last executing test programs: 7.478531047s ago: executing program 4 (id=3409): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096}) (fail_nth: 3) 7.329032071s ago: executing program 1 (id=3413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000028c0)='./file0\x00', &(0x7f0000002900), 0x100) 5.876480863s ago: executing program 1 (id=3418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setreuid(0x0, 0xee01) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x27) 4.584065254s ago: executing program 1 (id=3421): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x2, 0x20000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="73a0", 0x2}], 0x1, &(0x7f0000000600)=[{0x10, 0x29}], 0x10}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@private1}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xf2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) listen(r1, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 4.533024647s ago: executing program 0 (id=3423): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x83481, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0c, &(0x7f0000000040)) 4.351319333s ago: executing program 1 (id=3424): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x83481, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0c, &(0x7f0000000040)) (fail_nth: 1) 4.30982449s ago: executing program 0 (id=3425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r3, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) connect$802154_dgram(r4, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) 4.047538465s ago: executing program 1 (id=3427): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='maps\x00') r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='ro\x00', 0x0, 0x4) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80000000000006, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000002980)={[{@dioread_lock}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000440)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") r3 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000180)='./bus\x00', 0x10000) finit_module(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x382, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0x7c, 0x0, 0x7fff0000}]}) write$P9_RREAD(r2, &(0x7f0000000080)={0xb, 0x75, 0x1}, 0xb) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100677265746170000018000280050013000100000005000a000000000004001200"], 0x50}}, 0x44000) sendmsg$802154_raw(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000067c0)={&(0x7f0000000340)="081fc9fba4114a2fa677793a5189bcbc814828c1a6418c7cc3f7a227b500eee616db0809a4801774dd03d34abed3aee286b83adf8e9b1815c22d083841d8dd26900bb56d967ac427e2e2aa67a02a79c695e2b6c2119773aa1d571e7eeab46119351a912ef14d2ce7ac7fec8019d955f79230eaaa904eeeaff221", 0x7a}}, 0x400008c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r3, r8}, 0xc) 3.76133005s ago: executing program 0 (id=3429): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa300090504"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) chdir(0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x99) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x20000000000006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.682999129s ago: executing program 4 (id=3430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x86) socket$inet6(0xa, 0x3, 0xfffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, 0x0, 0x0) 3.665651701s ago: executing program 2 (id=3431): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) (async) r1 = fanotify_init(0x10, 0x1) fanotify_mark(r1, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) (async) listen(r0, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_0\x00', 0x10) (async) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa02000000000086dd6c370c89001984fffc020000000000000000000000000000fe800000000000000000080000000000000094e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0xfffffffffffffea9) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async) sendto$inet6(r8, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r8, 0x0) (async) sendmmsg$sock(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x8015) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="019ecca635000000f1ff3800000008000300", @ANYRES32=r10], 0x38}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r11, &(0x7f0000000080), &(0x7f0000000100), 0x2}, 0x20) 3.182557007s ago: executing program 2 (id=3435): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x8000000) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 2.407200462s ago: executing program 4 (id=3437): syz_mount_image$fuse(0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@user_xattr}, {@noblock_validity}, {@data_err_ignore}, {@mblk_io_submit}, {@orlov}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@noauto_da_alloc}]}, 0x6, 0x61e, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiayuqXTi1uoQ9I0343zMGvZbPyFiDiRPab5pzZZ/lhLutfxA5BPd09mO/KlNPVw/5f2PRr9n1jV/6lfG2rdd21Gv/d/nft/jf39UO0ceaGlH5b2Wc62f8lSa8Z3757+sFP5zf2/dErLb/QFe+He7YgDLfG/kwab9X/S+JM22z9d5fyJjZXx0tc/nO60rN/xV+9EHGx7/POwV5rOtV6fHM6WlY+Vj8zMVqYn6n/blvH5F69/2qn8fsefbv/dHeJv2v6F1uel78m1DZbx2dk7lzstG1k3/sL3g0n9eHMwy3lzcn7+ejliMDmTrVK/kFXLP7p2XRrrNF4jjf/Q/9u3/xWf/9srX2e48ZW5AddevXS/07LNbP+mi8kPqhusQydp/FPrb/9V7T/N+2A5dWvNMn557cZ/Oy1bK/7hLcYGAAAAAAAAeVOoXYNNCuPL84XC+Hh9vOw/Y3ehcnVu/qmZqzeuTEUcqv0/ZKnQuNI9Wk8nabqc/T9sI320Jf10ROyLiI+Kw7X0+IWrlal+Bw8AAAAAAAAAAAAAAAAAAACPiT3Z+P/Gfap/LtbH/wM50c0bzAGPN+0f8qvW/lfd4gnIA/t/yC/tH/JL+4f80v4hv7R/yC/tH/JL+4f80v4BAAAAYEfa97+73yYRsfT8cG1KDWbLjAiCna3U7woAfVPsdwWAvlm+9K+zD7mzof7/79mPA3a/OkAfJO0ya52D6tqN/27bZwIAAAAAAAAAAAAAXXBwf/vx/4mxwbDjGfYH+bWF8f9+OgCecH76H/LLMT6w3ij+oU4LjP8HAAAAAAAAAAAAgJ4ZqU1JYTwbCzwShcL4eMTfImJvlJKZ2cr0RET8PSK+KZZ2pelyvysNAAAAAAAAAAAAAAAAAAAAO8zcwuKlyUpl+nrzzB+rcnb2TOMuqD0o64V4xGdF0vu3ZTgilnNKEY9a5+7N7Mo+tlt5nYG5hcXkt2pNErEUj0+AW4prm2fW/eoY7OoXEwAAAAAAAAAAAAAAAAAA5FDT2OP2DnzS4xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQO89vP9/92b6HSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GT6KwAA//9Fwz1e") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000780)=ANY=[], 0x5, 0x826, &(0x7f00000008c0)="$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") gettid() openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x81) 1.675890169s ago: executing program 2 (id=3442): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r1, 0xe}, 0x8) (fail_nth: 1) 1.586319173s ago: executing program 0 (id=3443): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) poll(&(0x7f0000000300)=[{r0, 0x188}, {0xffffffffffffffff, 0x80c0}], 0x2, 0xffffffff) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) 1.455803242s ago: executing program 2 (id=3445): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x109000, 0x20, 0x2b}, 0x18) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x40, 0x1, {0x1, @win={{0xfffffffc, 0x4, 0x278e, 0x8}, 0x3, 0xfffffff8, 0x0, 0xfffffffc, 0x0}}, 0x800000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r2 = memfd_create(&(0x7f0000000b80)='v\xa6\xf5hj6,rR\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8b\x8e\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadh\x8f\x0f\xff\x02n\x9d\x85\xea\x1ao}\x12\x99\xbc{\x9c\x82Sp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\x02\x00\x00\x00q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5\t\xaag\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xecA+r\xc8HZtU\x1e\xcf\x050\xb9\x1a0\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f\n\xe1\x93f\xfe-tnjr\x1e\x1en*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98\xf0\xb8}P\x15\xcc\x05\xfb\xc1\xc3\xb7g\xa7\x90\x17|*Y+\xd7\xe9\xafx\r\xa57\x85\xe4\xb0e\xe6Rj\x19\x10\xd47\x94\xa2X \xea\x04\xb0\xb1\xe4\xae\x82f\xad\x99\xf7\xf8df\xd4\xe9\x84\x84\xa8\xbd\xaea\xcb\xd4\xdco\x95f_!\xe9\xa7\xaen\xa6I\xf1\xa1Y\xc1\x8b\x1b\xa1\x8aH&\x15\xb7\xf0\x83\x9dz}\x8a\x975P|\xb9\xe0|\xb1\xe7\x88Ah\xea0X:\xd3\x9f\x1c\xcbl\x87T)\xa2w\x81\x12\xd3\xcf\x13\xf9d\xb0E\x19\x1e\x836\xa2\x87\xbd\xfd\x14\xff\x92\xb4,S\xdbx\xaeZ\xc6\x93\xfff\x88\xa2\x06rdq=\"\xee2\xa11\\X\x0fY\xf0\xfahr\x9d@\xd3o\xf9\x87wL\xf9\xdaq1\r\xba-\xe5\xe4\xa4\xef\xf3\x05\xcd\xe5\x89%', 0x0) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) readlinkat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) 1.363336286s ago: executing program 0 (id=3447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000a, 0x110, r0, 0x8b357000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x2, @short={0x2, 0x2, 0xaaa2}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000030000001e1afdc86d38af5ae1f8bfa8", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fcffffff18400000f9ffffff000000000000000085100000fdffffff8510"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 1.207775232s ago: executing program 2 (id=3448): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) unlink(&(0x7f0000000280)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x6, 0xf, 0x8, 0x41}, 0x50) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17c, &(0x7f0000000240)="$eJzsmD9PwkAYxp+7IkTjF9DFARLRxNIWNS4OxM04mPgvbhKpBCyi0ERhc3T0I/gF/AIuJiZ+A3d1UQdGF5ea3h30JAI6aGJ8f8PL7+jb4/qSPENBEMS/5fHh9f7p7e7WADCKFBLq+2cj6uFa//H0UWG5vHJ5dn619JK8GevejwEIgq//fgzAdc6Ar9ZB8PHulPpcB+/4BjimlG+BwVS+A45N5S4YtpWXNa+G/aa5V/Jcc7fqFUKxwmKHxQlLtvt8rVOGgnY+pl2vN5r7ec9zaz8og+bXynEsaufT/6/2bCxtfjY4bOVZMKwpX0CiPRs5Eu35x2PR/sYvPz8JCclfkyifgguGSS2fYlp+ZPzKYabeaM6UKvmiW3QPHCc7b81a1pyTEUEka5/8Gxb5NKLtP9SjN87iOMn7fs2WtbN2ZP0scbnIP450Uq7D7I/3PI28ztR9TFja6NNOEARBEARBEARBEARBEATxDSbAxFvQATirovs9AAD//+xGeBw=") 1.137614385s ago: executing program 0 (id=3450): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276", @ANYRESOCT, @ANYRESOCT], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) 930.713241ms ago: executing program 2 (id=3452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0xee00, 0x0) fchmod(0xffffffffffffffff, 0x5a) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc8, 0x2}, {0xc9, 0x1}]}}}, 0xc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4e328000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 851.960013ms ago: executing program 4 (id=3453): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001"], 0x122}}, 0x0) 757.642551ms ago: executing program 3 (id=3454): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_open_dev$dri(&(0x7f0000000240), 0x3f, 0x202) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x2000000, 0x0) socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb2, 0x7}, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) 647.656738ms ago: executing program 1 (id=3455): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001020010030904"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x80049370, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001280)=ANY=[@ANYBLOB="12011001000000406a05bc0040000102030109022d000101c500020904000a02030100010921fdff050122630f0905810320800809000905020310000780b7"], &(0x7f00000011c0)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x300, 0x76, 0xff, 0x2, 0x8, 0x6}, 0x2d, &(0x7f00000012c0)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x9, 0x1de5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xb, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d408b91dc8c6a8c53219c46b94148370"}]}, 0x1, [{0x34, &(0x7f0000001240)=@string={0x34, 0x3, "c0857a6d6667ca0784fd1727881e41190487d4fb8501006841105813bc0b2be565e509b40099f67acd62ba076e7cc02b485c"}}]}) ioctl$COMEDI_LOCK(r7, 0x6405) close_range(r7, r7, 0x2) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r8, &(0x7f0000019680), 0x0, 0x20004855) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, 0x0, 0xfc40) ioctl$COMEDI_SUBDINFO(r7, 0x80486402, &(0x7f0000001080)) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={r5, &(0x7f0000000000)='-^-,.\\\'^&\x00', 0x0, &(0x7f0000001300)={@_ha_fsid={[0x6, 0xb8b]}, {0x0, 0x401, 0x1, 0x101}}, 0xfffffff7, &(0x7f00000000c0), 0x0}) write$UHID_INPUT(r10, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 647.347553ms ago: executing program 3 (id=3456): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r2 = socket$inet6(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 553.616864ms ago: executing program 4 (id=3457): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) 493.33214ms ago: executing program 3 (id=3458): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a0c000000000000000a000000"], 0x14}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) fgetxattr(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000300)=""/131, 0x83) syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000000c0)=0x5, 0x8) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000801, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r2, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r7, &(0x7f0000000000)={0xf, 0x2d, 0x0, 0x3a, 0x2, 0x2c}, 0x48) 305.490257ms ago: executing program 4 (id=3459): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3122861, &(0x7f0000000500), 0x1, 0x547, &(0x7f0000001440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r5 = socket(0x10, 0x803, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000080)="53000000b79269c170b9291ca3e588726b9dd721c4dc9d273d33512f6d550e973041da17c27124e49606da8454534e33d8214dd8ad644686726bfbceec85732331f0007274e4c10275b878671d222e489350124f8df1f577", 0x58}], 0x2) poll(&(0x7f0000000100)=[{r6, 0x1420}], 0x1, 0x71) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newtfilter={0x2e0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x2b0, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_EMATCHES={0x284, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x7fff}, {0x7, 0x6, 0x1, "7aa217dd1d44"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb03}}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xb681, 0x2, 0x5}, {0xffff, 0x4, 0x1, "97de2182"}}}, @TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x1}, "0fecfd1ac21383b6440922f25cc2d4d0e8de2570ebce59a97366c88b3ce863941aa3376597327ffe6c2d82fa4312151506979e03289695817f1c640d025671eaef47b9bf9844e6499327fef4b70f5a7b84a47b14dd975892e209116656ea071de132dc2b5b42be286731c2638b883a62ede6f2e1516f8ec12b2c1b441f67aae55fd97fa520ec213e6e45aacf60e75bcd5870bf04e6"}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x8}, {0x5, 0x7, 0x400, 0x4, 0x7, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x1000}, {0x1, 0x4a, 0x7, 0x1, 0x5, 0x1, 0x203f1bf3b5cda99f}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x5bb6}, {0x6, 0x1, 0x2, 'U'}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x88, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x6}, "8c5e068c131514039f99f4a8ebaa3c0aca33e4337694ba30d3e058718ee9dc98ad2cf37a5e365c02451d5e359f98ad9fad0c18c679c266bf6d16165164b7d83a00323036f6a666fb16de3907be6e11fd36f560f79f7b491fe9485c9e7c399d797297b30f5d8b224cd12f81c67e465c630fe82bfe86a7ed2277"}}, @TCF_EM_META={0x3c, 0x3a0, 0x0, 0x0, {{0xfffa, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xd8, 0x1}, {0xfffa, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8}, {0x7, 0x2, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0xd, 0x6}, {0x4c, 0x3, 0x2}}}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x4}, {0x800, 0x5, 0x1, "a549b53e6b"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x7}, {0xb38, 0x8, 0xffffd711, 0xffffd4c9}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x10, 0x7, 0x5}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x74af, 0x8, 0x6}, {0x4, 0x5, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1390}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xf, 0x8}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) readahead(r1, 0xffffffffffff9c86, 0x0) 257.399657ms ago: executing program 3 (id=3460): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x1, 0x5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "0f"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 79.53163ms ago: executing program 3 (id=3461): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000001780)={[], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x0, 0x543, &(0x7f0000001200)="$eJzs3e9rJGcdAPDvzGbvcnepyanIWbAttnJX9HaTxrZRpD1B1DcFtb4/Y7IXQjbZI7upl1A0xT9AEFFB3/tG8A8QSsF/QISCvhcVReSqL/VGZmfS5sduNpdLsr3N5wPDPM/8+n6fITuZXzwTwLn1TETciohKRDwfEZPl9LQcbueV7WK59+6/uZAPSWTZ6/9KIimn7Wwrr49FxJVilRiPiG99LeK7ycG47c2tlflms7Fe1uud1bv19ubWzeXV+aXGUmNtdnbmpbmX516cm85KxYLbx2vnVES88pW//fRHv/rqK29/7nt/vv2PG9/P0/rSJ4q8I2LheFs+XLHtandf7Mj30fppBBuSvD3VyrCzAADgKPJz/I9GxKe75/+TUemezQEAAACjJHt1Iv6bRGQP7+pxVgIAAADOXhoRE5GktfJdgIlI01qteIf343E5bbbanc/eaW2sLebzIqaimt5ZbjamI+JiUU/y+kz5ju1O/YV99dmIuBoRP5m81K3XFlrNxWHf/AAAAIBz4srTe6///zOZ5uWLw84LAAAAOGFTfSsAAADAqHDJDwAAAKPP9T8AAACMtG+89lo+ZDvf8V58Y3NjpfXGzcVGe6W2urFQW2it360ttVpL3T77Vgdtr9lq3f18rG3cq3ca7U69vbl1e7W1sda5vbznE9gAAADAGbr69Dt/SiJi+4uXukOU/QD2cOFsMwM+VP467ASAk1QZdgLA0IwNOwFgaKoDl3CEgFGXDJh/8OWd4l5h/P508gEAAE7e9U/uff5/ade8wfcGgMdZn3d9AIAR5ukenF/V474BeO2kMwGG5SPF6GK/+X077+jz/P+Xu8rFPYYsO3ZyAADAiZjoDklaK8/TJyJNa7WIJ7qfBagmd5abjeny+uCPk9WLeX2mu2Yy8J1hAAAAAAAAAAAAAAAAAAAAAAAAAKCQZUlkg1W6iwIAAACPpYj070m3N/+I65PPTey9O7Dvq1+/eP1n9+Y7nfWZiAtfL77qdSEiOj8vp7+Q+SQAAAAADNNKMSqu08vxzLCTAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDUvHf/zYWd4Szj/vPLETHVK/5YjHfH41GNiMv/TmJs13pJRFROIP72WxFxrVf8JB5kWTZVZtEr/qVTjj/V3TW946cRceUE4sN59k5+/LnV6/eXxjPdce/f31g5PKr+x7/0/eNfpc/x54l99X6efPc39b7x34p4cqz38WcnflLE3xMirzx7xDZ+59tbWz1n7Npkr/i7Y9U7q3fr7c2tm8ur80uNpcba7OzMS3Mvz704N12/s9xsZElEszHdM8yPP/XbB4e1/3Kf+FN7239g/z93pNZn8b93793/WFGp9op/49ne/3+v9Ymflv/7PlOW8/nXd8rbRXm3p379h6cOa/9in/aPD2j/jSO1P77w/Dd/+Jeecw7sDQDgLLQ3t1bmm83G+iGF8fen3IqIAQufTeHVoUY/jUJ8ONIYViH7QfH3+FBrPcj2TXm41QcXskdZfSwePY0LB3+nlTjuBpOI7XxbR/yDBAAARswHJ/2HPUECAAAAAAAAAAAAAAAAAAAATtMROg97+3dxoMux8YfpCHB/zO3hNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FD/DwAA////o8rt") timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') bind$802154_raw(r0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x50, 0x3c, 0xff, @rand_addr=' \x01\x00', @mcast2, {[@fragment={0x3b, 0x0, 0xaf, 0x1, 0x0, 0x0, 