last executing test programs: 1m16.580205701s ago: executing program 1 (id=325): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 1m16.461810601s ago: executing program 1 (id=327): r0 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x26008890) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 1m16.011742677s ago: executing program 1 (id=333): setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="ea", 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x4000) 1m15.929055624s ago: executing program 1 (id=336): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x985201) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1b, 0x0, "8db7a645ed46d5335dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5d030b49f32393a93ea4d0436aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd81992394e3c7a178fb1c16c99189819ef400", [0x80, 0x87]}}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff, 0x4000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x2, 0x2, 0x10, 0x1d, "22b409b08352294f11220b333898db01a0cabd40f4ab6fd3d77c222fce572f35a956e7922ed67d4a8a5d47375dafa2face2ae4a77b721d437a1395578ec747c3", "1cae94a1e05df9e1478038136088ce23dc3cc42ebe9a8ab6769db2db8d8e9b52", [0x7, 0x80]}) 1m15.679984124s ago: executing program 1 (id=339): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"ec16da66ec2642b6555f9a8e4a293474d061393d79908e42c99a0090092fe5bb", r4}) 1m15.464159201s ago: executing program 1 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0xffffffffffffffda, 0x8000000000000001, {0x101, 0xa, 0x0, {0x1, 0xfffffffffffffffc, 0xbdd9, 0x400, 0x10000, 0x80000000, 0x9d1e, 0x4, 0x80, 0xa000, 0x7, 0x0, 0xffffffffffffffff, 0x80000006, 0xc0ac}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000100)='./file0\x00', 0x0) 1m15.408330046s ago: executing program 32 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0xffffffffffffffda, 0x8000000000000001, {0x101, 0xa, 0x0, {0x1, 0xfffffffffffffffc, 0xbdd9, 0x400, 0x10000, 0x80000000, 0x9d1e, 0x4, 0x80, 0xa000, 0x7, 0x0, 0xffffffffffffffff, 0x80000006, 0xc0ac}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000100)='./file0\x00', 0x0) 3.623859147s ago: executing program 4 (id=997): socket$nl_generic(0x10, 0x3, 0x10) openat$urandom(0xffffff9c, &(0x7f0000003580), 0x80100, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.544051233s ago: executing program 4 (id=999): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000340)=[0x6a, 0x7]) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000200)=[0xa9c7, 0xff]) 2.684422343s ago: executing program 0 (id=1010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r3, 0x1000006, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) 2.485835449s ago: executing program 0 (id=1011): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x1c3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x7}) write$UHID_INPUT(r0, &(0x7f0000002a00)={0x8, {"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", 0x1000}}, 0x1006) 2.240292109s ago: executing program 5 (id=1013): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075b, 0x81}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) 2.143330657s ago: executing program 5 (id=1015): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x85, &(0x7f0000000480)={r3, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0x0, 0x550, 0x833, 0x0, 0x7}, &(0x7f00000001c0)=0x9c) 1.832198692s ago: executing program 3 (id=1017): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.831925502s ago: executing program 2 (id=1018): r0 = socket(0x1d, 0x2, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x0, 0xf0, 0x3}}, 0x18) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "f71e4c291b003d24cfbf5f92a7f221066f9ebf6ecabe85b0d0793e"}, 0x26) fcntl$setlease(r0, 0x400, 0x0) 1.802492824s ago: executing program 0 (id=1019): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) 1.433167724s ago: executing program 0 (id=1020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f00000004c0)) 1.248123819s ago: executing program 0 (id=1021): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x1, 0x61d0, &(0x7f0000016fc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x25) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 1.247933339s ago: executing program 5 (id=1022): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) 987.10863ms ago: executing program 3 (id=1023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 758.912709ms ago: executing program 2 (id=1024): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}], 0x18}, 0x88d0) 687.454355ms ago: executing program 3 (id=1025): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 580.631843ms ago: executing program 2 (id=1026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 536.064977ms ago: executing program 4 (id=1027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 440.130254ms ago: executing program 2 (id=1028): r0 = fanotify_init(0x8, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) fanotify_mark(r0, 0x201, 0x8000000, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) 439.853125ms ago: executing program 0 (id=1029): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1a2, @tick=0x9, 0x0, {0x9}, 0x4, 0x2}) 356.205852ms ago: executing program 2 (id=1030): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/204, 0xcc}], 0x1}, 0x1}], 0x1, 0x40000140, 0x0) 355.866211ms ago: executing program 5 (id=1031): r0 = syz_io_uring_setup(0x460, &(0x7f0000000280)={0x0, 0x40000030, 0x10, 0x2, 0x309}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) add_key$user(0x0, 0x0, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x26fc, 0x0, 0x0, 0x0, 0x0) 355.697851ms ago: executing program 4 (id=1032): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) 280.728808ms ago: executing program 2 (id=1033): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x70, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000002c0)="3d2466c7", 0x4, 0xfecc) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 263.413549ms ago: executing program 5 (id=1034): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "b518774f968fbaef5bdd8ef6de4ca1a17c8e71da7f7045be3e45b1a3e028d70e", "b6eb61fd1239a32caf259cb060b4eaab10a529e93f8b75e0d1af7a9e325f0af84391ce9267d9c9adadf0eb48e36181ab", "0dd6ee068af91a7d40564d4948d7639f39fdcff3da61f54ed296c7db", {"3a0a9ee79a77c2b1ea33bcc07f9268b6", "4a9224a1f37b5bd2c9f934b6d7dbbcbf"}}}}}}}, 0x0) 263.222829ms ago: executing program 4 (id=1035): timer_create(0x3, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 204.307394ms ago: executing program 3 (id=1036): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x300}, 0x8) 136.875169ms ago: executing program 5 (id=1037): setresuid(0xee01, 0xee01, 0xee00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) 125.32251ms ago: executing program 3 (id=1038): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) 310.48µs ago: executing program 4 (id=1039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020303000000000000000020000000100800010001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000ffffffffffffffff"], 0x1c}}, 0x0) dup2(r1, r0) 0s ago: executing program 3 (id=1040): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x90}}, 0x4000040) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ] vc032x: probe of 3-1:0.0 failed with error -71 [ 83.408723][ T4411] usb 3-1: USB disconnect, device number 4 [ 83.502521][ T4999] loop0: detected capacity change from 0 to 64 [ 83.569099][ T26] audit: type=1800 audit(1755849355.959:5): pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="bus" dev="loop0" ino=22 res=0 errno=0 [ 83.602388][ T4999] hfs: request for non-existent node 1573 in B*Tree [ 83.609542][ T4999] hfs: request for non-existent node 1573 in B*Tree [ 83.655688][ T5005] hfs: request for non-existent node 1573 in B*Tree [ 83.678255][ T5005] hfs: request for non-existent node 1573 in B*Tree [ 83.769380][ T9] hfs: request for non-existent node 1573 in B*Tree [ 83.782489][ T9] hfs: request for non-existent node 1573 in B*Tree [ 83.916554][ T5018] device veth1_to_bridge entered promiscuous mode [ 83.956552][ T5018] device veth1_to_bridge left promiscuous mode [ 84.168609][ T5031] loop0: detected capacity change from 0 to 512 [ 84.259235][ T5038] loop2: detected capacity change from 0 to 1024 [ 84.304091][ T5031] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 84.371523][ T5031] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 84.390052][ T13] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 84.390410][ T5031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 84.419633][ T5031] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.434063][ T13] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 84.468179][ T5031] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 84.490101][ T5031] EXT4-fs warning (device loop0): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.497460][ T13] asix: probe of 5-1:0.0 failed with error -71 [ 84.519693][ T5031] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 84.555179][ T5031] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.231: bg 0: block 40: padding at end of block bitmap is not set [ 84.574265][ T5049] device syzkaller1 entered promiscuous mode [ 84.595185][ T13] usb 5-1: USB disconnect, device number 5 [ 84.622087][ T5031] EXT4-fs (loop0): Remounting filesystem read-only [ 84.633785][ T5031] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 84.647335][ T5031] EXT4-fs (loop0): Remounting filesystem read-only [ 84.668854][ T5031] EXT4-fs (loop0): 1 truncate cleaned up [ 84.700982][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback. [ 84.817130][ T5050] loop3: detected capacity change from 0 to 32768 [ 84.869318][ T5031] EXT4-fs (loop0): shut down requested (2) [ 84.968303][ T5050] XFS (loop3): Mounting V5 Filesystem [ 85.058036][ T5067] loop4: detected capacity change from 0 to 256 [ 85.113287][ T5050] XFS (loop3): Ending clean mount [ 85.132304][ T5050] XFS (loop3): Quotacheck needed: Please wait. [ 85.210566][ T26] audit: type=1800 audit(1755849357.609:6): pid=5067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.243" name="file1" dev="loop4" ino=1048593 res=0 errno=0 [ 85.220499][ T5073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.258410][ T5067] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.270355][ T5050] XFS (loop3): Quotacheck: Done. [ 85.405730][ T5081] loop2: detected capacity change from 0 to 1024 [ 85.415209][ T4186] XFS (loop3): Unmounting Filesystem [ 85.667070][ T1170] hfsplus: b-tree write err: -5, ino 4 [ 85.855740][ T5094] loop2: detected capacity change from 0 to 256 [ 85.988196][ T5094] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.090247][ T5094] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 86.112161][ T5095] loop4: detected capacity change from 0 to 40427 [ 86.169603][ T5095] F2FS-fs (loop4): invalid crc value [ 86.202848][ T5094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.235366][ T5095] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.275737][ T5095] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 86.311551][ T5095] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 86.398812][ T5094] exFAT-fs (loop2): error, found bogus dentry(18) beyond unused empty group(3) (start_clu : 5, cur_clu : 5) [ 86.467404][ T5094] exFAT-fs (loop2): Filesystem has been set read-only [ 86.579905][ T4411] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 86.733808][ T5101] loop0: detected capacity change from 0 to 32768 [ 86.804254][ T5101] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.258 (5101) [ 86.877961][ T5101] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 86.918335][ T5101] BTRFS info (device loop0): using free space tree [ 86.948206][ T5101] BTRFS info (device loop0): has skinny extents [ 86.965164][ T4411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 87.010743][ T4411] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 87.021880][ T4411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.041800][ T4411] usb 2-1: config 0 descriptor?? [ 87.090431][ T5108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.260030][ T5101] BTRFS info (device loop0): enabling ssd optimizations [ 87.418520][ T5119] loop3: detected capacity change from 0 to 32768 [ 87.580930][ T4411] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 87.936108][ T5119] XFS (loop3): Mounting V5 Filesystem [ 87.959068][ T4694] usb 2-1: USB disconnect, device number 4 [ 88.035117][ T5161] fido_id[5161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 88.241789][ T5119] XFS (loop3): Ending clean mount [ 88.288871][ T5119] XFS (loop3): Quotacheck needed: Please wait. [ 88.375304][ T5183] loop4: detected capacity change from 0 to 128 [ 88.454942][ T5119] XFS (loop3): Quotacheck: Done. [ 88.538867][ T26] audit: type=1800 audit(1755849360.929:7): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.275" name="file2" dev="loop4" ino=1048597 res=0 errno=0 [ 88.557908][ T5183] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 88.589666][ T5183] FAT-fs (loop4): Filesystem has been set read-only [ 88.613824][ T5183] attempt to access beyond end of device [ 88.613824][ T5183] loop4: rw=524288, want=2073, limit=128 [ 88.687277][ T5183] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 88.702608][ T5183] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 88.730560][ T5183] attempt to access beyond end of device [ 88.730560][ T5183] loop4: rw=0, want=2073, limit=128 [ 88.745358][ T5183] attempt to access beyond end of device [ 88.745358][ T5183] loop4: rw=0, want=2073, limit=128 [ 88.763696][ T5183] attempt to access beyond end of device [ 88.763696][ T5183] loop4: rw=0, want=2073, limit=128 [ 88.778507][ T5183] attempt to access beyond end of device [ 88.778507][ T5183] loop4: rw=0, want=2073, limit=128 [ 88.789262][ T5119] XFS (loop3): User initiated shutdown received. [ 88.804034][ T5119] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 88.822441][ T5119] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 88.842811][ T5183] attempt to access beyond end of device [ 88.842811][ T5183] loop4: rw=0, want=2073, limit=128 [ 88.910841][ T5183] attempt to access beyond end of device [ 88.910841][ T5183] loop4: rw=0, want=2073, limit=128 [ 88.927222][ T5183] attempt to access beyond end of device [ 88.927222][ T5183] loop4: rw=0, want=2073, limit=128 [ 88.939458][ T5183] attempt to access beyond end of device [ 88.939458][ T5183] loop4: rw=0, want=2073, limit=128 [ 88.956181][ T4186] XFS (loop3): Unmounting Filesystem [ 88.961254][ T5183] attempt to access beyond end of device [ 88.961254][ T5183] loop4: rw=0, want=2073, limit=128 [ 89.490889][ T4694] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.568326][ T5214] loop2: detected capacity change from 0 to 512 [ 89.647069][ T5217] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.289'. [ 89.664552][ T5214] EXT4-fs (loop2): Ignoring removed orlov option [ 89.708468][ T5214] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 89.847266][ T5214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 89.890379][ T4694] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.906959][ T4694] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.935601][ T5214] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.288: corrupted in-inode xattr [ 89.959044][ T4694] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.977388][ T5214] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.288: couldn't read orphan inode 15 (err -117) [ 89.985965][ T4694] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 90.007245][ T5214] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 90.015893][ T4694] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 90.029282][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.061217][ T5232] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 90.211235][ T4694] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.231935][ T4694] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.256384][ T4694] usb 1-1: Product: syz [ 90.276676][ T4694] usb 1-1: Manufacturer: syz [ 90.355702][ T5240] loop3: detected capacity change from 0 to 2048 [ 90.381063][ T4694] cdc_wdm 1-1:1.0: skipping garbage [ 90.396827][ T4694] cdc_wdm 1-1:1.0: skipping garbage [ 90.414176][ T4694] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 90.434287][ T4694] cdc_wdm 1-1:1.0: Unknown control protocol [ 90.470863][ T4692] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.516003][ T5240] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none. [ 90.577176][ T5243] netlink: 92 bytes leftover after parsing attributes in process `syz.4.300'. [ 90.686537][ T5243] netem: unknown loss type 0 [ 90.706794][ T5243] netem: change failed [ 90.712196][ T5240] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.298: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 90.740648][ T4411] usb 1-1: USB disconnect, device number 4 [ 90.762794][ T4692] usb 2-1: Using ep0 maxpacket: 16 [ 90.800611][ T5252] EXT4-fs (loop3): shut