last executing test programs: 1m24.15140929s ago: executing program 4 (id=341): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "ddbd7b17"}, @local=@item_4={0x3, 0x2, 0x0, "3a2146a0"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 1m20.777115465s ago: executing program 4 (id=366): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x303001, 0x0) sendmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x20004084}}], 0x1, 0x24040890) 1m20.349458495s ago: executing program 4 (id=372): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfe, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x8, 0xfffffff7, 0x238d117e700efb5b, 0x401, 0x206, 0xe12, 0x2c0, 0x0, 0x0, 0x4, 0x27}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4d0881, 0x0) 1m19.241755186s ago: executing program 4 (id=380): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x7, 0xf11, &(0x7f0000002040)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 1m17.946562587s ago: executing program 4 (id=388): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'wrr\x00', 0x30, 0x3, 0x4e}, 0x2c) 1m6.970495059s ago: executing program 4 (id=449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x3, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x8, 0x0, 0x0, 0x0, {[@generic={0xfe, 0xe, "8e68e153aabc9af56ebfedc7"}, @generic={0x4, 0x5, "1ae191"}, @md5sig={0x13, 0x12, "8a2bc8c7537de6477af7ce2b4fe52ccc"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x9}, @md5sig={0x13, 0x12, "ed94ac3d259940102b10c29500edf44f"}]}}}}}}}, 0x0) 1m6.475369868s ago: executing program 32 (id=449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x3, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x8, 0x0, 0x0, 0x0, {[@generic={0xfe, 0xe, "8e68e153aabc9af56ebfedc7"}, @generic={0x4, 0x5, "1ae191"}, @md5sig={0x13, 0x12, "8a2bc8c7537de6477af7ce2b4fe52ccc"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x9}, @md5sig={0x13, 0x12, "ed94ac3d259940102b10c29500edf44f"}]}}}}}}}, 0x0) 1m5.545556711s ago: executing program 3 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x5) 1m5.004827938s ago: executing program 3 (id=461): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) write$eventfd(r1, &(0x7f0000000080)=0x3d891500, 0x8) 1m4.391766485s ago: executing program 3 (id=464): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none}) 1m3.690775247s ago: executing program 3 (id=468): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x7, 0xf11, &(0x7f0000002040)="$eJzs3U1sHNUdAPA368/EJl7zaaCEFFoRKNghidT0FgTqEXHpHRQSGmEoauiBiI/QA6ISokiIU8WBigulUorUSqBKFeqp7alVbz2hXqhUpVKiXhopcWXnvfX62ZNdT9az3t3fT/r77Zs3O///eCNnZnb2bQBGVmPt59GjC0UIH3zx/hOvPVv8bnXZva01Dqz9LGKvGUKYaOsX2fa+iguuXHz1xFZtEQ6v/Uz98OSF1nNnQgjnwoHwZWiGT5eWL33y4eMHP3tr+vZ3zz7/+g7tfku+HwAAMIzO/2X5Hw/+688Pz18+v/94mGotT8fnzdificf9h+KBcjpeboSN/aIt2k1m643FaGTrjWXrjWd5xkvyTWTbmShZb7JDvrG2ZVvtJwAAAAyidF7bDEVjcUO/0VhcvHbev+qrucli8cXTy6fO9KlQAAAAoLL/vrF2060QQgghhBBCiB5G6x7lXVCLEKuxMtff6w8AAADA6MnnC9vkXG9n6mptrdld/guPNbZ+PvRA3f/+5R+s/B+/6S8OAADVDevRZNqvdByd5jHI5xEcy5633eP/Rrad8W3WWTav4KDMN1hWZ/573a3K6t/u69gvZfXn82HuVmX15/N07lZl9U/VXEdVZfVP11xHVWX176m5jqrK6t9bcx1VldU/U3MdVZXVP1tzHVWV1X9TzXVUVVb/vprrqKqs/kG5rbas/mbNdVRVVv98zXVUVVb/zTXXUVVZ/bfUXEdVZfXfWnMd/XJPbNPvYX823n7+nJ/TDco5HgAAAIy6/5n/TwghhBBiCOK2XVCDEEKI3Rxv9PsCBAAAANB36XMB6VPvK1EaH+swPt5hfKLD+GSH8akO4wAAAEAIv3/71J3vFeuf87/R+fDSvFFp/qXtzmOUz0e43fw3Ou9Z2tq1+i9tO/+gzFsGAADAaCm+/+XVh5746OX5y+f3H287+74az3fTPKDj8drA57Gf7guYzfpFOoc+vjFPo2S9/PrATWXbe+oGdxQAAABGWDp/b4Zi7ZS70eo3GouL6+fjC2GiOHV6+eSh2E/fz/KnuYmp1eWP1ls2AAAAsA3r5/tFY3GL8//0Pb4LYbJYfPH08qkz1/qzreUTjfbrAnPry4v26wLNbPnhkuVHYj99f+cP5/asLV888aPlZ3u98wAAADAizrxy9vlnlpdP/njLB+nT7NdbZzsP0ucLtvOsEIrQm+weeOBBtw/6+EcJAADYEV9//f7ET47M/uHa5//X579Ln/8/EPvNOLffX+MK6T6B9DmATZ/Xf3pjnrmy9V7auF4zW28sxlRW93TbdkLbfIPpefNl+ZobtzNZkm8myzeb5cvnKRjP1k/59mXL8/kJ03pz2fJ8HsbxLEeR5b8vAAAAQLmll194aenMK2cfOf3CM8+dfO7ki0cOH/vesWOHHv3uo0tr9/Uvtd/dDwAAAAyi9Zt++10JAAAAAAAAAAAAAAAAAAAAjK46vk6s3/sIAAAAo+4/b4QQzgkhSuLaV2D2frvr30TZ/30Uwxt7dkENQggheh2XrzM2tgvqE0Ls2lhZyb9pHgAAAGBnXbn46on2dpNzRU/ztbYW3429GvOmdvaRv8+vRlrtwmMbr5fs7Wk1jLq6//3LP1j5P36zt/mn04Ou//41Nm7geLW8Dyz9aqE9/13jXebP9/+pavkPZvkfCN3lX/koy/90tfwPZvn3dpl/0/6/VC3/QzH/QuwfvL/b/Btf/6nYpv3Y02X+72T7/2zoNn+2/80uE2YejvkBYBQ1+l3ADklHCek4eib20/7Gw82Q3/2w3eP/Rrad8RuufON203HQHbGfjpdms7zJduufybZ3U8U6c4NyV0lZ/b16HXdaWf0TNddRVVn9kzXXUVVZ/VM111FVWf3TNddRVVn93Z6H9ltZ/YNyXbms/pma66iqrP7Zmuuoqqz+7f4/3i9l9e+ruY6qyuqfq7mOqsrqr3hZrXZl9c/XXEdVZfXfXHMdVZXVf0vNdVRVVv+tNdfRL3fHtux8OJ1/zsWx1G9m/aktfpfDem0BAAAABs2/zf8nBiWOzva/BiGE6Fns2QU1iNGO+O5P3+sQYjhiZeXqyqp+1yHE9WJlpd9XIOinnf00MwC7lb//o83rP9q8/qPN68/1pHv4i6yfjHUYH+8wPtFhfDIbz/+9TnUYvyXb7kqUxm/tMH5bh/F9Hcbv6DC+0GH8zg7jd3UYv7vDOAAAAKPh9tg6PwQAAIDh9dqvP3/ntw88fXH+8vn9x8PkpnnnD8X+VHxv/e3Yz+e9Tybie/4/jf1fxvaPsf1ntr77TwAAAGDnpe+J8f4/AAAADK/0PaXO/wEAAGB4zcfW+T8AAAAMr5tj6/wfAAAAhlgxvfXi2KbrAvfFttt5/QCA3e8bsb0ntvtje29svxnbdBxwf2y/VVN9AEDv/OIHPzv2XrE+3/+RbPxKXJ7aTc5du1JQNDbO5L8ntntj++0u68m/D6Db/Mm+LvPsVP65G8wPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyPxtrPo0cXihA++OL9J34++c7fVpfd21rjwNrPIvaaIYSJ1vPS6Hr/N3HFKxdfPdHeXo1tEQ6HIhSt5eHJC61MMyGEc+FA+DI0w6dLy5c++fDxg5+9NX37u2eff30HfwUb9g8AAACG0f8DAAD//+bVG3I=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 1m2.663981743s ago: executing program 3 (id=477): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x1ff}], 0x1, 0x40002000, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 54.932033983s ago: executing program 3 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 54.329638182s ago: executing program 33 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 22.438944216s ago: executing program 6 (id=702): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) close(r1) 21.977832321s ago: executing program 6 (id=706): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, 0x0) 21.461911477s ago: executing program 6 (id=711): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 20.822325274s ago: executing program 6 (id=715): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) 20.491300449s ago: executing program 6 (id=718): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x33, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f4e230000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 19.806861879s ago: executing program 6 (id=725): r0 = userfaultfd(0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) dup3(r1, r0, 0x0) 18.862277938s ago: executing program 34 (id=725): r0 = userfaultfd(0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) dup3(r1, r0, 0x0) 12.134980659s ago: executing program 7 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 11.742276642s ago: executing program 7 (id=765): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x1, 0xc39, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(r0) 10.699103249s ago: executing program 7 (id=772): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 8.98572709s ago: executing program 7 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 7.868317237s ago: executing program 7 (id=790): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2, "5fb9"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000e00)=ANY=[@ANYBLOB="601e290000003fe7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.880308936s ago: executing program 0 (id=797): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 5.237295176s ago: executing program 0 (id=801): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/215, &(0x7f0000000100)=0xd7) 5.176441219s ago: executing program 2 (id=803): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./bus\x00', 0x10418, &(0x7f0000000040)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) 4.738670006s ago: executing program 2 (id=806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) 4.627309569s ago: executing program 0 (id=807): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) exit(0xffff) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x2, 0x44800) 4.122013449s ago: executing program 2 (id=809): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") acct(&(0x7f0000000200)='./file1\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3.717554679s ago: executing program 5 (id=812): syz_mount_image$ntfs3(&(0x7f0000000080), &(0x7f000001f740)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1f70e, &(0x7f000003ee80)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c3341, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000004c0)='/', 0x1}], 0x1) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) 3.426741646s ago: executing program 0 (id=813): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 3.349543329s ago: executing program 2 (id=814): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f0000000640)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0xff, 0x170, &(0x7f00000000c0)="$eJzs20GrElEUB/Azaa9XQbx1tBho00qqVcsiXhANFIWLWhW82mgIuZlaSZ+kbR8uCFcughs5oiZKlE5j+fttPPrnyjmL6+UK8/La297ZYPhm8GQcx1kW7buRxySLkzgXraiMAgD4n0xSiq9HszefIqXUcEMAQO2m539KKV0YxUXnPwAchF+e/3caagwAqM0W9/8rtTYGANTm2fMXj+4VxenTPD+O+DIqu2W3eq3yBw+L05v51Mli1bgsu615fqvK85/z83Fplt9emx/FjetV/iO7/7hYyS/HWf3jAwAAwEHo5HNr7/edzqa8qpb+H1i5v7fjavuvjQEA/Ibh+w+9V/3+63eKf7dI+9FGU8W3lNIfLP/4udoCezLFbossIrb7nqZ/mYC6LTZ9050AAAAAAAAAAAAAAACb7PbZo8gilj9pNT0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPU9AAD//8woSJ4=") r0 = open(&(0x7f0000000040)='.\x00', 0x8000, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x7d, 0x4, 0x0, 0x0, 0x2401}) 2.849789608s ago: executing program 7 (id=815): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b20bbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.632575853s ago: executing program 1 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 2.312292428s ago: executing program 1 (id=818): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 2.165740522s ago: executing program 5 (id=819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x50, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x50}}, 0x0) 2.085312199s ago: executing program 2 (id=820): syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009"], 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.847511891s ago: executing program 1 (id=821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="39000000140081ae10003c0005000183110042702fdf236f1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582b647d", 0x39}], 0x1}, 0x0) 1.751789638s ago: executing program 5 (id=822): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c010}, 0x4048000) 1.030019705s ago: executing program 1 (id=825): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x5b0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x100000800000009) 928.062554ms ago: executing program 5 (id=826): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000005d80), 0x1, 0x5d17, &(0x7f000000bac0)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x1000001, 0x0) getdents64(r0, 0x0, 0x0) 767.565988ms ago: executing program 0 (id=827): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) 319.86121ms ago: executing program 0 (id=828): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x49c, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 160.650399ms ago: executing program 1 (id=829): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 0s ago: executing program 2 (id=830): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) kernel console output (not intermixed with test programs): ilesystem 00000000-0000-0000-0000-000000000000. [ 150.844568][ T5879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.035019][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.085343][ T6680] binder: binder_mmap: 6678 200000000000-200000b36000 bad vm_flags failed -1 [ 151.617305][ T6695] loop0: detected capacity change from 0 to 1024 [ 151.714889][ T6695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.796638][ T6695] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.861091][ T6705] loop2: detected capacity change from 0 to 8 [ 151.909834][ T6705] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 151.946323][ T5930] udevd[5930]: incorrect cramfs checksum on /dev/loop2 [ 151.960144][ T6695] EXT4-fs error (device loop0): ext4_free_blocks:6695: comm syz.0.233: Freeing blocks not in datazone - block = 0, count = 16 [ 152.107878][ T5225] udevd[5225]: worker [5930] terminated by signal 33 (Unknown signal 33) [ 152.135308][ T6668] loop3: detected capacity change from 0 to 32768 [ 152.151089][ T5225] udevd[5225]: worker [5930] failed while handling '/devices/virtual/block/loop2' [ 152.238109][ T6486] udevd[6486]: incorrect cramfs checksum on /dev/loop2 [ 152.258461][ T5986] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 152.335260][ T5986] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.357825][ T5986] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.357825][ T5986] [ 152.375791][ T5986] EXT4-fs (loop0): Total free blocks count 0 [ 152.382416][ T5986] EXT4-fs (loop0): Free/Dirty block details [ 152.388363][ T5986] EXT4-fs (loop0): free_blocks=4293918736 [ 152.414306][ T5986] EXT4-fs (loop0): dirty_blocks=16 [ 152.435194][ T5986] EXT4-fs (loop0): Block reservation details [ 152.461202][ T5986] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 152.601121][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.630589][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 152.821136][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 152.863157][ T43] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 152.887483][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.922870][ T6725] loop0: detected capacity change from 0 to 512 [ 152.958616][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 152.968977][ T6724] Failed to get privilege flags for destination (handle=0x2:0x4) [ 152.977147][ T6725] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 152.993986][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.015294][ T43] usb 3-1: Product: syz [ 153.043313][ T43] usb 3-1: Manufacturer: syz [ 153.061069][ T43] usb 3-1: SerialNumber: syz [ 153.529856][ T43] usb 3-1: 0:2 : does not exist [ 153.569447][ T43] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 153.606576][ T43] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 153.649175][ T43] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 153.685135][ T43] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 153.798127][ T43] usb 3-1: USB disconnect, device number 4 [ 153.960111][ T6486] udevd[6486]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.054250][ T6740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.243'. [ 154.094587][ T6740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.243'. [ 154.290441][ T6733] syz.0.245 (6733) used greatest stack depth: 20888 bytes left [ 154.914553][ T6773] syz.0.259 uses obsolete (PF_INET,SOCK_PACKET) [ 155.010442][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.181259][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 155.215237][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 155.254898][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.312057][ T9] usb 2-1: config 0 descriptor?? [ 155.452785][ T6787] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.264'. [ 155.511046][ T976] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.599929][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 155.632831][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.671080][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 155.673570][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 155.721669][ T976] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 155.730108][ T976] usb 1-1: config 0 has no interface number 0 [ 155.745694][ T9] usb 2-1: media controller created [ 155.779155][ T976] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 155.801995][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.848109][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.850701][ T976] usb 1-1: Product: syz [ 155.900339][ T976] usb 1-1: Manufacturer: syz [ 155.928628][ T976] usb 1-1: SerialNumber: syz [ 155.962575][ T976] usb 1-1: config 0 descriptor?? [ 155.993320][ T976] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 156.007207][ T9] az6027: usb out operation failed. (-71) [ 156.023320][ T9] az6027: usb out operation failed. (-71) [ 156.050081][ T9] stb0899_attach: Driver disabled by Kconfig [ 156.081542][ T9] az6027: no front-end attached [ 156.081542][ T9] [ 156.118352][ T9] az6027: usb out operation failed. (-71) [ 156.126584][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 156.164244][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 156.225913][ T976] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 156.242510][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 156.271982][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 156.321630][ T976] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 156.361666][ T9] usb 2-1: USB disconnect, device number 6 [ 156.648470][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 156.657289][ T976] usb 1-1: USB disconnect, device number 6 [ 156.663189][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 156.782374][ T976] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 156.846989][ T976] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 156.899908][ T976] quatech2 1-1:0.51: device disconnected [ 157.615028][ T6836] netlink: 2 bytes leftover after parsing attributes in process `syz.5.281'. [ 157.628935][ T6840] loop3: detected capacity change from 0 to 256 [ 157.733243][ T6840] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 157.832987][ T6842] loop4: detected capacity change from 0 to 512 [ 158.052290][ T6842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.161216][ T6842] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.302305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.482804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.491838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.557238][ T5879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.569381][ T6859] loop5: detected capacity change from 0 to 512 [ 158.789972][ T6859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.821302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.841193][ T6859] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.868786][ T6865] loop2: detected capacity change from 0 to 1024 [ 158.938842][ T6832] loop1: detected capacity change from 0 to 32768 [ 158.981555][ T6865] EXT4-fs: Ignoring removed oldalloc option [ 159.046590][ T6865] EXT4-fs: Ignoring removed bh option [ 159.078512][ T30] audit: type=1800 audit(1754495430.267:5): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.290" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 159.134363][ T6865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.174401][ T6867] loop4: detected capacity change from 0 to 2048 [ 159.381196][ T6876] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.430798][ T6832] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 159.563516][ T30] audit: type=1800 audit(1754495430.757:6): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.292" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 159.725119][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.739717][ T6876] NILFS (loop4): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0 [ 159.829358][ T6876] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 159.944906][ T6876] Remounting filesystem read-only [ 160.020735][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.109345][ T5872] ocfs2: Unmounting device (7,1) on (node local) [ 160.125426][ T5879] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 160.422575][ T6893] Zero length message leads to an empty skb [ 160.497879][ T6896] loop4: detected capacity change from 0 to 128 [ 160.653009][ T30] audit: type=1800 audit(1754495431.837:7): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.299" name="file1" dev="loop4" ino=1048610 res=0 errno=0 [ 161.058305][ T6904] syz.4.299: attempt to access beyond end of device [ 161.058305][ T6904] loop4: rw=0, sector=121, nr_sectors = 8 limit=128 [ 161.120266][ T976] kernel read not supported for file /video7 (pid: 976 comm: kworker/1:2) [ 161.374521][ T1160] kworker/u8:5: attempt to access beyond end of device [ 161.374521][ T1160] loop4: rw=1, sector=129, nr_sectors = 912 limit=128 [ 161.451993][ T976] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.530771][ T6923] loop0: detected capacity change from 0 to 1024 [ 161.561804][ T973] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 161.632304][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 161.656190][ T976] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 161.691687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.711397][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.851057][ T973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.869206][ T976] pvrusb2: Hardware description: Terratec Grabster AV400 [ 161.883348][ T973] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 161.896168][ T973] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 161.907289][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.942756][ T973] usb 6-1: config 0 descriptor?? [ 161.943813][ T6923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.965923][ T976] pvrusb2: ********** [ 161.969920][ T976] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 161.970643][ T973] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 161.991535][ T973] dvb-usb: bulk message failed: -22 (3/0) [ 162.045438][ T973] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 162.069029][ T976] pvrusb2: Important functionality might not be entirely working. [ 162.116045][ T976] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 162.128105][ T973] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 162.149299][ T976] pvrusb2: ********** [ 162.164681][ T973] usb 6-1: media controller created [ 162.171286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 162.185856][ T6917] dibusb: i2c wr: len=61 is too big! [ 162.185856][ T6917] [ 162.209901][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.266058][ T2339] pvrusb2: Invalid write control endpoint [ 162.272925][ T973] dvb-usb: bulk message failed: -22 (6/0) [ 162.284954][ T973] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 162.317900][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.337775][ T6942] loop4: detected capacity change from 0 to 256 [ 162.355035][ T6943] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.314'. [ 162.360098][ T973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 162.380561][ T6942] exfat: Deprecated parameter 'namecase' [ 162.405692][ T6942] exfat: Deprecated parameter 'utf8' [ 162.420398][ T973] dvb-usb: schedule remote query interval to 150 msecs. [ 162.451118][ T6942] exfat: Deprecated parameter 'utf8' [ 162.469607][ T973] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 162.486224][ T6942] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 162.513374][ T6914] dvb-usb: bulk message failed: -22 (2/0) [ 162.521628][ T973] usb 6-1: USB disconnect, device number 2 [ 162.606043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.614391][ T43] usb 2-1: USB disconnect, device number 7 [ 162.624528][ T2339] pvrusb2: Invalid write control endpoint [ 162.630237][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 162.739838][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 162.765286][ T973] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 162.800002][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 162.822163][ T2339] pvrusb2: Device being rendered inoperable [ 162.848123][ T2339] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 162.892642][ T2339] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 162.941385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.951221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.960314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.960625][ T2339] pvrusb2: Attached sub-driver cx25840 [ 163.051697][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 163.089898][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 163.301701][ T6956] loop0: detected capacity change from 0 to 2048 [ 163.389849][ T6956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.500228][ T30] audit: type=1800 audit(1754495434.687:8): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 163.597100][ T6969] loop2: detected capacity change from 0 to 512 [ 163.819495][ T6969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.938347][ T6969] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.076851][ T6969] EXT4-fs error (device loop2): ext4_get_first_dir_block:3533: inode #12: comm syz.2.326: Attempting to read directory block (0) that is past i_size (3) [ 164.507417][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.525144][ T6988] netlink: 5 bytes leftover after parsing attributes in process `syz.3.333'. [ 164.528479][ T6986] loop5: detected capacity change from 0 to 512 [ 164.669374][ T6986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.792214][ T6986] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.965648][ T6996] loop3: detected capacity change from 0 to 2048 [ 164.998012][ T6974] loop4: detected capacity change from 0 to 32768 [ 165.081029][ T6974] [ 165.081029][ T6974] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.081029][ T6974] [ 165.129751][ T6996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.183961][ T30] audit: type=1800 audit(1754495436.377:9): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.327" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 165.206163][ T7000] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 165.225437][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.227928][ T6996] EXT4-fs (loop3): shut down requested (0) [ 165.248981][ T6976] loop1: detected capacity change from 0 to 32768 [ 165.319884][ T30] audit: type=1800 audit(1754495436.507:10): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.328" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 165.353783][ T6976] syz.1.328: attempt to access beyond end of device [ 165.353783][ T6976] loop1: rw=34817, sector=4680064, nr_sectors = 120 limit=32768 [ 165.424051][ T111] blkno = 8ed30, nblocks = f [ 165.433090][ T111] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 165.433090][ T111] [ 165.501408][ T111] ERROR: (device loop1): remounting filesystem as read-only [ 165.542683][ T5986] [ 165.542683][ T5986] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.542683][ T5986] [ 165.629660][ T5986] [ 165.629660][ T5986] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.629660][ T5986] [ 165.667516][ T5878] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.706851][ T5879] [ 165.706851][ T5879] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.706851][ T5879] [ 165.775479][ T110] [ 165.775479][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.775479][ T110] [ 165.807901][ T5879] [ 165.807901][ T5879] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.807901][ T5879] [ 166.148618][ T7016] netlink: 176 bytes leftover after parsing attributes in process `syz.2.346'. [ 166.224876][ T7016] ip6gretap0: entered promiscuous mode [ 166.255636][ T7016] netlink: 176 bytes leftover after parsing attributes in process `syz.2.346'. [ 166.783054][ T7030] loop1: detected capacity change from 0 to 512 [ 166.886404][ T7030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.943173][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.981158][ T7030] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.191071][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.222539][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.232813][ T7010] loop0: detected capacity change from 0 to 32768 [ 167.246103][ T43] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 167.269356][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.314764][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.355086][ T7038] loop3: detected capacity change from 0 to 256 [ 167.387031][ T43] usb 5-1: config 0 descriptor?? [ 167.391907][ T7038] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.443138][ T7038] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 167.530590][ T7038] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 167.674049][ T7022] loop2: detected capacity change from 0 to 32768 [ 167.753973][ T7038] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 167.821067][ T30] audit: type=1800 audit(1754495438.997:11): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.349" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 167.856705][ T7038] exFAT-fs (loop3): Filesystem has been set read-only [ 167.891981][ T7038] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 167.911568][ T43] hid_mf 0003:0079:1846.0004: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 167.989601][ T43] hid_mf 0003:0079:1846.0004: Invalid report, this should never happen! [ 168.036490][ T43] hid_mf 0003:0079:1846.0004: Force feedback init failed. [ 168.121636][ T43] usb 5-1: USB disconnect, device number 6 [ 168.335002][ T7048] fido_id[7048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.461240][ T7054] loop1: detected capacity change from 0 to 256 [ 168.490780][ T7054] exfat: Deprecated parameter 'namecase' [ 168.544723][ T7054] exfat: Deprecated parameter 'utf8' [ 168.580581][ T7054] exfat: Deprecated parameter 'utf8' [ 168.658175][ T7054] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 169.110454][ T7069] loop0: detected capacity change from 0 to 512 [ 169.216448][ T7074] loop2: detected capacity change from 0 to 256 [ 169.266629][ T7069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.286015][ T7074] exfat: Deprecated parameter 'namecase' [ 169.312791][ T7069] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.354391][ T7074] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 169.369752][ T7072] loop3: detected capacity change from 0 to 4096 [ 169.392315][ T7072] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 169.419378][ T30] audit: type=1800 audit(1754495440.597:12): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.368" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 169.557070][ T7072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.713863][ T7072] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 169.945486][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.979730][ T5878] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.349716][ T7105] loop1: detected capacity change from 0 to 512 [ 170.483161][ T7105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.533345][ T7105] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.762754][ T7114] loop2: detected capacity change from 0 to 256 [ 170.842885][ T7114] exfat: Deprecated parameter 'namecase' [ 170.894895][ T7114] exfat: Deprecated parameter 'utf8' [ 170.958800][ T7114] exfat: Deprecated parameter 'utf8' [ 171.028605][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.050133][ T7112] loop4: detected capacity change from 0 to 4096 [ 171.077210][ T7114] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 171.213914][ T7119] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.767971][ T7096] loop5: detected capacity change from 0 to 32768 [ 171.895839][ T7096] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.070473][ T7096] XFS (loop5): Ending clean mount [ 172.084633][ T7140] loop1: detected capacity change from 0 to 512 [ 172.149060][ T7096] XFS (loop5): Quotacheck needed: Please wait. [ 172.182623][ T7140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.282098][ T7140] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.365728][ T7096] XFS (loop5): Quotacheck: Done. [ 172.367438][ T30] audit: type=1800 audit(1754495443.547:13): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.389" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 172.570118][ T7096] XFS (loop5): User initiated shutdown received. [ 172.599019][ T7147] loop3: detected capacity change from 0 to 4096 [ 172.610472][ T7096] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x160/0x190 (fs/xfs/xfs_fsops.c:475). Shutting down filesystem. [ 172.701457][ T7096] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 172.800460][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.981158][ T5869] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.213791][ T7147] overlayfs: upper fs does not support tmpfile. [ 173.270270][ T7147] overlayfs: workdir/#2 already exists [ 174.726385][ T7181] loop3: detected capacity change from 0 to 16 [ 174.785538][ T7181] erofs (device loop3): mounted with root inode @ nid 36. [ 174.835593][ T7181] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 174.871462][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.912421][ T7181] erofs (device loop3): failed to decompress -29 in[58, 4038] out[1851] [ 174.961106][ T7181] erofs (device loop3): read error -117 @ 43 of nid 36 [ 175.067253][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 175.100531][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 175.121471][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.138339][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 175.171428][ T9] usb 3-1: Product: syz [ 175.200380][ T9] usb 3-1: Manufacturer: syz [ 175.207834][ T9] usb 3-1: SerialNumber: syz [ 175.255983][ T9] usb 3-1: config 0 descriptor?? [ 175.305137][ T9] usb 3-1: selecting invalid altsetting 0 [ 175.775264][ T5964] usb 3-1: USB disconnect, device number 5 [ 175.878666][ T7198] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.414'. [ 176.302017][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.461203][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.472176][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 176.483355][ T9] usb 2-1: config 0 has no interfaces? [ 176.493963][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 176.504569][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.521233][ T9] usb 2-1: Product: syz [ 176.530530][ T9] usb 2-1: Manufacturer: syz [ 176.540835][ T9] usb 2-1: SerialNumber: syz [ 176.566150][ T9] usb 2-1: config 0 descriptor?? [ 176.633974][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 176.664168][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 176.700275][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.766454][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 176.789339][ T43] pvrusb2: ********** [ 176.803427][ T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 176.834772][ T43] pvrusb2: Important functionality might not be entirely working. [ 176.859281][ T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 176.901000][ T43] pvrusb2: ********** [ 176.964299][ T2339] pvrusb2: Invalid write control endpoint [ 177.103994][ T7202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.151955][ T7202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.179820][ T2339] pvrusb2: Invalid write control endpoint [ 177.190673][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 177.199087][ T7210] loop0: detected capacity change from 0 to 32768 [ 177.225739][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 177.236283][ T7210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.420 (7210) [ 177.260629][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 177.263546][ T976] usb 2-1: USB disconnect, device number 8 [ 177.303683][ T2339] pvrusb2: Device being rendered inoperable [ 177.349160][ T9] usb 4-1: USB disconnect, device number 2 [ 177.359942][ T7210] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.360833][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 177.424764][ T7210] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 177.441273][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 177.451175][ T7210] BTRFS info (device loop0): using free-space-tree [ 177.484094][ T2339] pvrusb2: Attached sub-driver cx25840 [ 177.489638][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 177.520601][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 178.148437][ T7243] loop1: detected capacity change from 0 to 256 [ 178.173211][ T5862] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.254449][ T7243] FAT-fs (loop1): Directory bread(block 64) failed [ 178.286951][ T7243] FAT-fs (loop1): Directory bread(block 65) failed [ 178.324173][ T7243] FAT-fs (loop1): Directory bread(block 66) failed [ 178.390898][ T7243] FAT-fs (loop1): Directory bread(block 67) failed [ 178.428240][ T7243] FAT-fs (loop1): Directory bread(block 68) failed [ 178.445906][ T5964] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 178.491166][ T7243] FAT-fs (loop1): Directory bread(block 69) failed [ 178.528424][ T7243] FAT-fs (loop1): Directory bread(block 70) failed [ 178.562459][ T7243] FAT-fs (loop1): Directory bread(block 71) failed [ 178.587445][ T7243] FAT-fs (loop1): Directory bread(block 72) failed [ 178.587967][ T7221] loop2: detected capacity change from 0 to 32768 [ 178.620809][ T7243] FAT-fs (loop1): Directory bread(block 73) failed [ 178.631069][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 178.662819][ T5964] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 178.688017][ T5964] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 178.752807][ T5964] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 178.801702][ T5964] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 178.861064][ T5964] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 178.870001][ T5964] usb 4-1: config 0 has no interface number 0 [ 178.941150][ T5964] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 178.981907][ T5964] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 179.019770][ T5964] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.061047][ T5964] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.124172][ T5964] usb 4-1: config 0 interface 125 has no altsetting 0 [ 179.161519][ T5964] usb 4-1: config 0 interface 125 has no altsetting 2 [ 179.229460][ T5964] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 179.251490][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.259710][ T5964] usb 4-1: Product: syz [ 179.301086][ T5964] usb 4-1: Manufacturer: syz [ 179.305750][ T5964] usb 4-1: SerialNumber: syz [ 179.317640][ T7256] loop2: detected capacity change from 0 to 1024 [ 179.344237][ T7256] EXT4-fs: Ignoring removed nobh option [ 179.371511][ T5964] usb 4-1: config 0 descriptor?? [ 179.371781][ T7260] Bluetooth: MGMT ver 1.23 [ 179.382205][ T7256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.478814][ T5964] usb 4-1: selecting invalid altsetting 2 [ 179.498287][ T7256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.001558][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.176501][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.200693][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.245339][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.299709][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.343122][ T24] usb 2-1: config 0 descriptor?? [ 180.392720][ T5986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.429058][ T7273] ceph: No mds server is up or the cluster is laggy [ 180.436236][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 180.481521][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 180.563426][ T9] usb 4-1: USB disconnect, device number 3 [ 180.722893][ T5986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.787246][ T24] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 180.853290][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input9 [ 180.915099][ T5986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.926729][ T7286] loop5: detected capacity change from 0 to 128 [ 181.001343][ T5944] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 181.027016][ T24] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 181.120478][ T5986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.182361][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 181.210483][ T5944] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 181.237397][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.519952][ T5944] pvrusb2: Hardware description: Terratec Grabster AV400 [ 181.562725][ T5944] pvrusb2: ********** [ 181.571145][ T5944] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 181.610103][ T5944] pvrusb2: Important functionality might not be entirely working. [ 181.666613][ T5944] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 181.727650][ T5944] pvrusb2: ********** [ 181.766957][ T2339] pvrusb2: Invalid write control endpoint [ 181.851510][ T5986] bridge_slave_1: left allmulticast mode [ 181.857393][ T5986] bridge_slave_1: left promiscuous mode [ 181.950608][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.061176][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.069807][ T2339] pvrusb2: Invalid write control endpoint [ 182.087758][ T5986] bridge_slave_0: left allmulticast mode [ 182.100367][ T5964] usb 2-1: USB disconnect, device number 9 [ 182.112893][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 182.124708][ T5986] bridge_slave_0: left promiscuous mode [ 182.130541][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.166764][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 182.210376][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 182.271264][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 182.276796][ T2339] pvrusb2: Device being rendered inoperable [ 182.279224][ T24] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 182.301520][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 182.308240][ T43] usb 1-1: USB disconnect, device number 7 [ 182.361337][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 182.366407][ T24] usb 6-1: config 0 has no interface number 0 [ 182.406186][ T24] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.441371][ T2339] pvrusb2: Attached sub-driver cx25840 [ 182.446870][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 182.448627][ T24] usb 6-1: config 0 interface 85 has no altsetting 0 [ 182.473286][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 182.516219][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.521150][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 182.534331][ T24] usb 6-1: Product: syz [ 182.571496][ T24] usb 6-1: Manufacturer: syz [ 182.595653][ T24] usb 6-1: SerialNumber: syz [ 182.638592][ T24] usb 6-1: config 0 descriptor?? [ 183.290796][ T7310] vxcan0: tx address claim with different name [ 183.305457][ T24] appletouch 6-1:0.85: Geyser mode initialized. [ 183.348667][ T24] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input10 [ 183.623474][ T24] usb 6-1: USB disconnect, device number 3 [ 183.664426][ T7304] loop3: detected capacity change from 0 to 32768 [ 183.750265][ T7304] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 183.775285][ T24] appletouch 6-1:0.85: input: appletouch disconnected [ 184.176717][ T5878] ocfs2: Unmounting device (7,3) on (node local) [ 184.234904][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.245000][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.253971][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.268258][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.276607][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.300002][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.307626][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.315159][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.324897][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.332983][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.471145][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 184.571825][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.611181][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.658635][ T5986] bond0 (unregistering): Released all slaves [ 184.716656][ T9] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.757566][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.783059][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 184.835154][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.890440][ T9] usb 2-1: config 0 descriptor?? [ 184.955679][ T7321] loop0: detected capacity change from 0 to 32768 [ 185.135069][ T7321] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 185.425122][ T9] lg-g15 0003:046D:C225.0006: item fetching failed at offset 0/2 [ 185.469054][ T7343] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 185.513014][ T9] lg-g15 0003:046D:C225.0006: probe with driver lg-g15 failed with error -22 [ 185.653157][ T5862] ocfs2: Unmounting device (7,0) on (node local) [ 185.781293][ T7352] loop2: detected capacity change from 0 to 1024 [ 185.843091][ T5964] usb 2-1: USB disconnect, device number 10 [ 186.317755][ T7358] loop3: detected capacity change from 0 to 4096 [ 186.358408][ T5871] Bluetooth: hci5: command tx timeout [ 186.577160][ T7370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.771358][ T7358] syz.3.468 (7358) used greatest stack depth: 20424 bytes left [ 186.917218][ T5986] hsr_slave_0: left promiscuous mode [ 186.957866][ T5986] hsr_slave_1: left promiscuous mode [ 186.975312][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.997872][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.092672][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.100133][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.260159][ T5986] veth1_macvtap: left promiscuous mode [ 187.321999][ T5986] veth0_macvtap: left promiscuous mode [ 187.327759][ T5986] veth1_vlan: left promiscuous mode [ 187.365830][ T5986] veth0_vlan: left promiscuous mode [ 187.954865][ T7395] loop1: detected capacity change from 0 to 1024 [ 187.998413][ T7395] EXT4-fs: inline encryption not supported [ 188.015934][ T7395] EXT4-fs: Ignoring removed bh option [ 188.109052][ T7395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.157063][ T7375] loop5: detected capacity change from 0 to 32768 [ 188.196536][ T7375] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.474 (7375) [ 188.237267][ T7395] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4182: comm syz.1.480: Allocating blocks 385-513 which overlap fs metadata [ 188.266931][ T7375] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.293008][ T7375] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 188.302735][ T7375] BTRFS info (device loop5): using free-space-tree [ 188.316710][ T7395] EXT4-fs (loop1): Remounting filesystem read-only [ 188.338237][ T7394] EXT4-fs (loop1): pa ffff888012738bc8: logic 16, phys. 129, len 24 [ 188.446436][ T5871] Bluetooth: hci5: command tx timeout [ 188.498045][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.639949][ T5869] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.292471][ T7426] loop5: detected capacity change from 0 to 512 [ 189.387668][ T7426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.401875][ T7426] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.442359][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 189.489175][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 189.679436][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.139165][ T7435] loop1: detected capacity change from 0 to 4096 [ 190.253327][ T7436] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.324571][ T30] audit: type=1800 audit(1754495461.517:14): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.487" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 190.513360][ T5871] Bluetooth: hci5: command tx timeout [ 191.131830][ T7323] chnl_net:caif_netlink_parms(): no params data found [ 191.451142][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.621137][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 191.675884][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.701028][ T9] usb 1-1: config 0 has no interface number 0 [ 191.717452][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.774233][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.812781][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 191.836661][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 191.904282][ T9] usb 1-1: Product: syz [ 191.908513][ T9] usb 1-1: SerialNumber: syz [ 191.943307][ T9] usb 1-1: config 0 descriptor?? [ 191.967991][ T9] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 192.027269][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input12 [ 192.159531][ T7467] binder: 7465:7467 ioctl c0306201 2000000003c0 returned -14 [ 192.232057][ T7323] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.251707][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 192.272046][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.301349][ T7323] bridge_slave_0: entered allmulticast mode [ 192.329980][ T7323] bridge_slave_0: entered promiscuous mode [ 192.336527][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 192.367986][ T7323] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.408636][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.461611][ T7323] bridge_slave_1: entered allmulticast mode [ 192.499159][ T7323] bridge_slave_1: entered promiscuous mode [ 192.582930][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.591436][ T5871] Bluetooth: hci5: command tx timeout [ 192.622791][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.671224][ T43] usb 6-1: Product: syz [ 192.673280][ T973] usb 1-1: USB disconnect, device number 8 [ 192.675441][ T43] usb 6-1: Manufacturer: syz [ 192.706726][ T43] usb 6-1: SerialNumber: syz [ 192.721356][ T973] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 192.779851][ T7323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.844029][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.160162][ T5986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.524615][ T5986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.715511][ T7323] team0: Port device team_slave_0 added [ 193.763986][ T43] cdc_ncm 6-1:1.0: failed to get mac address [ 193.783726][ T43] cdc_ncm 6-1:1.0: bind() failure [ 193.790441][ T7472] loop1: detected capacity change from 0 to 32768 [ 193.816216][ T7472] btrfs: Deprecated parameter 'usebackuproot' [ 193.837852][ T7472] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 193.867194][ T7472] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.498 (7472) [ 193.911239][ T43] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 193.943655][ T5986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.971091][ T43] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 193.988328][ T7472] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.999448][ T43] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 194.051278][ T43] usb 6-1: USB disconnect, device number 4 [ 194.063861][ T7472] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 194.068873][ T7323] team0: Port device team_slave_1 added [ 194.125212][ T7472] BTRFS info (device loop1): disk space caching is enabled [ 194.165972][ T7472] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 194.326165][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 194.377175][ T7472] BTRFS error (device loop1): failed to load root extent [ 194.387428][ T5986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.425975][ T7472] BTRFS warning (device loop1): try to load backup roots slot 1 [ 194.436985][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.446866][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.456031][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.465160][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.474297][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.483421][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.492539][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.501652][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.510733][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.519900][ T7499] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 194.543604][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 194.564106][ T7472] BTRFS warning (device loop1): couldn't read tree root [ 194.574575][ T7472] BTRFS warning (device loop1): try to load backup roots slot 2 [ 194.585821][ T49] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 194.598506][ T7472] BTRFS warning (device loop1): couldn't read tree root [ 194.605736][ T7472] BTRFS warning (device loop1): try to load backup roots slot 3 [ 194.708255][ T7472] BTRFS info (device loop1): rebuilding free space tree [ 194.809549][ T7472] BTRFS info (device loop1): disabling free space tree [ 194.828903][ T7503] loop5: detected capacity change from 0 to 512 [ 194.874949][ T7472] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.928046][ T7472] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.952609][ T7503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.051207][ T7503] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.133414][ T7503] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 195.254637][ T7503] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 195.350730][ T7503] EXT4-fs (loop5): This should not happen!! Data will be lost [ 195.350730][ T7503] [ 195.385651][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.415265][ T7503] EXT4-fs (loop5): Total free blocks count 0 [ 195.442427][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.486550][ T7503] EXT4-fs (loop5): Free/Dirty block details [ 195.496705][ T7503] EXT4-fs (loop5): free_blocks=65280 [ 195.517256][ T7503] EXT4-fs (loop5): dirty_blocks=33 [ 195.540156][ T7503] EXT4-fs (loop5): Block reservation details [ 195.564556][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.581607][ T7503] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 195.626455][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.648944][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.743670][ T5872] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.787413][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.019588][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.231273][ T7514] loop0: detected capacity change from 0 to 32768 [ 196.248542][ T7514] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 196.339498][ T7514] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 196.378951][ T7514] grow_buffers: requested out-of-range block 432345564227567648 for device loop0 [ 196.388652][ T7514] (syz.0.508,7514,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 196.396453][ T7514] (syz.0.508,7514,0):ocfs2_search_chain:1817 ERROR: status = -12 [ 196.404796][ T7514] (syz.0.508,7514,0):ocfs2_search_chain:1940 ERROR: status = -12 [ 196.412615][ T7514] (syz.0.508,7514,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12 [ 196.421101][ T7514] (syz.0.508,7514,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12 [ 196.429475][ T7514] (syz.0.508,7514,0):__ocfs2_claim_clusters:2438 ERROR: status = -12 [ 196.441084][ T7514] (syz.0.508,7514,0):__ocfs2_claim_clusters:2446 ERROR: status = -12 [ 196.449200][ T7514] (syz.0.508,7514,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -12 [ 196.460101][ T7514] (syz.0.508,7514,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -12 [ 196.468813][ T7514] (syz.0.508,7514,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12 [ 196.484865][ T7514] (syz.0.508,7514,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12 [ 196.494381][ T7514] (syz.0.508,7514,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12 [ 196.503178][ T7514] (syz.0.508,7514,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12 [ 196.513945][ T7514] (syz.0.508,7514,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12 [ 196.523237][ T7514] (syz.0.508,7514,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12 [ 196.533124][ T7514] (syz.0.508,7514,0):ocfs2_mknod:360 ERROR: status = -12 [ 196.543881][ T7514] (syz.0.508,7514,0):ocfs2_mknod:505 ERROR: status = -12 [ 196.557428][ T7514] (syz.0.508,7514,0):ocfs2_mkdir:661 ERROR: status = -12 [ 196.565471][ T7522] grow_buffers: requested out-of-range block 432345564227567648 for device loop0 [ 196.612830][ T7522] (syz.0.508,7522,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 196.620453][ T7522] (syz.0.508,7522,0):ocfs2_search_chain:1817 ERROR: status = -12 [ 196.630553][ T13] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 196.643710][ T7522] (syz.0.508,7522,0):ocfs2_search_chain:1940 ERROR: status = -12 [ 196.676035][ T7323] hsr_slave_0: entered promiscuous mode [ 196.709351][ T7323] hsr_slave_1: entered promiscuous mode [ 196.724063][ T7522] (syz.0.508,7522,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12 [ 196.821960][ T7522] (syz.0.508,7522,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12 [ 196.851060][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 196.861296][ T7522] (syz.0.508,7522,0):__ocfs2_claim_clusters:2438 ERROR: status = -12 [ 196.869427][ T7522] (syz.0.508,7522,0):__ocfs2_claim_clusters:2446 ERROR: status = -12 [ 196.931901][ T7522] (syz.0.508,7522,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -12 [ 196.981121][ T7522] (syz.0.508,7522,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -12 [ 197.026156][ T7522] (syz.0.508,7522,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12 [ 197.046161][ T43] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.071675][ T7522] (syz.0.508,7522,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12 [ 197.078147][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.097755][ T7522] (syz.0.508,7522,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12 [ 197.137027][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 197.139647][ T7522] (syz.0.508,7522,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12 [ 197.186095][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.197721][ T7522] (syz.0.508,7522,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12 [ 197.212872][ T43] usb 6-1: config 0 descriptor?? [ 197.269380][ T7522] (syz.0.508,7522,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12 [ 197.330770][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.344772][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.371411][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.398376][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.401172][ T7522] (syz.0.508,7522,0):ocfs2_mknod:360 ERROR: status = -12 [ 197.421624][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.446798][ T7522] (syz.0.508,7522,1):ocfs2_mknod:505 ERROR: status = -12 [ 197.484255][ T5986] bridge_slave_1: left allmulticast mode [ 197.515043][ T7522] (syz.0.508,7522,1):ocfs2_mkdir:661 ERROR: status = -12 [ 197.523689][ T5986] bridge_slave_1: left promiscuous mode [ 197.530806][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.682700][ T5986] bridge_slave_0: left allmulticast mode [ 197.693067][ T5986] bridge_slave_0: left promiscuous mode [ 197.699048][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.757952][ T5862] ocfs2: Unmounting device (7,0) on (node local) [ 197.763555][ T43] lg-g15 0003:046D:C225.0007: item fetching failed at offset 0/2 [ 197.812134][ T43] lg-g15 0003:046D:C225.0007: probe with driver lg-g15 failed with error -22 [ 198.046085][ T9] usb 6-1: USB disconnect, device number 5 [ 198.639052][ T7560] misc userio: Invalid payload size [ 199.240811][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.281783][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.320363][ T5986] bond0 (unregistering): Released all slaves [ 199.472861][ T5875] Bluetooth: hci4: command tx timeout [ 200.378155][ T7602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.469002][ T7602] bond0: (slave rose0): Enslaving as an active interface with an up link [ 200.693393][ T5986] hsr_slave_0: left promiscuous mode [ 200.745762][ T5986] hsr_slave_1: left promiscuous mode [ 200.759639][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.794866][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.861308][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.868940][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.985681][ T5986] veth1_macvtap: left promiscuous mode [ 201.011310][ T5986] veth0_macvtap: left promiscuous mode [ 201.023331][ T5986] veth1_vlan: left promiscuous mode [ 201.044305][ T5986] veth0_vlan: left promiscuous mode [ 201.554140][ T5875] Bluetooth: hci4: command tx timeout [ 201.595083][ T7627] loop5: detected capacity change from 0 to 2048 [ 201.612592][ T7629] loop4: detected capacity change from 4096 to 4013 [ 201.658170][ T7627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.681731][ T7629] loop4: detected capacity change from 4013 to 4096 [ 201.749507][ T7627] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.547: bit already cleared for inode 15 [ 201.882768][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.177706][ T7637] net_ratelimit: 3319 callbacks suppressed [ 202.177734][ T7637] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.193257][ T9] IPVS: starting estimator thread 0... [ 202.252569][ T5944] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 202.281136][ T7639] IPVS: using max 22 ests per chain, 52800 per kthread [ 202.379837][ T30] audit: type=1326 audit(1754495473.567:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7640 comm="syz.5.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa40058ebe9 code=0x0 [ 202.431871][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 202.464417][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.471292][ T5944] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 202.491058][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 202.496354][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.523792][ T5944] usb 2-1: config 0 descriptor?? [ 202.585202][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 202.680544][ T7646] netlink: 48 bytes leftover after parsing attributes in process `syz.2.554'. [ 202.945144][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.963390][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.224217][ T973] usb 2-1: USB disconnect, device number 11 [ 203.623991][ T7650] loop2: detected capacity change from 0 to 32768 [ 203.650105][ T5875] Bluetooth: hci4: command tx timeout [ 203.661761][ T7650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.556 (7650) [ 203.735470][ T7650] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.801560][ T7650] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 203.810130][ T7650] BTRFS info (device loop2): using free-space-tree [ 203.963469][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.975008][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.053480][ T7323] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 204.201139][ T7323] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 204.312863][ T7323] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.351188][ T7684] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 204.400536][ T7684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.561'. [ 204.407598][ T7323] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.492826][ T7684] dummy0: entered promiscuous mode [ 204.498859][ T7684] dummy0: entered allmulticast mode [ 204.532458][ T7684] bridge0: port 3(dummy0) entered blocking state [ 204.556941][ T7684] bridge0: port 3(dummy0) entered disabled state [ 204.577717][ T5865] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.588104][ T7684] bridge0: port 3(dummy0) entered blocking state [ 204.588504][ T7684] bridge0: port 3(dummy0) entered forwarding state [ 204.693008][ T7537] chnl_net:caif_netlink_parms(): no params data found [ 205.359918][ T7652] loop5: detected capacity change from 0 to 32768 [ 205.567976][ T7652] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 205.714885][ T5875] Bluetooth: hci4: command tx timeout [ 205.863536][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.881159][ T7652] XFS (loop5): Ending clean mount [ 205.881291][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.919274][ T7652] XFS (loop5): Quotacheck needed: Please wait. [ 205.931410][ T7537] bridge_slave_0: entered allmulticast mode [ 205.939646][ T7537] bridge_slave_0: entered promiscuous mode [ 206.048747][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.070872][ T7652] XFS (loop5): Quotacheck: Done. [ 206.102066][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.121519][ T7537] bridge_slave_1: entered allmulticast mode [ 206.164157][ T7537] bridge_slave_1: entered promiscuous mode [ 206.273075][ T5869] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.402819][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.459327][ T30] audit: type=1326 audit(1754495477.627:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.491950][ T30] audit: type=1326 audit(1754495477.627:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.521311][ T30] audit: type=1326 audit(1754495477.627:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.543692][ T30] audit: type=1326 audit(1754495477.627:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.545154][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.566220][ T30] audit: type=1326 audit(1754495477.627:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.597415][ T30] audit: type=1326 audit(1754495477.627:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.619513][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.761677][ T973] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 206.771187][ T30] audit: type=1326 audit(1754495477.627:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.836438][ T30] audit: type=1326 audit(1754495477.627:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.945660][ T30] audit: type=1326 audit(1754495477.627:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d3b8ebe9 code=0x7fc00000 [ 206.989204][ T973] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.015591][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.029462][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.044059][ T7537] team0: Port device team_slave_0 added [ 207.046516][ T973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.068331][ T973] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.076877][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.085915][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.124469][ T973] usb 2-1: config 0 descriptor?? [ 207.207582][ T7537] team0: Port device team_slave_1 added [ 207.547505][ T7323] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.593376][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.610056][ T7763] loop2: detected capacity change from 0 to 512 [ 207.616493][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.642399][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.680393][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.701894][ T973] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 207.742551][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.749543][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.775469][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.792602][ T7763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.825767][ T7763] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.837305][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.971076][ T5964] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.987305][ T973] usb 2-1: USB disconnect, device number 12 [ 208.016816][ T7537] hsr_slave_0: entered promiscuous mode [ 208.054747][ T7537] hsr_slave_1: entered promiscuous mode [ 208.078239][ T7537] debugfs: 'hsr0' already exists in 'hsr' [ 208.093564][ T7537] Cannot create hsr debugfs directory [ 208.114257][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.121552][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.129841][ T7771] fido_id[7771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 208.135067][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.171387][ T5964] usb 1-1: Using ep0 maxpacket: 16 [ 208.186422][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 208.231196][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.256471][ T5964] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 208.277808][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.291061][ T5964] usb 1-1: Product: syz [ 208.312037][ T5964] usb 1-1: Manufacturer: syz [ 208.316721][ T5964] usb 1-1: SerialNumber: syz [ 208.327080][ T7774] loop5: detected capacity change from 0 to 4096 [ 208.343429][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.350641][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.355762][ T7774] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.366765][ T5964] usb 1-1: config 0 descriptor?? [ 208.392538][ T5964] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 208.433438][ T5964] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 208.453034][ T7774] EXT4-fs (loop5): Test dummy encryption mode enabled [ 208.465125][ T973] kernel read not supported for file /input/mouse0 (pid: 973 comm: kworker/0:2) [ 208.497061][ T7774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.704867][ T7774] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 208.970550][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.030014][ T5964] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 209.057443][ T5964] em28xx 1-1:0.0: Config register raw data: 0x41 [ 209.310732][ T973] usb 1-1: USB disconnect, device number 9 [ 209.359808][ T973] em28xx 1-1:0.0: Disconnecting em28xx [ 209.432297][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.441400][ T973] em28xx 1-1:0.0: Freeing device [ 209.641389][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 209.653151][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 209.679380][ T7537] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 209.691028][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 209.722914][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.745374][ T7537] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 209.764578][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.803928][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.843979][ T9] usb 3-1: Product: syz [ 209.848231][ T9] usb 3-1: Manufacturer: syz [ 209.852996][ T7537] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 209.893196][ T9] usb 3-1: SerialNumber: syz [ 209.900908][ T7537] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.503740][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.550207][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.561295][ T9] usb 3-1: 0:2 : does not exist [ 210.696012][ T7537] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.848523][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.855756][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.863882][ T5944] usb 3-1: USB disconnect, device number 6 [ 210.905000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.912230][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.027478][ T7799] loop1: detected capacity change from 0 to 32768 [ 211.079889][ T7799] XFS: noikeep mount option is deprecated. [ 211.172482][ T7537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.223517][ T7799] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.446198][ T7799] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 211.509212][ T7799] XFS (loop1): Starting recovery (logdev: internal) [ 211.692079][ T7799] XFS (loop1): Ending recovery (logdev: internal) [ 211.963732][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 211.988320][ T7855] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 212.069429][ T7537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.136231][ T7323] veth0_vlan: entered promiscuous mode [ 212.188798][ T5872] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.229479][ T7323] veth1_vlan: entered promiscuous mode [ 212.455998][ T7323] veth0_macvtap: entered promiscuous mode [ 212.509455][ T7323] veth1_macvtap: entered promiscuous mode [ 212.653694][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.695683][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.759303][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.821323][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.841067][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.849879][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.911250][ T5864] Bluetooth: hci6: command 0x1003 tx timeout [ 212.919424][ T5875] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 213.331321][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.369373][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.541813][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.549683][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.782741][ T7537] veth0_vlan: entered promiscuous mode [ 213.882966][ T7537] veth1_vlan: entered promiscuous mode [ 213.939319][ T7898] loop5: detected capacity change from 0 to 64 [ 214.040278][ T5871] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 214.074345][ T7537] veth0_macvtap: entered promiscuous mode [ 214.087825][ T7537] veth1_macvtap: entered promiscuous mode [ 214.139142][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.151973][ T7902] loop6: detected capacity change from 0 to 512 [ 214.216939][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.416550][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.443075][ T7902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.505055][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.531244][ T7902] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.566407][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.581193][ T5964] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.669507][ T5225] udevd[5225]: worker [6953] terminated by signal 33 (Unknown signal 33) [ 214.712182][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.745769][ T5225] udevd[5225]: worker [6953] failed while handling '/devices/virtual/block/loop1' [ 214.775288][ T5225] udevd[5225]: worker [6040] terminated by signal 33 (Unknown signal 33) [ 214.794425][ T5225] udevd[5225]: worker [6040] failed while handling '/devices/virtual/block/loop5' [ 214.811144][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 214.818825][ T5964] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.860895][ T5964] usb 3-1: config 0 has no interface number 0 [ 214.885327][ T7923] loop0: detected capacity change from 0 to 128 [ 214.902432][ T5964] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.946696][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.961348][ T7923] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.970604][ T5964] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.998620][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.027881][ T5964] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 215.072027][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.075555][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.142275][ T5964] usb 3-1: config 0 descriptor?? [ 215.199343][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.248317][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.395231][ T7323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.691108][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 215.837329][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.861675][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.869694][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 215.910044][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.958034][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.968078][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.505'. [ 215.984873][ T5964] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.000A/input/input15 [ 216.054811][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 216.070504][ T5964] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.000A/input/input16 [ 216.123618][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.177588][ T5964] uclogic 0003:28BD:0071.000A: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 216.186100][ T9] usb 6-1: config 0 descriptor?? [ 216.292488][ T5964] usb 3-1: USB disconnect, device number 7 [ 216.511501][ T973] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 216.695050][ T973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.741640][ T9] playstation 0003:054C:05C4.000B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 216.748582][ T7951] fido_id[7951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 216.763806][ T973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.852558][ T973] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 216.887910][ T9] playstation 0003:054C:05C4.000B: Invalid byte count transferred, expected 16 got 0 [ 216.901393][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.930723][ T9] playstation 0003:054C:05C4.000B: Failed to retrieve DualShock4 pairing info: -22 [ 216.950487][ T973] usb 7-1: SerialNumber: syz [ 216.987169][ T9] playstation 0003:054C:05C4.000B: Failed to get MAC address from DualShock4 [ 217.291166][ T7969] syzkaller1: entered promiscuous mode [ 217.332462][ T7969] syzkaller1: entered allmulticast mode [ 217.463020][ T7962] loop0: detected capacity change from 0 to 32768 [ 217.484560][ T973] usb 7-1: 0:2 : does not exist [ 217.513199][ T7962] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 217.521864][ T7962] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 217.541029][ T9] playstation 0003:054C:05C4.000B: Failed to create dualshock4. [ 217.566274][ T7962] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 217.596814][ T5944] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 217.614615][ T5944] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 217.634302][ T9] playstation 0003:054C:05C4.000B: probe with driver playstation failed with error -22 [ 217.651554][ T973] usb 7-1: USB disconnect, device number 2 [ 217.676977][ T9] usb 6-1: USB disconnect, device number 6 [ 217.738489][ T5944] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 217.773854][ T5944] gfs2: fsid=syz:syz.0: jid=0: Done [ 217.815498][ T7962] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 218.441197][ T7983] serio: Serial port pty25 [ 218.592228][ T7994] fido_id[7994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 218.708567][ T7997] loop5: detected capacity change from 0 to 1024 [ 218.813649][ T7997] hfsplus: failed to load catalog file [ 218.991974][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 219.186386][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.246065][ T6486] udevd[6486]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.246326][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.431055][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.440156][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.605706][ T8001] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 219.714356][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.883807][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 219.883832][ T30] audit: type=1326 audit(1754495491.077:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.1.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30a2b8ebe9 code=0x0 [ 220.344919][ T9] usb 7-1: USB disconnect, device number 3 [ 220.908662][ T8041] loop7: detected capacity change from 0 to 2048 [ 221.022756][ T8041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.172578][ T8041] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 221.261668][ T8041] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 17 with max blocks 1 with error 28 [ 221.373883][ T8041] EXT4-fs (loop7): This should not happen!! Data will be lost [ 221.373883][ T8041] [ 221.461130][ T8041] EXT4-fs (loop7): Total free blocks count 0 [ 221.467197][ T8041] EXT4-fs (loop7): Free/Dirty block details [ 221.561140][ T8041] EXT4-fs (loop7): free_blocks=2415919104 [ 221.592087][ T8041] EXT4-fs (loop7): dirty_blocks=16 [ 221.597250][ T8041] EXT4-fs (loop7): Block reservation details [ 221.615055][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.663'. [ 221.629872][ T8010] loop2: detected capacity change from 0 to 40427 [ 221.653061][ T8041] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 221.666369][ T8010] F2FS-fs: heap/no_heap options were deprecated [ 221.714103][ T8010] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 221.741545][ T8010] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 221.749797][ T8010] F2FS-fs (loop2): build fault injection type: 0x0 [ 221.891029][ T8010] F2FS-fs (loop2): invalid crc value [ 221.978637][ T8064] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 222.012052][ T8064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.019784][ T8064] IPv6: NLM_F_CREATE should be set when creating new route [ 222.027123][ T8064] IPv6: NLM_F_CREATE should be set when creating new route [ 222.061549][ T7537] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.097847][ T8064] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 222.147869][ T8064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.566044][ T8010] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.642320][ T8010] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 222.696739][ T8010] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 222.916251][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 222.935363][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 222.985751][ T8085] netlink: 'syz.5.674': attribute type 6 has an invalid length. [ 223.022426][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 223.057219][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.098573][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.138524][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.183751][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.231111][ T5964] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 223.271119][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 223.441022][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 223.443275][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.452788][ T5964] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 223.488968][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.497441][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.530047][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.592892][ T9] usb 2-1: config 0 descriptor?? [ 223.598367][ T5964] pvrusb2: Hardware description: Terratec Grabster AV400 [ 223.615331][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 223.636894][ T5964] pvrusb2: ********** [ 223.684147][ T5964] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 223.730980][ T5964] pvrusb2: Important functionality might not be entirely working. [ 223.738817][ T5964] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 223.831009][ T5964] pvrusb2: ********** [ 223.861338][ T2339] pvrusb2: Invalid write control endpoint [ 223.937289][ T8107] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 224.000688][ T8107] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 224.051248][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 224.182436][ T2339] pvrusb2: Invalid write control endpoint [ 224.188245][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 224.259494][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 224.294045][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 224.331183][ T2339] pvrusb2: Device being rendered inoperable [ 224.349846][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 224.387762][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 224.414548][ T2339] pvrusb2: Attached sub-driver cx25840 [ 224.443091][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 224.480551][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 224.498428][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 224.509677][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 224.544079][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 224.555321][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 224.587808][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 224.601248][ T5965] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 224.617648][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 224.637508][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 224.657737][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 224.671970][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 224.692332][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.731184][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.751245][ T976] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 224.759769][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.771429][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 224.793591][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.804605][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.835133][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.845751][ T9] pwc: Registered as video103. [ 224.863444][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 224.878709][ T5965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.931721][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.948564][ T9] usb 2-1: USB disconnect, device number 13 [ 224.951020][ T5965] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 224.971732][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.995151][ T976] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 225.010181][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.018470][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.078801][ T5965] usb 3-1: config 0 descriptor?? [ 225.115097][ T976] usb 6-1: config 0 descriptor?? [ 225.250714][ T24] usb 1-1: USB disconnect, device number 10 [ 225.401868][ T973] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 225.571076][ T973] usb 8-1: Using ep0 maxpacket: 16 [ 225.590570][ T973] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 225.604319][ T5965] ryos 0003:1E7D:31CE.000C: bogus close delimiter [ 225.620632][ T973] usb 8-1: config 0 has no interface number 0 [ 225.638560][ T976] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 225.650176][ T973] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.656001][ T5965] ryos 0003:1E7D:31CE.000C: item 0 4 2 10 parsing failed [ 225.675890][ T976] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 225.688768][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'. [ 225.690426][ T973] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.714563][ T5965] ryos 0003:1E7D:31CE.000C: parse failed [ 225.721909][ T976] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 225.736201][ T5965] ryos 0003:1E7D:31CE.000C: probe with driver ryos failed with error -22 [ 225.754549][ T973] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 225.781093][ T973] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 225.810912][ T5965] usb 3-1: USB disconnect, device number 8 [ 225.818406][ T976] isku 0003:1E7D:319C.000D: couldn't init struct isku_device [ 225.833290][ T973] usb 8-1: Product: syz [ 225.868197][ T973] usb 8-1: SerialNumber: syz [ 225.881173][ T976] isku 0003:1E7D:319C.000D: couldn't install keyboard [ 225.918707][ T976] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -71 [ 225.931055][ T973] usb 8-1: config 0 descriptor?? [ 225.979445][ T976] usb 6-1: USB disconnect, device number 7 [ 225.992015][ T973] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 226.055475][ T973] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input18 [ 226.138367][ T8140] fido_id[8140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 226.330496][ T8146] 9pnet: p9_errstr2errno: server reported unknown error @cDB0xffffffffffffffff [ 226.358868][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 226.632742][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.643548][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.651138][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.658484][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.665754][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.672961][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.680147][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.687398][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.694643][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.701836][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 226.718250][ T973] usb 8-1: USB disconnect, device number 2 [ 226.718427][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 226.801925][ T973] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 226.909981][ T8159] ceph: No mds server is up or the cluster is laggy [ 226.915502][ T10] libceph: connect (1)[c::]:6789 error -101 [ 226.951814][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 227.033138][ T976] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 227.255139][ T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.285812][ T976] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.336345][ T976] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.421467][ T976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.452372][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.479836][ T976] usb 1-1: Product: syz [ 227.499951][ T976] usb 1-1: Manufacturer: syz [ 227.509524][ T976] usb 1-1: SerialNumber: syz [ 228.232156][ T8192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.438977][ T8196] input: syz1 as /devices/virtual/input/input19 [ 228.605895][ T8199] input: syz1 as /devices/virtual/input/input20 [ 228.619679][ T976] cdc_ncm 1-1:1.0: bind() failure [ 228.685038][ T976] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 228.759540][ T976] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 228.809077][ T976] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 228.871904][ T976] usb 1-1: USB disconnect, device number 11 [ 229.651492][ T976] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 229.856407][ T976] usb 8-1: unable to get BOS descriptor or descriptor too short [ 229.894574][ T8230] 9pnet: p9_errstr2errno: server reported unknown error @c^7 [ 229.898079][ T976] usb 8-1: not running at top speed; connect to a high speed hub [ 229.965755][ T976] usb 8-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 230.015442][ T976] usb 8-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.081471][ T8232] Illegal XDP return value 4294967294 on prog (id 83) dev N/A, expect packet loss! [ 230.083763][ T976] usb 8-1: config 1 interface 0 has no altsetting 0 [ 230.146937][ T976] usb 8-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 230.167685][ T976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.222604][ T976] usb 8-1: Product: syz [ 230.237122][ T976] usb 8-1: Manufacturer: syz [ 230.247605][ T976] usb 8-1: SerialNumber: syz [ 230.276052][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.326885][ T8219] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 230.527621][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.606642][ T976] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input21 [ 230.713244][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.713410][ T8214] loop1: detected capacity change from 0 to 32768 [ 230.777914][ T8214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.716 (8214) [ 230.917681][ T8214] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.970171][ T8214] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 231.018221][ T8214] BTRFS info (device loop1): using free-space-tree [ 231.239248][ T8214] BTRFS info (device loop1): rebuilding free space tree [ 231.241227][ T973] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 231.251495][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.384203][ T5210] bcm5974 8-1:1.0: could not read from device [ 231.391278][ T9] usb 8-1: USB disconnect, device number 3 [ 231.458391][ T5210] bcm5974 8-1:1.0: could not read from device [ 231.567906][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 231.601839][ T973] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 231.640614][ T973] usb 1-1: config 0 has no interface number 0 [ 231.710434][ T973] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 231.748680][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.794802][ T973] usb 1-1: Product: syz [ 231.799019][ T973] usb 1-1: Manufacturer: syz [ 231.851196][ T973] usb 1-1: SerialNumber: syz [ 231.944309][ T973] usb 1-1: config 0 descriptor?? [ 232.053719][ T973] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 232.082955][ T12] bridge_slave_1: left allmulticast mode [ 232.088619][ T12] bridge_slave_1: left promiscuous mode [ 232.096276][ T973] dvb-usb: bulk message failed: -22 (2/0) [ 232.149894][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.182506][ T973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.196890][ T8243] cxusb: i2c rd: len=133 is too big! [ 232.196890][ T8243] [ 232.205999][ T5872] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.259384][ T973] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 232.287954][ T973] usb 1-1: media controller created [ 232.323601][ T12] bridge_slave_0: left allmulticast mode [ 232.371231][ T12] bridge_slave_0: left promiscuous mode [ 232.404870][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.413595][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.575584][ T973] cxusb: set interface failed [ 232.631189][ T973] dvb-usb: bulk message failed: -22 (1/0) [ 232.666940][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.678165][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.686087][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.697779][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.707659][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.061610][ T973] DVB: Unable to find symbol lgdt330x_attach() [ 233.101052][ T973] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 233.655457][ T973] rc_core: IR keymap rc-dvico-portable not found [ 233.681193][ T973] Registered IR keymap rc-empty [ 233.714059][ T973] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 233.801299][ T973] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input22 [ 233.865389][ T973] dvb-usb: schedule remote query interval to 100 msecs. [ 233.888605][ T973] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 233.970433][ T973] usb 1-1: USB disconnect, device number 12 [ 234.362211][ T973] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 234.661637][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 234.835530][ T5871] Bluetooth: hci5: command tx timeout [ 234.863446][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.884136][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 234.894101][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 234.905174][ T9] usb 2-1: config 220 has no interface number 2 [ 234.911846][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.926287][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 234.943116][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 234.950030][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 234.961694][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 234.978384][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.001022][ T9] usb 2-1: Product: syz [ 235.015551][ T9] usb 2-1: Manufacturer: syz [ 235.020187][ T9] usb 2-1: SerialNumber: syz [ 235.072874][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.096661][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.101844][ T8322] loop2: detected capacity change from 0 to 512 [ 235.119986][ T8299] loop0: detected capacity change from 0 to 32768 [ 235.147069][ T8322] EXT4-fs: Ignoring removed orlov option [ 235.152089][ T12] bond0 (unregistering): Released all slaves [ 235.223070][ T8276] tipc: Started in network mode [ 235.231425][ T8276] tipc: Node identity 4, cluster identity 4711 [ 235.241319][ T8276] tipc: Node number set to 4 [ 235.267514][ T8322] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 235.300170][ T9] usb 2-1: selecting invalid altsetting 0 [ 235.315494][ T8299] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.349663][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 235.354362][ T8322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 235.367539][ T9] usb 2-1: No valid video chain found. [ 235.394192][ T9] usb 2-1: selecting invalid altsetting 0 [ 235.399981][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 235.437232][ T8322] EXT4-fs error (device loop2): ext4_iget_extra_inode:5103: inode #15: comm syz.2.747: corrupted in-inode xattr: e_value size too large [ 235.491213][ T8299] XFS (loop0): Ending clean mount [ 235.509193][ T9] usb 2-1: USB disconnect, device number 14 [ 235.515500][ T8322] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.747: couldn't read orphan inode 15 (err -117) [ 235.600410][ T8322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.756350][ T8322] EXT4-fs error (device loop2): ext4_check_dx_root:2202: inode #2: comm syz.2.747: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 235.915335][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.987502][ T5862] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.430151][ T12] hsr_slave_0: left promiscuous mode [ 236.506661][ T12] hsr_slave_1: left promiscuous mode [ 236.529241][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.560046][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.617743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.649217][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.761187][ T976] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 236.796349][ T12] veth1_macvtap: left promiscuous mode [ 236.811230][ T8361] binder: 8359:8361 ioctl c018620c 200000000040 returned -1 [ 236.832827][ T12] veth0_macvtap: left promiscuous mode [ 236.838504][ T12] veth1_vlan: left promiscuous mode [ 236.877819][ T12] veth0_vlan: left promiscuous mode [ 236.913204][ T5871] Bluetooth: hci5: command tx timeout [ 236.951442][ T976] usb 6-1: Using ep0 maxpacket: 32 [ 237.003537][ T976] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.051472][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.092698][ T976] usb 6-1: config 0 descriptor?? [ 237.096185][ T8370] loop2: detected capacity change from 0 to 64 [ 237.320158][ T976] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 237.348267][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.405598][ T976] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 237.446281][ T976] usb 6-1: media controller created [ 237.613451][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.801486][ T976] az6027: usb out operation failed. (-71) [ 237.854480][ T976] az6027: usb out operation failed. (-71) [ 237.889928][ T976] stb0899_attach: Driver disabled by Kconfig [ 237.925837][ T976] az6027: no front-end attached [ 237.925837][ T976] [ 237.961213][ T976] az6027: usb out operation failed. (-71) [ 237.981508][ T976] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 238.067739][ T8383] overlayfs: upper fs does not support file handles, falling back to index=off. [ 238.133202][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 238.208754][ T976] dvb-usb: schedule remote query interval to 400 msecs. [ 238.224812][ T8385] loop7: detected capacity change from 0 to 2048 [ 238.234113][ T976] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 238.301540][ T8385] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 238.308432][ T976] usb 6-1: USB disconnect, device number 8 [ 238.361038][ T8385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.595779][ T8393] input: syz0 as /devices/virtual/input/input24 [ 238.670041][ T8393] input: failed to attach handler leds to device input24, error: -6 [ 238.704289][ T976] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 238.992716][ T5871] Bluetooth: hci5: command tx timeout [ 239.081495][ T973] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 239.301292][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 239.328302][ T8399] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.770'. [ 239.357929][ T973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.382464][ T973] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 239.407935][ T973] usb 1-1: can't read configurations, error -71 [ 239.813352][ T12] team0 (unregistering): Port device team_slave_1 removed [ 239.999329][ T12] team0 (unregistering): Port device team_slave_0 removed [ 240.012683][ T8419] input: syz1 as /devices/virtual/input/input25 [ 240.551972][ T8411] vlan3: entered promiscuous mode [ 240.564784][ T8411] bridge0: entered promiscuous mode [ 240.575048][ T8411] vlan3: entered allmulticast mode [ 240.592822][ T8411] bridge0: entered allmulticast mode [ 241.081061][ T5871] Bluetooth: hci5: command tx timeout [ 241.266053][ T8430] loop7: detected capacity change from 0 to 40427 [ 241.467273][ T8430] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 241.494579][ T8430] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 241.581579][ T8281] chnl_net:caif_netlink_parms(): no params data found [ 241.777159][ T7537] syz-executor: attempt to access beyond end of device [ 241.777159][ T7537] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 241.809677][ T7537] CPU: 1 UID: 0 PID: 7537 Comm: syz-executor Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 241.809730][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.809753][ T7537] Call Trace: [ 241.809764][ T7537] [ 241.809778][ T7537] dump_stack_lvl+0x16c/0x1f0 [ 241.809826][ T7537] f2fs_handle_critical_error+0x624/0x9f0 [ 241.809872][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.809919][ T7537] ? f2fs_build_fault_attr+0x53/0x1f0 [ 241.809994][ T7537] f2fs_write_end_io+0x958/0xcf0 [ 241.810045][ T7537] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 241.810099][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.810158][ T7537] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 241.810203][ T7537] bio_endio+0x70d/0x850 [ 241.810258][ T7537] submit_bio_noacct+0x306/0x1eb0 [ 241.810335][ T7537] __submit_merged_bio+0x33c/0x770 [ 241.810389][ T7537] __submit_merged_write_cond+0x319/0x3f0 [ 241.810451][ T7537] f2fs_write_cache_pages+0x2067/0x2570 [ 241.810544][ T7537] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 241.810607][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.810652][ T7537] ? __kasan_check_byte+0x13/0x50 [ 241.810688][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.810736][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.810780][ T7537] ? rcu_is_watching+0x12/0xc0 [ 241.810828][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.810875][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.810921][ T7537] ? __kasan_check_byte+0x13/0x50 [ 241.810980][ T7537] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.811036][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.811157][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.811204][ T7537] ? add_lock_to_list+0x9d/0x130 [ 241.811265][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.811319][ T7537] f2fs_write_data_pages+0x4ad/0xd90 [ 241.811384][ T7537] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 241.811435][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.811494][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.811550][ T7537] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 241.811608][ T7537] do_writepages+0x27a/0x600 [ 241.811666][ T7537] ? __pfx_do_writepages+0x10/0x10 [ 241.811712][ T7537] ? do_raw_spin_unlock+0x172/0x230 [ 241.811756][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.811801][ T7537] ? _raw_spin_unlock+0x28/0x50 [ 241.811869][ T7537] filemap_fdatawrite_wbc+0x104/0x160 [ 241.811919][ T7537] ? stack_trace_save+0x8e/0xc0 [ 241.811973][ T7537] __filemap_fdatawrite_range+0xb9/0x100 [ 241.812036][ T7537] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 241.812098][ T7537] ? check_path.constprop.0+0x24/0x50 [ 241.812217][ T7537] ? find_held_lock+0x2b/0x80 [ 241.812267][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.812312][ T7537] ? do_raw_spin_unlock+0x172/0x230 [ 241.812355][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.812408][ T7537] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 241.812489][ T7537] block_operations+0x2b0/0xfe0 [ 241.812562][ T7537] ? __pfx_block_operations+0x10/0x10 [ 241.812615][ T7537] ? add_lock_to_list+0x9d/0x130 [ 241.812730][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.812774][ T7537] ? down_write+0x14d/0x200 [ 241.812821][ T7537] ? __pfx_down_write+0x10/0x10 [ 241.812870][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.812916][ T7537] ? rcu_is_watching+0x12/0xc0 [ 241.812971][ T7537] f2fs_write_checkpoint+0x2b8/0x4c60 [ 241.813037][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.813082][ T7537] ? kfree+0x2b4/0x4d0 [ 241.813126][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.813177][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.813222][ T7537] ? rcu_is_watching+0x12/0xc0 [ 241.813267][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.813312][ T7537] ? kthread_stop+0x273/0x630 [ 241.813353][ T7537] kill_f2fs_super+0x3c2/0x470 [ 241.813411][ T7537] ? __pfx_kill_f2fs_super+0x10/0x10 [ 241.813466][ T7537] ? lockdep_hardirqs_on+0x7c/0x110 [ 241.813532][ T7537] deactivate_locked_super+0xc1/0x1a0 [ 241.813592][ T7537] deactivate_super+0xde/0x100 [ 241.813650][ T7537] cleanup_mnt+0x225/0x450 [ 241.813714][ T7537] task_work_run+0x150/0x240 [ 241.813760][ T7537] ? __pfx_task_work_run+0x10/0x10 [ 241.813798][ T7537] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.813848][ T7537] ? __pfx___x64_sys_umount+0x10/0x10 [ 241.813898][ T7537] exit_to_user_mode_loop+0xeb/0x110 [ 241.813940][ T7537] do_syscall_64+0x3f6/0x4c0 [ 241.813988][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.814026][ T7537] RIP: 0033:0x7fdaa7d8ff17 [ 241.814055][ T7537] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 241.814093][ T7537] RSP: 002b:00007ffe8a94d178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 241.814128][ T7537] RAX: 0000000000000000 RBX: 00007fdaa7e11c05 RCX: 00007fdaa7d8ff17 [ 241.814153][ T7537] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8a94d230 [ 241.814176][ T7537] RBP: 00007ffe8a94d230 R08: 0000000000000000 R09: 0000000000000000 [ 241.814200][ T7537] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8a94e2c0 [ 241.814224][ T7537] R13: 00007fdaa7e11c05 R14: 000000000003b02e R15: 00007ffe8a94e300 [ 241.814278][ T7537] [ 242.438590][ T8459] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 242.446444][ T8459] netlink: 224 bytes leftover after parsing attributes in process `syz.0.791'. [ 242.481041][ T7537] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 