0x67}], {0x2, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "b7d67dc4918c0dde6c2287a05b00", "b98d0cb2b4a798335492f9ccc932f7f526bf46aa1b0277fa9269cfb4fdf5df7c"}}}}}}}, 0x0) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7ffff004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000201000010126bd8d00fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="621d020000000000140003007465616d30000000000000000000000008000400d40000001c0016801800018014000a0080000000000000000600000000000000"], 0x58}}, 0x20084084) 0s ago: executing program 3 (id=3462): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa300090504"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) chdir(0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x99) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): RSP: 002b:00007ff815d26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.092812][T15982] RAX: ffffffffffffffda RBX: 00007ff817d45fa0 RCX: 00007ff817acce59 [ 838.092826][T15982] RDX: 000000000400c814 RSI: 00002000000001c0 RDI: 0000000000000003 [ 838.092840][T15982] RBP: 00007ff815d26090 R08: 0000000000000000 R09: 0000000000000000 [ 838.092853][T15982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.092865][T15982] R13: 00007ff817d46038 R14: 00007ff817d45fa0 R15: 00007fffc6205b28 [ 838.092897][T15982] [ 838.114756][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 838.117324][ T5717] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 838.120876][ T5717] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 838.120903][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.120923][ T5717] usb 2-1: Product: syz [ 838.120938][ T5717] usb 2-1: Manufacturer: syz [ 838.120952][ T5717] usb 2-1: SerialNumber: syz [ 838.336487][T15988] loop0: detected capacity change from 0 to 256 [ 838.385769][ T5717] ch9200 2-1:2.0: probe with driver ch9200 failed with error -22 [ 838.389877][ T5945] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 838.390572][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 838.392854][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 838.393349][ T13] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 838.875094][T13961] usb 3-1: USB disconnect, device number 51 [ 840.217682][ T9] net_ratelimit: 1 callbacks suppressed [ 840.217752][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.737626][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.779965][ T5725] usb 2-1: USB disconnect, device number 26 [ 842.495686][T14481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.699347][ T3687] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 843.211149][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.296195][T13961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.360507][T15979] veth3: entered promiscuous mode [ 843.497016][T15999] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 845.418222][ T4840] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 845.678577][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 846.166511][ T6340] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 846.200487][T16001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 846.280222][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 846.285528][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.316767][ T1520] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 846.339470][ T150] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 846.449086][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.451572][ T150] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 846.457717][ T150] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 846.474620][ T1520] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 846.554180][T13978] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 847.298292][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.126181][T16007] loop0: detected capacity change from 0 to 4096 [ 848.288773][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.304881][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.358076][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.502689][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.557400][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.584947][ T3687] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.657097][T16007] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 848.687447][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.749382][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.755458][T16008] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 848.815554][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.815703][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.936996][T16008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 848.948927][ T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.973651][ T91] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 848.992987][ T3687] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.001983][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.009781][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.088119][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.089935][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.204751][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.204987][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.210447][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.211533][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.211577][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.212459][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.213112][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.213902][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.214204][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.214236][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.218342][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.227197][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.228089][ T199] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.272436][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.280666][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.293828][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.301918][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.304398][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.309121][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.320827][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.322769][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.323280][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.323568][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.327790][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.330904][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.333772][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.334675][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.340260][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.341869][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.342206][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.342327][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.343824][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.343934][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.344313][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.346869][T16007] ntfs3(loop0): Failed to initialize MFT zone (-22). [ 849.349774][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.352599][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.358906][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.393384][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.419587][ T40] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 849.455217][T13961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.553227][T13978] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 849.934102][T16015] FAULT_INJECTION: forcing a failure. [ 849.934102][T16015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.934137][T16015] CPU: 0 UID: 0 PID: 16015 Comm: syz.1.3279 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 849.934164][T16015] Tainted: [L]=SOFTLOCKUP [ 849.934171][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 849.934183][T16015] Call Trace: [ 849.934189][T16015] [ 849.934198][T16015] dump_stack_lvl+0xe8/0x150 [ 849.934227][T16015] should_fail_ex+0x46b/0x600 [ 849.934255][T16015] _copy_from_user+0x2d/0xb0 [ 849.934287][T16015] snd_rawmidi_kernel_write1+0x395/0x620 [ 849.934322][T16015] snd_rawmidi_write+0x5d3/0xc10 [ 849.934357][T16015] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 849.934378][T16015] ? __asan_memset+0x22/0x50 [ 849.934405][T16015] ? apparmor_file_permission+0x1f4/0x300 [ 849.934437][T16015] ? rw_verify_area+0x25b/0x4e0 [ 849.934474][T16015] vfs_writev+0x4c6/0x9a0 [ 849.934498][T16015] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 849.934523][T16015] ? __pfx_vfs_writev+0x10/0x10 [ 849.934554][T16015] ? __fget_files+0x2a/0x420 [ 849.934581][T16015] ? __fget_files+0x3a6/0x420 [ 849.934603][T16015] ? __fget_files+0x2a/0x420 [ 849.934635][T16015] do_writev+0x15a/0x2e0 [ 849.934659][T16015] ? __pfx_do_writev+0x10/0x10 [ 849.934689][T16015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.934709][T16015] do_syscall_64+0x15f/0xf80 [ 849.934733][T16015] ? trace_irq_disable+0x3b/0x140 [ 849.934762][T16015] ? clear_bhb_loop+0x40/0x90 [ 849.934785][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.934804][T16015] RIP: 0033:0x7f62ebb4ce59 [ 849.934823][T16015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.934840][T16015] RSP: 002b:00007f62e9da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 849.934861][T16015] RAX: ffffffffffffffda RBX: 00007f62ebdc5fa0 RCX: 00007f62ebb4ce59 [ 849.934875][T16015] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 849.934888][T16015] RBP: 00007f62e9da6090 R08: 0000000000000000 R09: 0000000000000000 [ 849.934900][T16015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.934909][T16015] R13: 00007f62ebdc6038 R14: 00007f62ebdc5fa0 R15: 00007ffe889ca1b8 [ 849.934940][T16015] [ 850.351353][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.486890][ T5616] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 850.649876][ T49] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 850.651164][ T5616] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 850.651192][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.651269][ T5616] usb 3-1: Product: syz [ 850.651285][ T5616] usb 3-1: Manufacturer: syz [ 850.651301][ T5616] usb 3-1: SerialNumber: syz [ 850.743584][ T5616] usb 3-1: config 0 descriptor?? [ 850.824203][T16036] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.285027][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 851.395856][ T49] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 851.399958][ T49] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 851.399987][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.400063][ T49] usb 2-1: Product: syz [ 851.400079][ T49] usb 2-1: Manufacturer: syz [ 851.400095][ T49] usb 2-1: SerialNumber: syz [ 851.575912][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.608742][ T49] ch9200 2-1:2.0: probe with driver ch9200 failed with error -22 [ 851.622245][T16023] FAULT_INJECTION: forcing a failure. [ 851.622245][T16023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.622281][T16023] CPU: 0 UID: 0 PID: 16023 Comm: syz.2.3281 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 851.622308][T16023] Tainted: [L]=SOFTLOCKUP [ 851.622315][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.622327][T16023] Call Trace: [ 851.622342][T16023] [ 851.622350][T16023] dump_stack_lvl+0xe8/0x150 [ 851.622379][T16023] should_fail_ex+0x46b/0x600 [ 851.622410][T16023] _copy_from_user+0x2d/0xb0 [ 851.622439][T16023] ___sys_sendmsg+0x1c6/0x360 [ 851.622460][T16023] ? __lock_acquire+0x6b5/0x2d10 [ 851.622486][T16023] ? __pfx____sys_sendmsg+0x10/0x10 [ 851.622538][T16023] ? __fget_files+0x2a/0x420 [ 851.622559][T16023] ? __fget_files+0x3a6/0x420 [ 851.622591][T16023] __x64_sys_sendmsg+0x1c3/0x2a0 [ 851.622615][T16023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 851.622646][T16023] ? __pfx_ksys_write+0x10/0x10 [ 851.622681][T16023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.622701][T16023] do_syscall_64+0x15f/0xf80 [ 851.622723][T16023] ? trace_irq_disable+0x3b/0x140 [ 851.622750][T16023] ? clear_bhb_loop+0x40/0x90 [ 851.622770][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.622790][T16023] RIP: 0033:0x7f23d905ce59 [ 851.622808][T16023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.622825][T16023] RSP: 002b:00007f23d7295028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.622844][T16023] RAX: ffffffffffffffda RBX: 00007f23d92d6090 RCX: 00007f23d905ce59 [ 851.622857][T16023] RDX: 0000000000000040 RSI: 0000200000002e40 RDI: 0000000000000006 [ 851.622869][T16023] RBP: 00007f23d7295090 R08: 0000000000000000 R09: 0000000000000000 [ 851.622880][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.622890][T16023] R13: 00007f23d92d6128 R14: 00007f23d92d6090 R15: 00007ffd008f9f98 [ 851.622921][T16023] [ 851.937336][T16046] FAULT_INJECTION: forcing a failure. [ 851.937336][T16046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.937371][T16046] CPU: 1 UID: 0 PID: 16046 Comm: syz.4.3287 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 851.937398][T16046] Tainted: [L]=SOFTLOCKUP [ 851.937404][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.937419][T16046] Call Trace: [ 851.937427][T16046] [ 851.937436][T16046] dump_stack_lvl+0xe8/0x150 [ 851.937467][T16046] should_fail_ex+0x46b/0x600 [ 851.937496][T16046] _copy_to_user+0x31/0xb0 [ 851.937524][T16046] simple_read_from_buffer+0xe1/0x170 [ 851.937553][T16046] proc_fail_nth_read+0x1be/0x230 [ 851.937580][T16046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 851.937608][T16046] ? rw_verify_area+0x2ac/0x4e0 [ 851.937634][T16046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 851.937658][T16046] vfs_read+0x212/0xa80 [ 851.937692][T16046] ? __pfx_vfs_read+0x10/0x10 [ 851.937722][T16046] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 851.937746][T16046] ? lockdep_hardirqs_on+0x7a/0x110 [ 851.937769][T16046] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 851.937791][T16046] ? mutex_lock_nested+0x152/0x1d0 [ 851.937818][T16046] ? fdget_pos+0x252/0x320 [ 851.937849][T16046] ksys_read+0x156/0x270 [ 851.937878][T16046] ? __pfx_ksys_read+0x10/0x10 [ 851.937914][T16046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.937936][T16046] do_syscall_64+0x15f/0xf80 [ 851.937957][T16046] ? trace_irq_disable+0x3b/0x140 [ 851.937986][T16046] ? clear_bhb_loop+0x40/0x90 [ 851.938009][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.938028][T16046] RIP: 0033:0x7ff817a8d68e [ 851.938046][T16046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 851.938070][T16046] RSP: 002b:00007ff815ce3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 851.938091][T16046] RAX: ffffffffffffffda RBX: 00007ff815ce46c0 RCX: 00007ff817a8d68e [ 851.938106][T16046] RDX: 000000000000000f RSI: 00007ff815ce40a0 RDI: 0000000000000003 [ 851.938119][T16046] RBP: 00007ff815ce4090 R08: 0000000000000000 R09: 0000000000000000 [ 851.938130][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.938142][T16046] R13: 00007ff817d46218 R14: 00007ff817d46180 R15: 00007fffc6205b28 [ 851.938170][T16046] [ 852.482146][ T5616] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 852.482226][ T5616] f81604 3-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 852.482485][ T5616] f81604 3-1:0.0: probe with driver f81604 failed with error -121 [ 852.860351][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.900793][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.021603][T16049] loop3: detected capacity change from 0 to 256 [ 853.029736][T16049] exfat: Bad value for 'uid' [ 853.029755][T16049] exfat: Bad value for 'uid' [ 853.041060][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.048069][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.051659][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.074079][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.078088][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.082681][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.084303][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.086595][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.088073][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.090383][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.104437][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.162278][T13978] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 853.251580][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3289'. [ 853.580449][T16055] loop3: detected capacity change from 0 to 32768 [ 853.581978][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.587033][T16055] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3290 (16055) [ 853.619854][ T199] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.624655][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.624819][T16055] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 853.624848][T16055] BTRFS info (device loop3): using crc32c checksum algorithm [ 