down requested (1) [ 90.849634][ T5240] EXT4-fs (loop3): Remounting filesystem read-only [ 90.880002][ T5255] sd 0:0:1:0: device reset [ 90.894987][ T4692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.909685][ T4692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.931411][ T4692] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 90.974244][ T4692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.006808][ T4692] usb 2-1: config 0 descriptor?? [ 91.024436][ T5250] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 91.033924][ T5250] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.176754][ T5262] batman_adv: Cannot find parent device [ 91.321557][ T5266] loop3: detected capacity change from 0 to 128 [ 91.517564][ T4692] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 91.565427][ T5268] loop0: detected capacity change from 0 to 32768 [ 91.613914][ T5272] loop2: detected capacity change from 0 to 1024 [ 91.689477][ T5272] hfsplus: bad catalog entry type [ 91.741093][ T4694] usb 2-1: USB disconnect, device number 5 [ 91.753845][ T5268] XFS (loop0): Mounting V5 Filesystem [ 91.834107][ T1170] hfsplus: b-tree write err: -5, ino 4 [ 91.956371][ T5268] XFS (loop0): Ending clean mount [ 91.965677][ T5268] XFS (loop0): Quotacheck needed: Please wait. [ 92.065649][ T5268] XFS (loop0): Quotacheck: Done. [ 92.199630][ T5301] loop4: detected capacity change from 0 to 2048 [ 92.223671][ T4183] XFS (loop0): Unmounting Filesystem [ 92.312737][ T5301] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 92.359212][ T5301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.622597][ T5317] loop2: detected capacity change from 0 to 256 [ 92.725969][ T5317] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.778563][ T5317] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 92.829214][ T5317] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 92.939865][ T4699] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.083673][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.220063][ T4699] usb 4-1: Using ep0 maxpacket: 16 [ 93.267080][ T5343] loop1: detected capacity change from 0 to 128 [ 93.271430][ T5339] vivid-000: disconnect [ 93.328361][ T5339] vivid-000: reconnect [ 93.330074][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 93.350161][ T4699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.363807][ T26] audit: type=1800 audit(1755849365.759:8): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.336" name="bus" dev="loop1" ino=1048601 res=0 errno=0 [ 93.385000][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.408566][ T4699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.419421][ T4699] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.00 [ 93.449932][ T4699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.460262][ T13] usb 5-1: config index 0 descriptor too short (expected 59154, got 18) [ 93.468851][ T4184] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 93.486940][ T13] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 93.492682][ T4184] FAT-fs (loop1): Filesystem has been set read-only [ 93.502991][ T4699] usb 4-1: config 0 descriptor?? [ 93.516713][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 93.692136][ T13] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 93.716785][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.743084][ T13] usb 5-1: Product: syz [ 93.751873][ T13] usb 5-1: Manufacturer: syz [ 93.764942][ T13] usb 5-1: SerialNumber: syz [ 93.812216][ T13] usb 5-1: config 0 descriptor?? [ 93.852394][ T13] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 93.864611][ T1170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.885609][ T1170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.978947][ T1170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.990003][ T1170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.064796][ T5348] loop2: detected capacity change from 0 to 32768 [ 94.069551][ T1170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.082520][ T1170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.115053][ T5348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.337 (5348) [ 94.135053][ T4699] apple 0003:05AC:0263.0004: global environment stack underflow [ 94.139562][ T5348] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 94.152136][ T5348] BTRFS info (device loop2): using free space tree [ 94.158779][ T5348] BTRFS info (device loop2): has skinny extents [ 94.162825][ T4699] apple 0003:05AC:0263.0004: item 0 4 1 11 parsing failed [ 94.203703][ T4699] apple 0003:05AC:0263.0004: parse failed [ 94.220646][ T4699] apple: probe of 0003:05AC:0263.0004 failed with error -22 [ 94.239443][ T1170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.255764][ T1170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.277911][ T5353] chnl_net:caif_netlink_parms(): no params data found [ 94.307524][ T5348] BTRFS info (device loop2): enabling ssd optimizations [ 94.348965][ T26] audit: type=1800 audit(1755849366.739:9): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.337" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 94.359429][ T4411] usb 4-1: USB disconnect, device number 3 [ 94.369208][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.594565][ T5386] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 94.613225][ T13] ssu100: probe of 5-1:0.0 failed with error -110 [ 94.858481][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.872525][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.905069][ T5353] device bridge_slave_0 entered promiscuous mode [ 94.936252][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.968630][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.977191][ T5353] device bridge_slave_1 entered promiscuous mode [ 95.071524][ T4696] usb 5-1: USB disconnect, device number 6 [ 95.101897][ T5353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.291009][ T5353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.437238][ T5353] team0: Port device team_slave_0 added [ 95.443976][ T5405] loop0: detected capacity change from 0 to 128 [ 95.492031][ T5353] team0: Port device team_slave_1 added [ 95.766618][ T5411] netlink: 'syz.2.353': attribute type 6 has an invalid length. [ 95.818994][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.831903][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.835999][ T5405] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 95.877621][ T5399] loop4: detected capacity change from 0 to 32768 [ 95.955764][ T5353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.020019][ T4696] Bluetooth: hci3: command 0x0409 tx timeout [ 96.052677][ T5399] XFS (loop4): Mounting V5 Filesystem [ 96.081044][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.092848][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.119250][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.139682][ T5353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.226185][ T5353] device hsr_slave_0 entered promiscuous mode [ 96.251197][ T5353] device hsr_slave_1 entered promiscuous mode [ 96.320355][ T5353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.320938][ T5399] XFS (loop4): Ending clean mount [ 96.342381][ T5443] loop2: detected capacity change from 0 to 1024 [ 96.349618][ T5399] XFS (loop4): Quotacheck needed: Please wait. [ 96.350007][ T5353] Cannot create hsr debugfs directory [ 96.481343][ T5399] XFS (loop4): Quotacheck: Done. [ 96.527465][ T5443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.565459][ T5443] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.616180][ T5450] loop0: detected capacity change from 0 to 4096 [ 96.667777][ T5450] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 96.701094][ T4182] XFS (loop4): Unmounting Filesystem [ 96.713447][ T26] audit: type=1800 audit(1755849369.109:10): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.360" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 96.733868][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.864962][ T145] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 2) [ 96.895823][ T145] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 96.909370][ T145] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.909370][ T145] [ 96.925971][ T5450] EXT4-fs (loop0): shut down requested (0) [ 97.227521][ T5460] netlink: 96 bytes leftover after parsing attributes in process `syz.2.363'. [ 97.450758][ T5470] loop2: detected capacity change from 0 to 512 [ 97.486675][ T5353] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.547197][ T5353] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.552117][ T5470] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.585902][ T5470] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.638307][ T5470] mmap: syz.2.365 (5470) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 97.721327][ T5353] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.768911][ T5480] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #4: comm syz.2.365: corrupted inode contents [ 97.780425][ T5484] loop4: detected capacity change from 0 to 2048 [ 97.830305][ T5353] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.918710][ T5484] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,usrjquota=,lazytime,norecovery,bsdgroups,grpquota,minixdf,noload,debug_want_extra_isize=0x0000000000000004,grpquota,,errors=continue. Quota mode: writeback. [ 97.953003][ T5480] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #4: comm syz.2.365: mark_inode_dirty error [ 98.014786][ T5480] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #4: comm syz.2.365: corrupted inode contents [ 98.058831][ T5469] loop3: detected capacity change from 0 to 32768 [ 98.088198][ T5480] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #4: comm syz.2.365: mark_inode_dirty error [ 98.099950][ T4699] Bluetooth: hci3: command 0x041b tx timeout [ 98.115922][ T5484] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.123437][ T5480] Quota error (device loop2): write_blk: dquota write failed [ 98.189365][ T5480] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 98.222643][ T5480] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.235409][ T5480] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.365: Failed to acquire dquot type 1 [ 98.318453][ T4182] Trying to write to read-only block-device loop4 [ 98.368249][ T4182] Trying to write to read-only block-device loop4 [ 98.376882][ T5469] XFS (loop3): Mounting V5 Filesystem [ 98.404612][ T4182] Trying to write to read-only block-device loop4 [ 98.421786][ T4182] Trying to write to read-only block-device loop4 [ 98.428357][ T4182] Trying to write to read-only block-device loop4 [ 98.450511][ T4182] Trying to write to read-only block-device loop4 [ 98.457150][ T4182] Trying to write to read-only block-device loop4 [ 98.559236][ T4182] Trying to write to read-only block-device loop4 [ 98.582538][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.614964][ T5353] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.634823][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.654111][ T5490] Trying to write to read-only block-device loop4 [ 98.706545][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.739078][ T5469] XFS (loop3): Ending clean mount [ 98.789081][ T5469] XFS (loop3): Quotacheck needed: Please wait. [ 98.884952][ T1170] device hsr_slave_0 left promiscuous mode [ 98.910952][ T1170] device hsr_slave_1 left promiscuous mode [ 98.927894][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.957717][ T5469] XFS (loop3): Quotacheck: Done. [ 98.993464][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.048733][ T4186] XFS (loop3): Unmounting Filesystem [ 99.065147][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.082762][ T5534] loop0: detected capacity change from 0 to 1024 [ 99.136772][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.181972][ T5534] EXT4-fs (loop0): Ignoring removed nobh option [ 99.194819][ T5534] EXT4-fs (loop0): Ignoring removed bh option [ 99.205349][ T5534] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.218586][ T1170] device bridge_slave_1 left promiscuous mode [ 99.235315][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.305834][ T1170] device bridge_slave_0 left promiscuous mode [ 99.335404][ T5534] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 99.381911][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.507081][ T1170] device veth1_macvtap left promiscuous mode [ 99.514688][ T1170] device veth0_macvtap left promiscuous mode [ 99.521099][ T1170] device veth1_vlan left promiscuous mode [ 99.527435][ T1170] device veth0_vlan left promiscuous mode [ 99.733837][ T145] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.783192][ T5547] loop3: detected capacity change from 0 to 1024 [ 99.809325][ T5547] EXT4-fs (loop3): Ignoring removed orlov option [ 99.853905][ T5547] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 100.154358][ T5553] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 100.190171][ T4699] Bluetooth: hci3: command 0x040f tx timeout [ 100.195362][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 100.220495][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 100.238340][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.256584][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.432750][ T1170] bond0 (unregistering): Released all slaves [ 100.517303][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.526886][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.536564][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.543709][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.552436][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.569381][ T5527] device dummy0 entered promiscuous mode [ 100.576202][ T5527] device netdevsim0 entered promiscuous mode [ 100.612373][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 100.641513][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.696587][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.708803][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.716372][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.725847][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.734941][ T4410] kernel write not supported for file bpf-prog (pid: 4410 comm: kworker/0:13) [ 100.776059][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.793317][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.830891][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.861826][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 100.896520][ T5567] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.906245][ T5567] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.915235][ T5567] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.924067][ T5567] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.935130][ T5570] netlink: 104 bytes leftover after parsing attributes in process `syz.4.387'. [ 100.948371][ T5567] device vxlan0 entered promiscuous mode [ 100.968673][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.001376][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.036918][ T5572] loop4: detected capacity change from 0 to 128 [ 101.039328][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.083792][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.095727][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.139106][ T5353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.153422][ T5353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.164066][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.183332][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.539544][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.580509][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.593789][ T5353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.636825][ T5595] loop2: detected capacity change from 0 to 2048 [ 101.660179][ T4696] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.744843][ T5595] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.780135][ T4412] Bluetooth: hci5: command 0xfc11 tx timeout [ 101.780816][ T5600] loop4: detected capacity change from 0 to 2048 [ 101.793631][ T4187] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 101.873693][ T5606] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.087937][ T4696] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 102.124306][ T4696] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.177482][ T4696] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.183345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.197288][ T4696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.221532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.260170][ T4412] Bluetooth: hci3: command 0x0419 tx timeout [ 102.298486][ T5353] device veth0_vlan entered promiscuous mode [ 102.323692][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.363670][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.373519][ T4696] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 102.436424][ T5353] device veth1_vlan entered promiscuous mode [ 102.441358][ T4289] udevd[4289]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.451806][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.474114][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.485332][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.539947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.592241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.619297][ T5625] loop2: detected capacity change from 0 to 128 [ 102.627880][ T4412] usb 4-1: USB disconnect, device number 4 [ 102.631089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.704937][ T5353] device veth0_macvtap entered promiscuous mode [ 102.753012][ T5625] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.777567][ T5353] device veth1_macvtap entered promiscuous mode [ 102.796254][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.811800][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.822364][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.833681][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.844237][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.855008][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.860582][ T5625] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.867105][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.885631][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.911458][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.952414][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.973464][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.996555][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.031346][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.054609][ T5634] netlink: 104 bytes leftover after parsing attributes in process `syz.4.412'. [ 103.093535][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.129159][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.198415][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.264504][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.312446][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.343673][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.380679][ T5353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.410493][ T5353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.459457][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.517413][ T5644] device veth1_to_bridge entered promiscuous mode [ 103.531779][ T5645] device veth1_to_bridge left promiscuous mode [ 103.561865][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.595427][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.639283][ T5353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.669466][ T5353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.708608][ T5353] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.737794][ T5353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.778210][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.812274][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.850579][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.910231][ T5651] device bridge_slave_0 left promiscuous mode [ 103.921039][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.999073][ T5651] device bridge_slave_1 left promiscuous mode [ 104.032524][ T5667] loop2: detected capacity change from 0 to 256 [ 104.039137][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.058531][ T5638] loop0: detected capacity change from 0 to 32768 [ 104.075604][ T5651] bond0: (slave bond_slave_0): Releasing backup interface [ 104.157980][ T5638] XFS (loop0): Mounting V5 Filesystem [ 104.237570][ T5651] bond0: (slave bond_slave_1): Releasing backup interface [ 104.343279][ T5638] XFS (loop0): Ending clean mount [ 104.421492][ T5638] XFS (loop0): Quotacheck needed: Please wait. [ 104.577145][ T5638] XFS (loop0): Quotacheck: Done. [ 104.783377][ T5651] team0: Port device team_slave_0 removed [ 104.800202][ T4183] XFS (loop0): Unmounting Filesystem [ 104.898852][ T5651] team0: Port device team_slave_1 removed [ 104.907704][ T5651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.936952][ T5651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.976939][ T5651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.996491][ T5651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.066413][ T5655] team0: Mode "" not found [ 105.129885][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.328426][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.353518][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.413764][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.483377][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.530005][ T13] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 105.545316][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.569659][ T13] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.602705][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.613520][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.637015][ T5717] usb usb8: usbfs: process 5717 (syz.4.426) did not claim interface 0 before use [ 105.640131][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.816557][ T13] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 105.931330][ T4289] udevd[4289]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.058926][ T4699] usb 3-1: USB disconnect, device number 5 [ 106.104671][ T5737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.406357][ T5747] loop3: detected capacity change from 0 to 4096 [ 106.632022][ T5747] binfmt_misc: register: failed to install interpreter file ./file0 [ 106.927128][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 106.936354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 106.945445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 106.954661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 106.963820][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 106.972984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 106.974905][ T5772] loop5: detected capacity change from 0 to 32768 [ 106.982013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 107.026354][ T5772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.443 (5772) [ 107.047394][ T5772] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 107.056521][ T5772] BTRFS info (device loop5): using free space tree [ 107.063819][ T5772] BTRFS info (device loop5): has skinny extents [ 107.367986][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 107.489947][ T26] audit: type=1326 audit(1755849379.849:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.2.450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6822fabbe9 code=0x0 [ 107.540188][ T5772] BTRFS info (device loop5): enabling ssd optimizations [ 107.640043][ T5816] loop4: detected capacity change from 0 to 32768 [ 107.703251][ T5824] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 107.718786][ T4186] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 107.740140][ T4186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 107.742134][ T5824] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 108.522260][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 108.766461][ T5855] loop2: detected capacity change from 0 to 8192 [ 108.864382][ T5855] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 108.901516][ T5855] REISERFS (device loop2): using ordered data mode [ 108.908505][ T5855] reiserfs: using flush barriers [ 108.973989][ T5855] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.070544][ T5855] REISERFS (device loop2): checking transaction log (loop2) [ 109.125899][ T5870] loop5: detected capacity change from 0 to 4096 [ 109.246198][ T5870] binfmt_misc: register: failed to install interpreter file ./file0 [ 109.467270][ T5855] REISERFS (device loop2): Using tea hash to sort names [ 109.477543][ T5855] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 109.662974][ T5353] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 109.669504][ T5353] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 109.747402][ T5898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.757639][ T5898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.767201][ T5898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.843274][ T5898] device bridge_slave_0 left promiscuous mode [ 109.858326][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.883839][ T5898] device bridge_slave_1 left promiscuous mode [ 109.901593][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.925808][ T5898] bond0: (slave bond_slave_0): Releasing backup interface [ 109.942408][ T5898] bond0: (slave bond_slave_1): Releasing backup interface [ 110.105871][ T5898] team0: Port device team_slave_0 removed [ 110.120279][ T4258] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.158914][ T5898] team0: Port device team_slave_1 removed [ 110.178437][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.189100][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.244268][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.266218][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.347531][ T5902] team0: Mode "" not found [ 110.390029][ T4258] usb 6-1: Using ep0 maxpacket: 8 [ 110.520179][ T4258] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.533298][ T4258] usb 6-1: config 179 has no interface number 0 [ 110.550678][ T4258] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.576680][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 110.599853][ T4258] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 110.632514][ T4258] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.644524][ T4258] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.659653][ T4258] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.676279][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.710171][ T5901] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.009854][ T5955] loop0: detected capacity change from 0 to 16 [ 111.030514][ T4258] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input7 [ 111.186777][ T5955] erofs: (device loop0): mounted with root inode @ nid 36. [ 111.208586][ T13] usb 6-1: USB disconnect, device number 2 [ 111.219906][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 111.228271][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.237665][ T13] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 111.567181][ T5964] loop0: detected capacity change from 0 to 4096 [ 111.567274][ T5952] loop2: detected capacity change from 0 to 40427 [ 111.641972][ T5952] F2FS-fs (loop2): invalid crc value [ 111.677935][ T5952] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.696402][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 111.759978][ T5952] F2FS-fs (loop2): Start checkpoint disabled! [ 111.780349][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.843225][ T5952] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 111.895998][ T4183] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 111.912996][ T4183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 111.914186][ T5976] loop4: detected capacity change from 0 to 164 [ 112.030343][ T1170] handle_bad_sector: 1993 callbacks suppressed [ 112.030367][ T1170] attempt to access beyond end of device [ 112.030367][ T1170] loop2: rw=2049, want=40992, limit=40427 [ 112.071088][ T5976] rock: directory entry would overflow storage [ 112.077944][ T5976] rock: sig=0x66, size=4, remaining=3 [ 112.150131][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.160530][ T4410] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 112.182112][ T7] usb 4-1: config 1 has no interface number 0 [ 112.188851][ T7] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.217420][ T7] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 112.233396][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.252152][ T26] audit: type=1326 audit(1755849384.649:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7227ecbbe9 code=0x0 [ 112.413000][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.435847][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.446182][ T7] usb 4-1: Product: syz [ 112.455656][ T7] usb 4-1: Manufacturer: syz [ 112.461692][ T7] usb 4-1: SerialNumber: syz [ 112.520191][ T4410] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.538304][ T4410] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.560022][ T4410] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.575398][ T4410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.612205][ T5973] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.846160][ T4410] usb 6-1: USB disconnect, device number 3 [ 113.123692][ T6005] device batadv_slave_0 entered promiscuous mode [ 113.132991][ T6005] netlink: 44 bytes leftover after parsing attributes in process `syz.4.512'. [ 113.210770][ T6005] device batadv_slave_0 left promiscuous mode [ 113.306109][ T6010] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.363621][ T6012] input: syz0 as /devices/virtual/input/input8 [ 113.381523][ T7] cdc_ncm 4-1:1.1: bind() failure [ 113.464726][ T6016] loop2: detected capacity change from 0 to 7 [ 113.492828][ T6016] Dev loop2: unable to read RDB block 7 [ 113.508023][ T6016] loop2: unable to read partition table [ 113.529970][ T6016] loop2: partition table beyond EOD, truncated [ 113.552696][ T6016] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.628599][ T7] usb 4-1: USB disconnect, device number 5 [ 113.906422][ T6040] loop4: detected capacity change from 0 to 64 [ 113.935940][ T6035] loop0: detected capacity change from 0 to 8192 [ 113.998324][ T6035] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 114.009433][ T6035] REISERFS (device loop0): using ordered data mode [ 114.018568][ T6035] reiserfs: using flush barriers [ 114.025324][ T6035] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.042704][ T6035] REISERFS (device loop0): checking transaction log (loop0) [ 114.160073][ T4410] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 114.324405][ T6035] REISERFS (device loop0): Using tea hash to sort names [ 114.333218][ T6035] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 114.540186][ T4410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.557517][ T4410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.569868][ T4410] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 114.596155][ T4410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.631937][ T4410] usb 6-1: config 0 descriptor?? [ 114.955663][ T6063] loop3: detected capacity change from 0 to 32768 [ 115.114200][ T6063] XFS (loop3): Mounting V5 Filesystem [ 115.143597][ T4410] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 115.166793][ T4410] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 115.212683][ T4410] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 115.266057][ T4410] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 115.278716][ T6063] XFS (loop3): Ending clean mount [ 115.292234][ T6063] XFS (loop3): Quotacheck needed: Please wait. [ 115.299133][ T4410] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 115.375376][ T4410] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 115.510820][ T6063] XFS (loop3): Quotacheck: Done. [ 115.520443][ T4410] playstation 0003:054C:0DF2.0005: Invalid byte count transferred, expected 20 got 0 [ 115.576237][ T4410] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22 [ 115.626391][ T4410] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 115.666826][ T4410] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 115.699085][ T4410] playstation: probe of 0003:054C:0DF2.0005 failed with error -22 [ 115.766040][ T13] usb 6-1: USB disconnect, device number 4 [ 115.775184][ T4186] XFS (loop3): Unmounting Filesystem [ 115.882597][ T6107] loop2: detected capacity change from 0 to 8192 [ 115.895203][ T6109] fido_id[6109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 115.987924][ T6107] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 116.017767][ T6107] REISERFS (device loop2): using ordered data mode [ 116.038099][ T6107] reiserfs: using flush barriers [ 116.048232][ T6094] loop4: detected capacity change from 0 to 32768 [ 116.058682][ T6107] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.121085][ T6107] REISERFS (device loop2): checking transaction log (loop2) [ 116.290173][ T6107] REISERFS (device loop2): Using tea hash to sort names [ 116.297541][ T6107] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 116.515800][ T6119] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 116.554290][ T6119] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 116.773015][ T6104] loop0: detected capacity change from 0 to 40427 [ 116.864762][ T6104] F2FS-fs (loop0): invalid crc value [ 116.878998][ T6142] device batadv_slave_0 entered promiscuous mode [ 116.882610][ T6104] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.919544][ T6144] loop3: detected capacity change from 0 to 64 [ 116.944313][ T6142] netlink: 44 bytes leftover after parsing attributes in process `syz.2.557'. [ 