000000000000' [ 634.111875][ T9251] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 634.762013][ T9251] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 636.438934][ T9251] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.687: Invalid inode table block 1 in block_group 0 [ 636.550342][ T9261] befs: (nullb0): invalid magic header [ 636.616569][ T9251] EXT4-fs (loop1): get root inode failed [ 636.622412][ T9251] EXT4-fs (loop1): mount failed [ 636.903920][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 637.120464][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.169225][ T27] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 637.256411][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.346355][ T27] usb 1-1: config 0 descriptor?? [ 637.394922][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 637.457798][ T5782] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 637.518008][ T9267] input: syz1 as /devices/virtual/input/input23 [ 637.811537][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.820652][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.047413][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 638.415943][ T27] pwc: recv_control_msg error -71 req 02 val 2c00 [ 638.529277][ T27] pwc: recv_control_msg error -71 req 04 val 1000 [ 638.968897][ T27] pwc: recv_control_msg error -71 req 04 val 1300 [ 639.026219][ T27] pwc: recv_control_msg error -71 req 04 val 1400 [ 639.416066][ T27] pwc: recv_control_msg error -71 req 02 val 2000 [ 639.464036][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 641.274393][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 641.655290][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 641.687282][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 641.721245][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 641.752244][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 641.785940][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 641.819381][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 641.858878][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 642.025610][ T27] pwc: Registered as video103. [ 642.410750][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 642.681090][ T9291] loop3: detected capacity change from 0 to 512 [ 642.711204][ T27] usb 1-1: USB disconnect, device number 12 [ 642.762549][ T9291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 642.841622][ T9291] EXT4-fs (loop3): 1 truncate cleaned up [ 643.073626][ T9291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.838731][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.108425][ T9325] tipc: New replicast peer: 255.255.255.255 [ 647.116196][ T9325] tipc: Enabled bearer , priority 10 [ 647.126535][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 648.321834][ T5763] tipc: Node number set to 2373355052 [ 648.693333][ T9334] befs: (nullb0): invalid magic header [ 649.311031][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 650.405742][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.448254][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 650.476603][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.489361][ T9] usb 1-1: config 0 descriptor?? [ 650.499182][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 652.035731][ T9354] loop3: detected capacity change from 0 to 32768 [ 652.067634][ T9354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.712 (9354) [ 652.132676][ T9354] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 652.143690][ T9354] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 652.152588][ T9354] BTRFS info (device loop3): metadata ratio 0 [ 652.158848][ T9354] BTRFS info (device loop3): turning on sync discard [ 652.165774][ T9354] BTRFS info (device loop3): using free space tree [ 652.261341][ T9354] BTRFS info (device loop3): enabling ssd optimizations [ 653.436713][ T28] audit: type=1800 audit(1783399768.775:162): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.712" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 653.885432][ T9373] loop1: detected capacity change from 0 to 512 [ 653.935824][ T9373] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 653.950198][ T9376] loop2: detected capacity change from 0 to 256 [ 654.023007][ T9373] EXT4-fs (loop1): 1 truncate cleaned up [ 654.046554][ T9373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.375183][ T5777] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 654.907704][ T9380] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 655.261457][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.333870][ T9] pwc: send_video_command error -71 [ 655.339321][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 655.349687][ T9] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 655.362052][ T9] usb 1-1: USB disconnect, device number 13 [ 655.812126][ T6605] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (6605) [ 657.295818][ T9403] loop2: detected capacity change from 0 to 32768 [ 657.306110][ T9403] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 658.522625][ T6316] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.659755][ T9412] loop1: detected capacity change from 0 to 512 [ 658.688563][ T9412] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 659.563060][ T9420] loop2: detected capacity change from 0 to 32768 [ 660.202994][ T9412] EXT4-fs (loop1): 1 truncate cleaned up [ 661.144646][ T9412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.221377][ T9420] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 662.676833][ T9420] ocfs2: Unmounting device (7,2) on (node local) [ 662.786982][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.956863][ T6316] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 666.380436][ T9433] netlink: 120 bytes leftover after parsing attributes in process `syz.1.726'. [ 669.142685][ T9459] loop3: detected capacity change from 0 to 1024 [ 669.613411][ T9459] EXT4-fs: Invalid want_extra_isize 7 [ 669.909760][ T9463] loop1: detected capacity change from 0 to 512 [ 669.923120][ T9463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 670.005950][ T6605] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 670.036788][ T9463] EXT4-fs (loop1): 1 truncate cleaned up [ 670.090202][ T9463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.250278][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.017038][ T9480] syz.3.738: attempt to access beyond end of device [ 673.017038][ T9480] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 673.030213][ T9480] syz.3.738: attempt to access beyond end of device [ 673.030213][ T9480] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 673.043269][ T9480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 673.053200][ T9480] syz.3.738: attempt to access beyond end of device [ 673.053200][ T9480] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 673.066262][ T9480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 673.075903][ T9480] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 673.083710][ T9480] UDF-fs: Scanning with blocksize 512 failed [ 673.091880][ T9480] syz.3.738: attempt to access beyond end of device [ 673.091880][ T9480] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 673.105126][ T9480] syz.3.738: attempt to access beyond end of device [ 673.105126][ T9480] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 673.118169][ T9480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 673.128466][ T9480] syz.3.738: attempt to access beyond end of device [ 673.128466][ T9480] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 673.141594][ T9480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 673.151273][ T9480] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 673.158973][ T9480] UDF-fs: Scanning with blocksize 1024 failed [ 673.165965][ T9480] syz.3.738: attempt to access beyond end of device [ 673.165965][ T9480] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 673.179074][ T9480] syz.3.738: attempt to access beyond end of device [ 673.179074][ T9480] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 