853.628687][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.631054][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.633675][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.634961][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.637191][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.639511][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.642488][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.643929][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.645968][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.646726][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.647429][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.648251][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.650007][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.650906][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.651781][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.652539][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.653180][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.656294][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.657064][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.659687][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.660503][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.661703][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.662506][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.663259][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.664025][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.672084][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.677817][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.679733][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.680533][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.682025][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.682064][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.684099][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.741030][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.741143][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 853.912813][ T5616] usb 3-1: USB disconnect, device number 52 [ 853.964817][ T5717] usb 2-1: USB disconnect, device number 27 [ 853.973279][ T3687] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.088909][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.096125][ T40] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.104331][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.110589][ T40] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.117118][ T1137] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.126309][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.127675][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.128603][ T1572] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.193676][ T40] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.211471][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 854.211614][ T57] BTRFS warning (device loop3): checksum verify failed on logical 5267456 mirror 1 wanted 0xd975d843 found 0x262a107f level 0 [ 854.217122][T16055] BTRFS error (device loop3): failed to read fs tree: -5 [ 854.224836][ T5632] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 854.346726][T16055] BTRFS error (device loop3): open_ctree failed: -5 [ 854.428326][ T5632] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.428356][ T5632] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 854.499752][ T5632] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.499783][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.499804][ T5632] usb 1-1: Product: syz [ 854.499819][ T5632] usb 1-1: Manufacturer: syz [ 854.499834][ T5632] usb 1-1: SerialNumber: syz [ 854.613988][T16058] syzkaller1: entered promiscuous mode [ 854.618644][T16058] syzkaller1: entered allmulticast mode [ 854.701098][T13978] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 854.848351][T16083] loop2: detected capacity change from 0 to 4096 [ 854.862343][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 854.874448][T16083] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 855.013651][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.024049][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.034194][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.049143][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.063883][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.076875][ T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.077497][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.079422][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.080931][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.121698][ T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.134559][ T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.146524][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.157026][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.167053][ T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.178986][ T199] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.488435][T16081] loop1: detected capacity change from 0 to 131072 [ 855.495319][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.500207][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.500398][T16081] F2FS-fs (loop1): Test dummy encryption mode enabled [ 855.502721][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.503172][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.503748][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.504026][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.504272][T16081] F2FS-fs (loop1): invalid crc value [ 855.512865][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.514914][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.516174][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.523559][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.537969][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.596588][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.603941][T16081] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 855.615932][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.627068][T16081] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 855.710694][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 855.719560][T16081] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 855.733263][ T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 855.751656][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.751718][ T150] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 855.751766][ T150] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 855.751812][ T150] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 855.752649][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.810371][ T40] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 855.832695][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.833066][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 855.833410][T16083] ntfs3(loop2): Failed to initialize MFT zone (-22). [ 855.835393][T16083] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 855.935807][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.103018][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.115921][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.122625][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.123390][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.124505][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.132712][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.133689][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.134302][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.135204][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.135839][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.136494][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.137118][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.139326][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.139953][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.140776][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.143794][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.146098][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.149639][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.152112][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.157008][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.163108][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.167146][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.169511][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.170252][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.170878][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.172347][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.176243][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.178083][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.184445][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.184492][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.184523][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.195731][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.204758][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.234699][ T5632] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 856.265152][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.277374][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.277703][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.279994][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.280045][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.283136][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.283259][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.287611][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.287690][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.303560][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.303666][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.305790][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.307303][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.307774][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 856.434835][ T5632] usb 2-1: Using ep0 maxpacket: 16 [ 856.438853][ T5632] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 856.438883][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.438903][ T5632] usb 2-1: Product: syz [ 856.438917][ T5632] usb 2-1: Manufacturer: syz [ 856.438931][ T5632] usb 2-1: SerialNumber: syz [ 856.455979][ T5632] usb 2-1: config 0 descriptor?? [ 856.475295][ T5632] gspca_main: spca508-2.14.0 probing 041e:4018 [ 856.548789][ T5717] usb 1-1: USB disconnect, device number 35 [ 856.575662][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.798750][ T5632] gspca_spca508: reg_read err -32 [ 856.799609][ T5632] gspca_spca508: reg_read err -32 [ 856.800507][ T5632] gspca_spca508: reg_read err -32 [ 856.804423][ T5632] gspca_spca508: reg_read err -32 [ 856.811926][ T5632] gspca_spca508: reg_read err -32 [ 856.823948][T16102] loop2: detected capacity change from 0 to 512 [ 856.826651][T16102] ext4: Unknown parameter 'func' [ 856.827080][T16102] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 858.052548][ T5632] gspca_spca508: reg write: error -110 [ 858.052660][ T5632] spca508 2-1:0.0: probe with driver spca508 failed with error -110 [ 858.063745][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.208974][ T5725] usb 2-1: USB disconnect, device number 28 [ 858.501527][T16110] loop2: detected capacity change from 0 to 32768 [ 858.502804][T16110] btrfs: Deprecated parameter 'usebackuproot' [ 858.502826][T16110] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 858.511898][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.514026][T16110] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 8edb523e-bf41-49bb-886a-cc64ce5f830b [ 858.514090][T16110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3299 (16110) [ 858.522114][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.536866][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.537342][T16110] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 858.537370][T16110] BTRFS info (device loop2): using crc32c checksum algorithm [ 858.565401][T16113] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3296'. [ 858.566399][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.569056][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.576647][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.578680][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.586213][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.590863][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.612772][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.616257][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.619722][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.621980][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.629130][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.633061][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.741155][ T1572] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.771058][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.779860][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.784317][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.791212][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.792888][ T1572] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.793595][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.796639][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.797286][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.798341][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.799082][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.799744][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.800495][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.801165][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.802679][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.822189][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.824824][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.828170][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.828204][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.828232][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.839514][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.848857][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.883473][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.909303][ T1572] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.920880][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.921025][ T150] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 858.921145][T16110] BTRFS error (device loop2): failed to load root extent [ 858.921188][T16110] BTRFS warning (device loop2): try to load backup roots slot 1 [ 858.921781][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.921890][ T150] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 858.921990][T16110] BTRFS warning (device loop2): couldn't read tree root [ 858.922012][T16110] BTRFS warning (device loop2): try to load backup roots slot 2 [ 858.923503][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.923623][ T150] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 858.923709][T16110] BTRFS warning (device loop2): couldn't read tree root [ 858.923728][T16110] BTRFS warning (device loop2): try to load backup roots slot 3 [ 858.925674][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.929125][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.942160][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.945164][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.945623][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.947304][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.960689][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.990250][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 858.990631][T16110] BTRFS info (device loop2): rebuilding free space tree [ 859.116007][ T150] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 859.116105][ T150] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 859.227042][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.244358][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 859.261074][T16110] BTRFS info (device loop2): checking UUID tree [ 859.281429][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.333407][T16110] BTRFS info (device loop2): enabling ssd optimizations [ 859.333435][T16110] BTRFS info (device loop2): turning on async discard [ 859.333453][T16110] BTRFS info (device loop2): enabling free space tree [ 859.333470][T16110] BTRFS info (device loop2): force clearing of disk cache [ 859.333487][T16110] BTRFS info (device loop2): enabling auto defrag [ 859.333505][T16110] BTRFS info (device loop2): trying to use backup root at mount time [ 859.333524][T16110] BTRFS info (device loop2): use zstd compression, level 3 [ 859.459846][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 859.472806][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 859.565617][ T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 859.574816][ T5632] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 859.633126][ T1520] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 859.731652][ T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 859.786604][ T5632] usb 1-1: Using ep0 maxpacket: 8 [ 859.795337][ T5632] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 859.797683][ T5632] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 859.797710][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.797730][ T5632] usb 1-1: Product: syz [ 859.797744][ T5632] usb 1-1: Manufacturer: syz [ 859.797758][ T5632] usb 1-1: SerialNumber: syz [ 859.823729][ T5632] ch9200 1-1:2.0: probe with driver ch9200 failed with error -22 [ 859.994253][ T12] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 860.268526][ T1520] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 860.269017][ T1520] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 860.301729][ T1520] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 860.302234][ T1520] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 860.345053][ T1520] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 860.346441][ T5609] BTRFS info (device loop2): last unmount of filesystem 8edb523e-bf41-49bb-886a-cc64ce5f830b [ 860.443360][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.287670][ T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 861.350423][ T1137] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 861.474196][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 861.510141][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.520110][ T91] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 861.819241][T16142] loop3: detected capacity change from 0 to 512 [ 861.824142][T16142] ext4: Unknown parameter 