116.968517][ T6104] F2FS-fs (loop0): Start checkpoint disabled! [ 116.986710][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.007386][ T6104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 117.211937][ T6142] device batadv_slave_0 left promiscuous mode [ 117.239434][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.280899][ T6149] attempt to access beyond end of device [ 117.280899][ T6149] loop3: rw=16812033, want=2140, limit=64 [ 117.306181][ T144] attempt to access beyond end of device [ 117.306181][ T144] loop0: rw=2049, want=40976, limit=40427 [ 117.318863][ T6149] attempt to access beyond end of device [ 117.318863][ T6149] loop3: rw=16812033, want=2652, limit=64 [ 117.456781][ T6155] loop5: detected capacity change from 0 to 164 [ 117.527535][ T6155] rock: directory entry would overflow storage [ 117.555711][ T6159] loop2: detected capacity change from 0 to 128 [ 117.579951][ T6155] rock: sig=0x66, size=4, remaining=3 [ 117.626184][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.567'. [ 117.664714][ T6159] EXT4-fs (loop2): Ignoring removed oldalloc option [ 117.701096][ T6159] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 117.850797][ T6159] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 117.864501][ T6159] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.904828][ T6167] loop3: detected capacity change from 0 to 1024 [ 117.938537][ T6171] loop0: detected capacity change from 0 to 2048 [ 118.064648][ T6171] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.114900][ T6176] loop2: detected capacity change from 0 to 4096 [ 118.477046][ T6182] loop3: detected capacity change from 0 to 8192 [ 118.493317][ T6176] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.543512][ T6176] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 118.569442][ T6176] System zones: 0-5 [ 118.668907][ T6182] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 118.670282][ T6176] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 118.730462][ T6182] REISERFS (device loop3): using ordered data mode [ 118.737715][ T6182] reiserfs: using flush barriers [ 118.756027][ T6182] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.922534][ T6176] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 118.942659][ T6182] REISERFS (device loop3): checking transaction log (loop3) [ 119.037210][ T6168] loop4: detected capacity change from 0 to 40427 [ 119.197402][ T6193] loop0: detected capacity change from 0 to 40427 [ 119.209407][ T6176] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 119.269014][ T6193] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 119.276664][ T6193] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.311069][ T6193] F2FS-fs (loop0): invalid crc value [ 119.342072][ T6179] loop5: detected capacity change from 0 to 40427 [ 119.397960][ T6193] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.434739][ T6179] F2FS-fs (loop5): invalid crc value [ 119.470253][ T6193] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.477345][ T6193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.502782][ T6182] REISERFS (device loop3): Using tea hash to sort names [ 119.524772][ T6179] F2FS-fs (loop5): Found nat_bits in checkpoint [ 119.558235][ T6182] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 119.718145][ T4183] attempt to access beyond end of device [ 119.718145][ T4183] loop0: rw=2049, want=45104, limit=40427 [ 119.808846][ T6179] F2FS-fs (loop5): Start checkpoint disabled! [ 119.857880][ T6179] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 120.198288][ T6216] loop4: detected capacity change from 0 to 512 [ 120.374112][ T155] attempt to access beyond end of device [ 120.374112][ T155] loop5: rw=2049, want=40992, limit=40427 [ 120.611655][ T6228] device batadv_slave_0 entered promiscuous mode [ 120.646198][ T6228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.576'. [ 120.697874][ T6228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.715086][ T4258] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.816928][ T6228] device batadv_slave_0 left promiscuous mode [ 120.835481][ T6228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.100238][ T4258] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.109508][ T4258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.140988][ T4258] usb 5-1: config 0 descriptor?? [ 121.225131][ T4258] cp210x 5-1:0.0: cp210x converter detected [ 121.397609][ T6246] loop5: detected capacity change from 0 to 40427 [ 121.444794][ T6246] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 121.451867][ T6246] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 121.463485][ T6246] F2FS-fs (loop5): invalid crc value [ 121.569507][ T6246] F2FS-fs (loop5): Found nat_bits in checkpoint [ 121.601817][ T6240] loop2: detected capacity change from 0 to 32768 [ 121.649959][ T4258] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 121.676096][ T6246] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 121.680129][ T6240] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.586 (6240) [ 121.683800][ T6246] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 121.735196][ T4258] usb 5-1: cp210x converter now attached to ttyUSB0 [ 121.825118][ T6240] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 121.853860][ T6240] BTRFS info (device loop2): enabling auto defrag [ 121.854529][ T5353] attempt to access beyond end of device [ 121.854529][ T5353] loop5: rw=2049, want=45104, limit=40427 [ 121.862004][ T6240] BTRFS info (device loop2): max_inline at 0 [ 121.879614][ T6240] BTRFS info (device loop2): force clearing of disk cache [ 121.899301][ T6240] BTRFS info (device loop2): turning on sync discard [ 121.907115][ T2020] usb 5-1: USB disconnect, device number 7 [ 121.925059][ T6240] BTRFS info (device loop2): using free space tree [ 121.932393][ T6240] BTRFS info (device loop2): has skinny extents [ 121.949944][ T4258] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.968578][ T2020] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 122.060422][ T2020] cp210x 5-1:0.0: device disconnected [ 122.317267][ T6240] BTRFS info (device loop2): enabling ssd optimizations [ 122.336872][ T6240] BTRFS info (device loop2): clearing free space tree [ 122.340391][ T4258] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.348446][ T6240] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.384484][ T6240] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.405513][ T4258] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.441591][ T4258] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.469199][ T6240] BTRFS info (device loop2): creating free space tree [ 122.495130][ T4258] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 122.505853][ T6240] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.539851][ T4258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.546750][ T6240] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.585212][ T4258] usb 4-1: config 0 descriptor?? [ 122.967335][ T6313] loop5: detected capacity change from 0 to 8192 [ 123.035586][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.054439][ T6313] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 123.098617][ T7] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.161038][ T6313] REISERFS (device loop5): using ordered data mode [ 123.167628][ T6313] reiserfs: using flush barriers [ 123.251529][ T6313] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.301828][ T4258] usb 4-1: string descriptor 0 read error: -22 [ 123.412151][ T6313] REISERFS (device loop5): checking transaction log (loop5) [ 123.550263][ T4258] uclogic 0003:256C:006D.0007: interface is invalid, ignoring [ 123.652829][ T6340] loop4: detected capacity change from 0 to 512 [ 123.697858][ T6313] REISERFS (device loop5): Using tea hash to sort names [ 123.735609][ T6313] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 124.190482][ T21] usb 4-1: USB disconnect, device number 6 [ 124.461766][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.475449][ T6363] loop0: detected capacity change from 0 to 32768 [ 124.605327][ T6363] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 124.669228][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 124.695550][ T6363] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.779276][ T6376] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.788452][ T6376] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.797567][ T6376] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.806443][ T6376] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.821062][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 124.860440][ T13] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.884760][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.928776][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 124.944561][ T13] usb 5-1: config 0 descriptor?? [ 125.021024][ T13] cp210x 5-1:0.0: cp210x converter detected [ 125.050234][ T6382] loop3: detected capacity change from 0 to 8192 [ 125.087408][ T6386] loop5: detected capacity change from 0 to 4096 [ 125.296986][ T6382] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 125.358214][ T6386] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.380164][ T6382] FAT-fs (loop3): Filesystem has been set read-only [ 125.460186][ T13] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 125.557615][ T13] usb 5-1: cp210x converter now attached to ttyUSB0 [ 125.764443][ T6379] loop2: detected capacity change from 0 to 32768 [ 125.774879][ T21] usb 5-1: USB disconnect, device number 8 [ 125.790690][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.830580][ T21] cp210x 5-1:0.0: device disconnected [ 125.994704][ T6379] XFS (loop2): Mounting V5 Filesystem [ 126.019783][ T6405] tls_set_device_offload: netdev not found [ 126.105366][ T6437] netlink: 165 bytes leftover after parsing attributes in process `syz.5.628'. [ 126.159953][ T4695] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.301837][ T6379] XFS (loop2): Ending clean mount [ 126.330552][ T6379] XFS (loop2): Quotacheck needed: Please wait. [ 126.540003][ T4695] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.576901][ T6447] loop5: detected capacity change from 0 to 32768 [ 126.590267][ T4695] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.616380][ T4695] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.668578][ T6447] JBD2: Ignoring recovery information on journal [ 126.675700][ T4695] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 126.699630][ T4695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.730127][ T6379] XFS (loop2): Quotacheck: Done. [ 126.748586][ T4695] usb 1-1: config 0 descriptor?? [ 126.788312][ T6447] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 126.821105][ T6441] loop3: detected capacity change from 0 to 32768 [ 126.854955][ T6441] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.629 (6441) [ 126.965502][ T6441] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 126.985215][ T26] audit: type=1804 audit(1755849399.379:13): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.615" name="/newroot/138/file0/file1" dev="loop2" ino=9286 res=1 errno=0 [ 127.010188][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 127.040081][ T6441] BTRFS info (device loop3): enabling auto defrag [ 127.061137][ T6441] BTRFS info (device loop3): max_inline at 0 [ 127.138590][ T6441] BTRFS info (device loop3): force clearing of disk cache [ 127.167330][ T6441] BTRFS info (device loop3): turning on sync discard [ 127.178342][ T4185] XFS (loop2): Unmounting Filesystem [ 127.198287][ T5353] ocfs2: Unmounting device (7,5) on (node local) [ 127.248314][ T6441] BTRFS info (device loop3): using free space tree [ 127.264125][ T6441] BTRFS info (device loop3): has skinny extents [ 127.475478][ T4695] usb 1-1: string descriptor 0 read error: -22 [ 127.578270][ T6490] loop4: detected capacity change from 0 to 1024 [ 127.730252][ T4695] uclogic 0003:256C:006D.0008: interface is invalid, ignoring [ 127.768143][ T6441] BTRFS info (device loop3): enabling ssd optimizations [ 127.805284][ T6441] BTRFS info (device loop3): clearing free space tree [ 127.817209][ T6441] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.828484][ T6441] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.860844][ T6441] BTRFS info (device loop3): creating free space tree [ 127.897229][ T6511] tls_set_device_offload: netdev not found [ 127.906377][ T6441] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.992413][ T6360] usb 1-1: USB disconnect, device number 5 [ 128.019151][ T6441] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.310811][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.501294][ T6515] loop4: detected capacity change from 0 to 40427 [ 128.609957][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.647'. [ 128.611816][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 128.832112][ T6524] loop0: detected capacity change from 0 to 32768 [ 128.956234][ T6538] loop3: detected capacity change from 0 to 512 [ 128.987421][ T6524] JBD2: Ignoring recovery information on journal [ 129.037660][ T6524] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 129.087023][ T6535] loop5: detected capacity change from 0 to 4096 [ 129.114052][ T6538] EXT4-fs error (device loop3): ext4_quota_enable:6411: comm syz.3.652: Bad quota inum: 1, type: 2 [ 129.150223][ T7] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 129.160525][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.169053][ T7] usb 3-1: Product: syz [ 129.174228][ T7] usb 3-1: Manufacturer: syz [ 129.179122][ T7] usb 3-1: SerialNumber: syz [ 129.185923][ T7] usb 3-1: config 0 descriptor?? [ 129.193503][ T6538] EXT4-fs warning (device loop3): ext4_enable_quotas:6459: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 129.212674][ T6538] EXT4-fs (loop3): mount failed [ 129.242223][ T7] gspca_main: sq930x-2.14.0 probing 2770:930c [ 129.348458][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 129.450985][ T7] gspca_sq930x: reg_r 001f failed -71 [ 129.457248][ T7] sq930x: probe of 3-1:0.0 failed with error -71 [ 129.547776][ T7] usb 3-1: USB disconnect, device number 6 [ 130.022230][ T6548] loop4: detected capacity change from 0 to 32768 [ 130.111425][ T6563] netlink: 96 bytes leftover after parsing attributes in process `syz.2.660'. [ 130.340048][ T4289] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4289) [ 130.449857][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.719891][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 130.727812][ T6586] loop2: detected capacity change from 0 to 4096 [ 130.764756][ T6559] loop5: detected capacity change from 0 to 40427 [ 130.825749][ T6586] NILFS (loop2): invalid segment: Checksum error in segment payload [ 130.861185][ T6586] NILFS (loop2): trying rollback from an earlier position [ 130.890389][ T6559] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 130.914440][ T6559] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 130.932247][ T6586] NILFS (loop2): recovery complete [ 130.957400][ T6559] F2FS-fs (loop5): invalid crc value [ 130.983635][ T6598] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.019032][ T6559] F2FS-fs (loop5): Found nat_bits in checkpoint [ 131.040228][ T7] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 131.049322][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.098097][ T7] usb 1-1: Product: syz [ 131.142742][ T7] usb 1-1: Manufacturer: syz [ 131.147379][ T7] usb 1-1: SerialNumber: syz [ 131.213670][ T7] usb 1-1: config 0 descriptor?? [ 131.224369][ T6559] F2FS-fs (loop5): Start checkpoint disabled! [ 131.252968][ T6559] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 131.308662][ T7] gspca_main: sq930x-2.14.0 probing 2770:930c [ 131.397892][ T6559] attempt to access beyond end of device [ 131.397892][ T6559] loop5: rw=2049, want=45104, limit=40427 [ 131.500049][ T21] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 131.500135][ T7] gspca_sq930x: reg_r 001f failed -71 [ 131.521214][ T7] sq930x: probe of 1-1:0.0 failed with error -71 [ 131.534496][ T7] usb 1-1: USB disconnect, device number 6 [ 131.553758][ T144] attempt to access beyond end of device [ 131.553758][ T144] loop5: rw=2049, want=40992, limit=40427 [ 131.860454][ T21] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.910328][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.090172][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.120466][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.176774][ T21] usb 5-1: Product: syz [ 132.209908][ T21] usb 5-1: Manufacturer: syz [ 132.214656][ T21] usb 5-1: SerialNumber: syz [ 132.320674][ T21] usb 5-1: config 0 descriptor?? [ 132.386174][ T21] usb 5-1: selecting invalid altsetting 0 [ 132.598007][ T6360] usb 5-1: USB disconnect, device number 9 [ 132.689739][ C0] sched: RT throttling activated [ 132.850322][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856890][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.032920][ T4668] udevd[4668]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.329823][ T6620] loop2: detected capacity change from 0 to 262144 [ 133.481921][ T6620] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.519953][ T6620] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.575590][ T6622] loop3: detected capacity change from 0 to 40427 [ 133.586799][ T6635] loop5: detected capacity change from 0 to 32768 [ 133.636233][ T6622] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 133.688550][ T6622] F2FS-fs (loop3): invalid crc value [ 133.747288][ T6622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.832705][ T6635] XFS (loop5): Mounting V5 Filesystem [ 133.969672][ T6622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.031324][ T6635] XFS (loop5): Ending clean mount [ 134.038432][ T6635] XFS (loop5): Quotacheck needed: Please wait. [ 134.226576][ T6635] XFS (loop5): Quotacheck: Done. [ 134.340884][ T6671] loop0: detected capacity change from 0 to 2048 [ 134.343016][ T6622] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of __f2fs_tmpfile+0x2d2/0x300 [ 134.497953][ T6671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.532643][ T5353] XFS (loop5): Unmounting Filesystem [ 134.566990][ T6671] UDF-fs: warning (device loop0): udf_rmdir: empty directory has nlink != 2 (0) [ 134.637281][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.102939][ T6688] loop4: detected capacity change from 0 to 128 [ 135.533454][ T6698] loop4: detected capacity change from 0 to 1024 [ 135.604527][ T6706] loop2: detected capacity change from 0 to 1024 [ 135.605393][ T6704] loop5: detected capacity change from 0 to 256 [ 135.675777][ T6704] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.729200][ T6704] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 135.756118][ T6706] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.822171][ T6712] loop4: detected capacity change from 0 to 2048 [ 135.829293][ T6704] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 135.832310][ T4173] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.918948][ T6719] loop3: detected capacity change from 0 to 512 [ 135.924270][ T6706] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 135.961159][ T6706] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 2 with error 28 [ 135.979855][ T6706] EXT4-fs (loop2): This should not happen!! Data will be lost [ 135.979855][ T6706] [ 135.998154][ T6706] EXT4-fs (loop2): Total free blocks count 0 [ 136.025270][ T6706] EXT4-fs (loop2): Free/Dirty block details [ 136.040311][ T6704] exFAT-fs (loop5): hint_cluster is invalid (17) [ 136.052047][ T6706] EXT4-fs (loop2): free_blocks=68451041280 [ 136.052298][ T6719] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.068982][ T6706] EXT4-fs (loop2): dirty_blocks=48 [ 136.075187][ T6706] EXT4-fs (loop2): Block reservation details [ 136.081566][ T6706] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 136.088166][ T6719] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.131172][ T6720] loop4: detected capacity change from 0 to 16 [ 136.168748][ T6720] /dev/loop4: Can't open blockdev [ 136.205094][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.295634][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 136.295634][ T144] [ 136.310390][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.335412][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.395533][ T4173] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.399825][ T4585] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.469866][ T4173] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.515192][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.585672][ T4173] usb 1-1: config 0 descriptor?? [ 136.683796][ T6712] loop4: detected capacity change from 0 to 32768 [ 136.727459][ T6731] loop2: detected capacity change from 0 to 128 [ 136.763878][ T4289] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (4289) [ 136.821293][ T4585] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.864275][ T4585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.895656][ T4585] usb 4-1: config 0 descriptor?? [ 136.950327][ T4585] cp210x 4-1:0.0: cp210x converter detected [ 136.994946][ T6738] device vlan2 entered promiscuous mode [ 137.015043][ T6738] device macvtap0 entered promiscuous mode [ 137.069047][ T4173] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 137.100901][ T4173] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 137.108646][ T4173] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 137.123991][ T4173] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 137.171266][ T4173] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 137.179546][ T4173] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 137.235086][ T6749] loop4: detected capacity change from 0 to 256 [ 137.290354][ T4173] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 137.399969][ T4585] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 137.445263][ T4585] usb 4-1: cp210x converter now attached to ttyUSB0 [ 137.511866][ T6762] loop5: detected capacity change from 0 to 128 [ 137.659577][ T6762] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 137.675051][ T6360] usb 4-1: USB disconnect, device number 7 [ 137.686849][ T6360] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.696042][ T6360] cp210x 4-1:0.0: device disconnected [ 137.720105][ T6762] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.754643][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 137.853558][ T6762] overlayfs: Failed to create volatile/dirty file. [ 137.908098][ T6770] loop2: detected capacity change from 0 to 8192 [ 138.048225][ T6770] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 138.077969][ T6770] REISERFS (device loop2): using ordered data mode [ 138.106432][ T6770] reiserfs: using flush barriers [ 138.137577][ T6770] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.208773][ T6770] REISERFS (device loop2): checking transaction log (loop2) [ 138.239922][ T6360] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 138.250236][ T6770] REISERFS (device loop2): Using r5 hash to sort names [ 138.257467][ T6770] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 138.319946][ T6770] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 138.780038][ T6360] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 138.799463][ T6360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.825966][ T6360] usb 6-1: Product: syz [ 138.840844][ T6360] usb 6-1: Manufacturer: syz [ 138.868575][ T6360] usb 6-1: SerialNumber: syz [ 138.889312][ T6360] usb 6-1: config 0 descriptor?? [ 139.095723][ T6803] device syzkaller1 entered promiscuous mode [ 139.170254][ T6360] hso 6-1:0.0: Can't find BULK IN endpoint [ 139.170375][ T6799] loop0: detected capacity change from 0 to 32768 [ 139.177583][ T6360] usb-storage 6-1:0.0: USB Mass Storage device detected [ 139.194285][ T4229] usb 1-1: USB disconnect, device number 7 [ 139.276813][ T6799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.750 (6799) [ 139.293968][ T6799] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 139.305137][ T6799] BTRFS info (device loop0): max_inline at 0 [ 139.311223][ T6799] BTRFS info (device loop0): setting nodatasum [ 139.317541][ T6799] BTRFS info (device loop0): max_inline at 0 [ 139.324025][ T6799] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 139.343428][ T6799] BTRFS error (device loop0): open_ctree failed: -22 [ 139.439454][ T6360] usb 6-1: USB disconnect, device number 5 [ 139.487855][ T4334] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4334) [ 139.956044][ T6825] netlink: 104 bytes leftover after parsing attributes in process `syz.0.761'. [ 140.100342][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.202528][ T6839] loop0: detected capacity change from 0 to 256 [ 140.235091][ T6840] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 140.253800][ T6840] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 140.379900][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 140.510162][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 140.542428][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 140.618177][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.671941][ T6845] loop4: detected capacity change from 0 to 4096 [ 140.727817][ T6845] /dev/loop4: Can't open blockdev [ 140.860215][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 140.899081][ T7] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 140.924390][ T6851] loop3: detected capacity change from 0 to 2048 [ 140.945229][ T7] usb 3-1: Product: syz [ 140.949451][ T7] usb 3-1: Manufacturer: syz [ 140.968873][ T6853] use of bytesused == 0 is deprecated and will be removed in the future, [ 140.990699][ T6841] loop5: detected capacity change from 0 to 131072 [ 141.005573][ T7] usb 3-1: SerialNumber: syz [ 141.010006][ T6853] use the actual size instead. [ 141.027834][ T6851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.152919][ T7] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11 [ 141.180024][ T4173] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.185852][ T6841] F2FS-fs (loop5): Found nat_bits in checkpoint [ 141.258068][ T6841] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 141.318289][ T26] audit: type=1800 audit(1755849413.709:14): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.767" name="file2" dev="loop5" ino=8 res=0 errno=0 [ 141.339914][ T6851] overlayfs: upper fs needs to support d_type. [ 141.368687][ T4414] usb 3-1: USB disconnect, device number 7 [ 141.381263][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 141.384419][ T6851] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.439301][ T6851] overlayfs: failed to set xattr on upper [ 141.450095][ T4173] usb 1-1: Using ep0 maxpacket: 32 [ 141.468961][ T6851] overlayfs: ...falling back to index=off,metacopy=off. [ 141.482964][ T4414] appletouch 3-1:1.0: input: appletouch disconnected [ 141.510207][ T6851] overlayfs: conflicting lowerdir path [ 141.572172][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.591729][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.619311][ T4173] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.640092][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.694369][ T4173] usb 1-1: config 0 descriptor?? [ 141.721948][ T6855] loop4: detected capacity change from 0 to 32768 [ 141.752500][ T4173] hub 1-1:0.0: USB hub found [ 142.006759][ T6867] loop4: detected capacity change from 0 to 8192 [ 142.055738][ T4173] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 142.140967][ T6867] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 142.360779][ T6874] loop2: detected capacity change from 0 to 512 [ 142.472654][ T4173] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1 [ 142.488430][ T6863] loop3: detected capacity change from 0 to 40427 [ 142.503247][ T4173] hid-generic: probe of 0003:046D:C31C.000A failed with error -22 [ 142.641689][ T6863] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 142.648622][ T6863] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 142.694333][ T6863] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.697650][ T6880] IPv6: Can't replace route, no match found [ 142.806238][ T4173] usb 1-1: USB disconnect, device number 8 [ 142.837612][ T6863] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 142.853860][ T6863] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.975994][ T4186] attempt to access beyond end of device [ 142.975994][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 143.716739][ T6900] loop4: detected capacity change from 0 to 65536 [ 143.809033][ T6909] loop2: detected capacity change from 0 to 128 [ 143.849973][ T6900] /dev/loop4: Can't open blockdev [ 144.051538][ T6909] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.124981][ T6909] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.157598][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.297706][ T6913] loop0: detected capacity change from 0 to 65536 [ 144.378906][ T6922] loop4: detected capacity change from 0 to 512 [ 144.455674][ T6913] XFS (loop0): Mounting V5 Filesystem [ 144.575252][ T6937] loop3: detected capacity change from 0 to 512 [ 144.727553][ T6913] XFS (loop0): Ending clean mount [ 144.879262][ T4183] XFS (loop0): Unmounting Filesystem [ 144.931186][ T6937] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 144.960071][ T6937] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.045082][ T6937] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.801: corrupted inode contents [ 145.075636][ T6937] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #2: comm syz.3.801: mark_inode_dirty error [ 145.093095][ T6937] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #2: comm syz.3.801: corrupted inode contents [ 145.154796][ T6937] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.801: mark_inode_dirty error [ 145.543839][ T6967] loop2: detected capacity change from 0 to 32768 [ 145.698885][ T6967] XFS (loop2): Mounting V5 Filesystem [ 145.884478][ T6967] XFS (loop2): Ending clean mount [ 145.949866][ T4173] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.969132][ T4185] XFS (loop2): Unmounting Filesystem [ 146.117321][ T6993] input: syz1 as /devices/virtual/input/input12 [ 146.276826][ T6990] loop3: detected capacity change from 0 to 32768 [ 146.337001][ T21] kernel read not supported for file /input/event3 (pid: 21 comm: kworker/1:0) [ 146.410109][ T4173] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 146.421949][ T6990] (syz.3.820,6990,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.446823][ T4173] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 146.488865][ T6990] (syz.3.820,6990,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 146.553856][ T6990] (syz.3.820,6990,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 146.640085][ T4173] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 146.649206][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.725841][ T4173] usb 5-1: Product: syz [ 146.750355][ T4173] usb 5-1: Manufacturer: syz [ 146.753085][ T6999] loop0: detected capacity change from 0 to 32768 [ 146.755099][ T4173] usb 5-1: SerialNumber: syz [ 146.776605][ T6990] JBD2: Ignoring recovery information on journal [ 146.780896][ T7004] loop2: detected capacity change from 0 to 1024 [ 146.815776][ T4173] usb 5-1: config 0 descriptor?? [ 146.850297][ T6978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.857464][ T6978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.898221][ T6990] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.926740][ T6999] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 146.977093][ T6999] BTRFS info (device loop0): max_inline at 0 [ 147.007800][ T6999] BTRFS info (device loop0): enabling disk space caching [ 147.066761][ T6999] BTRFS info (device loop0): setting nodatacow, compression disabled [ 147.101829][ T1170] hfsplus: b-tree write err: -5, ino 4 [ 147.127745][ T6999] BTRFS info (device loop0): turning off barriers [ 147.142041][ T6999] BTRFS info (device loop0): turning on flush-on-commit [ 147.149048][ T6999] BTRFS info (device loop0): doing ref verification [ 147.159210][ T6978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.173948][ T6990] (syz.3.820,6990,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 147.194185][ T6978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.238881][ T6990] (syz.3.820,6990,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 147.263882][ T6999] BTRFS info (device loop0): force clearing of disk cache [ 147.281149][ T6990] (syz.3.820,6990,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 147.294809][ T6999] BTRFS info (device loop0): enabling ssd optimizations [ 147.302414][ T6999] BTRFS info (device loop0): max_inline at 4096 [ 147.321014][ T6999] BTRFS info (device loop0): disk space caching is enabled [ 147.339100][ T6990] (syz.3.820,6990,0):ocfs2_quota_read:201 ERROR: status = -5 [ 147.347180][ T6999] BTRFS info (device loop0): has skinny extents [ 147.358874][ T6990] Quota error (device loop3): find_next_id: Can't read quota tree block 5 [ 147.370185][ T6990] (syz.3.820,6990,0):ocfs2_get_next_id:909 ERROR: status = -5 [ 147.467669][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 147.540518][ T4414] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.593174][ T7021] loop5: detected capacity change from 0 to 32768 [ 147.643680][ T7021] XFS: ikeep mount option is deprecated. [ 147.665829][ T6999] BTRFS info (device loop0): clearing free space tree [ 147.679977][ T6999] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.691556][ T6999] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.822149][ T4414] usb 3-1: Using ep0 maxpacket: 32 [ 147.881852][ T7021] XFS (loop5): Mounting V5 Filesystem [ 147.970155][ T4414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.992246][ T4414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59344, setting to 1024 [ 148.006355][ T4414] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.012501][ T7021] XFS (loop5): Ending clean mount [ 148.028141][ T7021] XFS (loop5): Quotacheck needed: Please wait. [ 148.028826][ T4414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.058693][ T4414] usb 3-1: config 0 descriptor?? [ 148.092346][ T7019] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.121347][ T21] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 148.134175][ T7021] XFS (loop5): Quotacheck: Done. [ 148.153713][ T4414] hub 3-1:0.0: USB hub found [ 148.388838][ T4414] hub 3-1:0.0: 1 port detected [ 148.501383][ T4173] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 148.516295][ T5353] XFS (loop5): Unmounting Filesystem [ 148.530414][ T4173] dm9601 5-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 148.556111][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 148.569857][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 148.580896][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.599990][ T4414] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 148.620527][ T4414] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 148.630117][ T4173] usb 5-1: USB disconnect, device number 10 [ 148.639607][ T4173] dm9601 5-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 148.755447][ T21] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 148.788195][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.796214][ T4414] usbhid 3-1:0.0: can't add hid device: -71 [ 148.796316][ T4414] usbhid: probe of 3-1:0.0 failed with error -71 [ 148.820672][ T21] usb 4-1: Product: syz [ 148.825165][ T21] usb 4-1: Manufacturer: syz [ 148.834682][ T4414] usb 3-1: USB disconnect, device number 8 [ 148.839841][ T21] usb 4-1: SerialNumber: syz [ 148.905853][ T21] usb 4-1: config 0 descriptor?? [ 148.997997][ T7047] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 149.435658][ T7070] loop2: detected capacity change from 0 to 512 [ 149.475482][ T7070] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.750736][ T7059] loop0: detected capacity change from 0 to 131072 [ 149.764060][ T21] usb 4-1: USB disconnect, device number 8 [ 149.825181][ T7059] F2FS-fs (loop0): invalid crc value [ 149.903023][ T7059] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.945601][ T7059] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 149.985728][ T7059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 150.765373][ T7070] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 150.874173][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 151.075404][ T7084] loop3: detected capacity change from 0 to 32768 [ 151.084990][ T7112] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 151.130142][ T7084] XFS: ikeep mount option is deprecated. [ 151.237233][ T7084] XFS (loop3): Mounting V5 Filesystem [ 151.414563][ T7084] XFS (loop3): Ending clean mount [ 151.455926][ T7084] XFS (loop3): Quotacheck needed: Please wait. [ 151.480437][ T7111] loop5: detected capacity change from 0 to 32768 [ 151.522626][ T7111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.843 (7111) [ 151.554424][ T7135] loop0: detected capacity change from 0 to 128 [ 151.627070][ T7084] XFS (loop3): Quotacheck: Done. [ 151.677668][ T7135] EXT4-fs (loop0): Ignoring removed nobh option [ 151.705870][ T4186] XFS (loop3): Unmounting Filesystem [ 151.739474][ T7111] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 151.769563][ T7111] BTRFS info (device loop5): setting nodatacow, compression disabled [ 151.779917][ T7111] BTRFS info (device loop5): max_inline at 0 [ 151.785950][ T7111] BTRFS info (device loop5): enabling disk space caching [ 151.794436][ T7111] BTRFS info (device loop5): turning off barriers [ 151.801211][ T7111] BTRFS info (device loop5): turning on flush-on-commit [ 151.808573][ T7111] BTRFS info (device loop5): doing ref verification [ 151.815506][ T7111] BTRFS info (device loop5): force clearing of disk cache [ 151.825415][ T7111] BTRFS info (device loop5): enabling ssd optimizations [ 151.832761][ T7111] BTRFS info (device loop5): max_inline at 4096 [ 151.836382][ T7135] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 151.839262][ T7111] BTRFS info (device loop5): disk space caching is enabled [ 151.858846][ T7111] BTRFS info (device loop5): has skinny extents [ 151.879572][ T7140] loop4: detected capacity change from 0 to 2048 [ 151.887908][ T7135] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.264937][ T7160] loop2: detected capacity change from 0 to 8192 [ 152.283236][ T7111] BTRFS info (device loop5): clearing free space tree [ 152.297063][ T7111] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.320642][ T7160] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.360087][ T7111] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.647555][ T7178] loop0: detected capacity change from 0 to 512 [ 152.705178][ T7181] loop3: detected capacity change from 0 to 256 [ 152.748098][ T7178] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.824059][ T7181] exfat: Deprecated parameter 'namecase' [ 152.845958][ T7181] exfat: Deprecated parameter 'namecase' [ 152.900692][ T7181] exfat: Deprecated parameter 'utf8' [ 152.915438][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 152.979121][ T7181] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 153.000089][ T7160] FAT-fs (loop2): Filesystem has been set read-only [ 153.020986][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 153.098892][ T7160] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 153.536166][ T7190] device syzkaller1 entered promiscuous mode [ 153.575352][ T4185] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 153.752127][ T4404] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 153.796265][ T7196] loop2: detected capacity change from 0 to 512 [ 153.867766][ T7196] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.957274][ T7196] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.862: bg 0: block 248: padding at end of block bitmap is not set [ 153.989114][ T7188] loop5: detected capacity change from 0 to 32768 [ 154.039933][ T4404] usb 5-1: Using ep0 maxpacket: 32 [ 154.047368][ T7196] Quota error (device loop2): write_blk: dquota write failed [ 154.071133][ T7196] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 154.082014][ T7196] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.862: Failed to acquire dquot type 1 [ 154.119460][ T7188] XFS (loop5): Mounting V5 Filesystem [ 154.142805][ T7196] EXT4-fs (loop2): 1 truncate cleaned up [ 154.164328][ T7196] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.205309][ T4404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.247829][ T4404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.267301][ T4404] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 154.278544][ T4404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.287739][ T7196] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 154.302519][ T4404] usb 5-1: config 0 descriptor?? [ 154.310316][ T7196] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 154.325712][ T7188] XFS (loop5): Ending clean mount [ 154.335014][ T7188] XFS (loop5): Quotacheck needed: Please wait. [ 154.415901][ T7199] loop0: detected capacity change from 0 to 40427 [ 154.508215][ T7199] F2FS-fs (loop0): invalid crc value [ 154.524197][ T7188] XFS (loop5): Quotacheck: Done. [ 154.579414][ T7199] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.582693][ T5353] XFS (loop5): Unmounting Filesystem [ 154.692012][ T7199] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 154.725082][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.734093][ T7199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 154.857214][ T7199] attempt to access beyond end of device [ 154.857214][ T7199] loop0: rw=2049, want=45104, limit=40427 [ 154.861637][ T4404] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 155.110186][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.139495][ T7] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.158241][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.191846][ T7] usb 4-1: config 0 descriptor?? [ 155.202477][ T4414] usb 5-1: USB disconnect, device number 11 [ 155.374309][ T7231] loop2: detected capacity change from 0 to 2048 [ 155.457204][ T7226] loop5: detected capacity change from 0 to 32768 [ 155.497837][ T7231] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.509594][ T7226] XFS: ikeep mount option is deprecated. [ 155.514547][ T7231] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.546367][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 155.553545][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 155.563178][ T7] usb 4-1: USB disconnect, device number 9 [ 155.595716][ T7226] XFS (loop5): Mounting V5 Filesystem [ 155.754537][ T7226] XFS (loop5): Ending clean mount [ 155.776668][ T7226] XFS (loop5): Quotacheck needed: Please wait. [ 155.789064][ T7247] loop4: detected capacity change from 0 to 2048 [ 155.842662][ T7226] XFS (loop5): Quotacheck: Done. [ 155.953823][ T5353] XFS (loop5): Unmounting Filesystem [ 156.070203][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.159210][ T7251] loop0: detected capacity change from 0 to 512 [ 156.229379][ T7251] EXT4-fs (loop0): Ignoring removed oldalloc option [ 156.325173][ T7251] EXT4-fs (loop0): 1 truncate cleaned up [ 156.338456][ T7251] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 156.368539][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 156.385320][ T7257] loop2: detected capacity change from 0 to 512 [ 156.420507][ T7255] loop4: detected capacity change from 0 to 1024 [ 156.429300][ T7257] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.538174][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.566078][ T7] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.576421][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.605612][ T7] usb 4-1: config 0 descriptor?? [ 157.033919][ T7279] loop2: detected capacity change from 0 to 1024 [ 157.076909][ T7282] loop4: detected capacity change from 0 to 512 [ 157.078289][ T7277] loop5: detected capacity change from 0 to 4096 [ 157.093255][ T7] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 157.166167][ T7279] EXT4-fs (loop2): inline encryption not supported [ 157.180131][ T7279] EXT4-fs (loop2): Ignoring removed bh option [ 157.197283][ T7279] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.309598][ T7279] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 157.385845][ T5353] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 157.419439][ T5353] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 157.529183][ T21] usb 4-1: USB disconnect, device number 10 [ 157.634278][ T7] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 157.842364][ T7298] loop2: detected capacity change from 0 to 8192 [ 157.872537][ T7298] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 158.062228][ T7] usb 1-1: config 9 interface 0 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 158.094174][ T7] usb 1-1: config 9 interface 0 has no altsetting 0 [ 158.300781][ T7] usb 1-1: New USB device found, idVendor=147a, idProduct=e03e, bcdDevice= 8.f4 [ 158.329876][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.369283][ T7] usb 1-1: Product: syz [ 158.396287][ T7] usb 1-1: Manufacturer: syz [ 158.414345][ T7] usb 1-1: SerialNumber: syz [ 158.470219][ T7270] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 158.770964][ T7] usb 1-1: USB disconnect, device number 9 [ 158.829933][ T4585] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 158.847047][ T7356] loop3: detected capacity change from 0 to 1024 [ 158.909016][ T7356] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 158.917033][ T7356] hfsplus: xattr searching failed [ 158.949175][ T7356] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 158.959048][ T7356] hfsplus: xattr search failed [ 158.991783][ T155] hfsplus: b-tree write err: -5, ino 4 [ 159.079928][ T4585] usb 5-1: Using ep0 maxpacket: 8 [ 159.122382][ T7359] loop2: detected capacity change from 0 to 7 [ 159.136634][ T4289] Dev loop2: unable to read RDB block 7 [ 159.149784][ T4289] loop2: unable to read partition table [ 159.165356][ T4289] loop2: partition table beyond EOD, truncated [ 159.177008][ T7359] Dev loop2: unable to read RDB block 7 [ 159.204578][ T7359] loop2: unable to read partition table [ 159.205064][ T4585] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.210493][ T7359] loop2: partition table beyond EOD, truncated [ 159.219203][ T4585] usb 5-1: config 179 has no interface number 0 [ 159.243319][ T4585] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.267414][ T4585] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.275524][ T7359] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.291477][ T4585] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.315138][ T4585] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 159.351522][ T4585] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.386163][ T4585] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.418223][ T4585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.495361][ T7347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.604434][ T7360] loop3: detected capacity change from 0 to 32768 [ 159.708592][ T7360] [ 159.708592][ T7360] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.708592][ T7360] [ 159.731481][ T4229] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13 [ 159.810913][ T4585] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.829112][ T7360] ERROR: (device loop3): diWrite: ixpxd invalid [ 159.829112][ T7360] [ 159.880872][ T7360] ERROR: (device loop3): txCommit: [ 159.880872][ T7360] [ 159.926738][ T7347] udc-core: couldn't find an available UDC or it's busy [ 159.950395][ T7380] ERROR: (device loop3): dtReadFirst: btstack overrun [ 159.950395][ T7380] [ 159.971730][ T7380] btstack dump: [ 159.975253][ T7380] bn = 0, index = 0 [ 159.975409][ T7347] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.979177][ T7380] bn = 0, index = 0 [ 160.055739][ T4585] usb 6-1: Using ep0 maxpacket: 8 [ 160.060945][ T7380] bn = 0, index = 0 [ 160.078082][ T7380] bn = 0, index = 0 [ 160.098761][ T7380] bn = 0, index = 0 [ 160.119230][ T7380] bn = 0, index = 0 [ 160.123793][ T7380] bn = 0, index = 0 [ 160.133131][ T7380] bn = 0, index = 0 [ 160.190315][ T4585] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 160.198986][ T4585] usb 6-1: config 179 has no interface number 0 [ 160.205820][ T4585] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 160.217556][ T4585] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 160.228951][ T4585] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.241068][ T4585] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 160.254958][ T4585] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 160.268660][ T4585] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 160.281866][ T4585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.293798][ T21] usb 5-1: USB disconnect, device number 12 [ 160.299851][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.308455][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.317330][ T7367] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 160.350787][ T4173] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.555007][ T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input14 [ 160.605640][ T4173] usb 1-1: Using ep0 maxpacket: 32 [ 160.680556][ T144] ERROR: (device loop3): diWrite: ixpxd invalid [ 160.680556][ T144] [ 160.692013][ T144] ERROR: (device loop3): txCommit: [ 160.692013][ T144] [ 160.700571][ T144] jfs_write_inode: jfs_commit_inode failed! [ 160.707568][ T4186] [ 160.707568][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.707568][ T4186] [ 160.725858][ T4186] [ 160.725858][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.725858][ T4186] [ 160.735843][ T7367] udc-core: couldn't find an available UDC or it's busy [ 160.743996][ T4173] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.749900][ T7367] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 160.763532][ T4173] usb 1-1: config 0 has no interface number 0 [ 160.769667][ T4173] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.795302][ T4173] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.807609][ T4173] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 160.817270][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.827914][ T4173] usb 1-1: config 0 descriptor?? [ 160.955057][ T26] audit: type=1326 audit(1755849433.349:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6822fabbe9 code=0x7fc00000 [ 160.995115][ T4414] usb 6-1: USB disconnect, device number 6 [ 161.009822][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 161.018246][ T4414] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 161.287115][ T7409] loop2: detected capacity change from 0 to 2048 [ 161.369098][ T7409] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.390516][ T7409] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.423856][ T7409] fs-verity: sha512 using implementation "sha512-avx2" [ 161.510157][ T4173] uclogic 0003:28BD:0094.000D: pen parameters not found [ 161.517320][ T4173] uclogic 0003:28BD:0094.000D: interface is invalid, ignoring [ 161.529924][ T7] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 161.732797][ T4173] usb 1-1: USB disconnect, device number 10 [ 162.000454][ T7] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 162.016203][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.040567][ T7] usb 4-1: config 0 descriptor?? [ 162.080083][ T21] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 162.439979][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.459795][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.469697][ T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 162.488964][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.498929][ T21] usb 5-1: config 0 descriptor?? [ 162.517871][ T7457] loop0: detected capacity change from 0 to 32768 [ 162.600220][ T7457] XFS (loop0): Mounting V5 Filesystem [ 162.654980][ T7457] XFS (loop0): Ending clean mount [ 162.665533][ T7457] XFS (loop0): Quotacheck needed: Please wait. [ 162.744954][ T7457] XFS (loop0): Quotacheck: Done. [ 162.776927][ T26] audit: type=1800 audit(1755849435.169:16): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.963" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 162.897709][ T4183] XFS (loop0): Unmounting Filesystem [ 163.006024][ T21] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 163.194969][ T7] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 163.215944][ T7] asix: probe of 4-1:0.0 failed with error -71 [ 163.237464][ T7] usb 4-1: USB disconnect, device number 11 [ 163.314587][ T21] usb 5-1: USB disconnect, device number 13 [ 163.779918][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.926782][ T7500] netem: incorrect gi model size [ 163.932909][ T7500] netem: change failed [ 164.035437][ T7486] loop5: detected capacity change from 0 to 32768 [ 164.039864][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 164.110499][ T7486] XFS: noikeep mount option is deprecated. [ 164.130493][ T7508] loop4: detected capacity change from 0 to 1024 [ 164.176742][ T7486] XFS (loop5): Mounting V5 Filesystem [ 164.193717][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.209675][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.223154][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.232510][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.253223][ T7] usb 1-1: config 0 descriptor?? [ 164.304229][ T7486] XFS (loop5): Ending clean mount [ 164.321797][ T7486] XFS (loop5): Quotacheck needed: Please wait. [ 164.511312][ T7486] XFS (loop5): Quotacheck: Done. [ 164.621625][ T7518] loop4: detected capacity change from 0 to 32768 [ 164.714738][ T7521] loop2: detected capacity change from 0 to 128 [ 164.722102][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 164.728119][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 164.789093][ T7] usb 1-1: USB disconnect, device number 11 [ 164.873109][ T5353] XFS (loop5): Unmounting Filesystem [ 164.961608][ T26] audit: type=1800 audit(1755849437.349:17): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.982" name="bus" dev="loop2" ino=1048625 res=0 errno=0 [ 165.044112][ T7521] attempt to access beyond end of device [ 165.044112][ T7521] loop2: rw=2049, want=153, limit=128 [ 165.078815][ T7531] input: syz0 as /devices/virtual/input/input15 [ 165.200830][ T144] attempt to access beyond end of device [ 165.200830][ T144] loop2: rw=1, want=1041, limit=128 [ 165.694466][ T7564] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 165.728514][ T7564] team0: Device dummy0 failed to register rx_handler [ 165.839912][ T4695] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 165.917928][ T7569] loop2: detected capacity change from 0 to 2048 [ 166.031774][ T7569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.165842][ T7571] program syz.0.1004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.209918][ T4695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.225956][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.237736][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.247870][ T4695] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 166.364166][ T4695] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.393527][ T4695] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 166.403568][ T7577] loop2: detected capacity change from 0 to 1024 [ 166.412895][ T4695] usb 5-1: Manufacturer: syz [ 166.425239][ T4695] usb 5-1: config 0 descriptor?? [ 166.450379][ T7581] loop3: detected capacity change from 0 to 512 [ 166.619947][ T7581] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noquota,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 166.712600][ T7591] overlayfs: upper fs does not support file handles, falling back to index=off. [ 166.750394][ T4695] rc_core: IR keymap rc-hauppauge not found [ 166.757567][ T7581] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.757994][ T4695] Registered IR keymap rc-empty [ 166.769488][ T7594] loop0: detected capacity change from 0 to 512 [ 166.781135][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.814013][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 166.826411][ T7581] EXT4-fs (loop3): shut down requested (2) [ 166.872479][ T4695] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 166.899619][ T145] hfsplus: b-tree write err: -5, ino 3 [ 166.935581][ T4695] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 166.936836][ T4185] hfsplus: node 4:3 still has 1 user(s)! [ 166.965916][ T7600] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1013'. [ 166.967778][ T7594] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 166.999391][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.030781][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.038980][ T7594] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.060173][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.110025][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.140063][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.177856][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.231293][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.269952][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.299995][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.329915][ T4695] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.372107][ T4695] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 167.392728][ T4695] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 167.404329][ T7613] loop3: detected capacity change from 0 to 8192 [ 167.455908][ T26] audit: type=1800 audit(1755849439.849:18): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1017" name="file2" dev="loop3" ino=1048626 res=0 errno=0 [ 167.485827][ T7613] attempt to access beyond end of device [ 167.485827][ T7613] loop3: rw=0, want=57848, limit=8192 [ 167.511410][ T7613] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.526055][ T7613] attempt to access beyond end of device [ 167.526055][ T7613] loop3: rw=0, want=57848, limit=8192 [ 167.579338][ T7613] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.606416][ T7613] attempt to access beyond end of device [ 167.606416][ T7613] loop3: rw=0, want=57848, limit=8192 [ 167.624569][ T7613] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.636542][ T7618] attempt to access beyond end of device [ 167.636542][ T7618] loop3: rw=0, want=57848, limit=8192 [ 167.671030][ T7618] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.695849][ T7613] attempt to access beyond end of device [ 167.695849][ T7613] loop3: rw=0, want=57848, limit=8192 [ 167.708535][ T7613] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.718515][ T7618] attempt to access beyond end of device [ 167.718515][ T7618] loop3: rw=0, want=57848, limit=8192 [ 167.731694][ T7618] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.757209][ T7613] attempt to access beyond end of device [ 167.757209][ T7613] loop3: rw=0, want=57848, limit=8192 [ 167.778711][ T7613] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.788445][ T7613] attempt to access beyond end of device [ 167.788445][ T7613] loop3: rw=0, want=57848, limit=8192 [ 167.807046][ T7613] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.815658][ T7613] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.829220][ T7613] Buffer I/O error on dev loop3, logical block 57847, async page read [ 168.173959][ T7623] loop0: detected capacity change from 0 to 32768 [ 168.284869][ T7623] [ 168.284869][ T7623] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 168.284869][ T7623] [ 168.342491][ T7623] ERROR: (device loop0): diWrite: ixpxd invalid [ 168.342491][ T7623] [ 168.455439][ T7634] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.461733][ T7623] ERROR: (device loop0): remounting filesystem as read-only [ 168.464598][ T7634] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.481581][ T7634] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.489920][ T7623] ERROR: (device loop0): txCommit: [ 168.489920][ T7623] [ 168.490639][ T7634] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.520771][ T7634] batman_adv: batadv0: Adding interface: vxlan0 [ 168.527243][ T7634] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.550164][ T7623] non-latin1 character 0x3ff found in JFS file name [ 168.586149][ T7623] mount with iocharset=utf8 to access [ 168.593588][ T4695] usb 5-1: USB disconnect, device number 14 [ 168.679841][ T7634] batman_adv: batadv0: Interface activated: vxlan0 [ 168.972289][ T7653] sctp: [Deprecated]: syz.4.1035 (pid 7653) Use of int in max_burst socket option. [ 168.972289][ T7653] Use struct sctp_assoc_value instead [ 169.120620][ T7659] [ 169.123118][ T7659] ===================================================== [ 169.130429][ T7659] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 169.138071][ T7659] 5.15.189-syzkaller #0 Not tainted [ 169.143273][ T7659] ----------------------------------------------------- [ 169.150217][ T7659] syz.5.1037/7659 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 169.157945][ T7659] ffffffff8be0a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xcb/0x390 [ 169.166611][ T7659] [ 169.166611][ T7659] and this task is already holding: [ 169.173992][ T7659] ffff888077153538 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x25/0x390 [ 169.182991][ T7659] which would create a new lock dependency: [ 169.188982][ T7659] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 169.196899][ T7659] [ 169.196899][ T7659] but this new dependency connects a HARDIRQ-irq-safe lock: [ 169.206370][ T7659] (&dev->event_lock#2){-.-.}-{2:2} [ 169.206415][ T7659] [ 169.206415][ T7659] ... which became HARDIRQ-irq-safe at: [ 169.219585][ T7659] lock_acquire+0x197/0x3f0 [ 169.224208][ T7659] _raw_spin_lock_irqsave+0xa4/0xf0 [ 169.229520][ T7659] input_event+0x76/0xb0 [ 169.233874][ T7659] psmouse_report_standard_packet+0x4f/0x200 [ 169.239975][ T7659] psmouse_process_byte+0x42b/0x620 [ 169.245560][ T7659] psmouse_handle_byte+0x43/0x490 [ 169.250777][ T7659] psmouse_interrupt+0x699/0x1130 [ 169.255928][ T7659] serio_interrupt+0x87/0x130 [ 169.260716][ T7659] i8042_interrupt+0x369/0x710 [ 169.265590][ T7659] __handle_irq_event_percpu+0x291/0x9b0 [ 169.271323][ T7659] handle_irq_event+0xa5/0x220 [ 169.276199][ T7659] handle_edge_irq+0x243/0xb20 [ 169.281064][ T7659] __common_interrupt+0xd7/0x1e0 [ 169.286124][ T7659] common_interrupt+0xb0/0xd0 [ 169.290912][ T7659] asm_common_interrupt+0x22/0x40 [ 169.292522][ T7651] loop2: detected capacity change from 0 to 32768 [ 169.296041][ T7659] unwind_next_frame+0x1e3/0x1d90 [ 169.296070][ T7659] arch_stack_walk+0x10c/0x140 [ 169.312422][ T7659] stack_trace_save+0x98/0xe0 [ 169.314862][ T7651] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1033 (7651) [ 169.317288][ T7659] save_stack+0xf3/0x1e0 [ 169.333959][ T7659] __reset_page_owner+0x51/0x180 [ 169.339002][ T7659] free_unref_page_prepare+0x637/0x6c0 [ 169.344657][ T7659] free_unref_page_list+0x122/0x7e0 [ 169.349998][ T7659] release_pages+0x184b/0x1bb0 [ 169.354871][ T7659] tlb_finish_mmu+0x164/0x2e0 [ 169.359788][ T7659] exit_mmap+0x3a6/0x5f0 [ 169.364134][ T7659] __mmput+0x115/0x3b0 [ 169.368293][ T7659] free_bprm+0x141/0x300 [ 169.372642][ T7659] kernel_execve+0x380/0x900 [ 169.377515][ T7659] call_usermodehelper_exec_async+0x207/0x350 [ 169.383668][ T7659] ret_from_fork+0x1f/0x30 [ 169.388250][ T7659] [ 169.388250][ T7659] to a HARDIRQ-irq-unsafe lock: [ 169.395354][ T7659] (tasklist_lock){.+.+}-{2:2} [ 169.395379][ T7659] [ 169.395379][ T7659] ... which became HARDIRQ-irq-unsafe at: [ 169.408690][ T7659] ... [ 169.408696][ T7659] lock_acquire+0x197/0x3f0 [ 169.415872][ T7659] _raw_read_lock+0x32/0x40 [ 169.420534][ T7659] do_wait+0x293/0xac0 [ 169.424677][ T7659] kernel_wait+0xa8/0x160 [ 169.429084][ T7659] call_usermodehelper_exec_work+0xb5/0x220 [ 169.435049][ T7659] process_one_work+0x863/0x1000 [ 169.440153][ T7659] worker_thread+0xaa8/0x12a0 [ 169.445066][ T7659] kthread+0x436/0x520 [ 169.449221][ T7659] ret_from_fork+0x1f/0x30 [ 169.453810][ T7659] [ 169.453810][ T7659] other info that might help us debug this: [ 169.453810][ T7659] [ 169.464018][ T7659] Chain exists of: [ 169.464018][ T7659] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 169.464018][ T7659] [ 169.477309][ T7659] Possible interrupt unsafe locking scenario: [ 169.477309][ T7659] [ 169.485692][ T7659] CPU0 CPU1 [ 169.491311][ T7659] ---- ---- [ 169.496772][ T7659] lock(tasklist_lock); [ 169.501104][ T7659] local_irq_disable(); [ 169.507834][ T7659] lock(&dev->event_lock#2); [ 169.515285][ T7659] lock(&f->f_owner.lock); [ 169.522302][ T7659] [ 169.525741][ T7659] lock(&dev->event_lock#2); [ 169.530579][ T7659] [ 169.530579][ T7659] *** DEADLOCK *** [ 169.530579][ T7659] [ 169.538888][ T7659] 2 locks held by syz.5.1037/7659: [ 169.544203][ T7659] #0: ffff88807ddb6688 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x34d/0x800 [ 169.552838][ T7659] #1: ffff888077153538 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x25/0x390 [ 169.562169][ T7659] [ 169.562169][ T7659] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 169.572619][ T7659] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 169.578462][ T7659] IN-HARDIRQ-W at: [ 169.582684][ T7659] lock_acquire+0x197/0x3f0 [ 169.589344][ T7659] _raw_spin_lock_irqsave+0xa4/0xf0 [ 169.596693][ T7659] input_event+0x76/0xb0 [ 169.603247][ T7659] psmouse_report_standard_packet+0x4f/0x200 [ 169.611514][ T7659] psmouse_process_byte+0x42b/0x620 [ 169.618878][ T7659] psmouse_handle_byte+0x43/0x490 [ 169.626141][ T7659] psmouse_interrupt+0x699/0x1130 [ 169.633329][ T7659] serio_interrupt+0x87/0x130 [ 169.640255][ T7659] i8042_interrupt+0x369/0x710 [ 169.647175][ T7659] __handle_irq_event_percpu+0x291/0x9b0 [ 169.654985][ T7659] handle_irq_event+0xa5/0x220 [ 169.661969][ T7659] handle_edge_irq+0x243/0xb20 [ 169.668908][ T7659] __common_interrupt+0xd7/0x1e0 [ 169.676017][ T7659] common_interrupt+0xb0/0xd0 [ 169.683059][ T7659] asm_common_interrupt+0x22/0x40 [ 169.690351][ T7659] unwind_next_frame+0x1e3/0x1d90 [ 169.697796][ T7659] arch_stack_walk+0x10c/0x140 [ 169.704748][ T7659] stack_trace_save+0x98/0xe0 [ 169.711961][ T7659] save_stack+0xf3/0x1e0 [ 169.718445][ T7659] __reset_page_owner+0x51/0x180 [ 169.725731][ T7659] free_unref_page_prepare+0x637/0x6c0 [ 169.733463][ T7659] free_unref_page_list+0x122/0x7e0 [ 169.740832][ T7659] release_pages+0x184b/0x1bb0 [ 169.747756][ T7659] tlb_finish_mmu+0x164/0x2e0 [ 169.755042][ T7659] exit_mmap+0x3a6/0x5f0 [ 169.761546][ T7659] __mmput+0x115/0x3b0 [ 169.767804][ T7659] free_bprm+0x141/0x300 [ 169.774201][ T7659] kernel_execve+0x380/0x900 [ 169.780952][ T7659] call_usermodehelper_exec_async+0x207/0x350 [ 169.789182][ T7659] ret_from_fork+0x1f/0x30 [ 169.795773][ T7659] IN-SOFTIRQ-W at: [ 169.799999][ T7659] lock_acquire+0x197/0x3f0 [ 169.806778][ T7659] _raw_spin_lock_irqsave+0xa4/0xf0 [ 169.814249][ T7659] input_event+0x76/0xb0 [ 169.820671][ T7659] xpad360_process_packet+0x235/0x9c0 [ 169.828324][ T7659] xpad_irq_in+0x1170/0x1b30 [ 169.835185][ T7659] __usb_hcd_giveback_urb+0x35f/0x520 [ 169.842889][ T7659] dummy_timer+0x827/0x2e10 [ 169.849546][ T7659] call_timer_fn+0x16c/0x530 [ 169.856295][ T7659] __run_timers+0x525/0x7c0 [ 169.863121][ T7659] run_timer_softirq+0x63/0xf0 [ 169.870122][ T7659] handle_softirqs+0x328/0x820 [ 169.877040][ T7659] __irq_exit_rcu+0x12f/0x220 [ 169.884041][ T7659] irq_exit_rcu+0x5/0x20 [ 169.890438][ T7659] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 169.898310][ T7659] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 169.906439][ T7659] __sanitizer_cov_trace_pc+0x32/0x60 [ 169.913977][ T7659] free_swap_cache+0xa2/0x2e0 [ 169.920909][ T7659] free_pages_and_swap_cache+0x5c/0x90 [ 169.928523][ T7659] tlb_finish_mmu+0x164/0x2e0 [ 169.935353][ T7659] exit_mmap+0x3a6/0x5f0 [ 169.941745][ T7659] __mmput+0x115/0x3b0 [ 169.947972][ T7659] exit_mm+0x567/0x6c0 [ 169.954211][ T7659] do_exit+0x5a1/0x20a0 [ 169.960529][ T7659] do_group_exit+0x12e/0x300 [ 169.967371][ T7659] get_signal+0x6ca/0x12c0 [ 169.973937][ T7659] arch_do_signal_or_restart+0xc1/0x1300 [ 169.981733][ T7659] exit_to_user_mode_loop+0x9e/0x130 [ 169.989176][ T7659] exit_to_user_mode_prepare+0xb1/0x140 [ 169.997060][ T7659] syscall_exit_to_user_mode+0x16/0x40 [ 170.004814][ T7659] do_syscall_64+0x58/0xa0 [ 170.011398][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.019450][ T7659] INITIAL USE at: [ 170.023590][ T7659] lock_acquire+0x197/0x3f0 [ 170.030251][ T7659] _raw_spin_lock_irqsave+0xa4/0xf0 [ 170.037615][ T7659] input_inject_event+0x9e/0x2c0 [ 170.044721][ T7659] led_trigger_event+0x10a/0x1e0 [ 170.051932][ T7659] kbd_led_trigger_activate+0xb9/0x100 [ 170.059457][ T7659] led_trigger_set+0x504/0x900 [ 170.066293][ T7659] led_trigger_set_default+0x19c/0x1e0 [ 170.073935][ T7659] led_classdev_register_ext+0x68f/0x870 [ 170.081655][ T7659] input_leds_connect+0x51d/0x750 [ 170.088777][ T7659] input_register_device+0xda7/0x1140 [ 170.096410][ T7659] atkbd_connect+0x759/0xa10 [ 170.103152][ T7659] serio_driver_probe+0x76/0x90 [ 170.110080][ T7659] really_probe+0x284/0xc80 [ 170.116746][ T7659] __driver_probe_device+0x18c/0x330 [ 170.124097][ T7659] driver_probe_device+0x4f/0x420 [ 170.131186][ T7659] __driver_attach+0x46b/0x670 [ 170.138029][ T7659] bus_for_each_dev+0x175/0x1e0 [ 170.145074][ T7659] serio_handle_event+0x29c/0x840 [ 170.152192][ T7659] process_one_work+0x863/0x1000 [ 170.159391][ T7659] worker_thread+0xaa8/0x12a0 [ 170.166238][ T7659] kthread+0x436/0x520 [ 170.172378][ T7659] ret_from_fork+0x1f/0x30 [ 170.179217][ T7659] } [ 170.182070][ T7659] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 170.191560][ T7659] -> (&client->buffer_lock){....