673.192178][ T9480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 673.201976][ T9480] syz.3.738: attempt to access beyond end of device [ 673.201976][ T9480] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 673.215110][ T9480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 673.224694][ T9480] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 673.232741][ T9480] UDF-fs: Scanning with blocksize 2048 failed [ 673.239505][ T9480] syz.3.738: attempt to access beyond end of device [ 673.239505][ T9480] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 673.252664][ T9480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 673.262489][ T9480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 673.272127][ T9480] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 673.280394][ T9480] UDF-fs: Scanning with blocksize 4096 failed [ 673.286569][ T9480] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 678.163103][ T9509] loop1: detected capacity change from 0 to 32768 [ 678.246237][ T9509] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 678.270394][ T9508] loop2: detected capacity change from 0 to 512 [ 678.572786][ T6605] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 678.759152][ T9508] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 678.777866][ T9511] loop1: detected capacity change from 0 to 4096 [ 678.807952][ T9511] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 678.924350][ T9508] EXT4-fs (loop2): 1 truncate cleaned up [ 678.965595][ T9508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.700576][ T9511] ntfs3: loop1: failed to replay log file. Can't mount rw! [ 682.462478][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.641595][ T5763] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 684.568771][ T9531] loop5: detected capacity change from 0 to 3335 [ 686.577588][ T9547] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 687.282314][ T9551] ip6erspan0: entered allmulticast mode [ 687.976283][ T5763] usb 2-1: unable to get BOS descriptor or descriptor too short [ 687.985098][ T5763] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 687.992918][ T5763] usb 2-1: can't read configurations, error -71 [ 688.170877][ T9557] loop2: detected capacity change from 0 to 512 [ 688.584415][ T9557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 689.355543][ T9557] EXT4-fs (loop2): 1 truncate cleaned up [ 689.621536][ T9557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.291261][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.441476][ T9573] NILFS (nullb0): couldn't find nilfs on the device [ 691.893803][ T9577] loop1: detected capacity change from 0 to 2048 [ 692.136391][ T9577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 692.433886][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 692.582259][ T9586] loop2: detected capacity change from 0 to 256 [ 692.957428][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.963945][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.140073][ T9596] NILFS (nullb0): couldn't find nilfs on the device [ 699.619780][ T28] audit: type=1326 audit(1783399811.505:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 699.663131][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 699.802217][ T28] audit: type=1326 audit(1783399811.505:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 699.826760][ T28] audit: type=1326 audit(1783399811.525:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 699.851242][ T28] audit: type=1326 audit(1783399811.525:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 699.879693][ T28] audit: type=1326 audit(1783399811.525:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 699.908466][ T28] audit: type=1326 audit(1783399811.840:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 699.933663][ T28] audit: type=1326 audit(1783399811.840:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 700.009567][ T28] audit: type=1326 audit(1783399811.942:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 700.211305][ T28] audit: type=1326 audit(1783399811.942:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 700.241221][ T28] audit: type=1326 audit(1783399812.043:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb6f9de59 code=0x7ffc0000 [ 700.469762][ T9621] NILFS (nullb0): couldn't find nilfs on the device [ 702.917127][ T9633] loop0: detected capacity change from 0 to 40427 [ 702.961107][ T9633] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 702.969309][ T9633] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 702.998706][ T9633] F2FS-fs (loop0): invalid crc value [ 703.129726][ T9633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 703.217495][ T9633] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 703.225792][ T9633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 704.015311][ T9645] NILFS (nullb0): couldn't find nilfs on the device [ 708.674344][ T9672] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 709.088562][ T9677] NILFS (nullb0): couldn't find nilfs on the device [ 716.233683][ T9719] befs: (nullb0): invalid magic header [ 716.699453][ T5818] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 716.794874][ T9727] NILFS (nullb0): couldn't find nilfs on the device [ 717.758500][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.771125][ T5818] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 717.780241][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.838495][ T5818] usb 4-1: config 0 descriptor?? [ 717.853019][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 719.743776][ T9745] loop0: detected capacity change from 0 to 8 [ 720.278498][ T9745] SQUASHFS error: xz decompression failed, data probably corrupt [ 720.286867][ T9745] SQUASHFS error: Failed to read block 0x108: -5 [ 720.293239][ T9745] SQUASHFS error: Unable to read metadata cache entry [106] [ 720.300645][ T9745] SQUASHFS error: Unable to read inode 0x11f [ 721.097909][ T9753] loop2: detected capacity change from 0 to 4096 [ 723.370238][ T5818] pwc: send_video_command error -110 [ 723.674813][ T9754] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 723.806736][ T9755] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.816004][ T9755] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.824834][ T9755] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.833611][ T9755] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.989445][ T5818] pwc: Failed to set video mode CIF@30 fps; return code = -110 [ 723.997181][ T5818] Philips webcam: probe of 4-1:0.0 failed with error -110 [ 725.102646][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 725.390495][ T788] usb 4-1: USB disconnect, device number 12 [ 725.443397][ T9755] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.452853][ T9755] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.462260][ T9755] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.471253][ T9755] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.528971][ T9767] loop2: detected capacity change from 0 to 512 [ 726.670382][ T9759] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.679226][ T9759] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.688054][ T9759] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.696910][ T9759] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.743986][ T9767] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 726.770179][ T9767] EXT4-fs (loop2): 1 truncate cleaned up [ 727.556364][ T9777] NILFS (nullb0): couldn't find nilfs on the device [ 727.935020][ T9767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.009153][ T9759] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.018535][ T9759] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.027937][ T9759] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.036849][ T9759] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.343420][ T9780] loop0: detected capacity change from 0 to 32768 [ 728.381701][ T9780] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 729.102675][ T6605] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 