'func' [ 861.833002][ T5609] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 862.069003][ T199] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 862.071514][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 862.073121][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 862.078415][ T150] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 862.090626][ T199] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 862.099587][ T199] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 862.116491][ T91] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 863.099763][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 863.253707][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.287546][ T91] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 863.300783][ T40] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 863.382042][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.415044][T13961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.418145][ T5632] usb 1-1: USB disconnect, device number 36 [ 863.462770][ T91] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 863.588585][T13978] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 863.662856][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'. [ 863.663025][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3307'. [ 863.663049][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3307'. [ 863.749464][T16151] loop3: detected capacity change from 0 to 512 [ 863.750645][T16151] ext4: Unknown parameter 'func' [ 863.751065][T16151] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 865.811985][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.621392][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.646576][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.681388][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.683838][T16153] FAULT_INJECTION: forcing a failure. [ 866.683838][T16153] name failslab, interval 1, probability 0, space 0, times 0 [ 866.683859][T16153] CPU: 1 UID: 0 PID: 16153 Comm: syz.2.3304 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 866.683875][T16153] Tainted: [L]=SOFTLOCKUP [ 866.683879][T16153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 866.683886][T16153] Call Trace: [ 866.683890][T16153] [ 866.683895][T16153] dump_stack_lvl+0xe8/0x150 [ 866.683912][T16153] should_fail_ex+0x46b/0x600 [ 866.683931][T16153] should_failslab+0xa8/0x100 [ 866.683951][T16153] __kmalloc_noprof+0xdf/0x7b0 [ 866.683966][T16153] ? kfree+0x4d/0x6c0 [ 866.683980][T16153] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 866.683995][T16153] tomoyo_realpath_from_path+0xe3/0x5d0 [ 866.684007][T16153] ? tomoyo_domain+0xd7/0x130 [ 866.684021][T16153] ? tomoyo_path_number_perm+0x219/0x630 [ 866.684036][T16153] tomoyo_path_number_perm+0x246/0x630 [ 866.684058][T16153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 866.684073][T16153] ? __lock_acquire+0x6b5/0x2d10 [ 866.684086][T16153] ? do_raw_spin_lock+0x12b/0x2f0 [ 866.684135][T16153] ? __fget_files+0x2a/0x420 [ 866.684161][T16153] ? __fget_files+0x2a/0x420 [ 866.684182][T16153] ? __fget_files+0x3a6/0x420 [ 866.684204][T16153] ? __fget_files+0x2a/0x420 [ 866.684227][T16153] security_file_ioctl+0xc3/0x2a0 [ 866.684243][T16153] __se_sys_ioctl+0x47/0x170 [ 866.684260][T16153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.684271][T16153] do_syscall_64+0x15f/0xf80 [ 866.684284][T16153] ? trace_irq_disable+0x3b/0x140 [ 866.684303][T16153] ? clear_bhb_loop+0x40/0x90 [ 866.684323][T16153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.684334][T16153] RIP: 0033:0x7f23d905ce59 [ 866.684345][T16153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.684355][T16153] RSP: 002b:00007f23d72b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 866.684368][T16153] RAX: ffffffffffffffda RBX: 00007f23d92d5fa0 RCX: 00007f23d905ce59 [ 866.684376][T16153] RDX: 00002000000003c0 RSI: 00000000c0d05605 RDI: 0000000000000004 [ 866.684383][T16153] RBP: 00007f23d72b6090 R08: 0000000000000000 R09: 0000000000000000 [ 866.684389][T16153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.684396][T16153] R13: 00007f23d92d6038 R14: 00007f23d92d5fa0 R15: 00007ffd008f9f98 [ 866.684412][T16153] [ 866.684425][T16153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 866.794240][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.029460][T16162] loop4: detected capacity change from 0 to 512 [ 867.048921][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.049886][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.050964][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.051650][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.117186][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.123235][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.123477][T16163] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3310'. [ 867.129647][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.130456][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.131152][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.131187][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.131209][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.133407][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.135492][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.137691][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.157144][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.158637][ T199] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 867.164849][ T199] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.182458][ T1137] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 867.196277][ T1137] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 867.208361][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.209022][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.218411][T16162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.218565][T16162] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.257938][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.262416][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.262461][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.314331][T11288] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 867.340148][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.340204][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.516044][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 867.522868][T16162] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 867.565412][T16169] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 867.565856][T16171] syzkaller1: entered promiscuous mode [ 867.565878][T16171] syzkaller1: entered allmulticast mode [ 867.775331][T13365] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 867.860331][ T5632] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 867.895068][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.957773][T13365] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 867.957802][T13365] usb 5-1: config 0 has no interface number 0 [ 867.957846][T13365] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 867.957874][T13365] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 867.996351][T13365] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 867.996382][T13365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.996403][T13365] usb 5-1: Product: syz [ 867.996417][T13365] usb 5-1: Manufacturer: syz [ 867.996432][T13365] usb 5-1: SerialNumber: syz [ 868.017291][ T5632] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.017319][ T5632] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 868.052367][ T5632] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.052398][ T5632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.052418][ T5632] usb 1-1: Product: syz [ 868.052434][ T5632] usb 1-1: Manufacturer: syz [ 868.052449][ T5632] usb 1-1: SerialNumber: syz [ 868.103990][T13365] usb 5-1: config 0 descriptor?? [ 868.132713][T13365] yurex 5-1:0.50: Could not submitting URB [ 868.132895][T13365] yurex 5-1:0.50: probe with driver yurex failed with error -5 [ 868.293365][T16173] loop3: detected capacity change from 0 to 32768 [ 868.364351][T13365] usb 5-1: USB disconnect, device number 33 [ 868.391496][T16173] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 868.915666][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.972845][T13365] usb 1-1: USB disconnect, device number 37 [ 869.004688][ T5725] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 869.138316][ T150] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 869.199949][ T5725] usb 3-1: Using ep0 maxpacket: 16 [ 869.245745][T14098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.255599][ T5725] usb 3-1: config 2 has an invalid interface number: 184 but max is 0 [ 869.255625][ T5725] usb 3-1: config 2 has no interface number 0 [ 869.255668][ T5725] usb 3-1: config 2 interface 184 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 869.255692][ T5725] usb 3-1: config 2 interface 184 has no altsetting 0 [ 869.262736][ T5725] usb 3-1: New USB device found, idVendor=1c9e, idProduct=9b02, bcdDevice=29.42 [ 869.262763][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.262782][ T5725] usb 3-1: Product: syz [ 869.262795][ T5725] usb 3-1: Manufacturer: syz [ 869.262809][ T5725] usb 3-1: SerialNumber: syz [ 869.511913][ T40] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 869.537403][ T5725] option 3-1:2.184: GSM modem (1-port) converter detected [ 869.572705][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 869.579184][T14098] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 869.670491][ T5725] usb 3-1: USB disconnect, device number 53 [ 869.696300][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.700823][ T5725] option 3-1:2.184: device disconnected [ 869.937358][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.961299][T13365] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 870.020767][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.020871][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.144796][T13365] usb 5-1: Using ep0 maxpacket: 8 [ 870.147111][T13365] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 870.168108][T13365] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 870.168139][T13365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.168159][T13365] usb 5-1: Product: syz [ 870.168173][T13365] usb 5-1: Manufacturer: syz [ 870.168188][T13365] usb 5-1: SerialNumber: syz [ 870.257154][T13365] ch9200 5-1:2.0: probe with driver ch9200 failed with error -22 [ 870.338369][T16209] loop1: detected capacity change from 0 to 4096 [ 870.341042][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.342647][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.344219][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.388533][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.388585][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.389916][ T91] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 870.419967][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.421068][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.448709][T16209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.494101][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.748330][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 870.751415][T16209] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.3331: invalid fast symlink length 131109 [ 870.765356][ T91] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 871.635883][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.667159][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.673782][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.707939][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.710218][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.730949][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.734817][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.752728][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.755091][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.755810][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.756908][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.758514][T11288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.758753][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.759494][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.764280][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.767071][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.769730][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.771046][ T91] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 871.877794][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.879765][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.881834][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.893442][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.901802][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.911570][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.912396][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.913142][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.913797][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.915592][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.916353][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.917087][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 871.919234][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.071951][T13980] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 872.164723][ T5725] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 872.228674][T16239] loop1: detected capacity change from 0 to 2048 [ 872.230460][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.249875][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.251509][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.254152][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.254237][T16239] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 872.280615][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.296818][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.298070][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.298693][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.299354][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.299449][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.299526][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.299600][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.299693][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.299775][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.300385][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.301117][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.301222][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.301311][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.301397][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.301867][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.301973][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.302062][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.308381][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.309054][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.314769][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 872.316944][ T5725] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 872.316968][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.316987][ T5725] usb 1-1: config 1 has no interface number 0 [ 872.317029][ T5725] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 872.317052][ T5725] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.317078][ T5725] usb 1-1: config 1 interface 105 has no altsetting 0 [ 872.319702][ T5725] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 872.319728][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 872.319753][ T5725] usb 1-1: Product: syz [ 872.319768][ T5725] usb 1-1: Manufacturer: syz [ 872.319781][ T5725] usb 1-1: SerialNumber: syz [ 872.331530][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.332967][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.344305][ T199] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.357184][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.357235][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.357259][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.357281][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.357303][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.357324][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.357346][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.429236][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.579040][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.607289][ T5725] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 872.650466][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.652479][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.667084][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.668466][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.786755][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.787471][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.787907][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.791799][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.793665][T16239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.794227][ T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 872.824695][T13365] usb 5-1: USB disconnect, device number 34 [ 872.868731][T13961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.006293][T13961] usb 1-1: USB disconnect, device number 38 [ 875.198720][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.578255][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.613541][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.736342][ T5839] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 878.216097][T16282] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:65535 [ 879.217254][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.359269][T11288] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 