}-{2:2} { [ 170.197453][ T7659] INITIAL USE at: [ 170.201589][ T7659] lock_acquire+0x197/0x3f0 [ 170.208427][ T7659] _raw_spin_lock_irq+0x9f/0xe0 [ 170.215182][ T7659] evdev_read+0x369/0xb50 [ 170.221435][ T7659] do_iter_read+0x53e/0x7c0 [ 170.228023][ T7659] do_readv+0x237/0x3e0 [ 170.234254][ T7659] do_syscall_64+0x4c/0xa0 [ 170.240576][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.248393][ T7659] } [ 170.251053][ T7659] ... key at: [] evdev_open.__key.22+0x0/0x20 [ 170.259475][ T7659] ... acquired at: [ 170.263456][ T7659] _raw_spin_lock+0x2a/0x40 [ 170.268145][ T7659] evdev_pass_values+0xcb/0xab0 [ 170.273283][ T7659] evdev_events+0x1c0/0x2f0 [ 170.278036][ T7659] input_pass_values+0x880/0x1220 [ 170.283221][ T7659] input_handle_event+0xb3f/0x1490 [ 170.288593][ T7659] input_inject_event+0x1b9/0x2c0 [ 170.293882][ T7659] evdev_write+0x326/0x470 [ 170.298490][ T7659] vfs_write+0x300/0xd00 [ 170.302907][ T7659] ksys_write+0x14d/0x250 [ 170.307498][ T7659] do_syscall_64+0x4c/0xa0 [ 170.312174][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.318357][ T7659] [ 170.320681][ T7659] -> (&new->fa_lock){....}-{2:2} { [ 170.325915][ T7659] INITIAL USE at: [ 170.330004][ T7659] lock_acquire+0x197/0x3f0 [ 170.336235][ T7659] _raw_write_lock_irq+0x9f/0xe0 [ 170.342908][ T7659] fasync_remove_entry+0xf0/0x1c0 [ 170.349663][ T7659] lease_modify+0x1a2/0x390 [ 170.355915][ T7659] locks_remove_file+0x492/0xdf0 [ 170.362687][ T7659] __fput+0x18d/0x930 [ 170.368403][ T7659] task_work_run+0x125/0x1a0 [ 170.374827][ T7659] exit_to_user_mode_loop+0x10f/0x130 [ 170.381930][ T7659] exit_to_user_mode_prepare+0xb1/0x140 [ 170.389375][ T7659] syscall_exit_to_user_mode+0x16/0x40 [ 170.396651][ T7659] do_syscall_64+0x58/0xa0 [ 170.402826][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.410529][ T7659] INITIAL READ USE at: [ 170.415013][ T7659] lock_acquire+0x197/0x3f0 [ 170.421675][ T7659] _raw_read_lock_irqsave+0xac/0xf0 [ 170.429148][ T7659] kill_fasync+0x16d/0x490 [ 170.435916][ T7659] lease_break_callback+0x22/0x30 [ 170.443668][ T7659] __break_lease+0x4a3/0x12b0 [ 170.450584][ T7659] do_dentry_open+0x771/0xf80 [ 170.457453][ T7659] path_openat+0x2682/0x2f30 [ 170.464397][ T7659] do_filp_open+0x1b3/0x3e0 [ 170.471148][ T7659] do_sys_openat2+0x142/0x4a0 [ 170.478070][ T7659] __x64_sys_openat+0x135/0x160 [ 170.485075][ T7659] do_syscall_64+0x4c/0xa0 [ 170.491648][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.499719][ T7659] } [ 170.502287][ T7659] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 170.511175][ T7659] ... acquired at: [ 170.515160][ T7659] _raw_read_lock_irqsave+0xac/0xf0 [ 170.520526][ T7659] kill_fasync+0x16d/0x490 [ 170.525190][ T7659] evdev_pass_values+0x54b/0xab0 [ 170.530312][ T7659] evdev_events+0x1c0/0x2f0 [ 170.535108][ T7659] input_pass_values+0x880/0x1220 [ 170.540495][ T7659] input_handle_event+0xb3f/0x1490 [ 170.545760][ T7659] input_inject_event+0x1b9/0x2c0 [ 170.550942][ T7659] evdev_write+0x326/0x470 [ 170.555511][ T7659] vfs_write+0x300/0xd00 [ 170.560429][ T7659] ksys_write+0x14d/0x250 [ 170.564928][ T7659] do_syscall_64+0x4c/0xa0 [ 170.569512][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.575592][ T7659] [ 170.577902][ T7659] -> (&f->f_owner.lock){...-}-{2:2} { [ 170.583278][ T7659] IN-SOFTIRQ-R at: [ 170.587243][ T7659] lock_acquire+0x197/0x3f0 [ 170.593503][ T7659] _raw_read_lock_irqsave+0xac/0xf0 [ 170.600333][ T7659] send_sigurg+0x25/0x390 [ 170.606296][ T7659] sk_send_sigurg+0x6b/0xc0 [ 170.612427][ T7659] tcp_urg+0x2bc/0xb10 [ 170.618124][ T7659] tcp_rcv_established+0xac5/0x1cb0 [ 170.625221][ T7659] tcp_v4_do_rcv+0x44b/0x9b0 [ 170.631444][ T7659] tcp_v4_rcv+0x268f/0x2cb0 [ 170.638102][ T7659] ip_protocol_deliver_rcu+0x3ad/0x770 [ 170.645289][ T7659] ip_local_deliver_finish+0x1d5/0x320 [ 170.652561][ T7659] NF_HOOK+0x2d6/0x360 [ 170.658366][ T7659] NF_HOOK+0x2d6/0x360 [ 170.664070][ T7659] __netif_receive_skb+0xcc/0x290 [ 170.670860][ T7659] process_backlog+0x364/0x780 [ 170.677345][ T7659] __napi_poll+0xc0/0x430 [ 170.683319][ T7659] net_rx_action+0x4a8/0x9c0 [ 170.689541][ T7659] handle_softirqs+0x328/0x820 [ 170.696077][ T7659] __irq_exit_rcu+0x12f/0x220 [ 170.702389][ T7659] irq_exit_rcu+0x5/0x20 [ 170.708291][ T7659] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 170.715556][ T7659] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 170.723342][ T7659] preempt_count_sub+0x58/0x160 [ 170.729921][ T7659] unwind_next_frame+0x1296/0x1d90 [ 170.736666][ T7659] arch_stack_walk+0x10c/0x140 [ 170.743325][ T7659] stack_trace_save+0x98/0xe0 [ 170.749733][ T7659] kasan_set_track+0x4b/0x70 [ 170.755982][ T7659] kasan_set_free_info+0x1f/0x40 [ 170.762559][ T7659] ____kasan_slab_free+0xd5/0x110 [ 170.769215][ T7659] slab_free_freelist_hook+0xea/0x170 [ 170.776308][ T7659] kmem_cache_free+0x8f/0x210 [ 170.782639][ T7659] kernfs_put+0x319/0x490 [ 170.788600][ T7659] evict+0x485/0x870 [ 170.794165][ T7659] __dentry_kill+0x431/0x650 [ 170.800414][ T7659] shrink_dentry_list+0x388/0x680 [ 170.807103][ T7659] shrink_dcache_parent+0xa8/0x3a0 [ 170.813867][ T7659] d_invalidate+0x118/0x260 [ 170.820003][ T7659] lookup_fast+0x5cc/0x710 [ 170.826203][ T7659] walk_component+0x81/0x460 [ 170.832592][ T7659] link_path_walk+0x662/0xd40 [ 170.838986][ T7659] path_openat+0x27d/0x2f30 [ 170.845854][ T7659] do_filp_open+0x1b3/0x3e0 [ 170.852116][ T7659] do_sys_openat2+0x142/0x4a0 [ 170.858451][ T7659] __x64_sys_openat+0x135/0x160 [ 170.864934][ T7659] do_syscall_64+0x4c/0xa0 [ 170.870991][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.878526][ T7659] INITIAL USE at: [ 170.882413][ T7659] lock_acquire+0x197/0x3f0 [ 170.888751][ T7659] _raw_write_lock_irq+0x9f/0xe0 [ 170.895335][ T7659] __f_setown+0x37/0x330 [ 170.901137][ T7659] generic_setlease+0xe9b/0x12c0 [ 170.907622][ T7659] fcntl_setlease+0x25e/0x330 [ 170.913850][ T7659] do_fcntl+0x10c/0x12d0 [ 170.919748][ T7659] __se_sys_fcntl+0xcc/0x190 [ 170.925987][ T7659] do_syscall_64+0x4c/0xa0 [ 170.931949][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.939394][ T7659] INITIAL READ USE at: [ 170.943723][ T7659] lock_acquire+0x197/0x3f0 [ 170.950211][ T7659] _raw_read_lock_irqsave+0xac/0xf0 [ 170.957388][ T7659] send_sigio+0x2f/0x330 [ 170.963656][ T7659] kill_fasync+0x20a/0x490 [ 170.970152][ T7659] lease_break_callback+0x22/0x30 [ 170.977168][ T7659] __break_lease+0x4a3/0x12b0 [ 170.983828][ T7659] do_dentry_open+0x771/0xf80 [ 170.990489][ T7659] path_openat+0x2682/0x2f30 [ 170.997059][ T7659] do_filp_open+0x1b3/0x3e0 [ 171.003554][ T7659] do_sys_openat2+0x142/0x4a0 [ 171.010423][ T7659] __x64_sys_openat+0x135/0x160 [ 171.017267][ T7659] do_syscall_64+0x4c/0xa0 [ 171.023694][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.032033][ T7659] } [ 171.034568][ T7659] ... key at: [] __alloc_file.__key+0x0/0x10 [ 171.042715][ T7659] ... acquired at: [ 171.046513][ T7659] _raw_read_lock_irqsave+0xac/0xf0 [ 171.051979][ T7659] send_sigio+0x2f/0x330 [ 171.056397][ T7659] kill_fasync+0x20a/0x490 [ 171.060966][ T7659] lease_break_callback+0x22/0x30 [ 171.066147][ T7659] __break_lease+0x4a3/0x12b0 [ 171.070975][ T7659] do_dentry_open+0x771/0xf80 [ 171.075810][ T7659] path_openat+0x2682/0x2f30 [ 171.080566][ T7659] do_filp_open+0x1b3/0x3e0 [ 171.085325][ T7659] do_sys_openat2+0x142/0x4a0 [ 171.090159][ T7659] __x64_sys_openat+0x135/0x160 [ 171.095162][ T7659] do_syscall_64+0x4c/0xa0 [ 171.099835][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.106063][ T7659] [ 171.108391][ T7659] [ 171.108391][ T7659] the dependencies between the lock to be acquired [ 171.108398][ T7659] and HARDIRQ-irq-unsafe lock: [ 171.121893][ T7659] -> (tasklist_lock){.+.+}-{2:2} { [ 171.127088][ T7659] HARDIRQ-ON-R at: [ 171.131045][ T7659] lock_acquire+0x197/0x3f0 [ 171.137207][ T7659] _raw_read_lock+0x32/0x40 [ 171.143361][ T7659] do_wait+0x293/0xac0 [ 171.149493][ T7659] kernel_wait+0xa8/0x160 [ 171.155500][ T7659] call_usermodehelper_exec_work+0xb5/0x220 [ 171.163084][ T7659] process_one_work+0x863/0x1000 [ 171.169839][ T7659] worker_thread+0xaa8/0x12a0 [ 171.176358][ T7659] kthread+0x436/0x520 [ 171.182090][ T7659] ret_from_fork+0x1f/0x30 [ 171.188150][ T7659] SOFTIRQ-ON-R at: [ 171.192202][ T7659] lock_acquire+0x197/0x3f0 [ 171.198340][ T7659] _raw_read_lock+0x32/0x40 [ 171.204472][ T7659] do_wait+0x293/0xac0 [ 171.210269][ T7659] kernel_wait+0xa8/0x160 [ 171.216517][ T7659] call_usermodehelper_exec_work+0xb5/0x220 [ 171.224068][ T7659] process_one_work+0x863/0x1000 [ 171.230657][ T7659] worker_thread+0xaa8/0x12a0 [ 171.236970][ T7659] kthread+0x436/0x520 [ 171.242757][ T7659] ret_from_fork+0x1f/0x30 [ 171.248813][ T7659] INITIAL USE at: [ 171.252701][ T7659] lock_acquire+0x197/0x3f0 [ 171.258748][ T7659] _raw_write_lock_irq+0x9f/0xe0 [ 171.265232][ T7659] copy_process+0x234a/0x3e00 [ 171.271667][ T7659] kernel_clone+0x219/0x930 [ 171.277745][ T7659] kernel_thread+0xc8/0x120 [ 171.283900][ T7659] rest_init+0x21/0x330 [ 171.289612][ T7659] start_kernel+0x486/0x530 [ 171.295663][ T7659] secondary_startup_64_no_verify+0xb1/0xbb [ 171.303151][ T7659] INITIAL READ USE at: [ 171.307552][ T7659] lock_acquire+0x197/0x3f0 [ 171.314071][ T7659] _raw_read_lock+0x32/0x40 [ 171.320554][ T7659] do_wait+0x293/0xac0 [ 171.326620][ T7659] kernel_wait+0xa8/0x160 [ 171.333028][ T7659] call_usermodehelper_exec_work+0xb5/0x220 [ 171.340910][ T7659] process_one_work+0x863/0x1000 [ 171.347828][ T7659] worker_thread+0xaa8/0x12a0 [ 171.354485][ T7659] kthread+0x436/0x520 [ 171.360536][ T7659] ret_from_fork+0x1f/0x30 [ 171.366943][ T7659] } [ 171.369418][ T7659] ... key at: [] tasklist_lock+0x18/0x40 [ 171.377116][ T7659] ... acquired at: [ 171.380920][ T7659] _raw_read_lock+0x32/0x40 [ 171.385585][ T7659] send_sigurg+0xcb/0x390 [ 171.390084][ T7659] sk_send_sigurg+0x6b/0xc0 [ 171.394747][ T7659] queue_oob+0x620/0x800 [ 171.399158][ T7659] unix_stream_sendmsg+0xb5d/0xc80 [ 171.404438][ T7659] ____sys_sendmsg+0x5a2/0x8c0 [ 171.409357][ T7659] ___sys_sendmsg+0x1f0/0x260 [ 171.414188][ T7659] __sys_sendmmsg+0x27c/0x4a0 [ 171.419029][ T7659] __x64_sys_sendmmsg+0x9c/0xb0 [ 171.424035][ T7659] do_syscall_64+0x4c/0xa0 [ 171.428612][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.434986][ T7659] [ 171.437292][ T7659] [ 171.437292][ T7659] stack backtrace: [ 171.443252][ T7659] CPU: 1 PID: 7659 Comm: syz.5.1037 Not tainted 5.15.189-syzkaller #0 [ 171.451485][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.461721][ T7659] Call Trace: [ 171.465092][ T7659] [ 171.468029][ T7659] dump_stack_lvl+0x168/0x230 [ 171.472714][ T7659] ? load_image+0x3b0/0x3b0 [ 171.477226][ T7659] ? show_regs_print_info+0x20/0x20 [ 171.482502][ T7659] ? load_image+0x3b0/0x3b0 [ 171.486993][ T7659] ? print_shortest_lock_dependencies+0xf0/0x160 [ 171.493410][ T7659] __lock_acquire+0x65dd/0x7c60 [ 171.498252][ T7659] ? verify_lock_unused+0x140/0x140 [ 171.503532][ T7659] ? verify_lock_unused+0x140/0x140 [ 171.508728][ T7659] ? __alloc_skb+0x473/0x750 [ 171.513305][ T7659] lock_acquire+0x197/0x3f0 [ 171.517794][ T7659] ? send_sigurg+0xcb/0x390 [ 171.522287][ T7659] ? _raw_read_lock_irqsave+0x7f/0xf0 [ 171.527758][ T7659] ? lockdep_hardirqs_off+0x70/0x100 [ 171.533116][ T7659] ? read_lock_is_recursive+0x10/0x10 [ 171.538504][ T7659] ? do_raw_read_lock+0x39/0x80 [ 171.543627][ T7659] ? _raw_read_lock_irqsave+0xb8/0xf0 [ 171.549045][ T7659] ? _raw_read_lock+0x40/0x40 [ 171.553723][ T7659] ? __lock_acquire+0x7c60/0x7c60 [ 171.558733][ T7659] ? do_raw_spin_lock+0x11d/0x280 [ 171.563770][ T7659] _raw_read_lock+0x32/0x40 [ 171.568436][ T7659] ? send_sigurg+0xcb/0x390 [ 171.572984][ T7659] send_sigurg+0xcb/0x390 [ 171.577394][ T7659] sk_send_sigurg+0x6b/0xc0 [ 171.581887][ T7659] queue_oob+0x620/0x800 [ 171.586116][ T7659] ? scm_stat_add+0xb0/0xb0 [ 171.590609][ T7659] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 171.596749][ T7659] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 171.602971][ T7659] unix_stream_sendmsg+0xb5d/0xc80 [ 171.608070][ T7659] ? aa_sk_perm+0x7b4/0x8f0 [ 171.612620][ T7659] ? unix_show_fdinfo+0xa0/0xa0 [ 171.617464][ T7659] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 171.623978][ T7659] ? aa_sock_msg_perm+0x94/0x150 [ 171.628989][ T7659] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.634264][ T7659] ? security_socket_sendmsg+0x7c/0xa0 [ 171.639705][ T7659] ? unix_show_fdinfo+0xa0/0xa0 [ 171.644651][ T7659] ____sys_sendmsg+0x5a2/0x8c0 [ 171.649402][ T7659] ? memset+0x1e/0x40 [ 171.653385][ T7659] ? __sys_sendmsg_sock+0x30/0x30 [ 171.658483][ T7659] ? import_iovec+0x6f/0xa0 [ 171.662978][ T7659] ___sys_sendmsg+0x1f0/0x260 [ 171.667754][ T7659] ? __sys_sendmsg+0x250/0x250 [ 171.672663][ T7659] ? futex_wake+0x49f/0x530 [ 171.677178][ T7659] ? __fdget+0x18b/0x210 [ 171.681508][ T7659] __sys_sendmmsg+0x27c/0x4a0 [ 171.686189][ T7659] ? __ia32_sys_sendmsg+0x80/0x80 [ 171.691292][ T7659] ? __context_tracking_exit+0x4c/0x80 [ 171.696741][ T7659] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 171.702733][ T7659] ? lock_chain_count+0x20/0x20 [ 171.707769][ T7659] ? vtime_user_exit+0x2dc/0x400 [ 171.712693][ T7659] __x64_sys_sendmmsg+0x9c/0xb0 [ 171.717548][ T7659] do_syscall_64+0x4c/0xa0 [ 171.721968][ T7659] ? clear_bhb_loop+0x30/0x80 [ 171.726645][ T7659] ? clear_bhb_loop+0x30/0x80 [ 171.731311][ T7659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.737296][ T7659] RIP: 0033:0x7fc5f2431be9 [ 171.741712][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.761667][ T7659] RSP: 002b:00007fc5f0699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.770071][ T7659] RAX: ffffffffffffffda RBX: 00007fc5f2658fa0 RCX: 00007fc5f2431be9 [ 171.778048][ T7659] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 171.786024][ T7659] RBP: 00007fc5f24b4e19 R08: 0000000000000000 R09: 0000000000000000 [ 171.794063][ T7659] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 171.802015][ T7659] R13: 00007fc5f2659038 R14: 00007fc5f2658fa0 R15: 00007ffca5f4bfe8 [ 171.809977][ T7659] [ 171.813066][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.842169][ T7651] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 171.855936][ T7651] BTRFS info (device loop2): metadata ratio 2 [ 171.886675][ T7651] BTRFS info (device loop2): allowing degraded mounts [ 171.907239][ T7651] BTRFS info (device loop2): force zlib compression, level 3 [ 171.923907][ T7651] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 171.950673][ T7651] BTRFS info (device loop2): use zstd compression, level 3 [ 171.958834][ T7651] BTRFS info (device loop2): force clearing of disk cache [ 171.966526][ T7651] BTRFS info (device loop2): allowing degraded mounts [ 171.973887][ T7651] BTRFS info (device loop2): max_inline at 0 [ 171.980359][ T7651] BTRFS info (device loop2): using free space tree [ 171.986971][ T7651] BTRFS info (device loop2): has skinny extents [ 172.042654][ T7651] BTRFS error (device loop2): open_ctree failed: -12 [ 175.860110][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 175.866318][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 175.872560][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 175.878606][ T7] Bluetooth: hci4: command 0x0406 tx timeout