730.515937][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.651017][ T9791] loop0: detected capacity change from 0 to 4096 [ 730.672755][ T9791] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 730.690859][ T9791] ntfs3: loop0: volume is dirty and "force" flag is not set! [ 730.974685][ T9793] loop2: detected capacity change from 0 to 512 [ 731.002482][ T9793] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 731.053115][ T9793] EXT4-fs (loop2): 1 truncate cleaned up [ 731.105130][ T9793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.148017][ T9801] loop1: detected capacity change from 0 to 128 [ 731.234216][ T9803] tipc: Started in network mode [ 731.239320][ T9803] tipc: Node identity 4, cluster identity 4711 [ 731.245661][ T9803] tipc: Node number set to 4 [ 731.484735][ T9801] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 732.732158][ T9801] hpfs: filesystem error: improperly stopped [ 732.738275][ T9801] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 732.746122][ T9801] hpfs: You really don't want any checks? You are crazy... [ 732.753914][ T9801] hpfs: Code page index out of array [ 732.759255][ T9801] hpfs: code page support is disabled [ 732.765140][ T9801] hpfs: hpfs_map_4sectors(): unaligned read [ 732.821365][ T9801] hpfs: hpfs_map_4sectors(): unaligned read [ 732.868243][ T9801] hpfs: filesystem error: unable to find root dir [ 733.785563][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.614334][ T9818] befs: (nullb0): invalid magic header [ 735.146256][ T5852] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 735.536872][ T5852] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.554513][ T5852] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 735.564928][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.580283][ T5852] usb 1-1: config 0 descriptor?? [ 735.591668][ T5852] pwc: Askey VC010 type 2 USB webcam detected. [ 736.069383][ T9827] NILFS (nullb0): couldn't find nilfs on the device [ 736.652382][ T5852] pwc: recv_control_msg error -32 req 02 val 2b00 [ 736.661238][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.670270][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.953336][ T5852] pwc: recv_control_msg error -32 req 02 val 2700 [ 736.960150][ T9830] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 739.323581][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 740.220064][ T9853] loop3: detected capacity change from 0 to 512 [ 740.287048][ T9853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 740.339032][ T9853] EXT4-fs (loop3): 1 truncate cleaned up [ 740.363294][ T9853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.441904][ T9858] loop2: detected capacity change from 0 to 2048 [ 740.519123][ T9858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.551801][ T9859] loop1: detected capacity change from 0 to 4096 [ 740.656453][ T5852] pwc: recv_control_msg error -71 req 04 val 1000 [ 740.670394][ T5852] pwc: recv_control_msg error -71 req 04 val 1300 [ 740.678912][ T5852] pwc: recv_control_msg error -71 req 04 val 1400 [ 740.703517][ T5852] pwc: recv_control_msg error -71 req 02 val 2000 [ 740.715539][ T5852] pwc: recv_control_msg error -71 req 02 val 2100 [ 741.161345][ T5852] pwc: recv_control_msg error -71 req 04 val 1500 [ 741.610642][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.643949][ T5852] pwc: recv_control_msg error -71 req 02 val 2500 [ 741.672040][ T5852] pwc: recv_control_msg error -71 req 02 val 2400 [ 741.708310][ T5852] pwc: recv_control_msg error -71 req 02 val 2600 [ 741.725720][ T5852] pwc: recv_control_msg error -71 req 02 val 2900 [ 741.739628][ T5852] pwc: recv_control_msg error -71 req 02 val 2800 [ 741.767854][ T5852] pwc: recv_control_msg error -71 req 04 val 1100 [ 741.796504][ T5852] pwc: recv_control_msg error -71 req 04 val 1200 [ 741.827596][ T5852] pwc: Registered as video103. [ 741.834337][ T5852] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 741.915331][ T9867] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 741.949250][ T5852] usb 1-1: USB disconnect, device number 14 [ 742.347426][ T9859] EXT4-fs (loop1): Test dummy encryption mode enabled [ 742.376751][ T9875] NILFS (nullb0): couldn't find nilfs on the device [ 742.456158][ T9874] loop3: detected capacity change from 0 to 4096 [ 742.712907][ T9859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.138940][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.115894][ T9892] loop2: detected capacity change from 0 to 512 [ 749.123442][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 749.442084][ T9892] EXT4-fs (loop2): 1 orphan inode deleted [ 750.154929][ T49] __quota_error: 12 callbacks suppressed [ 750.154952][ T49] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 750.194959][ T9892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.218758][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 750.294412][ T9892] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.542924][ T9904] loop3: detected capacity change from 0 to 2048 [ 751.058807][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 751.097453][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 751.116982][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.136787][ T9904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 752.232450][ T9912] loop2: detected capacity change from 0 to 512 [ 752.298177][ T9912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 752.425420][ T9912] EXT4-fs (loop2): 1 truncate cleaned up [ 752.485147][ T9912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.811758][ T9920] NILFS (nullb0): couldn't find nilfs on the device [ 754.437063][ T9933] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 754.504222][ T9933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 754.531528][ T9941] bond1: (slave geneve2): making interface the new active one [ 754.544996][ T9941] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 754.757404][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.840611][ T9943] loop0: detected capacity change from 0 to 512 [ 754.875928][ T9943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 754.934231][ T9943] EXT4-fs (loop0): 1 truncate cleaned up [ 754.942402][ T9943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.112381][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 756.590074][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.790057][ T9963] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.798988][ T9963] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.807786][ T9963] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.816539][ T9963] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.719948][ T9963] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.728966][ T9963] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.737886][ T9963] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.746789][ T9963] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.804597][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.811387][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.147107][ T9964] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.156030][ T9964] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.164858][ T9964] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.173656][ T9964] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.207114][ T9964] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.216261][ T9964] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.225352][ T9964] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.234811][ T9964] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.660472][ T9986] loop1: detected capacity change from 0 to 512 [ 761.668856][ T9986] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 761.758042][ T9986] EXT4-fs (loop1): 1 truncate cleaned up [ 761.814835][ T9986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.834182][ T9987] loop0: detected capacity change from 0 to 4096 [ 761.876825][ T9987] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 761.936656][ T9987] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 