879.447638][T12471] block device autoloading is deprecated and will be removed. [ 880.305911][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.341066][T16316] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3368'. [ 880.470674][T16318] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 880.470701][T16318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 880.488153][T16318] vhci_hcd vhci_hcd.0: Device attached [ 880.659644][T14481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.674881][ T5839] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 880.744774][ T5632] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 880.836834][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 880.838721][ T5839] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 880.838747][ T5839] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 880.838766][ T5839] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 880.838801][ T5839] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 880.838814][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.191829][T16324] usb 33-1: recv xbuf, 0 [ 881.203719][ T91] vhci_hcd vhci_hcd.0: stop threads [ 881.203737][ T91] vhci_hcd vhci_hcd.0: release socket [ 881.203817][ T91] vhci_hcd vhci_hcd.0: disconnect device [ 881.264897][ T5632] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 881.342827][T16346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.343195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.380518][ T5839] usb 1-1: USB disconnect, device number 39 [ 881.631651][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.223581][T16361] loop1: detected capacity change from 0 to 64 [ 882.307357][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.323587][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.331634][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.331675][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.331699][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.331721][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.331744][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.331766][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.386858][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.387353][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.417300][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.434263][ T1137] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 882.690727][ T1137] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 882.698058][T16361] hfs: get root inode failed [ 883.115595][T13961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.157663][T13980] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 883.242602][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.270593][T16364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3384'. [ 883.430630][T16366] 9pnet_fd: Insufficient options for proto=fd [ 883.696734][T14481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.739689][T16374] loop0: detected capacity change from 0 to 512 [ 883.758488][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 883.762169][T16377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.762467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.889800][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 883.976212][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 883.990392][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 883.991907][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 883.992991][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 883.993638][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 883.994263][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 884.047984][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 884.048640][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 884.050047][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 884.050632][ T1137] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 884.073712][T16382] FAULT_INJECTION: forcing a failure. [ 884.073712][T16382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.073747][T16382] CPU: 0 UID: 0 PID: 16382 Comm: syz.4.3393 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.073775][T16382] Tainted: [L]=SOFTLOCKUP [ 884.073782][T16382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.073794][T16382] Call Trace: [ 884.073802][T16382] [ 884.073810][T16382] dump_stack_lvl+0xe8/0x150 [ 884.073839][T16382] should_fail_ex+0x46b/0x600 [ 884.073868][T16382] _copy_from_user+0x2d/0xb0 [ 884.073897][T16382] sctp_getsockopt_maxseg+0x130/0x3f0 [ 884.073921][T16382] ? __local_bh_enable+0x1e1/0x2f0 [ 884.073953][T16382] ? __pfx_sctp_getsockopt_maxseg+0x10/0x10 [ 884.073978][T16382] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 884.074005][T16382] ? lockdep_hardirqs_on+0x7a/0x110 [ 884.074034][T16382] sctp_getsockopt+0x92d/0xb90 [ 884.074062][T16382] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 884.074096][T16382] do_sock_getsockopt+0x51d/0x7e0 [ 884.074125][T16382] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 884.074163][T16382] ? __fget_files+0x3a6/0x420 [ 884.074187][T16382] ? __fget_files+0x2a/0x420 [ 884.074219][T16382] __x64_sys_getsockopt+0x1aa/0x250 [ 884.074248][T16382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.074270][T16382] do_syscall_64+0x15f/0xf80 [ 884.074293][T16382] ? trace_irq_disable+0x3b/0x140 [ 884.074324][T16382] ? clear_bhb_loop+0x40/0x90 [ 884.074349][T16382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.074368][T16382] RIP: 0033:0x7ff817acce59 [ 884.074387][T16382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.074404][T16382] RSP: 002b:00007ff815d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 884.074425][T16382] RAX: ffffffffffffffda RBX: 00007ff817d45fa0 RCX: 00007ff817acce59 [ 884.074439][T16382] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 884.074452][T16382] RBP: 00007ff815d26090 R08: 0000200000000040 R09: 0000000000000000 [ 884.074465][T16382] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.074478][T16382] R13: 00007ff817d46038 R14: 00007ff817d45fa0 R15: 00007fffc6205b28 [ 884.074511][T16382] [ 884.458025][ T1520] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 884.521539][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 884.521676][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 885.530730][T16374] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3390: bg 0: block 5: invalid block bitmap [ 885.530764][T16374] loop0: lost filesystem error report for type 5 error -117 [ 885.542214][ C0] EXT4-fs (loop0): initial error at time 1778905995: ext4_validate_block_bitmap:432 [ 885.542249][ C0] EXT4-fs (loop0): last error at time 1778905995: ext4_validate_block_bitmap:432 [ 885.678354][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 885.792502][T16374] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 885.792530][T16374] loop0: lost filesystem error report for type 5 error -117 [ 885.814998][ T5632] net_ratelimit: 1 callbacks suppressed [ 885.815017][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.817503][ T5620] Bluetooth: hci1: unexpected event 0x01 length: 12 > 1 [ 885.875950][ T150] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 885.901290][T16374] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3390: invalid indirect mapped block 3 (level 2) [ 885.901322][T16374] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 885.938838][ T12] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 885.946480][T16374] EXT4-fs (loop0): 1 orphan inode deleted [ 885.946506][T16374] EXT4-fs (loop0): 1 truncate cleaned up [ 885.977442][T16374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.977630][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 885.977941][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 886.176388][ T1137] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 886.176454][ T1137] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 886.176501][ T1137] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 886.196464][T16400] loop4: detected capacity change from 0 to 256 [ 886.201941][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.205703][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.206092][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.206396][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.206689][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.208124][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.209304][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.211064][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.211641][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.213439][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.213748][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.214746][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.216398][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.230568][ T37] audit: type=1400 audit(1778905995.923:232): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A20B704 pid=16390 comm="syz.1.3395" [ 886.230658][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.230706][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.230729][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.230750][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.230800][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.237050][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.239023][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.239493][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.239934][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.240370][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.240802][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.241109][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.242935][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.244952][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.247366][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.249938][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.249976][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.251331][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.253331][T16400] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 886.254177][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.254224][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.255176][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.256139][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.256175][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.256197][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.256219][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.256240][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.256262][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.256284][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.262687][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.267887][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.267951][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.269007][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 886.297593][T12471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.326569][ T57] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 886.405276][T12471] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 886.502356][T16402] FAULT_INJECTION: forcing a failure. [ 886.502356][T16402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.502391][T16402] CPU: 1 UID: 0 PID: 16402 Comm: syz.3.3402 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 886.502417][T16402] Tainted: [L]=SOFTLOCKUP [ 886.502424][T16402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 886.502436][T16402] Call Trace: [ 886.502443][T16402] [ 886.502451][T16402] dump_stack_lvl+0xe8/0x150 [ 886.502480][T16402] should_fail_ex+0x46b/0x600 [ 886.502512][T16402] _copy_from_user+0x2d/0xb0 [ 886.502539][T16402] ___sys_recvmsg+0x175/0x590 [ 886.502560][T16402] ? get_pid_task+0x20/0x1f0 [ 886.502579][T16402] ? get_pid_task+0x20/0x1f0 [ 886.502602][T16402] ? __pfx____sys_recvmsg+0x10/0x10 [ 886.502627][T16402] ? __fget_files+0x2a/0x420 [ 886.502666][T16402] ? __fget_files+0x3a6/0x420 [ 886.502705][T16402] __x64_sys_recvmsg+0x1c0/0x2a0 [ 886.502728][T16402] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 886.502758][T16402] ? __pfx_ksys_write+0x10/0x10 [ 886.502793][T16402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.502813][T16402] do_syscall_64+0x15f/0xf80 [ 886.502835][T16402] ? trace_irq_disable+0x3b/0x140 [ 886.502863][T16402] ? clear_bhb_loop+0x40/0x90 [ 886.502886][T16402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.502905][T16402] RIP: 0033:0x7f9b264ece59 [ 886.502922][T16402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.502937][T16402] RSP: 002b:00007f9b24746028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 886.502957][T16402] RAX: ffffffffffffffda RBX: 00007f9b26765fa0 RCX: 00007f9b264ece59 [ 886.502971][T16402] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 886.502983][T16402] RBP: 00007f9b24746090 R08: 0000000000000000 R09: 0000000000000000 [ 886.502994][T16402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.503005][T16402] R13: 00007f9b26766038 R14: 00007f9b26765fa0 R15: 00007fffcbf0fe38 [ 886.503033][T16402] [ 886.530513][T14098] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 886.660262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.756542][T14481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.185493][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.345592][T16420] FAULT_INJECTION: forcing a failure. [ 887.345592][T16420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.346359][T16420] CPU: 0 UID: 0 PID: 16420 Comm: syz.3.3406 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 887.346389][T16420] Tainted: [L]=SOFTLOCKUP [ 887.346397][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 887.346408][T16420] Call Trace: [ 887.346416][T16420] [ 887.346425][T16420] dump_stack_lvl+0xe8/0x150 [ 887.346458][T16420] should_fail_ex+0x46b/0x600 [ 887.346486][T16420] _copy_to_user+0x31/0xb0 [ 887.346517][T16420] simple_read_from_buffer+0xe1/0x170 [ 887.346548][T16420] proc_fail_nth_read+0x1be/0x230 [ 887.346578][T16420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.346607][T16420] ? rw_verify_area+0x2ac/0x4e0 [ 887.346635][T16420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 887.346661][T16420] vfs_read+0x212/0xa80 [ 887.346697][T16420] ? __pfx_vfs_read+0x10/0x10 [ 887.346726][T16420] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 887.346751][T16420] ? lockdep_hardirqs_on+0x7a/0x110 [ 887.346774][T16420] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 887.346797][T16420] ? mutex_lock_nested+0x152/0x1d0 [ 887.346824][T16420] ? fdget_pos+0x252/0x320 [ 887.346858][T16420] ksys_read+0x156/0x270 [ 887.346888][T16420] ? __pfx_ksys_read+0x10/0x10 [ 887.346931][T16420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.346953][T16420] do_syscall_64+0x15f/0xf80 [ 887.346978][T16420] ? clear_bhb_loop+0x40/0x90 [ 887.347003][T16420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.347022][T16420] RIP: 0033:0x7f9b264ad68e [ 887.347041][T16420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 887.347058][T16420] RSP: 002b:00007f9b24703fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 887.347079][T16420] RAX: ffffffffffffffda RBX: 00007f9b247046c0 RCX: 00007f9b264ad68e [ 887.347093][T16420] RDX: 000000000000000f RSI: 00007f9b247040a0 RDI: 0000000000000004 [ 887.347106][T16420] RBP: 00007f9b24704090 R08: 0000000000000000 R09: 0000000000000000 [ 887.347119][T16420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.347131][T16420] R13: 00007f9b26766218 R14: 00007f9b26766180 R15: 00007fffcbf0fe38 [ 887.347162][T16420] [ 888.023405][T16437] loop1: detected capacity change from 0 to 256 [ 888.094421][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.102790][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.121636][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.121932][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.122148][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.122356][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.122590][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.122797][ T150] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.186774][ T5632] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 888.239088][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.239394][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.241157][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.243279][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.243738][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.244387][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.245343][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.245573][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.245796][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.246022][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.246234][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.246469][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.247383][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.249356][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.249853][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.250125][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.250363][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.250916][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.252364][T16437] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 888.252970][ T40] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 888.333987][T16442] FAULT_INJECTION: forcing a failure. [ 888.333987][T16442] name failslab, interval 1, probability 0, space 0, times 0 [ 888.334044][T16442] CPU: 1 UID: 0 PID: 16442 Comm: syz.0.3412 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 888.334073][T16442] Tainted: [L]=SOFTLOCKUP [ 