243.376934][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.416254][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.451893][ T8281] bridge_slave_0: entered allmulticast mode [ 243.489063][ T8281] bridge_slave_0: entered promiscuous mode [ 243.551903][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.579892][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.606561][ T8281] bridge_slave_1: entered allmulticast mode [ 243.628281][ T8281] bridge_slave_1: entered promiscuous mode [ 243.786819][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.876446][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.907669][ T8490] loop0: detected capacity change from 0 to 256 [ 243.964744][ T8490] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.041245][ T8490] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 244.161371][ T8490] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 244.228391][ T8494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.378285][ T8281] team0: Port device team_slave_0 added [ 244.408652][ T8281] team0: Port device team_slave_1 added [ 244.436909][ T973] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 244.598888][ T8505] loop2: detected capacity change from 0 to 128 [ 244.601088][ T973] usb 8-1: Using ep0 maxpacket: 16 [ 244.617819][ T8505] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 244.635482][ T973] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.656060][ T973] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.665258][ T8505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.676609][ T973] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.707741][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.718434][ T973] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.731025][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.756956][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.769255][ T973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.795545][ T973] usb 8-1: Product: syz [ 244.809966][ T973] usb 8-1: Manufacturer: syz [ 244.814798][ T973] usb 8-1: SerialNumber: syz [ 244.835064][ T8281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.899205][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.937247][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.014559][ T8281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.020824][ T8510] loop5: detected capacity change from 0 to 1024 [ 245.122554][ T8510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.159869][ T30] audit: type=1800 audit(1754495516.347:27): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.805" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 245.320375][ T973] usb 8-1: 0:2 : does not exist [ 245.439167][ T8281] hsr_slave_0: entered promiscuous mode [ 245.476216][ T8281] hsr_slave_1: entered promiscuous mode [ 245.693192][ T8526] loop2: detected capacity change from 0 to 2048 [ 245.703697][ T8526] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.827315][ T8526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.934646][ T5881] Process accounting resumed [ 245.963838][ T973] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 245.979781][ T5869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.001644][ T77] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm kworker/u8:4: bg 0: block 234: padding at end of block bitmap is not set [ 246.093311][ T77] EXT4-fs (loop2): Remounting filesystem read-only [ 246.117938][ T973] usb 8-1: USB disconnect, device number 4 [ 246.320449][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.338013][ T6486] udevd[6486]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.554811][ T8281] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 246.560054][ T8537] loop5: detected capacity change from 0 to 4096 [ 246.634960][ T8281] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 246.684615][ T8544] loop2: detected capacity change from 0 to 512 [ 246.699880][ T8281] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 246.737014][ T8544] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.741749][ T8281] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 246.767665][ T8544] EXT4-fs: inline encryption not supported [ 246.846038][ T8537] ntfs3(loop5): ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 246.853019][ T8544] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.953044][ T8544] EXT4-fs (loop2): Test dummy encryption mode enabled [ 246.983004][ T8544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 247.102159][ T8544] EXT4-fs (loop2): 1 truncate cleaned up [ 247.114955][ T8544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.451429][ T5881] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 247.498408][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.566537][ T5865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.588075][ T8281] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.653531][ T5881] usb 8-1: config 4 has an invalid interface number: 44 but max is 0 [ 247.679718][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.686908][ T8403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.711991][ T5881] usb 8-1: config 4 has no interface number 0 [ 247.718126][ T5881] usb 8-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 247.784408][ T5881] usb 8-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 247.793099][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.800733][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.810302][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.865349][ T5881] usb 8-1: Product: syz [ 247.869568][ T5881] usb 8-1: Manufacturer: syz [ 247.910856][ T5881] usb 8-1: SerialNumber: syz [ 248.161796][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 248.327406][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 248.349116][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 248.370851][ T43] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 248.386037][ T5881] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 248.404432][ T43] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 248.415514][ T5881] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 248.435058][ T43] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 248.445900][ T5881] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 248.455732][ T5881] usb 8-1: media controller created [ 248.464586][ T43] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 248.477747][ T8580] input: syz0 as /devices/virtual/input/input26 [ 248.486278][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.515383][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 248.541980][ T43] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 248.556046][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.648089][ T43] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 248.749067][ T5881] DVB: Unable to find symbol dib7000p_attach() [ 248.824852][ T5881] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 248.873545][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.902463][ T8591] loop1: detected capacity change from 0 to 1024 [ 248.942815][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.047392][ T8591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.133186][ T43] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 249.157952][ T5881] rc_core: IR keymap rc-dib0700-rc5 not found [ 249.190417][ T5881] Registered IR keymap rc-empty [ 249.241759][ T5881] dvb-usb: could not initialize remote control. [ 249.248028][ T5881] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 249.271597][ T43] usb 3-1: USB disconnect, device number 9 [ 249.319556][ T8281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.329557][ T5881] dib0700: There's no endpoint for remote controller [ 249.488909][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.504711][ T8603] loop0: detected capacity change from 0 to 512 [ 249.659772][ T8603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.766678][ T973] usb 8-1: USB disconnect, device number 5 [ 249.786330][ T8603] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.849691][ T973] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 250.008903][ T30] audit: type=1326 audit(1754495521.197:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.1.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30a2b8ebe9 code=0x0 [ 250.095666][ T8617] [ 250.098004][ T8617] ===================================================== [ 250.104924][ T8617] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 250.112376][ T8617] 6.16.0-syzkaller-11852-g479058002c32 #0 Not tainted [ 250.119137][ T8617] ----------------------------------------------------- [ 250.126064][ T8617] syz.1.829/8617 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 250.133622][ T8617] ffff88807e881420 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0 [ 250.142295][ T8617] [ 250.142295][ T8617] and this task is already holding: [ 250.149652][ T8617] ffff88805da8f210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 250.158430][ T8617] which would create a new lock dependency: [ 250.164315][ T8617] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 250.171948][ T8617] [ 250.171948][ T8617] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 250.181396][ T8617] (&dev->event_lock#2){..-.}-{3:3} [ 250.181456][ T8617] [ 250.181456][ T8617] ... which became SOFTIRQ-irq-safe at: [ 250.194330][ T8617] lock_acquire+0x179/0x350 [ 250.198951][ T8617] _raw_spin_lock_irqsave+0x3a/0x60 [ 250.204263][ T8617] input_event+0x74/0xd0 [ 250.208618][ T8617] hidinput_hid_event+0x1d55/0x2420 [ 250.213911][ T8617] hid_process_event+0x4b7/0x5e0 [ 250.218960][ T8617] hid_report_raw_event+0xa0a/0x1290 [ 250.224357][ T8617] __hid_input_report.constprop.0+0x33f/0x450 [ 250.230544][ T8617] hid_irq_in+0x35e/0x870 [ 250.234974][ T8617] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 250.240455][ T8617] usb_hcd_giveback_urb+0x39b/0x450 [ 250.245759][ T8617] dummy_timer+0x1814/0x3a30 [ 250.250437][ T8617] __hrtimer_run_queues+0x202/0xad0 [ 250.255735][ T8617] hrtimer_run_softirq+0x17d/0x350 [ 250.260948][ T8617] handle_softirqs+0x219/0x8e0 [ 250.265811][ T8617] __irq_exit_rcu+0x109/0x170 [ 250.270583][ T8617] irq_exit_rcu+0x9/0x30 [ 250.274919][ T8617] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 250.280645][ T8617] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.286720][ T8617] finish_task_switch.isra.0+0x22a/0xc10 [ 250.292454][ T8617] __schedule+0x1198/0x5de0 [ 250.297050][ T8617] preempt_schedule_irq+0x51/0x90 [ 250.302162][ T8617] irqentry_exit+0x36/0x90 [ 250.306673][ T8617] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.312746][ T8617] write_comp_data+0x42/0x90 [ 250.317425][ T8617] mas_next_node+0x2a9/0xf50 [ 250.322100][ T8617] mt_validate+0x2140/0x4210 [ 250.326783][ T8617] validate_mm+0xb0/0x570 [ 250.331214][ T8617] vms_complete_munmap_vmas+0x602/0x970 [ 250.336871][ T8617] __mmap_region+0x96d/0x27b0 [ 250.341655][ T8617] mmap_region+0x1ab/0x3f0 [ 250.346180][ T8617] do_mmap+0xa3e/0x1210 [ 250.350427][ T8617] vm_mmap_pgoff+0x29e/0x470 [ 250.355117][ T8617] ksys_mmap_pgoff+0x32c/0x5c0 [ 250.359970][ T8617] __x64_sys_mmap+0x125/0x190 [ 250.364730][ T8617] do_syscall_64+0xcd/0x4c0 [ 250.369327][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.375319][ T8617] [ 250.375319][ T8617] to a SOFTIRQ-irq-unsafe lock: [ 250.382331][ T8617] (tasklist_lock){.+.+}-{3:3} [ 250.382377][ T8617] [ 250.382377][ T8617] ... which became SOFTIRQ-irq-unsafe at: [ 250.394978][ T8617] ... [ 250.394991][ T8617] lock_acquire+0x179/0x350 [ 250.402181][ T8617] _raw_read_lock+0x5f/0x70 [ 250.406768][ T8617] __do_wait+0x105/0x890 [ 250.411120][ T8617] do_wait+0x21e/0x5a0 [ 250.415296][ T8617] kernel_wait+0x9f/0x160 [ 250.419709][ T8617] call_usermodehelper_exec_work+0xf1/0x170 [ 250.425698][ T8617] process_one_work+0x9cf/0x1b70 [ 250.430728][ T8617] worker_thread+0x6c8/0xf10 [ 250.435408][ T8617] kthread+0x3c5/0x780 [ 250.439562][ T8617] ret_from_fork+0x5d7/0x6f0 [ 250.444239][ T8617] ret_from_fork_asm+0x1a/0x30 [ 250.449197][ T8617] [ 250.449197][ T8617] other info that might help us debug this: [ 250.449197][ T8617] [ 250.459413][ T8617] Chain exists of: [ 250.459413][ T8617] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 250.459413][ T8617] [ 250.472405][ T8617] Possible interrupt unsafe locking scenario: [ 250.472405][ T8617] [ 250.480708][ T8617] CPU0 CPU1 [ 250.486057][ T8617] ---- ---- [ 250.491494][ T8617] lock(tasklist_lock); [ 250.495751][ T8617] local_irq_disable(); [ 250.502490][ T8617] lock(&dev->event_lock#2); [ 250.509701][ T8617] lock(&new->fa_lock); [ 250.516464][ T8617] [ 250.519900][ T8617] lock(&dev->event_lock#2); [ 250.524760][ T8617] [ 250.524760][ T8617] *** DEADLOCK *** [ 250.524760][ T8617] [ 250.532887][ T8617] 5 locks held by syz.1.829/8617: [ 250.537913][ T8617] #0: ffff8880223e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 250.547727][ T8617] #1: ffff88802500b0b8 (&buf->lock){+.+.}-{4:4}, at: tty_ioctl+0x522/0x1680 [ 250.556574][ T8617] #2: ffff8880223e52e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_receive_buf_common+0x85/0x1980 [ 250.567445][ T8617] #3: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 250.576545][ T8617] #4: ffff88805da8f210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 250.585731][ T8617] [ 250.585731][ T8617] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 250.596123][ T8617] -> (&dev->event_lock#2){..-.}-{3:3} { [ 250.601804][ T8617] IN-SOFTIRQ-W at: [ 250.605865][ T8617] lock_acquire+0x179/0x350 [ 250.612217][ T8617] _raw_spin_lock_irqsave+0x3a/0x60 [ 250.619275][ T8617] input_event+0x74/0xd0 [ 250.625369][ T8617] hidinput_hid_event+0x1d55/0x2420 [ 250.632410][ T8617] hid_process_event+0x4b7/0x5e0 [ 250.639196][ T8617] hid_report_raw_event+0xa0a/0x1290 [ 250.646330][ T8617] __hid_input_report.constprop.0+0x33f/0x450 [ 250.654252][ T8617] hid_irq_in+0x35e/0x870 [ 250.660425][ T8617] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 250.667642][ T8617] usb_hcd_giveback_urb+0x39b/0x450 [ 250.674687][ T8617] dummy_timer+0x1814/0x3a30 [ 250.681103][ T8617] __hrtimer_run_queues+0x202/0xad0 [ 250.688152][ T8617] hrtimer_run_softirq+0x17d/0x350 [ 250.695116][ T8617] handle_softirqs+0x219/0x8e0 [ 250.701721][ T8617] __irq_exit_rcu+0x109/0x170 [ 250.708239][ T8617] irq_exit_rcu+0x9/0x30 [ 250.714317][ T8617] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 250.721777][ T8617] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.729592][ T8617] finish_task_switch.isra.0+0x22a/0xc10 [ 250.737092][ T8617] __schedule+0x1198/0x5de0 [ 250.743455][ T8617] preempt_schedule_irq+0x51/0x90 [ 250.750309][ T8617] irqentry_exit+0x36/0x90 [ 250.756558][ T8617] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.764380][ T8617] write_comp_data+0x42/0x90 [ 250.770800][ T8617] mas_next_node+0x2a9/0xf50 [ 250.777218][ T8617] mt_validate+0x2140/0x4210 [ 250.783643][ T8617] validate_mm+0xb0/0x570 [ 250.789813][ T8617] vms_complete_munmap_vmas+0x602/0x970 [ 250.797203][ T8617] __mmap_region+0x96d/0x27b0 [ 250.803820][ T8617] mmap_region+0x1ab/0x3f0 [ 250.810092][ T8617] do_mmap+0xa3e/0x1210 [ 250.816079][ T8617] vm_mmap_pgoff+0x29e/0x470 [ 250.822502][ T8617] ksys_mmap_pgoff+0x32c/0x5c0 [ 250.829096][ T8617] __x64_sys_mmap+0x125/0x190 [ 250.835619][ T8617] do_syscall_64+0xcd/0x4c0 [ 250.841956][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.849680][ T8617] INITIAL USE at: [ 250.853655][ T8617] lock_acquire+0x179/0x350 [ 250.859940][ T8617] _raw_spin_lock_irqsave+0x3a/0x60 [ 250.866903][ T8617] input_inject_event+0x9f/0x3b0 [ 250.873598][ T8617] led_set_brightness+0x217/0x290 [ 250.880375][ T8617] kbd_led_trigger_activate+0xcb/0x110 [ 250.887598][ T8617] led_trigger_set+0x59a/0xc50 [ 250.894121][ T8617] led_trigger_set_default+0x1e0/0x2e0 [ 250.901344][ T8617] led_classdev_register_ext+0x7b8/0xa10 [ 250.908735][ T8617] input_leds_connect+0x552/0x8e0 [ 250.915506][ T8617] input_attach_handler.isra.0+0x184/0x260 [ 250.923069][ T8617] input_register_device+0xab9/0x1180 [ 250.930198][ T8617] atkbd_connect+0x5f8/0xa40 [ 250.936523][ T8617] serio_driver_probe+0x7f/0xd0 [ 250.943129][ T8617] really_probe+0x241/0xa90 [ 250.949377][ T8617] __driver_probe_device+0x1de/0x440 [ 250.956405][ T8617] driver_probe_device+0x4c/0x1b0 [ 250.963178][ T8617] __driver_attach+0x283/0x580 [ 250.969684][ T8617] bus_for_each_dev+0x13e/0x1d0 [ 250.976294][ T8617] serio_handle_event+0x335/0xc30 [ 250.983072][ T8617] process_one_work+0x9cf/0x1b70 [ 250.989751][ T8617] worker_thread+0x6c8/0xf10 [ 250.996087][ T8617] kthread+0x3c5/0x780 [ 251.001898][ T8617] ret_from_fork+0x5d7/0x6f0 [ 251.008228][ T8617] ret_from_fork_asm+0x1a/0x30 [ 251.014767][ T8617] } [ 251.017339][ T8617] ... key at: [] __key.7+0x0/0x40 [ 251.024558][ T8617] -> (&new->fa_lock){....}-{3:3} { [ 251.029703][ T8617] INITIAL USE at: [ 251.033600][ T8617] lock_acquire+0x179/0x350 [ 251.039690][ T8617] _raw_write_lock_irq+0x36/0x50 [ 251.046192][ T8617] fasync_remove_entry+0xb2/0x1e0 [ 251.052792][ T8617] fasync_helper+0xaf/0xd0 [ 251.058781][ T8617] __fput+0x96b/0xb70 [ 251.064331][ T8617] task_work_run+0x150/0x240 [ 251.070489][ T8617] exit_to_user_mode_loop+0xeb/0x110 [ 251.077346][ T8617] do_syscall_64+0x3f6/0x4c0 [ 251.083509][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.090974][ T8617] INITIAL READ USE at: [ 251.095295][ T8617] lock_acquire+0x179/0x350 [ 251.101818][ T8617] _raw_read_lock_irqsave+0x74/0x90 [ 251.109017][ T8617] kill_fasync+0x138/0x510 [ 251.115448][ T8617] mousedev_notify_readers+0x6d8/0xa30 [ 251.122918][ T8617] mousedev_event+0x84e/0x1490 [ 251.129691][ T8617] input_handle_events_default+0x119/0x1b0 [ 251.137499][ T8617] input_pass_values+0x74e/0x880 [ 251.144457][ T8617] input_handle_event+0xf00/0x14d0 [ 251.151591][ T8617] input_inject_event+0x1e8/0x3b0 [ 251.158633][ T8617] evdev_write+0x457/0x750 [ 251.165063][ T8617] vfs_write+0x2a0/0x1150 [ 251.171412][ T8617] ksys_write+0x1f8/0x250 [ 251.177761][ T8617] do_syscall_64+0xcd/0x4c0 [ 251.184274][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.192177][ T8617] } [ 251.194662][ T8617] ... key at: [] __key.0+0x0/0x40 [ 251.201790][ T8617] ... acquired at: [ 251.205581][ T8617] _raw_read_lock_irqsave+0x74/0x90 [ 251.210958][ T8617] kill_fasync+0x138/0x510 [ 251.215569][ T8617] mousedev_notify_readers+0x6d8/0xa30 [ 251.221216][ T8617] mousedev_event+0x84e/0x1490 [ 251.226167][ T8617] input_handle_events_default+0x119/0x1b0 [ 251.232238][ T8617] input_pass_values+0x74e/0x880 [ 251.237373][ T8617] input_handle_event+0xf00/0x14d0 [ 251.242681][ T8617] input_inject_event+0x1e8/0x3b0 [ 251.247901][ T8617] evdev_write+0x457/0x750 [ 251.252509][ T8617] vfs_write+0x2a0/0x1150 [ 251.257043][ T8617] ksys_write+0x1f8/0x250 [ 251.261570][ T8617] do_syscall_64+0xcd/0x4c0 [ 251.266259][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.272331][ T8617] [ 251.274639][ T8617] [ 251.274639][ T8617] the dependencies between the lock to be acquired [ 251.274654][ T8617] and SOFTIRQ-irq-unsafe lock: [ 251.288148][ T8617] -> (tasklist_lock){.+.+}-{3:3} { [ 251.293382][ T8617] HARDIRQ-ON-R at: [ 251.297443][ T8617] lock_acquire+0x179/0x350 [ 251.303799][ T8617] _raw_read_lock+0x5f/0x70 [ 251.310129][ T8617] __do_wait+0x105/0x890 [ 251.316222][ T8617] do_wait+0x21e/0x5a0 [ 251.322142][ T8617] kernel_wait+0x9f/0x160 [ 251.328294][ T8617] call_usermodehelper_exec_work+0xf1/0x170 [ 251.336025][ T8617] process_one_work+0x9cf/0x1b70 [ 251.342795][ T8617] worker_thread+0x6c8/0xf10 [ 251.349217][ T8617] kthread+0x3c5/0x780 [ 251.355110][ T8617] ret_from_fork+0x5d7/0x6f0 [ 251.361533][ T8617] ret_from_fork_asm+0x1a/0x30 [ 251.368137][ T8617] SOFTIRQ-ON-R at: [ 251.372202][ T8617] lock_acquire+0x179/0x350 [ 251.378561][ T8617] _raw_read_lock+0x5f/0x70 [ 251.384895][ T8617] __do_wait+0x105/0x890 [ 251.390987][ T8617] do_wait+0x21e/0x5a0 [ 251.396906][ T8617] kernel_wait+0x9f/0x160 [ 251.403059][ T8617] call_usermodehelper_exec_work+0xf1/0x170 [ 251.410791][ T8617] process_one_work+0x9cf/0x1b70 [ 251.417559][ T8617] worker_thread+0x6c8/0xf10 [ 251.423982][ T8617] kthread+0x3c5/0x780 [ 251.429877][ T8617] ret_from_fork+0x5d7/0x6f0 [ 251.436294][ T8617] ret_from_fork_asm+0x1a/0x30 [ 251.442895][ T8617] INITIAL USE at: [ 251.446871][ T8617] lock_acquire+0x179/0x350 [ 251.453138][ T8617] _raw_write_lock_irq+0x36/0x50 [ 251.459841][ T8617] copy_process+0x4caf/0x7690 [ 251.466277][ T8617] kernel_clone+0xfc/0x930 [ 251.472453][ T8617] user_mode_thread+0xc7/0x110 [ 251.478975][ T8617] rest_init+0x23/0x2b0 [ 251.484886][ T8617] start_kernel+0x3ee/0x4d0 [ 251.491139][ T8617] x86_64_start_reservations+0x18/0x30 [ 251.498349][ T8617] x86_64_start_kernel+0x130/0x190 [ 251.505210][ T8617] common_startup_64+0x13e/0x148 [ 251.511915][ T8617] INITIAL READ USE at: [ 251.516350][ T8617] lock_acquire+0x179/0x350 [ 251.523051][ T8617] _raw_read_lock+0x5f/0x70 [ 251.529727][ T8617] __do_wait+0x105/0x890 [ 251.536165][ T8617] do_wait+0x21e/0x5a0 [ 251.542429][ T8617] kernel_wait+0x9f/0x160 [ 251.548951][ T8617] call_usermodehelper_exec_work+0xf1/0x170 [ 251.557029][ T8617] process_one_work+0x9cf/0x1b70 [ 251.564147][ T8617] worker_thread+0x6c8/0xf10 [ 251.570918][ T8617] kthread+0x3c5/0x780 [ 251.577165][ T8617] ret_from_fork+0x5d7/0x6f0 [ 251.583928][ T8617] ret_from_fork_asm+0x1a/0x30 [ 251.590874][ T8617] } [ 251.593444][ T8617] ... key at: [] tasklist_lock+0x18/0x40 [ 251.601284][ T8617] ... acquired at: [ 251.605165][ T8617] _raw_read_lock+0x5f/0x70 [ 251.609840][ T8617] send_sigurg+0xed/0xc80 [ 251.614356][ T8617] sk_send_sigurg+0x76/0x360 [ 251.619120][ T8617] tcp_urg+0x341/0xb80 [ 251.623373][ T8617] tcp_rcv_established+0x87a/0x23f0 [ 251.628764][ T8617] tcp_v4_do_rcv+0x5ca/0xa90 [ 251.633546][ T8617] __release_sock+0x31b/0x400 [ 251.638400][ T8617] release_sock+0x5a/0x220 [ 251.642992][ T8617] tcp_sendmsg+0x38/0x50 [ 251.647426][ T8617] inet6_sendmsg+0xb9/0x140 [ 251.652115][ T8617] ____sys_sendmsg+0x705/0xc70 [ 251.657066][ T8617] ___sys_sendmsg+0x134/0x1d0 [ 251.661914][ T8617] __sys_sendmmsg+0x200/0x420 [ 251.666770][ T8617] __x64_sys_sendmmsg+0x9c/0x100 [ 251.671883][ T8617] do_syscall_64+0xcd/0x4c0 [ 251.676568][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.682638][ T8617] [ 251.684944][ T8617] -> (&f_owner->lock){....}-{3:3} { [ 251.690176][ T8617] INITIAL USE at: [ 251.694068][ T8617] lock_acquire+0x179/0x350 [ 251.700164][ T8617] _raw_write_lock_irq+0x36/0x50 [ 251.706668][ T8617] __f_setown+0x61/0x3c0 [ 251.712483][ T8617] fcntl_dirnotify+0x7b1/0xb60 [ 251.718821][ T8617] do_fcntl+0xe62/0x15a0 [ 251.724633][ T8617] __x64_sys_fcntl+0x163/0x200 [ 251.730968][ T8617] do_syscall_64+0xcd/0x4c0 [ 251.737038][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.744496][ T8617] INITIAL READ USE at: [ 251.748822][ T8617] lock_acquire+0x179/0x350 [ 251.755346][ T8617] _raw_read_lock_irqsave+0x74/0x90 [ 251.762547][ T8617] send_sigio+0x31/0x3e0 [ 251.768803][ T8617] dnotify_handle_event+0x15e/0x2b0 [ 251.776040][ T8617] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 251.784492][ T8617] fsnotify+0x13d6/0x1dc0 [ 251.790847][ T8617] vfs_create+0x641/0x7a0 [ 251.797192][ T8617] do_mknodat+0x3d3/0x5d0 [ 251.803551][ T8617] __x64_sys_mknodat+0xaf/0xe0 [ 251.810315][ T8617] do_syscall_64+0xcd/0x4c0 [ 251.816826][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.824722][ T8617] } [ 251.827211][ T8617] ... key at: [] __key.1+0x0/0x40 [ 251.834341][ T8617] ... acquired at: [ 251.838132][ T8617] lock_acquire+0x179/0x350 [ 251.842835][ T8617] _raw_read_lock_irqsave+0x74/0x90 [ 251.848207][ T8617] send_sigio+0x31/0x3e0 [ 251.852641][ T8617] kill_fasync+0x214/0x510 [ 251.857244][ T8617] n_tty_receive_buf_common+0x5d1/0x1980 [ 251.863076][ T8617] tty_ioctl+0x583/0x1680 [ 251.867589][ T8617] __x64_sys_ioctl+0x18e/0x210 [ 251.872555][ T8617] do_syscall_64+0xcd/0x4c0 [ 251.877256][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.883329][ T8617] [ 251.885638][ T8617] [ 251.885638][ T8617] stack backtrace: [ 251.891533][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.1.829 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 251.891583][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.891604][ T8617] Call Trace: [ 251.891616][ T8617] [ 251.891630][ T8617] dump_stack_lvl+0x116/0x1f0 [ 251.891673][ T8617] check_irq_usage+0x7dc/0x920 [ 251.891738][ T8617] ? check_path.constprop.0+0x24/0x50 [ 251.891796][ T8617] ? __lock_acquire+0x12bc/0x1ce0 [ 251.891850][ T8617] __lock_acquire+0x12bc/0x1ce0 [ 251.891910][ T8617] ? __lock_acquire+0x107f/0x1ce0 [ 251.891969][ T8617] lock_acquire+0x179/0x350 [ 251.892025][ T8617] ? send_sigio+0x31/0x3e0 [ 251.892070][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.892113][ T8617] ? lock_acquire+0x179/0x350 [ 251.892172][ T8617] _raw_read_lock_irqsave+0x74/0x90 [ 251.892206][ T8617] ? send_sigio+0x31/0x3e0 [ 251.892247][ T8617] send_sigio+0x31/0x3e0 [ 251.892288][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.892335][ T8617] kill_fasync+0x214/0x510 [ 251.892379][ T8617] n_tty_receive_buf_common+0x5d1/0x1980 [ 251.892448][ T8617] ? __pfx_n_tty_receive_buf+0x10/0x10 [ 251.892501][ T8617] tty_ioctl+0x583/0x1680 [ 251.892546][ T8617] ? __pfx_tty_ioctl+0x10/0x10 [ 251.892590][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.892633][ T8617] ? find_held_lock+0x2b/0x80 [ 251.892674][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.892717][ T8617] ? hook_file_ioctl_common+0x145/0x410 [ 251.892763][ T8617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 251.892806][ T8617] ? __fget_files+0x20e/0x3c0 [ 251.892839][ T8617] ? __pfx_tty_ioctl+0x10/0x10 [ 251.892892][ T8617] __x64_sys_ioctl+0x18e/0x210 [ 251.892944][ T8617] do_syscall_64+0xcd/0x4c0 [ 251.892986][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.893022][ T8617] RIP: 0033:0x7f30a2b8ebe9 [ 251.893048][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.893083][ T8617] RSP: 002b:00007f30a39fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.893116][ T8617] RAX: ffffffffffffffda RBX: 00007f30a2db6090 RCX: 00007f30a2b8ebe9 [ 251.893140][ T8617] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 251.893163][ T8617] RBP: 00007f30a2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 251.893185][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.893206][ T8617] R13: 00007f30a2db6128 R14: 00007f30a2db6090 R15: 00007ffe2e0f52a8 [ 251.893241][ T8617] SYZFAIL: failed to send rpc fd=3 want=140624 sent=0 n=-1 (errno 32: Broken pipe) [ 252.601560][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.205514][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.338833][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.508924][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.588980][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.737267][ T77] bridge_slave_1: left allmulticast mode [ 253.744305][ T77] bridge_slave_1: left promiscuous mode [ 253.750342][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.784022][ T77] bridge_slave_0: left allmulticast mode [ 253.789692][ T77] bridge_slave_0: left promiscuous mode [ 253.811172][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.966999][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.977402][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.987167][ T77] bond0 (unregistering): Released all slaves [ 254.207696][ T77] hsr_slave_0: left promiscuous mode [ 254.216612][ T77] hsr_slave_1: left promiscuous mode [ 254.223888][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.233618][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.242246][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.249635][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.264463][ T77] veth1_macvtap: left promiscuous mode [ 254.270061][ T77] veth0_macvtap: left promiscuous mode [ 254.287754][ T77] veth1_vlan: left promiscuous mode [ 254.293919][ T77] veth0_vlan: left promiscuous mode [ 254.507680][ T77] team0 (unregistering): Port device team_slave_1 removed [ 254.534132][ T77] team0 (unregistering): Port device team_slave_0 removed [ 255.162141][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.230024][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.305139][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.378823][ T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.485838][ T77] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.496768][ T77] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.567384][ T77] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.577682][ T77] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.627049][ T77] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.637988][ T77] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.676370][ T77] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.686866][ T77] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.795750][ T77] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.846703][ T77] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.897798][ T77] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.936536][ T77] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.046519][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.107240][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.147834][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.212455][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.329904][ T77] bridge_slave_1: left allmulticast mode [ 256.335899][ T77] bridge_slave_1: left promiscuous mode [ 256.341769][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.350520][ T77] bridge_slave_0: left allmulticast mode [ 256.357595][ T77] bridge_slave_0: left promiscuous mode [ 256.363395][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.374660][ T77] bridge_slave_1: left allmulticast mode [ 256.380297][ T77] bridge_slave_1: left promiscuous mode [ 256.386104][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.394527][ T77] bridge_slave_0: left allmulticast mode [ 256.400151][ T77] bridge_slave_0: left promiscuous mode [ 256.406053][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.415205][ T77] bridge_slave_1: left allmulticast mode [ 256.420826][ T77] bridge_slave_1: left promiscuous mode [ 256.426780][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.435895][ T77] bridge_slave_0: left allmulticast mode [ 256.441656][ T77] bridge_slave_0: left promiscuous mode [ 256.447312][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.457799][ T77] bridge_slave_1: left allmulticast mode [ 256.463545][ T77] bridge_slave_1: left promiscuous mode [ 256.469195][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.478320][ T77] bridge_slave_0: left allmulticast mode [ 256.484341][ T77] bridge_slave_0: left promiscuous mode [ 256.490015][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.499614][ T77] bridge0: port 3(dummy0) entered disabled state [ 256.507688][ T77] bridge_slave_1: left allmulticast mode [ 256.513627][ T77] bridge_slave_1: left promiscuous mode [ 256.519276][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.527783][ T77] bridge_slave_0: left allmulticast mode [ 256.533913][ T77] bridge_slave_0: left promiscuous mode [ 256.539561][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.726373][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.739214][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.748896][ T77] bond0 (unregistering): Released all slaves [ 256.838636][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.848901][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.862331][ T77] bond0 (unregistering): Released all slaves [ 256.956485][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.968324][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.978660][ T77] bond0 (unregistering): Released all slaves [ 257.047859][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.060373][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.070072][ T77] bond0 (unregistering): Released all slaves [ 257.134032][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.144049][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.155586][ T77] bond0 (unregistering): Released all slaves [ 257.287457][ T77] tipc: Left network mode [ 257.813574][ T77] hsr_slave_0: left promiscuous mode [ 257.819501][ T77] hsr_slave_1: left promiscuous mode [ 257.829790][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.839045][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.851998][ T77] hsr_slave_0: left promiscuous mode [ 257.857793][ T77] hsr_slave_1: left promiscuous mode [ 257.865716][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.873450][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.883641][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.893140][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.906010][ T77] hsr_slave_0: left promiscuous mode [ 257.911846][ T77] hsr_slave_1: left promiscuous mode [ 257.917630][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.928071][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.936263][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.946963][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.958236][ T77] hsr_slave_0: left promiscuous mode [ 257.966117][ T77] hsr_slave_1: left promiscuous mode [ 257.972033][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.979408][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.989513][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.997565][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.010813][ T77] hsr_slave_0: left promiscuous mode [ 258.017223][ T77] hsr_slave_1: left promiscuous mode [ 258.025126][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.033469][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.043639][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.052808][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.080588][ T77] veth1_macvtap: left promiscuous mode [ 258.088049][ T77] veth0_macvtap: left promiscuous mode [ 258.094191][ T77] veth1_vlan: left promiscuous mode [ 258.099475][ T77] veth0_vlan: left promiscuous mode [ 258.108376][ T77] veth1_macvtap: left promiscuous mode [ 258.118488][ T77] veth0_macvtap: left promiscuous mode [ 258.126251][ T77] veth1_vlan: left promiscuous mode [ 258.131665][ T77] veth0_vlan: left promiscuous mode [ 258.137832][ T77] veth1_macvtap: left promiscuous mode [ 258.146225][ T77] veth0_macvtap: left promiscuous mode [ 258.152416][ T77] veth1_vlan: left promiscuous mode [ 258.157702][ T77] veth0_vlan: left promiscuous mode [ 258.167127][ T77] veth1_macvtap: left promiscuous mode [ 258.172768][ T77] veth0_macvtap: left promiscuous mode [ 258.178381][ T77] veth1_vlan: left promiscuous mode [ 258.185868][ T77] veth0_vlan: left promiscuous mode [ 258.544915][ T77] team0 (unregistering): Port device team_slave_1 removed [ 258.558258][ T77] team0 (unregistering): Port device team_slave_0 removed [ 258.709631][ T77] team0 (unregistering): Port device team_slave_1 removed [ 258.741275][ T77] team0 (unregistering): Port device team_slave_0 removed [ 258.908031][ T77] team0 (unregistering): Port device team_slave_1 removed [ 258.928303][ T77] team0 (unregistering): Port device team_slave_0 removed [ 259.105118][ T77] team0 (unregistering): Port device team_slave_1 removed [ 259.131491][ T77] team0 (unregistering): Port device team_slave_0 removed [ 259.308805][ T77] team0 (unregistering): Port device team_slave_1 removed [ 259.327871][ T77] team0 (unregistering): Port device team_slave_0 removed