762.354860][ T9987] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 762.429751][ T9987] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 762.897963][ T9987] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 763.001467][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.050715][ T9987] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 763.139193][ T9987] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 763.188154][ T9987] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 763.251091][ T9987] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 763.286528][ T9987] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 763.316934][ T9987] ntfs: volume version 3.1. [ 764.126151][ T9999] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 766.681595][T10016] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 767.554766][T10026] loop1: detected capacity change from 0 to 512 [ 767.582397][T10026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 768.400476][T10026] EXT4-fs (loop1): 1 truncate cleaned up [ 768.435798][T10026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.887007][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.213261][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 776.213299][ T28] audit: type=1326 audit(1783399883.180:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 776.295930][ T28] audit: type=1326 audit(1783399883.180:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 776.323333][ T28] audit: type=1326 audit(1783399883.218:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 776.357714][ T28] audit: type=1326 audit(1783399883.218:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 776.494740][ T28] audit: type=1326 audit(1783399883.218:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 776.803335][ T28] audit: type=1326 audit(1783399883.489:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 776.870939][ T28] audit: type=1326 audit(1783399883.489:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 776.976801][ T28] audit: type=1326 audit(1783399883.601:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 777.765833][ T28] audit: type=1326 audit(1783399883.601:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 777.794735][ T28] audit: type=1326 audit(1783399883.601:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10050 comm="syz.3.865" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff80ef9de59 code=0x7ffc0000 [ 778.899125][T10074] loop2: detected capacity change from 0 to 512 [ 778.974482][T10074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 779.261857][T10074] EXT4-fs (loop2): 1 truncate cleaned up [ 779.423852][T10074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.616074][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.716300][T10092] loop3: detected capacity change from 0 to 128 [ 781.799490][T10092] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 781.850381][T10092] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 782.646070][T10100] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 782.655606][T10101] bio_check_eod: 2 callbacks suppressed [ 782.655688][T10101] syz.2.874: attempt to access beyond end of device [ 782.655688][T10101] loop2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 782.665155][ T6330] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 782.680733][T10101] F2FS-fs (loop2): Unable to read 1th superblock [ 782.689394][T10101] syz.2.874: attempt to access beyond end of device [ 782.689394][T10101] loop2: rw=0, sector=8, nr_sectors = 8 limit=0 [ 782.689429][T10101] F2FS-fs (loop2): Unable to read 2th superblock [ 782.938038][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 784.553454][T10109] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 785.140667][T10121] loop2: detected capacity change from 0 to 128 [ 785.153093][T10121] FAT-fs (loop2): Unrecognized mount option "fmask=0000000000000000ăĄ3Oošjnonumtail=0" or missing value [ 785.258708][ T6316] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 786.101709][ T6330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 786.119935][ T6330] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 786.127603][ T6330] usb 1-1: can't read configurations, error -71 [ 787.371522][T10134] loop1: detected capacity change from 0 to 512 [ 787.382240][T10134] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 787.583201][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 788.282611][T10134] EXT4-fs (loop1): 1 truncate cleaned up [ 788.355807][T10134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.752457][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.592438][T10180] loop1: detected capacity change from 0 to 512 [ 793.669865][T10180] EXT4-fs (loop1): 1 orphan inode deleted [ 793.686562][T10180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.706584][ T11] __quota_error: 11 callbacks suppressed [ 793.706600][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 793.785118][T10180] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.877644][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 795.578606][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 795.609130][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 795.660638][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.994627][T10201] tipc: Started in network mode [ 795.999784][T10201] tipc: Node identity 4, cluster identity 4711 [ 796.006433][T10201] tipc: Node number set to 4 [ 797.028791][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'. [ 799.706332][ T28] audit: type=1326 audit(1783399905.106:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 799.827712][ T28] audit: type=1326 audit(1783399905.106:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 799.852842][ T28] audit: type=1326 audit(1783399905.134:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 799.877663][ T28] audit: type=1326 audit(1783399905.134:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 799.902917][ T28] audit: type=1326 audit(1783399905.134:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 799.977330][ T28] audit: type=1326 audit(1783399905.443:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 800.053072][ T28] audit: type=1326 audit(1783399905.443:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 800.109913][ T28] audit: type=1326 audit(1783399905.555:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 800.207196][ T28] audit: type=1326 audit(1783399905.555:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 800.245061][ T28] audit: type=1326 audit(1783399905.555:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.0.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe7c119de59 code=0x7ffc0000 [ 802.374873][T10233] befs: (nullb0): invalid magic header [ 802.682587][ T55] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 802.910036][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.951134][ T55] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 802.999706][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.076756][ T55] usb 2-1: config 0 descriptor?? [ 803.110749][ T55] pwc: Askey VC010 type 2 USB webcam detected. [ 803.503935][T10238] NILFS (nullb0): couldn't find nilfs on the device [ 803.527850][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.536679][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.115208][ T55] pwc: recv_control_msg error -32 req 02 val 2b00 [ 804.435172][ T55] pwc: recv_control_msg error -32 req 02 val 2700 [ 806.452650][ T55] pwc: recv_control_msg error -71 req 04 val 1000 [ 806.494155][ T55] pwc: recv_control_msg error -71 req 04 val 1300 [ 806.515694][ T55] pwc: recv_control_msg error -71 req 04 val 1400 [ 806.579240][ T55] pwc: recv_control_msg error -71 req 02 val 2000 [ 806.640870][ T55] pwc: recv_control_msg error -71 req 02 val 2100 [ 806.723404][ T55] pwc: recv_control_msg error -71 req 04 val 1500 [ 806.787775][ T55] pwc: recv_control_msg error -71 req 02 val 2500 [ 806.854190][ T55] pwc: recv_control_msg error -71 req 02 val 2400 [ 806.925897][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 806.932914][ T55] pwc: recv_control_msg error -71 req 02 val 2600 [ 806.991856][ T55] pwc: recv_control_msg error -71 req 02 val 2900 [ 807.308528][T10253] loop0: detected capacity change from 0 to 4096 [ 807.548082][ T55] pwc: recv_control_msg error -71 req 02 val 2800 [ 809.524686][ T55] pwc: recv_control_msg error -71 req 04 val 1100 [ 809.532003][ T55] pwc: recv_control_msg error -71 req 04 val 1200 [ 809.598767][ T55] pwc: Registered as video103. [ 809.618158][ T55] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 809.636160][ T55] usb 2-1: USB disconnect, device number 11 [ 810.358229][T10272] loop0: detected capacity change from 0 to 1024 [ 810.407757][T10272] EXT4-fs: Ignoring removed nobh option [ 810.694598][T10272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.987136][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 812.987157][ T28] audit: type=1326 audit(1783399917.580:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.101845][ T28] audit: type=1326 audit(1783399917.580:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.154297][ T28] audit: type=1326 audit(1783399917.608:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.219090][ T28] audit: type=1326 audit(1783399917.608:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.277183][ T28] audit: type=1326 audit(1783399917.608:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.381922][ T28] audit: type=1326 audit(1783399917.898:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.460726][ T28] audit: type=1326 audit(1783399917.898:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.486218][ T28] audit: type=1326 audit(1783399918.011:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.510361][ T28] audit: type=1326 audit(1783399918.011:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.535443][ T28] audit: type=1326 audit(1783399918.011:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.1.910" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb6ba39de59 code=0x7ffc0000 [ 813.636557][T10287] syz.3.914: attempt to access beyond end of device [ 813.636557][T10287] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 813.650306][T10287] hfsplus: unable to find HFS+ superblock [ 814.063481][T10276] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 815.218284][T10295] fuse: Bad value for 'fd' [ 815.888911][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.031706][T10304] NILFS (nullb0): couldn't find nilfs on the device [ 816.955229][T10308] befs: (nullb0): invalid magic header [ 817.408177][ T6330] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 817.721160][ T6330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.739391][ T6330] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 817.752787][ T6330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.799047][ T6330] usb 4-1: config 0 descriptor?? [ 817.984813][ T6330] pwc: Askey VC010 type 2 USB webcam detected. [ 818.797671][T10323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.806500][T10323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.839914][ T6330] pwc: recv_control_msg error -32 req 02 val 2b00 [ 819.031130][ T6330] pwc: recv_control_msg error -32 req 02 val 2700 [ 821.646566][ T5788] Bluetooth: hci0: unexpected event for opcode 0x722d [ 821.775463][ T6330] pwc: recv_control_msg error -71 req 04 val 1000 [ 821.790091][ T6330] pwc: recv_control_msg error -71 req 04 val 1300 [ 821.807970][ T6330] pwc: recv_control_msg error -71 req 04 val 1400 [ 821.818630][ T6330] pwc: recv_control_msg error -71 req 02 val 2000 [ 821.836144][ T6330] pwc: recv_control_msg error -71 req 02 val 2100 [ 821.854616][ T6330] pwc: recv_control_msg error -71 req 04 val 1500 [ 821.874735][ T6330] pwc: recv_control_msg error -71 req 02 val 2500 [ 821.882262][ T6330] pwc: recv_control_msg error -71 req 02 val 2400 [ 821.903933][ T6330] pwc: recv_control_msg error -71 req 02 val 2600 [ 821.914389][ T6330] pwc: recv_control_msg error -71 req 02 val 2900 [ 821.960301][ T6330] pwc: recv_control_msg error -71 req 02 val 2800 [ 821.983873][ T6330] pwc: recv_control_msg error -71 req 04 val 1100 [ 822.016468][ T6330] pwc: recv_control_msg error -71 req 04 val 1200 [ 822.059399][ T6330] pwc: Registered as video103. [ 822.074570][ T6330] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 822.158136][T10352] NILFS (nullb0): couldn't find nilfs on the device [ 822.313572][ T6330] usb 4-1: USB disconnect, device number 13 [ 822.868553][ T5822] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 824.309935][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 824.321934][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.664877][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 825.276421][ T5822] usb 1-1: device descriptor read/all, error -71 [ 828.333179][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 829.338143][T10398] befs: (nullb0): invalid magic header [ 829.595395][T10403] NILFS (nullb0): couldn't find nilfs on the device [ 830.431981][ T788] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 831.470925][ T6330] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 831.685818][ T6330] usb 3-1: Using ep0 maxpacket: 32 [ 831.698724][ T6330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.727706][ T6330] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.761693][ T6330] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 831.774220][ T6330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.791855][ T6330] usb 3-1: Product: syz [ 831.796232][ T6330] usb 3-1: Manufacturer: syz [ 831.800878][ T6330] usb 3-1: SerialNumber: syz [ 831.810456][T10412] loop1: detected capacity change from 0 to 8192 [ 831.840276][ T6330] usb 3-1: config 0 descriptor?? [ 831.917855][T10412] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 832.035864][T10412] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 832.130008][T10412] REISERFS (device loop1): using ordered data mode [ 832.221976][T10412] reiserfs: using flush barriers [ 832.368075][T10412] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 832.539638][T10412] REISERFS (device loop1): checking transaction log (loop1) [ 832.773007][T10412] REISERFS (device loop1): Using r5 hash to sort names [ 832.922642][T10412] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 835.150558][ T5763] usb 3-1: USB disconnect, device number 12 [ 836.041396][T10438] loop1: detected capacity change from 0 to 1764 [ 837.176789][T10436] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 841.517524][T10470] block nbd0: NBD_DISCONNECT [ 844.211262][T10476] loop1: detected capacity change from 0 to 1024 [ 845.587473][T10476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 846.355549][T10476] EXT4-fs: error -4 creating inode table initialization thread [ 846.364267][T10476] EXT4-fs (loop1): mount failed [ 847.219571][T10481] loop2: detected capacity change from 0 to 4096 [ 851.801042][T10560] tmpfs: Bad value for 'huge' [ 851.817230][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 851.826690][T10560] netlink: 43 bytes leftover after parsing attributes in process `syz.2.961'. [ 851.879087][T10561] mmap: syz.2.961 (10561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 852.578568][T10563] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 856.082569][T10598] loop0: detected capacity change from 0 to 512 [ 856.253049][T10598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.277777][T10598] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.699945][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.033553][ T5822] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 860.545197][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.582110][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 860.657069][T10640] NILFS (nullb0): couldn't find nilfs on the device [ 861.471716][ T5822] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 861.497385][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.542676][ T5822] usb 1-1: config 0 descriptor?? [ 861.623723][ T5822] usb 1-1: can't set config #0, error -71 [ 861.778507][ T5822] usb 1-1: USB disconnect, device