888.334080][T16442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 888.334093][T16442] Call Trace: [ 888.334101][T16442] [ 888.334109][T16442] dump_stack_lvl+0xe8/0x150 [ 888.334141][T16442] should_fail_ex+0x46b/0x600 [ 888.334168][T16442] ? __pfx_proc_alloc_inode+0x10/0x10 [ 888.334195][T16442] should_failslab+0xa8/0x100 [ 888.334226][T16442] ? __pfx_proc_alloc_inode+0x10/0x10 [ 888.334250][T16442] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 888.334279][T16442] ? proc_alloc_inode+0x2a/0xc0 [ 888.334309][T16442] ? __pfx_proc_alloc_inode+0x10/0x10 [ 888.334334][T16442] proc_alloc_inode+0x2a/0xc0 [ 888.334361][T16442] alloc_inode+0x6a/0x1b0 [ 888.334386][T16442] new_inode+0x22/0x170 [ 888.334414][T16442] proc_pid_make_inode+0x21/0x130 [ 888.334437][T16442] proc_pident_instantiate+0x6d/0x2b0 [ 888.334463][T16442] proc_pident_lookup+0x1b7/0x270 [ 888.334491][T16442] __lookup_slow+0x2d2/0x440 [ 888.334522][T16442] ? __pfx___lookup_slow+0x10/0x10 [ 888.334561][T16442] ? down_read+0x156/0x200 [ 888.334587][T16442] ? __pfx_down_read+0x10/0x10 [ 888.334614][T16442] ? lookup_fast+0x1a3/0x5b0 [ 888.334644][T16442] lookup_slow+0x53/0x70 [ 888.334671][T16442] link_path_walk+0xd1e/0x18d0 [ 888.334715][T16442] path_openat+0x2d5/0x38a0 [ 888.334741][T16442] ? lock_acquire+0x106/0x350 [ 888.334777][T16442] ? lockdep_hardirqs_on+0x7a/0x110 [ 888.334817][T16442] ? __pfx_path_openat+0x10/0x10 [ 888.334850][T16442] ? __kasan_slab_alloc+0x6c/0x80 [ 888.334876][T16442] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 888.334911][T16442] ? do_raw_spin_lock+0x12b/0x2f0 [ 888.334949][T16442] do_file_open+0x23e/0x4a0 [ 888.334977][T16442] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 888.335004][T16442] ? __pfx_do_file_open+0x10/0x10 [ 888.335030][T16442] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 888.335068][T16442] ? __pfx_kfree_link+0x10/0x10 [ 888.335104][T16442] ? alloc_fd+0x64e/0x6c0 [ 888.335139][T16442] do_sys_openat2+0x113/0x200 [ 888.335163][T16442] ? __pfx___schedule+0x10/0x10 [ 888.335184][T16442] ? __pfx_do_sys_openat2+0x10/0x10 [ 888.335209][T16442] ? ksys_write+0x248/0x270 [ 888.335237][T16442] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 888.335266][T16442] __x64_sys_openat+0x138/0x170 [ 888.335293][T16442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.335314][T16442] do_syscall_64+0x15f/0xf80 [ 888.335339][T16442] ? clear_bhb_loop+0x40/0x90 [ 888.335364][T16442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.335383][T16442] RIP: 0033:0x7fde6f1fd68e [ 888.335402][T16442] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 888.335418][T16442] RSP: 002b:00007fde6d453f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.335439][T16442] RAX: ffffffffffffffda RBX: 00007fde6d4546c0 RCX: 00007fde6f1fd68e [ 888.335454][T16442] RDX: 0000000000000000 RSI: 00007fde6f2d24aa RDI: ffffffffffffff9c [ 888.335467][T16442] RBP: 00007fde6d454090 R08: 0000000000000000 R09: 0000000000000000 [ 888.335480][T16442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.335492][T16442] R13: 00007fde6f4b6218 R14: 00007fde6f4b6180 R15: 00007ffe95ee5548 [ 888.335524][T16442] [ 888.972392][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.026052][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.075641][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.075685][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.075709][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.075732][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.109566][ T5632] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 889.109595][ T5632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.148697][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.151381][ T5632] usb 3-1: config 0 descriptor?? [ 889.168797][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.184337][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.199198][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.199388][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.199548][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.202588][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.203858][ T1520] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.205256][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.205290][ T91] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.211924][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.225470][ T1572] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.233763][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 889.264610][ T5632] cp210x 3-1:0.0: cp210x converter detected [ 889.443225][T13980] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 889.719256][ T5632] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 889.728871][ T5632] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 889.728900][ T5632] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 889.778188][T13961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.385073][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.577736][ T5632] usb 3-1: cp210x converter now attached to ttyUSB0 [ 890.724742][T16459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.725431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.726185][T16459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.803959][T16459] syz.1.3421 (16459) used greatest stack depth: 17216 bytes left [ 890.984068][T16471] FAULT_INJECTION: forcing a failure. [ 890.984068][T16471] name failslab, interval 1, probability 0, space 0, times 0 [ 890.984104][T16471] CPU: 0 UID: 0 PID: 16471 Comm: syz.1.3424 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 890.984131][T16471] Tainted: [L]=SOFTLOCKUP [ 890.984139][T16471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 890.984150][T16471] Call Trace: [ 890.984157][T16471] [ 890.984166][T16471] dump_stack_lvl+0xe8/0x150 [ 890.984193][T16471] should_fail_ex+0x46b/0x600 [ 890.984223][T16471] should_failslab+0xa8/0x100 [ 890.984251][T16471] __kmalloc_noprof+0xdf/0x7b0 [ 890.984278][T16471] ? kfree+0x4d/0x6c0 [ 890.984301][T16471] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 890.984323][T16471] tomoyo_realpath_from_path+0xe3/0x5d0 [ 890.984341][T16471] ? tomoyo_domain+0xd7/0x130 [ 890.984371][T16471] ? tomoyo_path_number_perm+0x219/0x630 [ 890.984393][T16471] tomoyo_path_number_perm+0x246/0x630 [ 890.984416][T16471] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 890.984436][T16471] ? __lock_acquire+0x6b5/0x2d10 [ 890.984456][T16471] ? do_raw_spin_lock+0x12b/0x2f0 [ 890.984508][T16471] ? __fget_files+0x2a/0x420 [ 890.984530][T16471] ? __fget_files+0x2a/0x420 [ 890.984548][T16471] ? __fget_files+0x3a6/0x420 [ 890.984566][T16471] ? __fget_files+0x2a/0x420 [ 890.984588][T16471] security_file_ioctl+0xc3/0x2a0 [ 890.984612][T16471] __se_sys_ioctl+0x47/0x170 [ 890.984642][T16471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.984662][T16471] do_syscall_64+0x15f/0xf80 [ 890.984683][T16471] ? trace_irq_disable+0x3b/0x140 [ 890.984709][T16471] ? clear_bhb_loop+0x40/0x90 [ 890.984732][T16471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.984750][T16471] RIP: 0033:0x7f62ebb4ce59 [ 890.984768][T16471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.984782][T16471] RSP: 002b:00007f62e9da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.984798][T16471] RAX: ffffffffffffffda RBX: 00007f62ebdc5fa0 RCX: 00007f62ebb4ce59 [ 890.984809][T16471] RDX: 0000200000000040 RSI: 0000000080044d0c RDI: 0000000000000003 [ 890.984818][T16471] RBP: 00007f62e9da6090 R08: 0000000000000000 R09: 0000000000000000 [ 890.984827][T16471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.984836][T16471] R13: 00007f62ebdc6038 R14: 00007f62ebdc5fa0 R15: 00007ffe889ca1b8 [ 890.984859][T16471] [ 891.011534][T16471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 891.263287][ T5632] usb 3-1: USB disconnect, device number 54 [ 891.338119][ T5632] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 891.338870][ T5632] cp210x 3-1:0.0: device disconnected [ 891.466717][T13365] net_ratelimit: 13 callbacks suppressed [ 891.466737][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.940282][T16483] loop4: detected capacity change from 0 to 32768 [ 891.949519][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.951407][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.952838][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.953815][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.954733][T16483] (syz.4.3430,16483,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 891.955105][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.960282][T16483] (syz.4.3430,16483,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 891.961450][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.962017][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.965256][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.965806][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.967192][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.969338][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.969725][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.970071][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 891.972497][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.004669][T14481] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 892.033439][T16495] FAULT_INJECTION: forcing a failure. [ 892.033439][T16495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.033472][T16495] CPU: 0 UID: 0 PID: 16495 Comm: syz.3.3434 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 892.033498][T16495] Tainted: [L]=SOFTLOCKUP [ 892.033506][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 892.033517][T16495] Call Trace: [ 892.033525][T16495] [ 892.033532][T16495] dump_stack_lvl+0xe8/0x150 [ 892.033559][T16495] should_fail_ex+0x46b/0x600 [ 892.033586][T16495] _copy_from_user+0x2d/0xb0 [ 892.033613][T16495] ___sys_sendmsg+0x1c6/0x360 [ 892.033633][T16495] ? __lock_acquire+0x6b5/0x2d10 [ 892.033657][T16495] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.033710][T16495] ? __fget_files+0x2a/0x420 [ 892.033733][T16495] ? __fget_files+0x3a6/0x420 [ 892.033764][T16495] __x64_sys_sendmsg+0x1c3/0x2a0 [ 892.033788][T16495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 892.033817][T16495] ? __pfx_ksys_write+0x10/0x10 [ 892.033851][T16495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.033872][T16495] do_syscall_64+0x15f/0xf80 [ 892.033894][T16495] ? trace_irq_disable+0x3b/0x140 [ 892.033921][T16495] ? clear_bhb_loop+0x40/0x90 [ 892.033943][T16495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.033962][T16495] RIP: 0033:0x7f9b264ece59 [ 892.033980][T16495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.033996][T16495] RSP: 002b:00007f9b24746028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.034016][T16495] RAX: ffffffffffffffda RBX: 00007f9b26765fa0 RCX: 00007f9b264ece59 [ 892.034030][T16495] RDX: 0000000000004804 RSI: 00002000000000c0 RDI: 0000000000000003 [ 892.034042][T16495] RBP: 00007f9b24746090 R08: 0000000000000000 R09: 0000000000000000 [ 892.034054][T16495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.034066][T16495] R13: 00007f9b26766038 R14: 00007f9b26765fa0 R15: 00007fffcbf0fe38 [ 892.034096][T16495] [ 892.054759][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.055255][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.055663][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.056021][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.056419][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.056769][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.057117][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.065354][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.071342][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.076521][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.078789][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.080694][T16483] JBD2: Ignoring recovery information on journal [ 892.095532][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095577][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095601][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095624][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095646][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095668][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095690][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095713][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095735][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095758][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095780][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095802][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095824][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095846][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095869][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095891][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095913][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095935][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095958][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.095980][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096002][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096024][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096046][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096068][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096091][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096120][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096142][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096176][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096218][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096240][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096263][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096307][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096330][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096352][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096374][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096397][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096419][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096442][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096463][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096486][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096508][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096531][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096552][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096574][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096596][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096618][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096640][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096662][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096684][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096707][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096728][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096751][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096773][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096795][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096817][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096839][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096862][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096884][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096906][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096928][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096950][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096972][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.096994][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126521][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126550][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126573][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126596][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126618][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126640][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126662][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126685][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126707][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126729][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126751][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126774][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126796][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126818][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126840][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126862][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126885][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126908][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126929][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126951][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126974][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.126996][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127019][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127040][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127062][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127085][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127107][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127129][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127151][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127172][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127195][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127217][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127241][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127262][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127284][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127312][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127335][