number 20 [ 868.582566][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'. [ 868.591731][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'. [ 868.600926][T10695] netlink: 6 bytes leftover after parsing attributes in process `syz.0.991'. [ 869.177920][T10696] loop1: detected capacity change from 0 to 512 [ 869.253456][T10696] EXT4-fs: Conflicting test_dummy_encryption options [ 871.467720][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.479530][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.487328][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.526167][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.550092][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.572994][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.594328][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.607004][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.615103][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 871.632192][T10707] netlink: 'syz.0.997': attribute type 3 has an invalid length. [ 872.566935][T10715] fuse: Bad value for 'group_id' [ 873.037263][T10719] loop1: detected capacity change from 0 to 512 [ 873.046157][T10719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 874.379648][T10719] EXT4-fs (loop1): 1 truncate cleaned up [ 874.395650][T10719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.979842][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.474036][T10738] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1007'. [ 878.976601][T10738] ip6erspan1: entered allmulticast mode [ 879.343463][T10737] ALSA: mixer_oss: invalid OSS volume '' [ 880.584132][ T6330] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 880.864547][ T6330] usb 2-1: Using ep0 maxpacket: 32 [ 880.941513][ T6330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.958315][ T6330] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 880.978443][ T6330] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 880.999487][ T6330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.150209][ T6330] usb 2-1: Product: syz [ 881.155968][ T6330] usb 2-1: Manufacturer: syz [ 881.160690][ T6330] usb 2-1: SerialNumber: syz [ 881.439424][T10770] loop2: detected capacity change from 0 to 512 [ 881.456335][ T6330] usb 2-1: config 0 descriptor?? [ 881.468215][T10770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 881.567275][T10770] EXT4-fs (loop2): 1 truncate cleaned up [ 881.628828][T10770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.832539][T10778] fuse: Bad value for 'group_id' [ 883.813180][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.654034][ C1] hrtimer: interrupt took 47771 ns [ 885.017214][ T6330] usb 2-1: USB disconnect, device number 12 [ 889.955392][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 889.961834][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 890.253603][T10818] validate_nla: 45 callbacks suppressed [ 890.253649][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.304664][T10820] loop0: detected capacity change from 0 to 512 [ 890.319443][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.351118][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.359001][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.390851][T10820] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 890.393138][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.437661][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.445561][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.468983][T10820] EXT4-fs (loop0): 1 truncate cleaned up [ 890.476132][T10820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.479810][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.497556][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.506542][T10818] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 890.687690][T10828] fuse: Bad value for 'group_id' [ 891.757486][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.515854][T10843] loop0: detected capacity change from 0 to 512 [ 893.561376][T10843] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 894.067583][T10843] EXT4-fs (loop0): 1 truncate cleaned up [ 894.328024][T10843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.677560][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.816679][T10860] loop1: detected capacity change from 0 to 4096 [ 897.056316][T10860] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 897.461829][T10860] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 898.007924][T10883] validate_nla: 42 callbacks suppressed [ 898.007946][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.164979][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.297121][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.651772][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.726490][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.736836][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.746851][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.767582][T10889] No such timeout policy "syz0" [ 898.812471][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.844320][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 898.861278][T10883] netlink: 'syz.2.1039': attribute type 3 has an invalid length. [ 901.855777][T10905] loop2: detected capacity change from 0 to 512 [ 902.001670][T10905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 902.123691][T10905] EXT4-fs (loop2): 1 truncate cleaned up [ 902.181493][T10905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.330275][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.303983][ T5788] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 905.313521][ T5788] Bluetooth: hci2: Injecting HCI hardware error event [ 905.322997][ T51] Bluetooth: hci2: hardware error 0x00 [ 905.593271][T10928] pim6reg: entered allmulticast mode [ 905.844798][ T5763] Process accounting resumed [ 906.250654][T10925] Process accounting resumed [ 906.386657][T10940] loop0: detected capacity change from 0 to 512 [ 907.561878][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 907.572538][T10940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 907.642854][T10940] System zones: 1-12 [ 907.772699][T10940] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.1061: missing EA_INODE flag [ 907.876904][T10940] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1061: error while reading EA inode 12 err=-117 [ 907.978969][T10940] EXT4-fs (loop0): 1 orphan inode deleted [ 908.055276][T10940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.057967][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 909.573218][T10965] befs: (nullb0): invalid magic header [ 910.095812][ T788] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 910.959583][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.535548][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1060'. [ 912.872180][T10982] loop1: detected capacity change from 0 to 64 [ 913.224383][T10986] loop0: detected capacity change from 0 to 512 [ 913.232991][T10986] EXT4-fs: Conflicting test_dummy_encryption options [ 913.261872][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 913.261888][ T28] audit: type=1800 audit(1783400012.414:248): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1064" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 914.870369][ T788] usb 3-1: device descriptor read/all, error -71 [ 914.901480][T10995] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.909309][T10995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.959632][T10995] team0: Port device bridge0 added [ 916.929188][T11006] random: crng reseeded on system resumption [ 917.609649][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1074'. [ 919.813557][T11025] loop0: detected capacity change from 0 to 512 [ 919.848492][T11025] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 919.997726][T11025] EXT4-fs (loop0): 1 truncate cleaned up [ 920.054128][T11025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.438995][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.751147][T11052] loop2: detected capacity change from 0 to 1764 [ 924.641270][T11048] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 925.209508][T11061] befs: (nullb0): invalid magic header [ 925.508065][ T55] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 925.734584][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.811308][ T55] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 925.853524][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.886923][ T55] usb 1-1: config 0 descriptor?? [ 925.906490][ T55] pwc: Askey VC010 type 2 USB webcam detected. [ 926.328533][ T55] pwc: recv_control_msg error -32 req 02 val 2b00 [ 926.332171][T11058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.344269][T11058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.576736][ T55] pwc: recv_control_msg error -32 req 02 val 2700 [ 926.877701][T11068] random: crng reseeded on system resumption [ 927.263696][T11074] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 931.000498][ T55] pwc: recv_control_msg error -71 req 04 val 1000 [ 931.045129][ T55] pwc: recv_control_msg error -71 req 04 val 1300 [ 931.058549][ T55] pwc: recv_control_msg error -71 req 04 val 1400 [ 931.071800][ T55] pwc: recv_control_msg error -71 req 02 val 2000 [ 931.081749][ T55] pwc: recv_control_msg error -71 req 02 val 2100 [ 931.113248][ T55] pwc: recv_control_msg error -71 req 04 val 1500 [ 931.123455][ T55] pwc: recv_control_msg error -71 req 02 val 2500 [ 931.136644][ T55] pwc: recv_control_msg error -71 req 02 val 2400 [ 931.147841][ T55] pwc: recv_control_msg error -71 req 02 val 2600 [ 931.157599][ T55] pwc: recv_control_msg error -71 req 02 val 2900 [ 931.168303][ T55] pwc: recv_control_msg error -71 req 02 val 2800 [ 931.192203][ T55] pwc: recv_control_msg error -71 req 04 val 1100 [ 931.199927][ T55] pwc: recv_control_msg error -71 req 04 val 1200 [ 931.210290][ T55] pwc: Registered as video103. [ 931.235796][ T55] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 931.486064][ T55] usb 1-1: USB disconnect, device number 21 [ 931.742084][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 935.480901][T11098] loop1: detected capacity change from 0 to 4096 [ 937.346941][T11119] syz.1.1096: attempt to access beyond end of device [ 937.346941][T11119] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 937.360504][T11119] hfsplus: unable to find HFS+ superblock [ 938.913871][T11127] validate_nla: 41 callbacks suppressed [ 938.913911][T11127] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 939.175479][ T5822] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 939.421922][ T5822] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 939.557651][ T5822] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 939.744819][ T5822] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 939.880226][ T5822] usb 2-1: config 150 has no interface number 0 [ 939.980842][ T5822] usb 2-1: config 150 interface 204 has no altsetting 0 [ 940.112835][ T5822] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 940.220511][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.260390][ T5822] usb 2-1: Product: syz [ 940.264650][ T5822] usb 2-1: Manufacturer: syz [ 940.279140][ T5822] usb 2-1: SerialNumber: syz [ 940.415734][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 941.164478][T11141] random: crng reseeded on system resumption [ 941.789862][ T5822] usb 2-1: USB disconnect, device number 13 [ 945.907319][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 946.590989][ T788] IPVS: starting estimator thread 0... [ 946.848712][T11168] syz.0.1107: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 946.849195][T11168] CPU: 0 PID: 11168 Comm: syz.0.1107 Not tainted syzkaller #0 [ 946.849222][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 946.849274][T11168] Call Trace: [ 946.849283][T11168] [ 946.849305][T11168] dump_stack_lvl+0x18c/0x250 [ 946.849359][T11168] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 946.849406][T11168] ? show_regs_print_info+0x20/0x20 [ 946.849438][T11168] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 946.849489][T11168] warn_alloc+0x246/0x340 [ 946.849528][T11168] ? stack_trace_save+0xaa/0x100 [ 946.849561][T11168] ? zone_watermark_ok_safe+0x230/0x230 [ 946.849605][T11168] ? kasan_set_track+0x5f/0x70 [ 946.849631][T11168] ? kasan_set_track+0x4e/0x70 [ 946.849654][T11168] ? __kasan_kmalloc+0x8f/0xa0 [ 946.849687][T11168] ? xsk_init_queue+0xad/0x100 [ 946.849722][T11168] ? xsk_setsockopt+0x413/0x750 [ 946.849762][T11168] ? do_sock_setsockopt+0x175/0x1a0 [ 946.849798][T11168] ? __x64_sys_setsockopt+0x182/0x200 [ 946.849834][T11168] __vmalloc_node_range+0x129/0x1320 [ 946.849894][T11168] ? free_vm_area+0x50/0x50 [ 946.849934][T11168] vmalloc_user+0x74/0x80 [ 946.849962][T11168] ? xskq_create+0xbf/0x170 [ 946.849990][T11168] xskq_create+0xbf/0x170 [ 946.850023][T11168] xsk_init_queue+0xad/0x100 [ 946.850054][T11168] xsk_setsockopt+0x413/0x750 [ 946.850086][T11168] ? xsk_poll+0x670/0x670 [ 946.850118][T11168] ? __fget_files+0x28/0x460 [ 946.850153][T11168] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 946.850182][T11168] ? security_socket_setsockopt+0x7e/0xa0 [ 946.850217][T11168] ? xsk_poll+0x670/0x670 [ 946.850247][T11168] do_sock_setsockopt+0x175/0x1a0 [ 946.850279][T11168] ? __fdget+0x180/0x210 [ 946.850310][T11168] __x64_sys_setsockopt+0x182/0x200 [ 946.850348][T11168] do_syscall_64+0x55/0xb0 [ 946.850379][T11168] ? clear_bhb_loop+0x40/0x90 [ 946.850399][T11168] ? clear_bhb_loop+0x40/0x90 [ 946.850421][T11168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.850454][T11168] RIP: 0033:0x7fe7c119de59 [ 946.850481][T11168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.850517][T11168] RSP: 002b:00007fe7c2047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 946.850541][T11168] RAX: ffffffffffffffda RBX: 00007fe7c1426270 RCX: 00007fe7c119de59 [ 946.850558][T11168] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 946.850572][T11168] RBP: 00007fe7c1233e6f R08: 0000000000000029 R09: 0000000000000000 [ 946.850587][T11168] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.850602][T11168] R13: 00007fe7c1426308 R14: 00007fe7c1426270 R15: 00007ffea7172918 [ 946.850635][T11168] [ 946.850672][T11168] Mem-Info: [ 946.850736][T11168] active_anon:13215 inactive_anon:0 isolated_anon:0 [ 946.850736][T11168] active_file:17976 inactive_file:40829 isolated_file:0 [ 946.850736][T11168] unevictable:0 dirty:257 writeback:0 [ 946.850736][T11168] slab_reclaimable:10680 slab_unreclaimable:92068 [ 946.850736][T11168] mapped:32557 shmem:7118 pagetables:659 [ 946.850736][T11168] sec_pagetables:0 bounce:0 [ 946.850736][T11168] kernel_misc_reclaimable:0 [ 946.850736][T11168] free:1332321 free_pcp:12995 free_cma:0 [ 946.850848][T11168] Node 0 active_anon:51324kB inactive_anon:0kB active_file:71740kB inactive_file:162840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129860kB dirty:1020kB writeback:0kB shmem:26936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11128kB pagetables:2636kB sec_pagetables:0kB all_unreclaimable? no [ 946.850957][T11168] Node 1 active_anon:1536kB inactive_anon:0kB active_file:164kB inactive_file:476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:368kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 946.851039][T11168] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 946.851154][T11168] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 946.851380][T11168] Node 0 DMA32 free:1436340kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:51284kB inactive_anon:0kB active_file:71740kB inactive_file:162016kB unevictable:0kB writepending:1020kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:14808kB local_pcp:3800kB free_cma:0kB [ 946.851487][T11168] lowmem_reserve[]: 0 0 0 0 0 [ 946.851705][T11168] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 946.851813][T11168] lowmem_reserve[]: 0 0 0 0 0 [ 946.852015][T11168] Node 1 Normal free:3877584kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:164kB inactive_file:476kB unevictable:0kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:37164kB local_pcp:6556kB free_cma:0kB [ 946.852124][T11168] lowmem_reserve[]: 0 0 0 0 0 [ 946.852300][T11168] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 946.852871][T11168] Node 0 DMA32: 173*4kB (UM) 660*8kB (UME) 340*16kB (UME) 291*32kB (UME) 471*64kB (UME) 136*128kB (UM) 62*256kB (UM) 31*512kB (UME) 21*1024kB (UME) 6*2048kB (UM) 318*4096kB (UM) = 1436340kB [ 946.853731][T11168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 946.854210][T11168] Node 1 Normal: 287*4kB (UME) 89*8kB (UME) 68*16kB (UME) 206*32kB (UME) 113*64kB (UME) 49*128kB (UME) 21*256kB (UME) 10*512kB (UM) 6*1024kB (UME) 6*2048kB (UME) 934*4096kB (M) = 3877636kB [ 946.855076][T11168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 946.855120][T11168] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 946.855166][T11168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 946.855210][T11168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 946.855254][T11168] 65888 total pagecache pages [ 946.855288][T11168] 0 pages in swap cache [ 946.855321][T11168] Free swap = 124224kB [ 946.855366][T11168] Total swap = 124996kB [ 946.855398][T11168] 2097051 pages RAM [ 946.855430][T11168] 0 pages HighMem/MovableOnly [ 946.855461][T11168] 416953 pages reserved [ 946.855494][T11168] 0 pages cma reserved [ 947.249041][T11166] IPVS: using max 19 ests per chain, 45600 per kthread [ 948.061354][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 949.111299][T11186] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 949.173942][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 950.189281][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.584759][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.602318][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.848681][T11210] loop2: detected capacity change from 0 to 40427 [ 955.857563][T11210] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 955.864827][T11210] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 955.874378][T11210] F2FS-fs (loop2): Image doesn't support compression [ 955.881185][T11210] F2FS-fs (loop2): Image doesn't support compression [ 955.898568][T11210] F2FS-fs (loop2): invalid crc value [ 955.998047][T11210] F2FS-fs (loop2): Start checkpoint disabled! [ 956.021720][T11210] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 956.029079][T11210] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 956.734766][T11214] loop0: detected capacity change from 0 to 4096 [ 957.108247][ T1010] kworker/u4:7: attempt to access beyond end of device [ 957.108247][ T1010] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 957.141042][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 957.165065][T11214] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 957.190934][ T1010] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 957.806781][T11222] could not allocate digest TFM handle [ 957.886320][T11214] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 960.218041][T11247] syz.2.1122: attempt to access beyond end of device [ 960.218041][T11247] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 960.231700][T11247] hfsplus: unable to find HFS+ superblock [ 960.884727][T11256] random: crng reseeded on system resumption [ 963.861987][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 965.640167][T11274] loop0: detected capacity change from 0 to 1764 [ 966.760128][T11273] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 969.270124][T11291] IPv6: sit1: Disabled Multicast RS [ 970.843750][T11290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 970.860935][T11290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 970.936742][T11290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 972.147821][T11314] syz.0.1136: attempt to access beyond end of device [ 972.147821][T11314] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 972.161558][T11314] hfsplus: unable to find HFS+ superblock [ 973.007701][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 973.013941][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 973.097804][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 975.152006][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 976.651584][ T28] audit: type=1326 audit(1783400071.669:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11345 comm="syz.3.1148" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff80ef9de59 code=0x0 [ 977.255515][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 978.462146][T11376] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 981.807827][T10534] [ 981.810248][T10534] ============================================ [ 981.816489][T10534] WARNING: possible recursive locking detected [ 981.822726][T10534] syzkaller #0 Not tainted [ 981.827194][T10534] -------------------------------------------- [ 981.833358][T10534] kworker/u4:16/10534 is trying to acquire lock: [ 981.839700][T10534] ffffe8ffffd36250 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x624/0xa40 [ 981.848969][T10534] [ 981.848969][T10534] but task is already holding lock: [ 981.856338][T10534] ffffe8ffffd5a338 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 981.865601][T10534] [ 981.865601][T10534] other info that might help us debug this: [ 981.873674][T10534] Possible unsafe locking scenario: [ 981.873674][T10534] [ 981.881130][T10534] CPU0 [ 981.884437][T10534] ---- [ 981.887726][T10534] lock(&pd_list->lock); [ 981.892084][T10534] lock(&pd_list->lock); [ 981.896438][T10534] [ 981.896438][T10534] *** DEADLOCK *** [ 981.896438][T10534] [ 981.904592][T10534] May be due to missing lock nesting notation [ 981.904592][T10534] [ 981.912922][T10534] 3 locks held by kworker/u4:16/10534: [ 981.918479][T10534] #0: ffff888142660538 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 981.930476][T10534] #1: ffffc9000ba0fd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 981.942334][T10534] #2: ffffe8ffffd5a338 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4bf/0xa40 [ 981.952013][T10534] [ 981.952013][T10534] stack backtrace: [ 981.957909][T10534] CPU: 1 PID: 10534 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 981.965633][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 981.975706][T10534] Workqueue: pencrypt_parallel padata_parallel_worker [ 981.982492][T10534] Call Trace: [ 981.985789][T10534] [ 981.988738][T10534] dump_stack_lvl+0x18c/0x250 [ 981.993454][T10534] ? show_regs_print_info+0x20/0x20 [ 981.998683][T10534] ? print_deadlock_bug+0x435/0x5d0 [ 982.003910][T10534] __lock_acquire+0x6809/0x7d80 [ 982.008782][T10534] ? __lock_acquire+0x7d80/0x7d80 [ 982.013823][T10534] ? do_raw_spin_unlock+0x121/0x230 [ 982.019041][T10534] ? verify_lock_unused+0x140/0x140 [ 982.024261][T10534] ? mark_lock+0x94/0x320 [ 982.028626][T10534] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 982.034627][T10534] ? __lock_acquire+0x7d80/0x7d80 [ 982.039681][T10534] lock_acquire+0x19e/0x420 [ 982.044205][T10534] ? padata_do_serial+0x624/0xa40 [ 982.049256][T10534] ? lockdep_hardirqs_on+0x98/0x150 [ 982.054472][T10534] ? queue_work_on+0x19a/0x1f0 [ 982.059256][T10534] ? read_lock_is_recursive+0x20/0x20 [ 982.064643][T10534] ? __rwlock_init+0x150/0x150 [ 982.069420][T10534] ? generic_gcmaes_encrypt+0x289/0x3d0 [ 982.075037][T10534] _raw_spin_lock+0x2e/0x40 [ 982.079583][T10534] ? padata_do_serial+0x624/0xa40 [ 982.084624][T10534] padata_do_serial+0x624/0xa40 [ 982.089500][T10534] ? padata_parallel_worker+0x44/0x1c0 [ 982.094977][T10534] padata_parallel_worker+0x6f/0x1c0 [ 982.100284][T10534] ? process_scheduled_works+0x975/0x1600 [ 982.106033][T10534] process_scheduled_works+0xa60/0x1600 [ 982.111612][T10534] ? worker_attach_to_pool+0x370/0x370 [ 982.117100][T10534] ? assign_work+0x3cc/0x5d0 [ 982.121716][T10534] worker_thread+0xa5e/0xfe0 [ 982.126338][T10534] kthread+0x2fa/0x390 [ 982.130432][T10534] ? pr_cont_work+0x550/0x550 [ 982.135129][T10534] ? kthread_blkcg+0xd0/0xd0 [ 982.139737][T10534] ret_from_fork+0x48/0x80 [ 982.144176][T10534] ? kthread_blkcg+0xd0/0xd0 [ 982.148783][T10534] ret_from_fork_asm+0x11/0x20 [ 982.153596][T10534] [ 982.156689][ C1] vkms_vblank_simulate: vblank timer overrun