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127357][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127379][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127401][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127423][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127446][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127467][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127490][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127513][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127549][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127572][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127594][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127616][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127639][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127660][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127682][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127705][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127727][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127749][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127772][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127793][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127816][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127839][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127861][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127883][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127905][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.127928][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141447][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141476][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141500][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141522][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141544][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141566][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141589][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141612][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141634][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141656][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141679][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141702][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141724][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141746][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141768][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141790][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.141812][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148419][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148458][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148483][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148506][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148530][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148553][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148577][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148600][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148623][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148647][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148670][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148693][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148715][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148737][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148758][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.148781][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.158828][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.158865][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.158889][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.158912][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.158934][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.158957][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.158979][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.159001][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.184119][T14481] usb 1-1: Using ep0 maxpacket: 16 [ 892.197146][T14481] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 892.197172][T14481] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.197192][T14481] usb 1-1: config 1 has no interface number 0 [ 892.197248][T14481] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 892.197267][T14481] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.197291][T14481] usb 1-1: config 1 interface 105 has no altsetting 0 [ 892.233910][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.233958][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.233979][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.233997][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234016][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234035][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234053][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234073][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234091][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234112][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234133][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234153][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234171][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234188][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234204][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.234221][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.275158][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.275198][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.275217][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.275234][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.275251][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.275268][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.275293][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.275311][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.287795][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.296616][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.300408][T14481] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 892.300434][T14481] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 892.300455][T14481] usb 1-1: Product: syz [ 892.300470][T14481] usb 1-1: Manufacturer: syz [ 892.300485][T14481] usb 1-1: SerialNumber: syz [ 892.312360][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.312402][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.312426][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.312447][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.312469][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.312490][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323311][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323357][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323381][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323404][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323427][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323449][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323472][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323493][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323516][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323545][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323568][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323590][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323612][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323635][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323657][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.323679][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326063][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326102][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326126][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326150][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326173][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326197][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326220][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326243][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326267][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326290][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326313][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326336][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326378][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326402][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326426][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326450][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326482][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326506][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326537][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326561][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326585][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326618][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326642][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326666][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326688][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326712][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326735][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326758][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326781][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326802][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326824][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326847][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326869][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.326891][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.332891][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.332927][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.332952][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.332974][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.332997][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333019][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333042][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333065][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333087][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333109][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333131][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333154][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333175][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333198][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333219][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.333241][ T1572] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.336464][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.339685][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.341996][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.353445][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.353539][ T150] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.355895][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.356305][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.357988][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.358033][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.359208][T16483] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 892.388243][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.389159][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.389786][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.406736][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.411198][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.411255][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.413824][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.416564][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.434925][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.445257][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.445324][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.462381][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.487035][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.491703][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.492271][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.492937][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.493649][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.495124][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.510233][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.530786][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.531138][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.533805][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.555934][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.556089][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.571365][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.571909][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.573339][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.575152][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.575544][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.576516][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.604644][ T1137] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.610934][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.614743][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.617544][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.618099][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.619765][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.621212][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.634219][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.644661][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.675169][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.676698][T16483] [ 892.676709][T16483] ====================================================== [ 892.676718][T16483] WARNING: possible circular locking dependency detected [ 892.676735][T16483] syzkaller #0 Tainted: G L [ 892.676748][T16483] ------------------------------------------------------ [ 892.676756][T16483] syz.4.3430/16483 is trying to acquire lock: [ 892.676769][T16483] ffff888041b54b58 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x1c3/0x800 [ 892.676819][T16483] [ 892.676819][T16483] but task is already holding lock: [ 892.676826][T16483] ffff8880334c6918 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ac/0x700 [ 892.676870][T16483] [ 892.676870][T16483] which lock already depends on the new lock. [ 892.676870][T16483] [ 892.676878][T16483] [ 892.676878][T16483] the existing dependency chain (in reverse order) is: [ 892.676887][T16483] [ 892.676887][T16483] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 892.676915][T16483] down_read+0x97/0x200 [ 892.676940][T16483] ocfs2_start_trans+0x3ac/0x700 [ 892.676959][T16483] ocfs2_mknod+0x1181/0x2260 [ 892.676985][T16483] ocfs2_mkdir+0x181/0x460 [ 892.677011][T16483] vfs_mkdir+0x40b/0x630 [ 892.677028][T16483] filename_mkdirat+0x289/0x520 [ 892.677045][T16483] __se_sys_mkdir+0x34/0x150 [ 892.677063][T16483] do_syscall_64+0x15f/0xf80 [ 892.677086][T16483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.677106][T16483] [ 892.677106][T16483] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 892.677136][T16483] ocfs2_start_trans+0x2ac/0x700 [ 892.677154][T16483] ocfs2_xattr_set+0xebb/0x13e0 [ 892.677172][T16483] __vfs_setxattr+0x43c/0x480 [ 892.677190][T16483] __vfs_setxattr_noperm+0x12d/0x660 [ 892.677213][T16483] vfs_setxattr+0x163/0x370 [ 892.677236][T16483] filename_setxattr+0x296/0x630 [ 892.677255][T16483] path_setxattrat+0x3eb/0x440 [ 892.677292][T16483] __x64_sys_setxattr+0xbc/0xe0 [ 892.677315][T16483] do_syscall_64+0x15f/0xf80 [ 892.677336][T16483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.677353][T16483] [ 892.677353][T16483] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 892.677382][T16483] down_write+0x3a/0x50 [ 892.677404][T16483] ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 892.677434][T16483] ocfs2_reserve_new_metadata_blocks+0x415/0x9a0 [ 892.677464][T16483] ocfs2_init_xattr_set_ctxt+0x2f5/0x760 [ 892.677483][T16483] ocfs2_xattr_set+0xc42/0x13e0 [ 892.677502][T16483] __vfs_setxattr+0x43c/0x480 [ 892.677521][T16483] __vfs_setxattr_noperm+0x12d/0x660 [ 892.677541][T16483] vfs_setxattr+0x163/0x370 [ 892.677561][T16483] filename_setxattr+0x296/0x630 [ 892.677579][T16483] path_setxattrat+0x3eb/0x440 [ 892.677594][T16483] __x64_sys_setxattr+0xbc/0xe0 [ 892.677619][T16483] do_syscall_64+0x15f/0xf80 [ 892.677640][T16483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.677659][T16483] [ 892.677659][T16483] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 892.677685][T16483] __lock_acquire+0x15a5/0x2d10 [ 892.677704][T16483] lock_acquire+0x106/0x350 [ 892.677722][T16483] down_read+0x97/0x200 [ 892.677744][T16483] ocfs2_init_acl+0x1c3/0x800 [ 892.677761][T16483] ocfs2_mknod+0x1679/0x2260 [ 892.677787][T16483] ocfs2_create+0x195/0x460 [ 892.677810][T16483] path_openat+0x13b4/0x38a0 [ 892.677834][T16483] do_file_open+0x23e/0x4a0 [ 892.677858][T16483] do_sys_openat2+0x113/0x200 [ 892.677880][T16483] __x64_sys_openat+0x138/0x170 [ 892.677902][T16483] do_syscall_64+0x15f/0xf80 [ 892.677924][T16483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.677943][T16483] [ 892.677943][T16483] other info that might help us debug this: [ 892.677943][T16483] [ 892.677951][T16483] Chain exists of: [ 892.677951][T16483] &oi->ip_xattr_sem --> sb_internal#3 --> &journal->j_trans_barrier [ 892.677951][T16483] [ 892.677988][T16483] Possible unsafe locking scenario: [ 892.677988][T16483] [ 892.677995][T16483] CPU0 CPU1 [ 892.678001][T16483] ---- ---- [ 892.678008][T16483] rlock(&journal->j_trans_barrier); [ 892.678021][T16483] lock(sb_internal#3); [ 892.678040][T16483] lock(&journal->j_trans_barrier); [ 892.678055][T16483] rlock(&oi->ip_xattr_sem); [ 892.678069][T16483] [ 892.678069][T16483] *** DEADLOCK *** [ 892.678069][T16483] [ 892.678076][T16483] 8 locks held by syz.4.3430/16483: [ 892.678088][T16483] #0: ffff88803f934480 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 892.678146][T16483] #1: ffff888041b54e80 (&type->i_mutex_dir_key#12){++++}-{4:4}, at: path_openat+0xb5e/0x38a0 [ 892.678204][T16483] #2: ffff8880627ebdc0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 892.678261][T16483] #3: ffff88805fa12d00 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4840 [ 892.678329][T16483] #4: ffff88805fa15f40 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x2660 [ 892.678385][T16483] #5: ffff88803f934770 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0x1181/0x2260 [ 892.678443][T16483] #6: ffff8880334c6918 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ac/0x700 [ 892.678488][T16483] #7: ffff88805f4ecbb0 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x2054/0x2290 [ 892.678537][T16483] [ 892.678537][T16483] stack backtrace: [ 892.678551][T16483] CPU: 1 UID: 0 PID: 16483 Comm: syz.4.3430 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 892.678581][T16483] Tainted: [L]=SOFTLOCKUP [ 892.678589][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 892.678602][T16483] Call Trace: [ 892.678609][T16483] [ 892.678617][T16483] dump_stack_lvl+0xe8/0x150 [ 892.678642][T16483] print_circular_bug+0x2e1/0x300 [ 892.678669][T16483] check_noncircular+0x12e/0x150 [ 892.678699][T16483] __lock_acquire+0x15a5/0x2d10 [ 892.678730][T16483] ? ocfs2_init_acl+0x1c3/0x800 [ 892.678747][T16483] lock_acquire+0x106/0x350 [ 892.678766][T16483] ? ocfs2_init_acl+0x1c3/0x800 [ 892.678791][T16483] down_read+0x97/0x200 [ 892.678815][T16483] ? ocfs2_init_acl+0x1c3/0x800 [ 892.678833][T16483] ? __pfx_down_read+0x10/0x10 [ 892.678863][T16483] ocfs2_init_acl+0x1c3/0x800 [ 892.678881][T16483] ? ocfs2_mknod_locked+0x158/0x290 [ 892.678913][T16483] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 892.678931][T16483] ? dquot_alloc_inode+0x8ba/0xa50 [ 892.678957][T16483] ? dquot_alloc_inode+0x166/0xa50 [ 892.678980][T16483] ? ocfs2_block_signals+0x9a/0xe0 [ 892.679009][T16483] ? ocfs2_init_security_get+0x139/0x1a0 [ 892.679031][T16483] ocfs2_mknod+0x1679/0x2260 [ 892.679062][T16483] ? __pfx_ocfs2_mknod+0x10/0x10 [ 892.679090][T16483] ? __lock_acquire+0x6b5/0x2d10 [ 892.679113][T16483] ? __lock_acquire+0x6b5/0x2d10 [ 892.679140][T16483] ? do_raw_spin_lock+0x12b/0x2f0 [ 892.679170][T16483] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 892.679194][T16483] ? lockdep_hardirqs_on+0x7a/0x110 [ 892.679215][T16483] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 892.679237][T16483] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 892.679266][T16483] ? reacquire_held_locks+0x104/0x190 [ 892.679299][T16483] ? rt_spin_lock+0x1e0/0x400 [ 892.679328][T16483] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 892.679359][T16483] ? rt_spin_unlock+0x14f/0x200 [ 892.679389][T16483] ? rt_spin_unlock+0x160/0x200 [ 892.679420][T16483] ? rcu_is_watching+0x15/0xb0 [ 892.679444][T16483] ? ocfs2_lookup+0x60f/0xa20 [ 892.679470][T16483] ? __pfx_apparmor_path_mknod+0x10/0x10 [ 892.679497][T16483] ocfs2_create+0x195/0x460 [ 892.679524][T16483] ? __pfx_ocfs2_lookup+0x10/0x10 [ 892.679549][T16483] ? __pfx_ocfs2_permission+0x10/0x10 [ 892.679575][T16483] ? __pfx_ocfs2_create+0x10/0x10 [ 892.679600][T16483] ? bpf_lsm_inode_permission+0x9/0x20 [ 892.679618][T16483] ? security_inode_permission+0xb7/0x2e0 [ 892.679641][T16483] ? may_o_create+0x2d2/0x370 [ 892.679668][T16483] ? bpf_lsm_inode_create+0x9/0x20 [ 892.679695][T16483] ? __pfx_ocfs2_create+0x10/0x10 [ 892.679720][T16483] path_openat+0x13b4/0x38a0 [ 892.679760][T16483] ? __pfx_path_openat+0x10/0x10 [ 892.679795][T16483] ? do_raw_spin_lock+0x12b/0x2f0 [ 892.679826][T16483] do_file_open+0x23e/0x4a0 [ 892.679854][T16483] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 892.679880][T16483] ? __pfx_do_file_open+0x10/0x10 [ 892.679907][T16483] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 892.679946][T16483] ? alloc_fd+0x64e/0x6c0 [ 892.679974][T16483] do_sys_openat2+0x113/0x200 [ 892.679998][T16483] ? __se_sys_futex+0x3a8/0x450 [ 892.680022][T16483] ? __pfx_do_sys_openat2+0x10/0x10 [ 892.680048][T16483] ? rcu_is_watching+0x15/0xb0 [ 892.680069][T16483] __x64_sys_openat+0x138/0x170 [ 892.680093][T16483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.680114][T16483] do_syscall_64+0x15f/0xf80 [ 892.680138][T16483] ? clear_bhb_loop+0x40/0x90 [ 892.680161][T16483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.680181][T16483] RIP: 0033:0x7ff817acce59 [ 892.680200][T16483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.680218][T16483] RSP: 002b:00007ff815d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 892.680241][T16483] RAX: ffffffffffffffda RBX: 00007ff817d45fa0 RCX: 00007ff817acce59 [ 892.680257][T16483] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 892.680280][T16483] RBP: 00007ff817b62d6f R08: 0000000000000000 R09: 0000000000000000 [ 892.680294][T16483] R10: 0000000000000086 R11: 0000000000000246 R12: 0000000000000000 [ 892.680307][T16483] R13: 00007ff817d46038 R14: 00007ff817d45fa0 R15: 00007fffc6205b28 [ 892.680330][T16483] [ 892.688686][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.688718][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.688738][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.688757][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.688775][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.688793][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.694303][T14481] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 892.695470][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.700207][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.706122][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.710518][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.716128][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.730657][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.735537][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.736119][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.746134][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.749114][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.752515][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.752551][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.757991][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.770525][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.770582][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.770644][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.770672][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.775589][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.775627][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.775905][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.775925][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.775944][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.775963][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.775981][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.821468][T13961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.846011][ T150] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.846786][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850498][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850553][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850702][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850735][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850764][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850793][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850822][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850850][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850879][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.850901][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.900908][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 892.908374][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.914010][ T150] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.916076][ T150] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.923273][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924025][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924062][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924085][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924107][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924130][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924151][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924173][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924195][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.924217][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.928119][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 892.932270][ T150] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 893.046906][T14481] usb 1-1: USB disconnect, device number 40 [ 893.316472][ T1520] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 893.317090][T14098] ocfs2: Unmounting device (7,4) on (node local) [ 893.535075][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.542072][T16513] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 894.103729][T16530] loop2: detected capacity change from 0 to 512 [ 894.104389][T16530] EXT4-fs: Ignoring removed nobh option [ 894.112767][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.113669][T16530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 894.113797][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.121630][ T1572] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.121678][ T1572] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.124683][ T1572] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 894.129303][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.131285][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.133671][T16530] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 894.136375][ T1520] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 894.139730][ T1572] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 894.139858][T16530] EXT4-fs (loop2): 1 truncate cleaned up [ 894.140984][T16530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.170271][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.176167][ T150] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.239755][T16513] loop4: detected capacity change from 0 to 764 [ 894.247707][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.247821][ T1520] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.254673][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.256139][T16513] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 894.258402][ T1572] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.259321][ T91] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.259350][ T91] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.259370][ T91] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.261865][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.268314][ T91] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.270369][ T91] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.270487][ T91] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.270889][ T91] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.271464][T16513] ISOFS: File unit size != 0 for ISO file (1792). [ 894.271482][T16513] rock: directory entry would overflow storage [ 894.271491][T16513] rock: sig=0x4654, size=5, remaining=4 [ 894.276027][ T91] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.281744][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.281989][T16513] ISOFS: Interleaved files not (yet) supported. [ 894.281999][T16513] ISOFS: File unit size != 0 for ISO file (1856). [ 894.283889][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.283921][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.283941][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.290094][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.294510][ T40] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 894.332663][ T40] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 894.332717][ T40] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 894.332742][ T40] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 894.332764][ T40] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 894.340453][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.348556][ T1572] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 894.381879][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.387194][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.390445][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.396700][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.397257][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.400033][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.403244][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.405116][ T40] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.408691][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.411237][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.417891][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.420907][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.423684][ T1520] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 894.457405][T13961] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 894.515664][T13980] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 894.523110][T16541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3453'. [ 894.551806][T16541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3453'. [ 894.605996][T13961] usb 1-1: Using ep0 maxpacket: 16 [ 894.610259][T13961] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 894.610299][T13961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.610327][T13961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12592, setting to 1024 [ 894.610358][T13961] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 894.610381][T13961] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 894.616179][T13961] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 894.616205][T13961] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 894.616225][T13961] usb 1-1: Manufacturer: syz [ 894.633085][T13961] usb 1-1: config 0 descriptor?? [ 894.645523][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.665477][ T5609] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 895.047785][T16554] loop4: detected capacity change from 0 to 512 [ 895.062931][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.067961][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.069625][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.072560][ T150] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.077674][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.079818][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.080961][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.084678][T13961] rc_core: IR keymap rc-hauppauge not found [ 895.084706][T13961] Registered IR keymap rc-empty [ 895.085020][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.085910][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.092011][ T91] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 895.106649][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.128465][T13961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 895.137663][T13961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 895.140061][T13978] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 895.152315][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.166971][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.185029][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.206975][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.226151][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.246805][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.741679][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.755795][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.776240][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.794849][T13961] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 895.816460][T13961] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 895.816483][T13961] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 895.822484][T13961] usb 1-1: USB disconnect, device number 41 [ 895.943337][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.555424][T14481] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 896.704710][T14481] usb 2-1: Using ep0 maxpacket: 8 [ 896.706061][T14481] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 896.707782][T14481] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 896.707807][T14481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.707827][T14481] usb 2-1: Product: syz [ 896.707841][T14481] usb 2-1: Manufacturer: syz [ 896.707855][T14481] usb 2-1: SerialNumber: syz [ 896.717071][T14481] ch9200 2-1:2.0: probe with driver ch9200 failed with error -22 [ 896.898759][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.396785][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.848926][T13961] usb 2-1: USB disconnect, device number 30 [ 898.975532][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.455199][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.495528][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.535517][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.015349][T14481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.015798][T13961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.575442][T13365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.615461][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.655379][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.055147][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog