last executing test programs: 1m1.615219317s ago: executing program 3 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000240)="faf8537d7db8b77939849ace83668366b9d00200000f32006266b8002000009903c0b800008ed0663500000c000f23f80f21660f0866b804000080660f38008cadbd0f30f30f093e260fa2260fc75ea3baf80c66b86651f18fdbc7bafc0cb0c8aa15151af966b9800000c0baf80c66b8b435548766efbafc0ced6635004000000f30", 0x82}], 0x1, 0xda, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m1.169201582s ago: executing program 3 (id=369): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000140)={0x9, 0x168a, 0x8, 0x0, 0x7, 0x9, 0xed, 0x8}, 0x0, 0x0, 0x0, 0x0) 1m0.221503259s ago: executing program 3 (id=376): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x9, 0x200, 0x0, 0x1, 0x8, 0x0, 0x200, 0x8001, 0x2c, 0x80000001, 0x1}) 59.224592991s ago: executing program 3 (id=385): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f000000df00)={[{@nodiscard}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@grpjquota}, {@noflush_merge}, {@nocheckpoint_merge}, {@acl}, {@gc_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@background_gc_off}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 57.349000042s ago: executing program 3 (id=398): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x85) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0/file1'}}, {@volatile}, {@verity_require}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 56.073766433s ago: executing program 3 (id=401): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2}, 0x14) syz_emit_ethernet(0x14, &(0x7f0000000340)={@local, @empty, @void, {@llc={0x4, {@llc={0x42, 0x8e, "be", "7dd1b2"}}}}}, 0x0) 55.456436276s ago: executing program 32 (id=401): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2}, 0x14) syz_emit_ethernet(0x14, &(0x7f0000000340)={@local, @empty, @void, {@llc={0x4, {@llc={0x42, 0x8e, "be", "7dd1b2"}}}}}, 0x0) 14.855341593s ago: executing program 2 (id=737): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r2], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) 14.69215251s ago: executing program 2 (id=739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 14.479092741s ago: executing program 2 (id=749): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0301"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 12.295400204s ago: executing program 2 (id=759): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 11.371033159s ago: executing program 2 (id=772): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1a00000000000000000000000000000004100000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000082169aab1166"], 0x48) 10.582379039s ago: executing program 2 (id=778): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 10.208652447s ago: executing program 33 (id=778): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.352524786s ago: executing program 0 (id=814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000040), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000180)=""/47, 0x2f, 0x2, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) 3.396779973s ago: executing program 0 (id=816): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.013345952s ago: executing program 4 (id=818): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x2000000008, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) splice(r2, 0x0, r4, 0x0, 0x8, 0x3) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 2.765613588s ago: executing program 0 (id=820): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) write$P9_RSTATu(r0, &(0x7f0000000000)=ANY=[], 0x92) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14, 0x67, 0x1, {0x40, 0x1, 0x7}}, 0x14) 2.699422004s ago: executing program 1 (id=822): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x1c57, 0xc000, 0xa, 0xd5}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.895870706s ago: executing program 4 (id=824): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.659390761s ago: executing program 0 (id=825): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xbb, 0x6, 0x5, 0x2, 0x8001, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.659103771s ago: executing program 1 (id=826): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 1.496957237s ago: executing program 1 (id=828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.495972487s ago: executing program 0 (id=835): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x615d}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) 1.472555259s ago: executing program 4 (id=829): r0 = io_uring_setup(0x20, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x80000002, 0xfefffffd}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) accept4$x25(r1, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000008}) 1.339423784s ago: executing program 0 (id=830): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 1.323944995s ago: executing program 5 (id=780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) 1.118786996s ago: executing program 5 (id=831): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1001, 0x2000, 0xdcf, 0x4004, 0xb, 0xdc1, 0x0, 0x0, 0x20, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x5, 0x0, 0x15, 0x80000001, 0x0, 0x1, 0x9e9, 0x80, 0xb877, 0x2000, 0x7, 0xffffffffffffffff, 0xee01, 0x3d, 0x86}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.117914176s ago: executing program 1 (id=840): setreuid(0x0, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 979.40189ms ago: executing program 5 (id=832): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) 978.22591ms ago: executing program 1 (id=842): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2007ff3) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 895.515539ms ago: executing program 5 (id=833): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 477.711241ms ago: executing program 4 (id=834): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x92cd) 256.791744ms ago: executing program 4 (id=836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 255.806594ms ago: executing program 1 (id=846): r0 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xbd, 0x1a, 0xbd, 0x8, 0x19d2, 0x167, 0xbc89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x8, 0x10}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, 0xfffffffffffffffe) syz_usb_control_io$rtl8150(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @string={0x0, 0x3, "d74ab81db58191fd7f8318b1c7fa56e037214e628c50f03e9d2cec5de1fc93d3d16c47691d20555d343eca6b912f5a167d3e6563196a29803234279d35f4f0153e94cb013915e6c0cc39b84c38c1fb974e067a84e8d378b9da4d4950478bcbc703a064398a471a709fc02a780ac3db18d160831cd9c0e77f1cb8e1e54a370a1dc2c781b783767256f6e8d0f8a220f99ac1f742ca3769c88ecbd398bfdfc29802cc7f5ca0fdd2eabe6c010053b7074643d5412499dd9bd253a1425fce5d1bb335d730947e597dc531f2cc8dd40d"}}}, 0x0) 195.81479ms ago: executing program 5 (id=837): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 93.989941ms ago: executing program 4 (id=838): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$sock_SIOCGPGRP(r1, 0x501c4814, 0x0) 0s ago: executing program 5 (id=839): syz_mount_image$hfsplus(&(0x7f00000004c0), &(0x7f0000000040)='./file0\x00', 0x4008, &(0x7f00000002c0)=ANY=[], 0x1, 0x678, &(0x7f00000010c0)="$eJzs3c1vHGcdB/DvrteON5TUTZM2RZUSNeJFtUjsWC6YCwEh5EOFqnLgbCUOsbJJi+0it0LU5fXaQ/6AcvCNExL3SOXCBW69+lgJgYR6wYjDop2dXW/sXb/EitduP59o9nlmnpnn+T2/ndnZXSvaAF9Y85OpPUol85Ovr7XWNzdmGpsbM/c79SRnklSTWrtI5T/NZvPj5GbaS15qbSy7qwwa5+HS3JuffLb5aXutVi7F/tW9jjuY9XLJlSQjZfnkXT3e3639+hvfr89Kd4athF3tJA6GbTRJs/DPh+0tP/vrM92WHvV+R+975gOnQKV939xlIjlbXuit9wHtu2L7nn2qrQ87AAAAADgGz25lK2s5N+w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DQpf/+/Ui7VdjmaK6l0fv9/rGxLWT9ZLh9u90dPKw4AAAAAAAAAOKozB9/18la2spZz3Q3/Lv7m3+7hQvH4pbyTlSxmOdeyloWsZjXLmU4y0dPR2NrC6urydF7Z98gbfY+8ccA51Q8+NwAAAAAAAAD4AvlV5nv+/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdAJRlpF8VyoVOfSLWWZDzJWGu/9eTvnfpp9mjYAQAAAMAxeHYrW1nLuc56s1J85n+h+Nw/nnfyIKtZymoaWczt4ruA9qf+6ubGTGNzY+Z+a9nd7/f+dagwih7T/u6h/8iXij3quZOlYsu13MpbaeR2qsWRLZc68fSP64NWTJXvlg4Y2e2ybM38w7Lc5f1DTXaQwV+mvN1v40SRkdFuRqZ6Yntu70wc8tnZOdJ0qt1gL+wYaccknijnZ8uyNZ/fDcr5setE35uJyz2hvbB3zpOv//mPP7nbeHDv7p2VyZMxpf2tl+VIWTaLx/ruc2Km5zp88fOYiYGmikxc7K7P54f5cSZzJW9kOUv5eRaymsVcyQ+K2kJ5Pld6LvkBmbr52Nob+0UyVl6r7SfrcDG9Uhx7Lkv5Ud7K7SzmteLfjUznW5nNbOZ6nuGLB3ilrQ646ptf7hv81W+UlXqS35flydDK63M9ee19zZ0o2nq3bGfp/NHuR7U+odS+UlZaY/y6LE+GnZmY7snE83tn4g/Fy8pK48G95bsL2ze70b2GO/9hWWldR789MXeJlOfL+e4T+PjZ0Wp7vm/bdNF2odtW3dV2sdvWvlLXB16pY+V7uN093SjaXuzbNlO0Xepp6/d+C4AT7+yrZ8fq/6j/rf5R/Tf1u/XXx79/5ttnXh7L6F9Gv1ObGvla9eXKn/JRfrn9+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhyK+++d2+h0Vhc3lFpNpvvD2g6zZXOz5kd46AvPZMMa8pjSdpb/tdsG1bm/9tsNsstlRNxJuxZKVJ1Js2nPlYtSb+my71bPhjK+TPkFybgqbu+ev/t6yvvvvfNpfvNkcWfLj6Ym52dm5qbfW3m+p2lxuJU+3HYUQJPw/ZNf9iRAAAAAAAAAAAAAAd1kP8P8NVXy50n2sXufepJBvczePTxY5kjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLrNT6b2KJVMT12baq1vbsw0Wkunvr1nLUk1SeUXSeXj5GbaSyZ6uqsMGufh0tybn3y2+el2X7XO/tW9jjuY9XLJlSQjZdlRP2J/t3b0d3iV7gxbCbvaSVwyfqRu4aj+HwAA//8sFQQa") r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 0s ago: executing program 5 (id=841): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) kernel console output (not intermixed with test programs): T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.565380][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.572543][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.583311][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.590811][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.615539][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.625975][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.633162][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.669019][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.676138][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.738620][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.745782][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.813017][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.963671][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.038762][ T249] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.045969][ T249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.066807][ T249] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.074035][ T249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.292735][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.329852][ T5799] Bluetooth: hci0: command tx timeout [ 80.408734][ T5799] Bluetooth: hci3: command tx timeout [ 80.414222][ T5799] Bluetooth: hci2: command tx timeout [ 80.420271][ T5799] Bluetooth: hci1: command tx timeout [ 80.427943][ T5792] veth0_vlan: entered promiscuous mode [ 80.445204][ T5792] veth1_vlan: entered promiscuous mode [ 80.494011][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.520934][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.536014][ T5792] veth0_macvtap: entered promiscuous mode [ 80.553203][ T5792] veth1_macvtap: entered promiscuous mode [ 80.612244][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.653304][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.693986][ T5798] veth0_vlan: entered promiscuous mode [ 80.719283][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.730973][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.740862][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.750280][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.765093][ T5798] veth1_vlan: entered promiscuous mode [ 80.815494][ T5797] veth0_vlan: entered promiscuous mode [ 80.831127][ T5797] veth1_vlan: entered promiscuous mode [ 80.876632][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.932409][ T5798] veth0_macvtap: entered promiscuous mode [ 80.952928][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.964724][ T5798] veth1_macvtap: entered promiscuous mode [ 80.971100][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.010095][ T5797] veth0_macvtap: entered promiscuous mode [ 81.044011][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.056768][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.072115][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.092812][ T5797] veth1_macvtap: entered promiscuous mode [ 81.103007][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.114802][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.127076][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.139754][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.149021][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.157905][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.166637][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.184610][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.193668][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.263697][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.276327][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.287033][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.297777][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.312402][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.332718][ T5791] veth0_vlan: entered promiscuous mode [ 81.358273][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.369491][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.380001][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.390707][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.402051][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.416374][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.431546][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.440826][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.450605][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.512738][ T5791] veth1_vlan: entered promiscuous mode [ 81.534871][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.562184][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.674519][ T5791] veth0_macvtap: entered promiscuous mode [ 81.683066][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.702793][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.714429][ T5791] veth1_macvtap: entered promiscuous mode [ 81.776741][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.794790][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.814318][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.826273][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.857343][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.887570][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.912834][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.943007][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.971348][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.982530][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.997379][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.014894][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.027292][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.031505][ T5893] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 82.037546][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.054398][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.079572][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.164774][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.194388][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.211923][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.231784][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.407417][ T5799] Bluetooth: hci0: command tx timeout [ 82.487534][ T5799] Bluetooth: hci2: command tx timeout [ 82.487604][ T5805] Bluetooth: hci3: command tx timeout [ 82.492978][ T5799] Bluetooth: hci1: command tx timeout [ 82.632301][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.657243][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.913868][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.930001][ T5907] syz.3.11[5907]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.961190][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.022741][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.044839][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.171741][ T5909] ======================================================= [ 83.171741][ T5909] WARNING: The mand mount option has been deprecated and [ 83.171741][ T5909] and is ignored by this kernel. Remove the mand [ 83.171741][ T5909] option from the mount to silence this warning. [ 83.171741][ T5909] ======================================================= [ 83.251628][ T5783] kernel write not supported for file bpf-prog (pid: 5783 comm: kworker/0:3) [ 83.855381][ T5907] loop3: detected capacity change from 0 to 32768 [ 84.037501][ T5921] input: syz1 as /devices/virtual/input/input5 [ 84.047951][ T5907] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 84.490311][ T5799] Bluetooth: hci0: command tx timeout [ 84.567719][ T5799] Bluetooth: hci3: command tx timeout [ 84.573485][ T5799] Bluetooth: hci2: command tx timeout [ 84.577687][ T5931] loop2: detected capacity change from 0 to 512 [ 84.579046][ T5804] Bluetooth: hci1: command tx timeout [ 84.614020][ T5931] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 84.668761][ T5917] loop1: detected capacity change from 0 to 32768 [ 84.689377][ T5931] EXT4-fs (loop2): invalid journal inode [ 84.695299][ T5931] EXT4-fs (loop2): can't get journal size [ 84.699648][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 84.772238][ T5917] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.795806][ T5931] EXT4-fs (loop2): 1 truncate cleaned up [ 84.833475][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.120152][ T5917] XFS (loop1): Ending clean mount [ 85.145210][ T5917] XFS (loop1): Quotacheck needed: Please wait. [ 85.232546][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.268541][ T5917] XFS (loop1): Quotacheck: Done. [ 85.361993][ T5951] loop0: detected capacity change from 0 to 512 [ 85.417323][ T5951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.525637][ T5951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.665960][ T5951] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.745064][ T5797] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.765575][ T5951] EXT4-fs (loop0): shut down requested (2) [ 86.011629][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.388911][ T5963] loop2: detected capacity change from 0 to 256 [ 86.515634][ T5967] "syz.0.29" (5967) uses obsolete ecb(arc4) skcipher [ 86.586653][ T5967] trusted_key: syz.0.29 sent an empty control message without MSG_MORE. [ 86.936232][ T5976] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.971803][ T787] cfg80211: failed to load regulatory.db [ 87.087762][ T968] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.293261][ T968] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.308081][ T968] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.340278][ T968] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.352588][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.391752][ T5972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.443255][ T968] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 87.536232][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.840676][ T5863] usb 3-1: USB disconnect, device number 2 [ 88.301260][ T5995] loop1: detected capacity change from 0 to 128 [ 88.510565][ T5978] loop3: detected capacity change from 0 to 32768 [ 88.583171][ T5978] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.011719][ T5978] XFS (loop3): Ending clean mount [ 89.036984][ T5978] XFS (loop3): Quotacheck needed: Please wait. [ 89.169026][ T5978] XFS (loop3): Quotacheck: Done. [ 89.208718][ T6015] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 89.519337][ T5997] loop0: detected capacity change from 0 to 40427 [ 89.562922][ T5997] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 89.576899][ T5997] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 89.585370][ T5997] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 89.607769][ T5997] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 89.635286][ T5997] F2FS-fs (loop0): Image doesn't support compression [ 89.671905][ T5997] F2FS-fs (loop0): invalid crc value [ 89.718665][ T5997] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.892702][ T5997] F2FS-fs (loop0): Start checkpoint disabled! [ 89.909616][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.981163][ T5997] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 89.992529][ T5997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 90.275805][ T5997] F2FS-fs (loop0): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 90.339818][ T6032] syz.0.42: attempt to access beyond end of device [ 90.339818][ T6032] loop0: rw=2049, sector=53248, nr_sectors = 24 limit=40427 [ 90.442884][ T6032] syz.0.42: attempt to access beyond end of device [ 90.442884][ T6032] loop0: rw=2049, sector=53272, nr_sectors = 8 limit=40427 [ 90.503730][ T6032] syz.0.42: attempt to access beyond end of device [ 90.503730][ T6032] loop0: rw=2049, sector=53280, nr_sectors = 8 limit=40427 [ 90.558429][ T6032] syz.0.42: attempt to access beyond end of device [ 90.558429][ T6032] loop0: rw=2049, sector=53288, nr_sectors = 8 limit=40427 [ 90.608341][ T5997] syz.0.42: attempt to access beyond end of device [ 90.608341][ T5997] loop0: rw=2049, sector=53296, nr_sectors = 32 limit=40427 [ 90.650942][ T6032] syz.0.42: attempt to access beyond end of device [ 90.650942][ T6032] loop0: rw=2049, sector=53248, nr_sectors = 56 limit=40427 [ 90.899500][ T6035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.51'. [ 90.933795][ T6035] Zero length message leads to an empty skb [ 90.990674][ T12] kworker/u4:1: attempt to access beyond end of device [ 90.990674][ T12] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 91.024672][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 91.040843][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 91.340998][ T6033] loop1: detected capacity change from 0 to 32768 [ 91.363962][ T968] kernel read not supported for file /admmidi2 (pid: 968 comm: kworker/1:2) [ 91.419490][ T6033] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.641111][ T6033] XFS (loop1): Ending clean mount [ 91.675306][ T6033] XFS (loop1): Quotacheck needed: Please wait. [ 91.759902][ T6033] XFS (loop1): Quotacheck: Done. [ 91.903295][ T28] audit: type=1800 audit(1763143729.061:2): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.53" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 91.955281][ T6052] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 92.153406][ T5797] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.174509][ T6054] input: syz1 as /devices/virtual/input/input6 [ 92.365765][ T5796] udevd[5796]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 92.367942][ T6039] loop2: detected capacity change from 0 to 32768 [ 92.563783][ T6039] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.927748][ T6039] syz.2.56 (6039) used greatest stack depth: 20688 bytes left [ 92.988158][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.024519][ T6050] loop3: detected capacity change from 0 to 40427 [ 93.104923][ T5798] ocfs2: Unmounting device (7,2) on (node local) [ 93.135517][ T6050] F2FS-fs (loop3): invalid crc value [ 93.197191][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 93.207594][ T6050] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.228739][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.248992][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 93.297264][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.320479][ T27] usb 1-1: config 0 descriptor?? [ 93.366585][ T27] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 93.492100][ T6050] F2FS-fs (loop3): Start checkpoint disabled! [ 93.572453][ T6050] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 93.736178][ T28] audit: type=1800 audit(1763143730.891:3): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.57" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 93.792015][ T6050] syz.3.57: attempt to access beyond end of device [ 93.792015][ T6050] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 94.064747][ T2974] kworker/u4:9: attempt to access beyond end of device [ 94.064747][ T2974] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 94.082600][ T42] kworker/u4:2: attempt to access beyond end of device [ 94.082600][ T42] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.105940][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.114763][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.554631][ T6081] loop1: detected capacity change from 0 to 1024 [ 94.583761][ T6081] ext4: Unknown parameter 'context' [ 94.597209][ T27] gspca_vc032x: reg_w err -71 [ 94.602096][ T27] vc032x: probe of 1-1:0.0 failed with error -71 [ 94.631875][ T27] usb 1-1: USB disconnect, device number 2 [ 94.866548][ T6089] vlan2: entered allmulticast mode [ 94.884487][ T6089] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 95.210719][ T6096] loop1: detected capacity change from 0 to 8192 [ 95.247239][ T6099] loop2: detected capacity change from 0 to 256 [ 95.295395][ T6096] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 95.336848][ T6099] FAT-fs (loop2): Directory bread(block 64) failed [ 95.398337][ T6099] FAT-fs (loop2): Directory bread(block 65) failed [ 95.405061][ T6099] FAT-fs (loop2): Directory bread(block 66) failed [ 95.423175][ T6096] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 95.440880][ T6099] FAT-fs (loop2): Directory bread(block 67) failed [ 95.447415][ T6096] REISERFS (device loop1): using ordered data mode [ 95.447450][ T6096] reiserfs: using flush barriers [ 95.473269][ T6096] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.497044][ T6099] FAT-fs (loop2): Directory bread(block 68) failed [ 95.523313][ T6099] FAT-fs (loop2): Directory bread(block 69) failed [ 95.529468][ T6096] REISERFS (device loop1): checking transaction log (loop1) [ 95.546684][ T6099] FAT-fs (loop2): Directory bread(block 70) failed [ 95.574171][ T6099] FAT-fs (loop2): Directory bread(block 71) failed [ 95.601238][ T6099] FAT-fs (loop2): Directory bread(block 72) failed [ 95.635881][ T6099] FAT-fs (loop2): Directory bread(block 73) failed [ 95.795263][ T6096] REISERFS (device loop1): Using tea hash to sort names [ 95.823223][ T6096] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 95.840820][ T6096] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 95.913193][ T12] kworker/u4:1: attempt to access beyond end of device [ 95.913193][ T12] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 96.315991][ T6113] loop0: detected capacity change from 0 to 512 [ 96.372925][ T6113] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.415882][ T6113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.442040][ T6113] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.478333][ T6113] EXT4-fs (loop0): 1 truncate cleaned up [ 96.485394][ T6113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.619735][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.829924][ T6124] loop1: detected capacity change from 0 to 1024 [ 96.854912][ T6124] EXT4-fs: inline encryption not supported [ 96.863650][ T6124] EXT4-fs: Ignoring removed orlov option [ 96.886185][ T6124] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.948435][ T6124] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800c019, mo2=0002] [ 96.977409][ T6124] System zones: 0-1, 3-12 [ 96.983595][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.194996][ T28] audit: type=1800 audit(1763143734.351:4): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 97.302365][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.317300][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.430357][ T6125] loop3: detected capacity change from 0 to 32768 [ 97.497348][ T6125] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.556525][ T27] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 97.566525][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.596290][ T27] usb 3-1: config 0 descriptor?? [ 97.623498][ T6125] XFS (loop3): Ending clean mount [ 97.634028][ T27] gspca_main: spca508-2.14.0 probing 8086:0110 [ 97.656611][ T6125] XFS (loop3): Quotacheck needed: Please wait. [ 97.770163][ T6125] XFS (loop3): Quotacheck: Done. [ 97.844239][ T6125] XFS (loop3): User initiated shutdown received. [ 97.863456][ T27] gspca_spca508: reg_read err -32 [ 97.868982][ T6125] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 97.898156][ T27] gspca_spca508: reg_read err -32 [ 97.917512][ T6125] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 97.926125][ T27] gspca_spca508: reg_read err -32 [ 97.934512][ T27] gspca_spca508: reg_read err -32 [ 98.066863][ T5792] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.148718][ T27] gspca_spca508: reg write: error -71 [ 98.156629][ T27] spca508: probe of 3-1:0.0 failed with error -71 [ 98.199811][ T27] usb 3-1: USB disconnect, device number 3 [ 98.430693][ T6162] loop3: detected capacity change from 0 to 2048 [ 98.458990][ T6162] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 98.484645][ T6162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.858787][ T6170] Bluetooth: MGMT ver 1.22 [ 98.869449][ T6170] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 99.775781][ T6193] loop0: detected capacity change from 0 to 2048 [ 99.818595][ T6193] UDF-fs: bad mount option "adinicb}" or missing value [ 99.893302][ T6193] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 100.363475][ T6185] loop2: detected capacity change from 0 to 40427 [ 100.435746][ T6185] F2FS-fs (loop2): invalid crc value [ 100.476419][ T6185] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.713988][ T6185] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.983354][ T5798] syz-executor: attempt to access beyond end of device [ 100.983354][ T5798] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.043862][ T5798] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 101.590252][ T6230] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 101.710710][ T6230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.758374][ T6233] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 102.587283][ T5862] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.707188][ T787] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 102.799720][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.818861][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.840288][ T5862] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 102.859849][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.881317][ T5862] usb 2-1: config 0 descriptor?? [ 102.890147][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 102.919694][ T787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.939450][ T787] usb 1-1: not running at top speed; connect to a high speed hub [ 102.954759][ T787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.975757][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.990481][ T787] usb 1-1: string descriptor 0 read error: -22 [ 102.997427][ T787] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.006564][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.037371][ T787] usb 1-1: 0:2 : does not exist [ 103.254753][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 103.327939][ T6258] loop2: detected capacity change from 0 to 1024 [ 103.345625][ T5862] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 103.376116][ T5862] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 103.377313][ T6258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.443383][ T28] audit: type=1800 audit(1763143740.601:5): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.134" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 103.444963][ T5862] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input7 [ 103.642765][ T5862] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 103.721744][ T5862] usb 2-1: USB disconnect, device number 2 [ 103.770417][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.003244][ T6263] fido_id[6263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 104.322448][ T6267] loop2: detected capacity change from 0 to 32768 [ 104.366665][ T787] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 104.423978][ T6267] JBD2: Ignoring recovery information on journal [ 104.432026][ T787] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.500118][ T6267] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 104.522085][ T787] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 104.673840][ T787] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.723267][ T787] usb 1-1: USB disconnect, device number 3 [ 104.752691][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.138'. [ 104.775147][ T6267] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 104.798562][ T6267] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 104.808603][ T6267] OCFS2: File system is now read-only. [ 104.812957][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.138'. [ 104.814076][ T6267] (syz.2.136,6267,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 104.831523][ T6267] (syz.2.136,6267,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 104.839718][ T6267] (syz.2.136,6267,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 104.847992][ T6267] (syz.2.136,6267,1):ocfs2_add_clusters_in_btree:4831 ERROR: status = -30 [ 104.856549][ T6267] (syz.2.136,6267,1):ocfs2_write_cluster:1153 ERROR: status = -30 [ 104.864489][ T6267] (syz.2.136,6267,1):ocfs2_write_cluster_by_desc:1248 ERROR: status = -30 [ 104.873137][ T6267] (syz.2.136,6267,1):ocfs2_write_begin_nolock:1820 ERROR: status = -30 [ 104.881961][ T6267] (syz.2.136,6267,1):ocfs2_write_begin:1907 ERROR: status = -30 [ 105.074420][ T5798] ocfs2: Unmounting device (7,2) on (node local) [ 105.497243][ T5862] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.558634][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 105.573658][ T6284] netlink: 'syz.2.139': attribute type 15 has an invalid length. [ 105.602123][ T6284] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 65279 - 0 [ 105.613030][ T6284] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 65279 - 0 [ 105.622389][ T6284] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 65279 - 0 [ 105.631355][ T6284] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 65279 - 0 [ 105.660784][ T6284] vxlan0: entered promiscuous mode [ 105.679705][ T6271] loop3: detected capacity change from 0 to 32768 [ 105.711299][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 105.728390][ T5862] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 105.757551][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.765647][ T5862] usb 2-1: Product: syz [ 105.779776][ T5862] usb 2-1: Manufacturer: syz [ 105.804818][ T5862] usb 2-1: SerialNumber: syz [ 105.822346][ T5862] usb 2-1: config 0 descriptor?? [ 105.864584][ T5862] go7007: probe of 2-1:0.0 failed with error -12 [ 105.981833][ T6271] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 106.130398][ T968] usb 2-1: USB disconnect, device number 3 [ 106.474983][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 107.279811][ T6309] pim6reg: entered allmulticast mode [ 107.322637][ T6309] pim6reg: left allmulticast mode [ 107.439506][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.650947][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.661417][ T6318] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 107.676001][ T27] usb 4-1: config 0 has no interface number 0 [ 107.685996][ T27] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.705579][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.733202][ T27] usb 4-1: config 0 descriptor?? [ 107.744052][ T27] cp210x 4-1:0.1: cp210x converter detected [ 108.164851][ T27] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 108.384269][ T6340] loop2: detected capacity change from 0 to 2048 [ 108.399750][ T27] usb 4-1: cp210x converter now attached to ttyUSB0 [ 108.498167][ T6340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.617050][ T28] audit: type=1800 audit(1763143745.761:6): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.164" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 108.649557][ T27] usb 4-1: USB disconnect, device number 2 [ 108.668811][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.701088][ T27] cp210x 4-1:0.1: device disconnected [ 108.704451][ T6347] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.747013][ T6347] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 24 with error 28 [ 108.752689][ T6348] loop0: detected capacity change from 0 to 1024 [ 108.764656][ T6347] EXT4-fs (loop2): This should not happen!! Data will be lost [ 108.764656][ T6347] [ 108.780306][ T6348] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.780813][ T6347] EXT4-fs (loop2): Total free blocks count 0 [ 108.802288][ T6348] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 108.815590][ T6347] EXT4-fs (loop2): Free/Dirty block details [ 108.818298][ T6348] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.826477][ T6347] EXT4-fs (loop2): free_blocks=2415919104 [ 108.834139][ T6347] EXT4-fs (loop2): dirty_blocks=112 [ 108.840478][ T6348] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.166: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.844714][ T6347] EXT4-fs (loop2): Block reservation details [ 108.863553][ T6347] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 108.865719][ T6348] EXT4-fs (loop0): 1 orphan inode deleted [ 108.888176][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 10 with error 28 [ 108.893209][ T6348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.034842][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.144603][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 109.325109][ T6357] loop3: detected capacity change from 0 to 512 [ 109.349936][ T6357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.365037][ T6357] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.425029][ T6361] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 109.475191][ T28] audit: type=1800 audit(1763143746.631:7): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.170" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 109.540990][ T5862] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.645260][ T6365] loop0: detected capacity change from 0 to 128 [ 109.672797][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.738450][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 109.773908][ T5862] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 109.794057][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.812526][ T5862] usb 3-1: Product: syz [ 109.816920][ T5862] usb 3-1: Manufacturer: syz [ 109.823348][ T5862] usb 3-1: SerialNumber: syz [ 109.859447][ T5886] IPVS: starting estimator thread 0... [ 109.957752][ T6369] IPVS: using max 19 ests per chain, 45600 per kthread [ 110.050300][ T6355] syz.2.169[6355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.050482][ T6355] syz.2.169[6355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.105960][ T5862] r8152-cfgselector 3-1: Unknown version 0x7cf0 [ 110.148447][ T5862] r8152-cfgselector 3-1: bad CDC descriptors [ 110.193664][ T6373] loop0: detected capacity change from 0 to 512 [ 110.213226][ T6373] EXT4-fs: inline encryption not supported [ 110.228737][ T6373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.272888][ T6373] EXT4-fs (loop0): 1 truncate cleaned up [ 110.288779][ T6373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.332838][ T5862] r8152-cfgselector 3-1: Unknown version 0x0000 [ 110.358569][ T5862] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 110.519079][ T6371] loop3: detected capacity change from 0 to 32768 [ 110.574273][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.587066][ T6371] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.655076][ T6384] loop1: detected capacity change from 0 to 1024 [ 110.697667][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.937579][ T6371] XFS (loop3): Ending clean mount [ 111.086992][ T6393] syz_tun: entered allmulticast mode [ 111.141123][ T6392] syz_tun: left allmulticast mode [ 111.262957][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.572864][ T5162] udevd[5162]: worker [5809] terminated by signal 32 (Unknown signal 32) [ 111.587355][ T5162] udevd[5162]: worker [5809] failed while handling '/devices/virtual/block/loop3' [ 111.800743][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.150707][ T6419] loop2: detected capacity change from 0 to 1024 [ 112.280091][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 112.681538][ T6431] input: syz1 as /devices/virtual/input/input8 [ 112.926900][ T6438] loop2: detected capacity change from 0 to 128 [ 113.031002][ T6438] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.055058][ T6444] pim6reg: tun_chr_ioctl cmd 1074025672 [ 113.080338][ T6444] pim6reg: ignored: set checksum disabled [ 113.100631][ T6438] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.309340][ T5798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.107048][ T6469] loop2: detected capacity change from 0 to 2048 [ 114.117880][ T6455] loop3: detected capacity change from 0 to 32768 [ 114.144994][ T6469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.174740][ T6455] loop3: p1 p3 < > [ 115.079235][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 115.121706][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 115.206776][ T6485] loop2: detected capacity change from 0 to 4096 [ 115.737102][ C1] sched: RT throttling activated [ 115.940679][ T6496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.031539][ T6496] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 116.072634][ T6496] netlink: 'syz.3.220': attribute type 2 has an invalid length. [ 116.124650][ T6496] netlink: 252 bytes leftover after parsing attributes in process `syz.3.220'. [ 116.172237][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.583209][ T6499] loop3: detected capacity change from 0 to 128 [ 117.471547][ T6503] loop2: detected capacity change from 0 to 4096 [ 117.732998][ T6503] ntfs3: loop2: ino=b, Correct links count -> 1. [ 117.821202][ T6503] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 119.796089][ T6546] loop2: detected capacity change from 0 to 128 [ 119.894064][ T6546] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.902017][ T6552] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 119.914659][ T6552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.922718][ T6552] IPv6: NLM_F_CREATE should be set when creating new route [ 119.930112][ T6552] IPv6: NLM_F_CREATE should be set when creating new route [ 119.948032][ T6552] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 119.956002][ T6552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.963354][ T6552] IPv6: NLM_F_CREATE should be set when creating new route [ 120.010312][ T6546] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.184049][ T28] audit: type=1800 audit(1763143757.341:8): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.239" name="file2" dev="loop2" ino=14 res=0 errno=0 [ 120.283484][ T5798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.214681][ T6560] loop3: detected capacity change from 0 to 32768 [ 121.271683][ T6560] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.246 (6560) [ 121.403117][ T6560] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 121.433893][ T6560] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 121.447725][ T6560] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 121.467160][ T6560] BTRFS info (device loop3): use zstd compression, level 3 [ 121.488455][ T6560] BTRFS info (device loop3): using free space tree [ 121.757212][ T6560] BTRFS info (device loop3): enabling ssd optimizations [ 121.764262][ T6560] BTRFS info (device loop3): auto enabling async discard [ 121.925609][ T6596] loop1: detected capacity change from 0 to 512 [ 122.030348][ T28] audit: type=1800 audit(1763143759.191:9): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 122.083528][ T6596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.150119][ T6596] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.449237][ T6608] netlink: 'syz.2.255': attribute type 30 has an invalid length. [ 122.555179][ T6608] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 122.564639][ T6608] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 122.573520][ T6608] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 122.582336][ T6608] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 122.729059][ T6608] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 122.738100][ T6608] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 122.740919][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.747000][ T6608] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 122.765860][ T6608] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 122.941054][ T5792] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 123.287015][ T6618] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 123.308833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.317721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.385254][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.462754][ T6618] bond1: (slave syz_tun): making interface the new active one [ 123.479980][ T6618] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 123.638130][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.848006][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 123.870604][ T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.897729][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.920337][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.930908][ T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.944839][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.956306][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.029618][ T5886] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.310666][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.349445][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.377229][ T5886] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 124.393242][ T787] usb 3-1: GET_CAPABILITIES returned 0 [ 124.403911][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.412425][ T787] usbtmc 3-1:16.0: can't read capabilities [ 124.444258][ T5886] usb 4-1: config 0 descriptor?? [ 124.607882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.617521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.677446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 124.701350][ T27] usb 3-1: USB disconnect, device number 5 [ 124.910812][ T5886] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 124.937402][ T5886] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 124.945559][ T6652] Bluetooth: hci0: invalid length 1, exp 2 for type 2 [ 124.965452][ T5886] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 124.979926][ T5886] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 124.989106][ T5886] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 125.011087][ T5886] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 125.107012][ T5886] playstation 0003:054C:0DF2.0002: Invalid reportID received, expected 9 got 0 [ 125.125112][ T6654] xt_CT: No such helper "pptp" [ 125.127846][ T5886] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 125.141796][ T5862] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.150645][ T5886] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 125.159742][ T5886] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 125.175457][ T5886] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 125.329246][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.359783][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.388860][ T5862] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.398568][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.406598][ T5862] usb 1-1: SerialNumber: syz [ 125.485099][ T5886] usb 4-1: USB disconnect, device number 3 [ 125.688334][ T5862] usb 1-1: 0:2 : does not exist [ 125.710834][ T5862] usb 1-1: USB disconnect, device number 4 [ 125.752835][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.230850][ T6684] capability: warning: `syz.2.283' uses deprecated v2 capabilities in a way that may be insecure [ 126.244553][ T6684] GUP no longer grows the stack in syz.2.283 (6684): 200000004000-20000000a000 (200000002000) [ 126.285080][ T6684] CPU: 1 PID: 6684 Comm: syz.2.283 Not tainted syzkaller #0 [ 126.292474][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.302580][ T6684] Call Trace: [ 126.305898][ T6684] [ 126.308954][ T6684] dump_stack_lvl+0x16c/0x230 [ 126.314130][ T6684] ? show_regs_print_info+0x20/0x20 [ 126.319384][ T6684] ? load_image+0x3b0/0x3b0 [ 126.323932][ T6684] ? find_vma+0x12e/0x1b0 [ 126.328325][ T6684] __get_user_pages+0xfb9/0x1470 [ 126.333602][ T6684] ? populate_vma_page_range+0x370/0x370 [ 126.339321][ T6684] get_user_pages_remote+0x3de/0xc10 [ 126.344695][ T6684] ? get_dump_page+0x200/0x200 [ 126.349533][ T6684] __access_remote_vm+0x1ff/0x570 [ 126.354628][ T6684] ? generic_access_phys+0x650/0x650 [ 126.359977][ T6684] ? alloc_pages+0x4dc/0x740 [ 126.364665][ T6684] ? do_raw_spin_unlock+0x121/0x230 [ 126.369943][ T6684] proc_pid_cmdline_read+0x551/0x830 [ 126.375285][ T6684] ? schedule+0xc7/0x170 [ 126.379566][ T6684] ? comm_show+0x150/0x150 [ 126.384022][ T6684] ? common_file_perm+0x130/0x1f0 [ 126.389154][ T6684] ? fsnotify_perm+0x271/0x5e0 [ 126.393932][ T6684] do_iter_read+0x506/0xc80 [ 126.398554][ T6684] ? comm_show+0x150/0x150 [ 126.402998][ T6684] ? vfs_iter_read+0xa0/0xa0 [ 126.407591][ T6684] ? __import_iovec+0x5f2/0x860 [ 126.412456][ T6684] ? import_iovec+0x73/0xa0 [ 126.416967][ T6684] do_preadv+0x1fa/0x330 [ 126.421225][ T6684] ? do_writev+0x410/0x410 [ 126.425658][ T6684] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 126.431650][ T6684] ? lock_chain_count+0x20/0x20 [ 126.436519][ T6684] ? lockdep_hardirqs_on+0x98/0x150 [ 126.441717][ T6684] do_syscall_64+0x55/0xb0 [ 126.446136][ T6684] ? clear_bhb_loop+0x40/0x90 [ 126.450813][ T6684] ? clear_bhb_loop+0x40/0x90 [ 126.455497][ T6684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.461391][ T6684] RIP: 0033:0x7fbf8a78f6c9 [ 126.465833][ T6684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.485471][ T6684] RSP: 002b:00007fbf8b70d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 126.493902][ T6684] RAX: ffffffffffffffda RBX: 00007fbf8a9e5fa0 RCX: 00007fbf8a78f6c9 [ 126.501884][ T6684] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 126.509872][ T6684] RBP: 00007fbf8a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.517848][ T6684] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 126.525826][ T6684] R13: 00007fbf8a9e6038 R14: 00007fbf8a9e5fa0 R15: 00007ffcfa5e27d8 [ 126.533826][ T6684] [ 126.613688][ T6691] netlink: 'syz.0.288': attribute type 12 has an invalid length. [ 126.627638][ T6692] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 126.698448][ T6692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.738782][ T6694] bond2: (slave geneve2): making interface the new active one [ 126.762027][ T6694] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 126.977999][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 127.025129][ T6694] syz.3.287 (6694) used greatest stack depth: 20304 bytes left [ 127.479858][ T6698] loop2: detected capacity change from 0 to 32768 [ 127.614168][ T6714] overlayfs: failed to resolve './file0': -2 [ 127.653290][ T6716] loop3: detected capacity change from 0 to 512 [ 127.711526][ T28] audit: type=1800 audit(1763143764.861:10): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.290" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 127.778306][ T6716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.862592][ T6716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.935397][ T6716] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.008389][ T6716] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 128.019698][ T6716] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 128.033724][ T6716] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.299: Failed to acquire dquot type 0 [ 128.060162][ T6728] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 128.099044][ T6728] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 128.122883][ T6728] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.299: Failed to acquire dquot type 0 [ 128.230617][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.237960][ T6732] process 'syz.0.304' launched './file1' with NULL argv: empty string added [ 128.418123][ T6734] loop3: detected capacity change from 0 to 256 [ 128.487272][ T6734] exFAT-fs (loop3): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 128.872662][ T6746] loop2: detected capacity change from 0 to 128 [ 128.873611][ T6746] EXT4-fs: Ignoring removed nobh option [ 128.898238][ T6746] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.898673][ T6746] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.247274][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.256503][ T6749] loop1: detected capacity change from 0 to 40427 [ 129.452416][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 129.469115][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.481224][ T9] usb 3-1: config 0 has no interface number 0 [ 129.489758][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.506915][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.524794][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 129.535053][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.551648][ T9] usb 3-1: config 0 descriptor?? [ 129.817257][ T968] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.043717][ T968] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 130.043741][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.043754][ T968] usb 2-1: Product: syz [ 130.043766][ T968] usb 2-1: Manufacturer: syz [ 130.043780][ T968] usb 2-1: SerialNumber: syz [ 130.127248][ T5886] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.219206][ T9] uclogic 0003:28BD:0071.0003: pen parameters not found [ 130.226415][ T9] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 130.266291][ T968] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 130.292577][ T968] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 130.322387][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.334682][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.364476][ T5886] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.376293][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.389620][ T5886] usb 1-1: Product: syz [ 130.396459][ T5886] usb 1-1: Manufacturer: syz [ 130.401264][ T5886] usb 1-1: SerialNumber: syz [ 130.462267][ T9] usb 3-1: USB disconnect, device number 6 [ 130.914552][ T968] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 130.932068][ T968] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 130.943427][ T968] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 130.958499][ T968] lan78xx: probe of 2-1:1.0 failed with error -71 [ 130.983276][ T968] usb 2-1: USB disconnect, device number 4 [ 131.062612][ T5798] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.199286][ T6781] loop2: detected capacity change from 0 to 1024 [ 131.487514][ T5886] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 131.501607][ T6779] loop3: detected capacity change from 0 to 40427 [ 131.509675][ T5886] cdc_ncm 1-1:1.0: bind() failure [ 131.543345][ T5886] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 131.552046][ T6779] F2FS-fs (loop3): invalid crc value [ 131.567445][ T5886] cdc_ncm 1-1:1.1: bind() failure [ 131.582421][ T6779] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.594514][ T5886] usb 1-1: USB disconnect, device number 5 [ 131.757515][ T6779] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.978400][ T5792] syz-executor: attempt to access beyond end of device [ 131.978400][ T5792] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.996169][ T5792] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.570759][ T6803] loop3: detected capacity change from 0 to 1024 [ 132.577626][ T5886] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.597248][ T6803] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.653529][ T6803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.731804][ T6803] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.752031][ T6803] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 132.766437][ T6803] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.766437][ T6803] [ 132.777231][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 132.785320][ T5886] usb 2-1: config 0 has no interfaces? [ 132.787120][ T6803] EXT4-fs (loop3): Total free blocks count 0 [ 132.791649][ T5886] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 132.796809][ T6803] EXT4-fs (loop3): Free/Dirty block details [ 132.796848][ T6803] EXT4-fs (loop3): free_blocks=20480 [ 132.796878][ T6803] EXT4-fs (loop3): dirty_blocks=80 [ 132.808528][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.836726][ T5886] usb 2-1: config 0 descriptor?? [ 132.867854][ T6803] EXT4-fs (loop3): Block reservation details [ 132.874246][ T6803] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 132.885945][ T6807] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 6 with error 28 [ 133.052069][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059757][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.252464][ T5886] usb 2-1: USB disconnect, device number 5 [ 133.505046][ T5862] kernel read not supported for file /sequencer (pid: 5862 comm: kworker/0:5) [ 134.164902][ T6830] overlayfs: upper fs does not support file handles, falling back to index=off. [ 134.384111][ T6839] loop3: detected capacity change from 0 to 128 [ 134.414368][ T6839] FAT-fs (loop3): Directory bread(block 414) failed [ 134.435136][ T6839] FAT-fs (loop3): Directory bread(block 415) failed [ 134.456654][ T6839] FAT-fs (loop3): Directory bread(block 416) failed [ 134.473471][ T6839] FAT-fs (loop3): Directory bread(block 417) failed [ 134.482359][ T6839] FAT-fs (loop3): Directory bread(block 418) failed [ 134.491653][ T6839] FAT-fs (loop3): Directory bread(block 419) failed [ 134.502166][ T6839] FAT-fs (loop3): Directory bread(block 420) failed [ 134.514016][ T6839] FAT-fs (loop3): Directory bread(block 421) failed [ 134.609159][ T6839] FAT-fs (loop3): FAT read failed (blocknr 128) [ 135.027333][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.916159][ T6855] loop2: detected capacity change from 0 to 32768 [ 136.930976][ T6855] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.354 (6855) [ 136.966030][ T6855] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 136.988556][ T6855] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 136.991638][ T6872] input: syz1 as /devices/virtual/input/input9 [ 137.001481][ T6855] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 137.013958][ T6855] BTRFS info (device loop2): use zstd compression, level 3 [ 137.027147][ T6855] BTRFS info (device loop2): using free space tree [ 137.085048][ T6855] BTRFS info (device loop2): enabling ssd optimizations [ 137.107421][ T6855] BTRFS info (device loop2): auto enabling async discard [ 137.234179][ T28] audit: type=1800 audit(1763143774.391:11): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.354" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 137.376680][ T5798] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 137.630839][ T6894] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 138.496571][ T6900] loop2: detected capacity change from 0 to 32768 [ 138.539923][ T6900] loop2: p1 p3 < > [ 140.304272][ T6974] loop1: detected capacity change from 0 to 64 [ 140.322615][ T6974] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 140.476172][ T6979] loop2: detected capacity change from 0 to 128 [ 140.558307][ T6979] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 140.597340][ T6979] FAT-fs (loop2): Filesystem has been set read-only [ 140.617332][ T6979] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 141.139374][ T6965] loop3: detected capacity change from 0 to 40427 [ 141.168733][ T6965] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 141.196503][ T1322] Bluetooth: hci4: Frame reassembly failed (-84) [ 141.204555][ T6965] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 141.219039][ T6965] F2FS-fs (loop3): Image doesn't support compression [ 141.253128][ T6965] F2FS-fs (loop3): invalid crc value [ 141.274733][ T6965] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.351509][ T6965] F2FS-fs (loop3): Start checkpoint disabled! [ 141.366419][ T6965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 141.387609][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.606473][ T6965] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_setxattr+0x1b2/0x310 [ 141.607145][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 141.641681][ T27] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 141.644948][ T6965] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 141.658996][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.678053][ T27] usb 2-1: Product: syz [ 141.678077][ T6965] overlayfs: failed to create directory ./bus/index (errno: 5); mounting read-only [ 141.682260][ T27] usb 2-1: Manufacturer: syz [ 141.682276][ T27] usb 2-1: SerialNumber: syz [ 141.718534][ T27] usb 2-1: config 0 descriptor?? [ 141.720127][ T6997] loop2: detected capacity change from 0 to 32768 [ 141.736851][ T6965] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 141.782388][ T6997] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.846539][ T6997] XFS (loop2): Ending clean mount [ 141.879877][ T6997] XFS (loop2): Quotacheck needed: Please wait. [ 141.887628][ T5792] syz-executor: attempt to access beyond end of device [ 141.887628][ T5792] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 141.903844][ T5792] syz-executor: attempt to access beyond end of device [ 141.903844][ T5792] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 141.974043][ T6997] XFS (loop2): Quotacheck: Done. [ 142.088346][ T5792] bond1: (slave syz_tun): Releasing active interface [ 142.159041][ T27] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 142.183127][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.204023][ T27] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 142.225387][ T27] usb 2-1: media controller created [ 142.275971][ T5798] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.316012][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.320790][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.595361][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.740380][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.864688][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.902390][ T27] zl10353_read_register: readreg error (reg=127, ret==0) [ 142.920678][ T27] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 142.947762][ T27] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 142.980056][ T27] usb 2-1: USB disconnect, device number 6 [ 142.988229][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 143.108206][ T27] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 143.207935][ T5805] Bluetooth: hci4: command 0x1003 tx timeout [ 143.215116][ T5804] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 144.069561][ T7062] 9pnet: p9_errstr2errno: server reported unknown error ì ÿ9YTPXº† [ 144.761642][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.777525][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.798087][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.824596][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.846260][ T5805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.854561][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.124643][ T7092] vivid-003: disconnect [ 145.345331][ T7100] warning: `syz.2.416' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 145.390032][ T7086] vivid-003: reconnect [ 146.327441][ T7124] loop2: detected capacity change from 0 to 40427 [ 146.336000][ T7124] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 146.345233][ T7124] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.362425][ T7124] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 146.371605][ T7124] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 146.380188][ T7124] F2FS-fs (loop2): Image doesn't support compression [ 146.394482][ T7124] F2FS-fs (loop2): invalid crc value [ 146.409312][ T1322] hsr_slave_0: left promiscuous mode [ 146.423971][ T1322] hsr_slave_1: left promiscuous mode [ 146.431845][ T7124] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.470971][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.497383][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.515224][ T7124] F2FS-fs (loop2): Start checkpoint disabled! [ 146.525910][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.542602][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.553384][ T7124] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.560703][ T7124] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 146.561522][ T1322] bridge_slave_1: left allmulticast mode [ 146.579973][ T1322] bridge_slave_1: left promiscuous mode [ 146.588332][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.604972][ T1322] bridge_slave_0: left allmulticast mode [ 146.614191][ T1322] bridge_slave_0: left promiscuous mode [ 146.621667][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.642708][ T7124] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0xff/0x1020 [ 146.699353][ T1322] veth1_macvtap: left promiscuous mode [ 146.705585][ T1322] veth0_macvtap: left promiscuous mode [ 146.711475][ T1322] veth1_vlan: left promiscuous mode [ 146.717675][ T1322] veth0_vlan: left promiscuous mode [ 146.767001][ T49] kworker/u4:3: attempt to access beyond end of device [ 146.767001][ T49] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 146.788831][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.797031][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.813892][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.946758][ T1322] bond2 (unregistering): (slave geneve2): Releasing active interface [ 146.976070][ T5804] Bluetooth: hci0: command tx timeout [ 147.146231][ T1322] bond2 (unregistering): Released all slaves [ 147.393972][ T1322] bond1 (unregistering): Released all slaves [ 148.556687][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 148.645873][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 148.755422][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.872642][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.049243][ T5804] Bluetooth: hci0: command tx timeout [ 149.785068][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 149.965549][ T1322] bond0 (unregistering): Released all slaves [ 150.205852][ T7080] chnl_net:caif_netlink_parms(): no params data found [ 150.353862][ T5863] IPVS: starting estimator thread 0... [ 150.376685][ T7186] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 150.396162][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 150.467259][ T7188] IPVS: using max 18 ests per chain, 43200 per kthread [ 150.480232][ T7192] Bluetooth: MGMT ver 1.22 [ 150.589048][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.608753][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.616131][ T7080] bridge_slave_0: entered allmulticast mode [ 150.630812][ T7080] bridge_slave_0: entered promiscuous mode [ 150.658056][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.665415][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.688544][ T7080] bridge_slave_1: entered allmulticast mode [ 150.696161][ T7080] bridge_slave_1: entered promiscuous mode [ 150.808280][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.833707][ T1322] IPVS: stop unused estimator thread 0... [ 150.845967][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.952077][ T7080] team0: Port device team_slave_0 added [ 150.974946][ T7080] team0: Port device team_slave_1 added [ 151.076308][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.092871][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.118823][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.141287][ T5804] Bluetooth: hci0: command tx timeout [ 151.172695][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.210712][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.237420][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.305545][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.416841][ T7080] hsr_slave_0: entered promiscuous mode [ 151.438805][ T7080] hsr_slave_1: entered promiscuous mode [ 151.629220][ T7198] loop2: detected capacity change from 0 to 32768 [ 151.655207][ T7198] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 151.715995][ T7198] XFS (loop2): Ending clean mount [ 151.840981][ T7218] batadv_slave_1: entered promiscuous mode [ 151.872913][ T28] audit: type=1800 audit(1763143789.031:12): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.448" name="file2" dev="loop2" ino=6151 res=0 errno=0 [ 151.884406][ T7080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.914956][ T7217] batadv_slave_1: left promiscuous mode [ 151.927240][ T7080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.950183][ T7080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.962899][ T7080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.062596][ T7226] loop1: detected capacity change from 0 to 512 [ 152.085667][ T7226] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.098830][ T7226] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #15: comm syz.1.456: corrupted inode contents [ 152.105432][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.119259][ T7226] EXT4-fs (loop1): Remounting filesystem read-only [ 152.126148][ T7226] EXT4-fs (loop1): 1 orphan inode deleted [ 152.134037][ T7226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.161771][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.206333][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.213636][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.226228][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.275479][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.282897][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.305484][ T5798] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 152.992629][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.114837][ T7249] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.207428][ T5804] Bluetooth: hci0: command tx timeout [ 153.795725][ T7080] veth0_vlan: entered promiscuous mode [ 153.823498][ T7080] veth1_vlan: entered promiscuous mode [ 153.879211][ T7080] veth0_macvtap: entered promiscuous mode [ 153.910951][ T7080] veth1_macvtap: entered promiscuous mode [ 153.969124][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.997634][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.010525][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.026772][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.047951][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.066578][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.099073][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.121616][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.135964][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.163642][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.174730][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.184872][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.196638][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.214041][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.239645][ T7080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.253978][ T7080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.264867][ T7080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.281191][ T7080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.462100][ T7277] vivid-007: disconnect [ 154.467683][ T7276] vivid-007: reconnect [ 154.468129][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.492160][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.554600][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.564804][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.889215][ T7289] loop2: detected capacity change from 0 to 512 [ 154.921840][ T7289] EXT4-fs: Ignoring removed orlov option [ 154.957395][ T7289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.000806][ T7289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.030929][ T7289] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.167806][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.473802][ T7316] loop4: detected capacity change from 0 to 1024 [ 155.556240][ T7316] hfsplus: xattr searching failed [ 155.570081][ T7316] hfsplus: xattr searching failed [ 155.580260][ T7316] hfsplus: xattr searching failed [ 155.588262][ T7316] hfsplus: xattr searching failed [ 159.354682][ T7341] loop2: detected capacity change from 0 to 128 [ 159.587435][ T5863] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.783643][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 159.806010][ T5863] usb 2-1: config 162 has an invalid interface number: 197 but max is 0 [ 159.825197][ T5863] usb 2-1: config 162 has no interface number 0 [ 159.837670][ T5863] usb 2-1: config 162 interface 197 altsetting 4 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 159.867289][ T5863] usb 2-1: config 162 interface 197 has no altsetting 0 [ 159.881289][ T5863] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 159.900724][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.917369][ T5863] usb 2-1: Product: syz [ 159.927236][ T5863] usb 2-1: Manufacturer: syz [ 159.937413][ T5863] usb 2-1: SerialNumber: syz [ 160.284805][ T7350] loop2: detected capacity change from 0 to 32768 [ 160.294713][ T7350] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.501 (7350) [ 160.315951][ T7350] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.332882][ T7350] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 160.350462][ T7350] BTRFS info (device loop2): setting nodatacow, compression disabled [ 160.363181][ T7350] BTRFS info (device loop2): disabling tree log [ 160.370349][ T7350] BTRFS info (device loop2): turning on sync discard [ 160.383458][ T7350] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 160.396294][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.408430][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.417199][ T7350] BTRFS info (device loop2): force zstd compression, level 3 [ 160.424715][ T7350] BTRFS info (device loop2): using free space tree [ 160.452388][ T5863] usb 2-1: USB disconnect, device number 7 [ 160.528128][ T7350] BTRFS info (device loop2): enabling ssd optimizations [ 160.644746][ T7350] fs-verity: sha512 using implementation "sha512-avx2" [ 160.684795][ T7350] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 160.832711][ T5798] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.001659][ T7377] loop4: detected capacity change from 0 to 128 [ 161.045143][ T7377] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.089506][ T7377] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.431327][ T7080] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.077414][ T7401] loop2: detected capacity change from 0 to 1024 [ 162.085335][ T7401] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.097755][ T7401] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 162.106003][ T7401] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.113360][ T7401] EXT4-fs error (device loop2): ext4_free_blocks:6676: comm syz.2.515: Freeing blocks not in datazone - block = 0, count = 4096 [ 162.128843][ T7401] EXT4-fs (loop2): 1 orphan inode deleted [ 162.135512][ T7401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.176649][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.320452][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.438732][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 162.447888][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 162.474405][ T7412] ip6gretap1: entered allmulticast mode [ 162.517331][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 162.529001][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.550696][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.569963][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 162.593258][ T5896] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 162.607449][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.631390][ T5896] usb 1-1: config 0 descriptor?? [ 163.096245][ T5896] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0004/input/input10 [ 163.206384][ T5896] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 163.742660][ T787] usb 1-1: USB disconnect, device number 6 [ 164.636946][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 164.819956][ T7485] loop1: detected capacity change from 0 to 512 [ 164.827677][ T7485] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.813355][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 166.018168][ T7492] loop4: detected capacity change from 0 to 32768 [ 166.039891][ T7492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.553 (7492) [ 166.078638][ T7492] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.120823][ T7492] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 166.130986][ T7492] BTRFS info (device loop4): metadata ratio 2 [ 166.137325][ T7492] BTRFS info (device loop4): allowing degraded mounts [ 166.144257][ T7492] BTRFS info (device loop4): force zlib compression, level 3 [ 166.151734][ T7492] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.161326][ T7492] BTRFS info (device loop4): use zstd compression, level 3 [ 166.168710][ T7492] BTRFS info (device loop4): force clearing of disk cache [ 166.176084][ T7492] BTRFS info (device loop4): max_inline at 0 [ 166.192471][ T7492] BTRFS info (device loop4): using free space tree [ 166.256017][ T7492] BTRFS info (device loop4): enabling ssd optimizations [ 166.268906][ T7492] BTRFS info (device loop4): rebuilding free space tree [ 166.327951][ T5863] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 166.413452][ T28] audit: type=1800 audit(1763143803.571:13): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.553" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 166.518349][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 166.529070][ T28] audit: type=1804 audit(1763143803.681:14): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.553" name="/newroot/20/file1/bus" dev="loop4" ino=263 res=1 errno=0 [ 166.531718][ T5863] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 166.607537][ T5863] usb 2-1: config 0 has no interface number 0 [ 166.616509][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 166.626895][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.639281][ T5863] usb 2-1: Product: syz [ 166.644313][ T5863] usb 2-1: Manufacturer: syz [ 166.649983][ T5863] usb 2-1: SerialNumber: syz [ 166.657319][ T5863] usb 2-1: config 0 descriptor?? [ 166.681578][ T7080] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.913662][ T5863] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 166.937493][ T5863] usb 2-1: No valid video chain found. [ 166.960791][ T5863] usb 2-1: USB disconnect, device number 8 [ 167.394786][ T7554] loop4: detected capacity change from 0 to 2048 [ 167.448814][ T7554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.465149][ T7548] loop2: detected capacity change from 0 to 32768 [ 167.474815][ T7554] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.487518][ T7548] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.572 (7548) [ 167.513280][ T7548] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 167.526835][ T7548] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 167.547380][ T7548] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 167.567282][ T7548] BTRFS info (device loop2): use zstd compression, level 3 [ 167.574570][ T7548] BTRFS info (device loop2): using free space tree [ 167.595359][ T7080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.639329][ T7556] overlayfs: failed to resolve './file0/../file0': -2 [ 167.744430][ T7576] loop4: detected capacity change from 0 to 64 [ 167.750959][ T7548] BTRFS info (device loop2): enabling ssd optimizations [ 167.789847][ T7548] BTRFS info (device loop2): auto enabling async discard [ 168.113204][ T5798] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 168.546329][ T7575] loop1: detected capacity change from 0 to 40427 [ 168.576952][ T7575] F2FS-fs (loop1): invalid crc value [ 168.614028][ T7575] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.722899][ T7575] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.814401][ T7586] loop4: detected capacity change from 0 to 40427 [ 168.819143][ T7575] syz.1.577: attempt to access beyond end of device [ 168.819143][ T7575] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.841071][ T7586] F2FS-fs (loop4): heap/no_heap options were deprecated [ 168.856564][ T7575] syz.1.577: attempt to access beyond end of device [ 168.856564][ T7575] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 168.857315][ T7586] F2FS-fs (loop4): Image doesn't support compression [ 168.883394][ T7586] F2FS-fs (loop4): heap/no_heap options were deprecated [ 168.904278][ T7586] F2FS-fs (loop4): invalid crc value [ 168.913255][ T5797] syz-executor: attempt to access beyond end of device [ 168.913255][ T5797] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 168.927632][ T7586] F2FS-fs (loop4): Found nat_bits in checkpoint [ 168.933759][ T5797] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 169.012813][ T7586] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.123903][ T7080] syz-executor: attempt to access beyond end of device [ 169.123903][ T7080] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.141620][ T7080] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 169.907708][ T7627] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 170.077431][ T5862] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 170.269453][ T5862] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 170.283716][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.297205][ T5862] usb 1-1: config 0 descriptor?? [ 170.305858][ T5862] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 170.390157][ T5896] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.522207][ T5862] gp8psk: usb in 128 operation failed. [ 170.597431][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 170.614167][ T5896] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 170.623045][ T5896] usb 3-1: config 179 has no interface number 0 [ 170.629537][ T5896] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.640794][ T5896] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 170.652891][ T5896] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.666801][ T5896] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 170.685029][ T5896] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.705091][ T5896] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 170.714321][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.736983][ T7636] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 170.746144][ T5862] gp8psk: usb in 146 operation failed. [ 170.754162][ T5862] gp8psk: failed to get FW version [ 170.761732][ T5862] gp8psk: usb in 149 operation failed. [ 170.777214][ T5862] gp8psk: failed to get FPGA version [ 170.986030][ T5862] gp8psk: usb out operation failed. [ 170.994372][ T5862] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 171.010375][ T5862] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 171.023180][ T5862] usb 1-1: USB disconnect, device number 7 [ 171.138036][ T5896] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 171.425479][ T5896] usb 3-1: USB disconnect, device number 7 [ 171.425546][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 171.439755][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 171.451546][ T5896] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 171.605060][ T7656] loop1: detected capacity change from 0 to 32768 [ 171.616931][ T7656] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.606 (7656) [ 171.637431][ T7656] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.653458][ T7656] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 171.662505][ T7656] BTRFS info (device loop1): enabling auto defrag [ 171.669476][ T7656] BTRFS info (device loop1): use no compression [ 171.678035][ T7656] BTRFS info (device loop1): max_inline at 4096 [ 171.684438][ T7656] BTRFS info (device loop1): using free space tree [ 171.734228][ T7656] BTRFS info (device loop1): enabling ssd optimizations [ 171.746003][ T7656] BTRFS info (device loop1): auto enabling async discard [ 171.867191][ T28] audit: type=1804 audit(1763143809.021:15): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.606" name="/newroot/157/bus/file1" dev="loop1" ino=260 res=1 errno=0 [ 171.989850][ T5797] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.687938][ T7704] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 172.893414][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 172.933293][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 172.947379][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 172.963878][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 172.982002][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.000095][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.023109][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.036426][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.063500][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.077321][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.097246][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.109848][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.130516][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.147348][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.157205][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.177163][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.197209][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.220984][ T5896] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 173.260412][ T5896] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 173.499958][ T7699] loop4: detected capacity change from 0 to 32768 [ 173.570069][ T7699] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 173.812150][ T7080] ocfs2: Unmounting device (7,4) on (node local) [ 174.215212][ T7737] pim6reg: entered allmulticast mode [ 174.269104][ T7737] pim6reg: left allmulticast mode [ 174.669854][ T7744] program syz.2.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.032715][ T7739] loop4: detected capacity change from 0 to 32768 [ 175.052296][ T7739] XFS: ikeep mount option is deprecated. [ 175.069802][ T7739] XFS: ikeep mount option is deprecated. [ 175.087205][ T7739] XFS: noikeep mount option is deprecated. [ 175.143309][ T7739] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.345152][ T7739] XFS (loop4): Ending clean mount [ 175.508936][ T28] audit: type=1800 audit(1763143812.671:16): pid=7739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.637" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 175.512202][ T7739] XFS (loop4): User initiated shutdown received. [ 175.571952][ T7739] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 175.588460][ T7739] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 175.676667][ T7080] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.848745][ T7759] loop2: detected capacity change from 0 to 32768 [ 175.898513][ T7759] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.964964][ T7759] XFS (loop2): Ending clean mount [ 175.987331][ T7759] XFS (loop2): Quotacheck needed: Please wait. [ 176.027698][ T7759] XFS (loop2): Quotacheck: Done. [ 176.127266][ T968] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 176.197021][ T5798] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.319962][ T968] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.337248][ T968] usb 1-1: config 0 has no interface number 0 [ 176.347724][ T968] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.367361][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.388326][ T968] usb 1-1: config 0 descriptor?? [ 176.408202][ T968] cp210x 1-1:0.1: cp210x converter detected [ 176.599227][ T7794] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 176.642626][ T7797] loop1: detected capacity change from 0 to 1024 [ 176.758505][ T28] audit: type=1800 audit(1763143813.921:17): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.654" name="file0" dev="loop1" ino=25 res=0 errno=0 [ 176.816719][ T7797] hfsplus: bad catalog file entry [ 176.823441][ T968] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 176.938849][ T5862] kernel write not supported for file /411/gid_map (pid: 5862 comm: kworker/0:5) [ 177.061994][ T968] usb 1-1: cp210x converter now attached to ttyUSB0 [ 177.171254][ T7811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.179196][ T7811] bridge0: port 3(bond1) entered blocking state [ 177.186212][ T7811] bridge0: port 3(bond1) entered disabled state [ 177.192925][ T7811] bond1: entered allmulticast mode [ 177.204981][ T7811] bond1: entered promiscuous mode [ 177.211843][ T7811] bridge0: port 3(bond1) entered blocking state [ 177.218422][ T7811] bridge0: port 3(bond1) entered forwarding state [ 177.306929][ T7805] loop4: detected capacity change from 0 to 32768 [ 177.311240][ T9] usb 1-1: USB disconnect, device number 8 [ 177.325722][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 177.338284][ T9] cp210x 1-1:0.1: device disconnected [ 177.363701][ T7805] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 177.397895][ T968] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 177.421401][ T7805] (syz.4.657,7805,0):ocfs2_change_extent_flag:5209 ERROR: Owner 17058 tried to clear 1 flags on an extent that didn't have them [ 177.436724][ T7805] (syz.4.657,7805,0):ocfs2_mark_extent_written:5273 ERROR: status = -5 [ 177.445289][ T7805] (syz.4.657,7805,0):ocfs2_write_cluster:1163 ERROR: status = -5 [ 177.453419][ T7805] (syz.4.657,7805,0):ocfs2_write_cluster_by_desc:1248 ERROR: status = -5 [ 177.461959][ T7805] (syz.4.657,7805,0):ocfs2_write_begin_nolock:1820 ERROR: status = -5 [ 177.470438][ T7805] (syz.4.657,7805,0):ocfs2_write_begin:1907 ERROR: status = -5 [ 177.523069][ T7080] ocfs2: Unmounting device (7,4) on (node local) [ 177.544150][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 177.571936][ T7819] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 177.581355][ T7819] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 177.590534][ T7819] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 177.599701][ T7819] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 177.609540][ T968] usb 2-1: Using ep0 maxpacket: 16 [ 177.648558][ T968] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 177.664337][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 177.673599][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.683045][ T968] usb 2-1: Product: syz [ 177.688161][ T968] usb 2-1: Manufacturer: syz [ 177.692818][ T968] usb 2-1: SerialNumber: syz [ 177.701354][ T3474] bridge0: port 3(bond1) entered disabled state [ 177.818499][ T7823] loop2: detected capacity change from 0 to 1024 [ 177.855756][ T7823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.956151][ T7810] syz.1.660[7810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.956337][ T7810] syz.1.660[7810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.030723][ T968] r8152-cfgselector 2-1: Unknown version 0x7cf0 [ 178.082129][ T968] r8152-cfgselector 2-1: bad CDC descriptors [ 178.099135][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.146681][ T7830] netlink: 'syz.0.667': attribute type 12 has an invalid length. [ 178.229885][ T968] r8152-cfgselector 2-1: Unknown version 0x0000 [ 178.260346][ T968] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 179.021761][ T7857] loop4: detected capacity change from 0 to 1024 [ 179.067597][ T7857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.450434][ T2974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 179.475586][ T2974] EXT4-fs (loop4): Remounting filesystem read-only [ 179.486567][ T7080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.543228][ T7859] loop1: detected capacity change from 0 to 40427 [ 179.553529][ T7859] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 179.562420][ T7859] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 179.578749][ T7859] F2FS-fs (loop1): invalid crc value [ 179.600979][ T7859] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.683213][ T7859] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 179.695238][ T7859] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 181.000636][ T7917] loop4: detected capacity change from 0 to 1024 [ 181.019090][ T7917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.060815][ T7917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.195560][ T7922] loop2: detected capacity change from 0 to 4096 [ 181.294388][ T7080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.777756][ T7940] loop1: detected capacity change from 0 to 1024 [ 181.808308][ T7940] EXT4-fs: Ignoring removed bh option [ 181.827572][ T7940] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 181.882421][ T7940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.953240][ T28] audit: type=1800 audit(1763143819.111:18): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.708" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 182.034162][ T7949] EXT4-fs error (device loop1): ext4_read_inline_dir:1573: inode #12: block 7: comm syz.1.708: path /176/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 182.076649][ T7949] EXT4-fs (loop1): Remounting filesystem read-only [ 182.078287][ T7953] loop4: detected capacity change from 0 to 1024 [ 182.101364][ T9] IPVS: starting estimator thread 0... [ 182.156153][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.188841][ T7956] IPVS: using max 23 ests per chain, 55200 per kthread [ 182.341351][ T7963] loop1: detected capacity change from 0 to 2048 [ 182.499004][ T7963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.541369][ T7973] netlink: 'syz.4.719': attribute type 1 has an invalid length. [ 182.562361][ T7973] netlink: 'syz.4.719': attribute type 2 has an invalid length. [ 182.587413][ T28] audit: type=1800 audit(1763143819.741:19): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.714" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 182.617353][ T7973] netlink: 252 bytes leftover after parsing attributes in process `syz.4.719'. [ 182.641947][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.744190][ T7974] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 182.790238][ T7974] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 24 with error 28 [ 182.871987][ T7974] EXT4-fs (loop1): This should not happen!! Data will be lost [ 182.871987][ T7974] [ 182.912366][ T7974] EXT4-fs (loop1): Total free blocks count 0 [ 182.919136][ T7974] EXT4-fs (loop1): Free/Dirty block details [ 182.925086][ T7974] EXT4-fs (loop1): free_blocks=2415919104 [ 182.932511][ T7974] EXT4-fs (loop1): dirty_blocks=208 [ 182.937818][ T7974] EXT4-fs (loop1): Block reservation details [ 182.943893][ T7974] EXT4-fs (loop1): i_reserved_data_blocks=13 [ 183.028801][ T2974] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 10 with error 28 [ 183.286191][ T7985] loop2: detected capacity change from 0 to 128 [ 183.403884][ T7988] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 184.078333][ T8013] loop2: detected capacity change from 0 to 128 [ 184.140522][ T8013] syz.2.733: attempt to access beyond end of device [ 184.140522][ T8013] loop2: rw=34817, sector=102, nr_sectors = 32 limit=128 [ 184.258831][ T8021] loop4: detected capacity change from 0 to 4096 [ 184.312154][ T2974] kworker/u4:9: attempt to access beyond end of device [ 184.312154][ T2974] loop2: rw=1, sector=137, nr_sectors = 25 limit=128 [ 184.342476][ T8021] ntfs3: loop4: ino=b, Correct links count -> 1. [ 184.365854][ T8021] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 184.571924][ T8031] loop1: detected capacity change from 0 to 164 [ 185.067195][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 185.267227][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 185.283536][ T27] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.295393][ T27] usb 3-1: config 179 has no interface number 0 [ 185.304628][ T27] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.316138][ T27] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 185.327643][ T27] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.339544][ T27] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 185.361423][ T27] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 185.411714][ T27] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 185.437138][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.449707][ T8037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 185.544729][ T8050] loop1: detected capacity change from 0 to 1024 [ 185.556121][ T8050] EXT4-fs: Ignoring removed orlov option [ 185.563983][ T8050] EXT4-fs: Ignoring removed orlov option [ 185.574911][ T8050] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.616762][ T8050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.643060][ T28] audit: type=1800 audit(1763143822.801:20): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.754" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 185.733958][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.805041][ T968] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 185.829479][ T8058] netlink: 'syz.0.748': attribute type 2 has an invalid length. [ 186.010267][ T8065] loop4: detected capacity change from 0 to 764 [ 186.035594][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.045021][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.055723][ T8065] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 186.282417][ T968] usb 3-1: USB disconnect, device number 8 [ 186.282475][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 186.296701][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 186.306866][ T968] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 187.504224][ T8085] loop2: detected capacity change from 0 to 32768 [ 187.542032][ T8085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.759 (8085) [ 187.585372][ T8085] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.611046][ T8085] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 187.626570][ T8085] BTRFS info (device loop2): using free space tree [ 187.648587][ T8104] mmap: syz.1.767 (8104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.705362][ T8116] loop4: detected capacity change from 0 to 128 [ 187.714595][ T8085] BTRFS info (device loop2): enabling ssd optimizations [ 187.722823][ T8116] FAT-fs (loop4): bogus number of FAT structure [ 187.726244][ T8085] BTRFS info (device loop2): auto enabling async discard [ 187.738515][ T8116] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 187.755005][ T8116] FAT-fs (loop4): Can't find a valid FAT filesystem [ 187.871953][ T8126] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.881030][ T8126] overlayfs: failed to set xattr on upper [ 187.886857][ T8126] overlayfs: ...falling back to redirect_dir=nofollow. [ 187.902839][ T6307] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.912310][ T8126] overlayfs: ...falling back to index=off. [ 187.924214][ T8126] overlayfs: ...falling back to uuid=null. [ 187.936330][ T8126] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 188.397222][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 188.478444][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65279 - 0 [ 188.489480][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 188.502369][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.609513][ T787] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.630812][ T787] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.639616][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65279 - 0 [ 188.654839][ T787] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 188.668798][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 188.692256][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.701580][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.734572][ T787] usb 5-1: SerialNumber: syz [ 188.801219][ T8142] pimreg: entered allmulticast mode [ 188.870068][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65279 - 0 [ 188.888402][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 188.902415][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.966932][ T787] usb 5-1: 0:2 : does not exist [ 189.021774][ T787] usb 5-1: USB disconnect, device number 2 [ 189.030402][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65279 - 0 [ 189.057239][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 189.086783][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.691345][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.702756][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.712983][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.723341][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.735383][ T5805] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.743021][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.909179][ T8165] loop4: detected capacity change from 0 to 2048 [ 189.967262][ T8165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.380094][ T8177] loop1: detected capacity change from 0 to 512 [ 190.424760][ T8177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.547245][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.572627][ T8177] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.702426][ T8189] Bluetooth: hci0: unsupported parameter 433 [ 190.706802][ T8160] chnl_net:caif_netlink_parms(): no params data found [ 190.709469][ T8189] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 190.757666][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.777412][ T27] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xF5, skipping [ 190.802585][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.813259][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.841440][ T27] usb 1-1: Product: syz [ 190.845685][ T27] usb 1-1: Manufacturer: syz [ 190.881082][ T49] hsr_slave_0: left promiscuous mode [ 190.882763][ T27] usb 1-1: SerialNumber: syz [ 190.891906][ T49] hsr_slave_1: left promiscuous mode [ 190.907596][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.915192][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.924600][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.932238][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.936011][ T8196] loop1: detected capacity change from 0 to 2048 [ 190.947011][ T49] bond1: left allmulticast mode [ 190.952221][ T49] bond1: left promiscuous mode [ 190.957617][ T49] bridge0: port 3(bond1) entered disabled state [ 190.965765][ T49] bridge_slave_1: left allmulticast mode [ 190.971678][ T49] bridge_slave_1: left promiscuous mode [ 190.977571][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.986862][ T49] bridge_slave_0: left allmulticast mode [ 190.992899][ T49] bridge_slave_0: left promiscuous mode [ 190.999077][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.046522][ T49] veth1_macvtap: left promiscuous mode [ 191.053147][ T49] veth0_macvtap: left promiscuous mode [ 191.059028][ T49] veth1_vlan: left promiscuous mode [ 191.064512][ T49] veth0_vlan: left promiscuous mode [ 191.569507][ T49] bond1 (unregistering): Released all slaves [ 191.847529][ T5805] Bluetooth: hci3: command tx timeout [ 192.176874][ T27] cdc_ncm 1-1:1.0: bind() failure [ 192.186876][ T27] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 192.197603][ T27] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 192.216326][ T27] usbtest: probe of 1-1:1.1 failed with error -71 [ 192.226521][ T27] usb 1-1: USB disconnect, device number 9 [ 192.321893][ T49] team0 (unregistering): Port device team_slave_1 removed [ 192.387870][ T49] team0 (unregistering): Port device team_slave_0 removed [ 192.445685][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.508441][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.769294][ T8216] loop1: detected capacity change from 0 to 4096 [ 192.884867][ T8216] EXT4-fs (loop1): Test dummy encryption mode enabled [ 192.921264][ T8216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.159249][ T8216] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 193.338164][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.485596][ T49] bond0 (unregistering): Released all slaves [ 193.839967][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.890201][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.913459][ T8160] bridge_slave_0: entered allmulticast mode [ 193.928054][ T5805] Bluetooth: hci3: command tx timeout [ 193.942538][ T8160] bridge_slave_0: entered promiscuous mode [ 193.955519][ T8235] loop1: detected capacity change from 0 to 128 [ 193.961437][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.987872][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.995385][ T8160] bridge_slave_1: entered allmulticast mode [ 194.003703][ T8160] bridge_slave_1: entered promiscuous mode [ 194.015824][ T8235] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.052215][ T8235] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.164798][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.189817][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.239898][ T28] audit: type=1800 audit(1763143831.401:21): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.808" name="file2" dev="loop1" ino=14 res=0 errno=0 [ 194.335703][ T5797] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.371542][ T8160] team0: Port device team_slave_0 added [ 194.381507][ T8160] team0: Port device team_slave_1 added [ 194.494026][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.500549][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.511678][ T8243] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 194.520633][ T8243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.527949][ T8243] IPv6: NLM_F_CREATE should be set when creating new route [ 194.535220][ T8243] IPv6: NLM_F_CREATE should be set when creating new route [ 194.559363][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.566381][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.598449][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.612035][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.619208][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.645336][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.659040][ T8245] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 194.666818][ T8245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.674202][ T8245] IPv6: NLM_F_CREATE should be set when creating new route [ 194.733972][ T49] IPVS: stop unused estimator thread 0... [ 194.805675][ T8160] hsr_slave_0: entered promiscuous mode [ 194.815485][ T8160] hsr_slave_1: entered promiscuous mode [ 194.823283][ T8160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.834698][ T8160] Cannot create hsr debugfs directory [ 195.190583][ T8258] pim6reg: tun_chr_ioctl cmd 1074025672 [ 195.196495][ T8258] pim6reg: ignored: set checksum disabled [ 195.349303][ T8160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.366926][ T8160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.390345][ T8160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.402239][ T8160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.569564][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.615388][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.640525][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.647880][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.672741][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.680071][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.009644][ T5805] Bluetooth: hci3: command tx timeout [ 196.289702][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.868675][ T8160] veth0_vlan: entered promiscuous mode [ 196.896165][ T8160] veth1_vlan: entered promiscuous mode [ 196.989760][ T8160] veth0_macvtap: entered promiscuous mode [ 197.014619][ T8160] veth1_macvtap: entered promiscuous mode [ 197.070086][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.097424][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.117260][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.137153][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.157320][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.177113][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.199347][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.247985][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.287203][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.310200][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.331407][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.347191][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.363802][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.377376][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.403224][ T8160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.416922][ T8160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.428075][ T8160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.436926][ T8160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.438204][ T8296] loop4: detected capacity change from 0 to 2048 [ 197.502771][ T8296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.602947][ T8298] Bluetooth: hci0: invalid length 1, exp 2 for type 2 [ 197.633928][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.666225][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.754553][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.788946][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.802377][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 198.097465][ T5805] Bluetooth: hci3: command tx timeout [ 198.197413][ T5886] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 198.380336][ T8324] loop1: detected capacity change from 0 to 8192 [ 198.387297][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 198.396072][ T5886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.409793][ T8324] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 198.437308][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.439393][ T8324] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 198.451973][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.456823][ T8324] REISERFS (device loop1): using ordered data mode [ 198.473671][ T8324] reiserfs: using flush barriers [ 198.481610][ T8324] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.484134][ T5886] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.499633][ T8324] REISERFS (device loop1): checking transaction log (loop1) [ 198.543923][ T8324] REISERFS (device loop1): Using r5 hash to sort names [ 198.557634][ T5886] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.574948][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.575219][ T8324] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 198.820753][ T5886] usb 1-1: GET_CAPABILITIES returned 0 [ 198.826337][ T5886] usbtmc 1-1:16.0: can't read capabilities [ 199.083500][ T5863] usb 1-1: USB disconnect, device number 10 [ 199.141802][ T8336] loop5: detected capacity change from 0 to 2048 [ 199.163057][ T8336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.284115][ T8340] loop5: detected capacity change from 0 to 1024 [ 199.304006][ T8340] hfsplus: xattr searching failed [ 199.311954][ T8340] hfsplus: xattr searching failed [ 199.370006][ T8342] [ 199.372375][ T8342] ===================================================== [ 199.379306][ T8342] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 199.386762][ T8342] syzkaller #0 Not tainted [ 199.391212][ T8342] ----------------------------------------------------- [ 199.398142][ T8342] syz.5.841/8342 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 199.405706][ T8342] ffffffff8ca0a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xf9/0x360 [ 199.414254][ T8342] [ 199.414254][ T8342] and this task is already holding: [ 199.421622][ T8342] ffff88801cf90118 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x33/0x360 [ 199.430446][ T8342] which would create a new lock dependency: [ 199.436357][ T8342] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 199.444129][ T8342] [ 199.444129][ T8342] but this new dependency connects a HARDIRQ-irq-safe lock: [ 199.453588][ T8342] (&dev->event_lock#2){-.-.}-{2:2} [ 199.453618][ T8342] [ 199.453618][ T8342] ... which became HARDIRQ-irq-safe at: [ 199.466516][ T8342] lock_acquire+0x197/0x410 [ 199.471163][ T8342] _raw_spin_lock_irqsave+0xa8/0xf0 [ 199.476453][ T8342] input_event+0x7a/0xc0 [ 199.480790][ T8342] psmouse_report_standard_packet+0x53/0x200 [ 199.486866][ T8342] psmouse_process_byte+0x478/0x670 [ 199.492156][ T8342] psmouse_handle_byte+0x43/0x490 [ 199.497274][ T8342] ps2_interrupt+0x164/0x980 [ 199.501963][ T8342] serio_interrupt+0x8b/0x130 [ 199.506729][ T8342] i8042_interrupt+0x394/0x730 [ 199.511586][ T8342] __handle_irq_event_percpu+0x276/0x930 [ 199.517320][ T8342] handle_irq_event+0x8b/0x1e0 [ 199.522180][ T8342] handle_edge_irq+0x247/0xb30 [ 199.527060][ T8342] __common_interrupt+0x13b/0x230 [ 199.532188][ T8342] common_interrupt+0xb4/0xd0 [ 199.536958][ T8342] asm_common_interrupt+0x26/0x40 [ 199.542072][ T8342] pv_native_safe_halt+0x13/0x20 [ 199.547104][ T8342] default_idle+0x13/0x20 [ 199.551526][ T8342] default_idle_call+0x6c/0xa0 [ 199.556376][ T8342] do_idle+0x1eb/0x510 [ 199.560538][ T8342] cpu_startup_entry+0x43/0x60 [ 199.565399][ T8342] start_secondary+0xee/0xf0 [ 199.570077][ T8342] secondary_startup_64_no_verify+0x179/0x17b [ 199.576243][ T8342] [ 199.576243][ T8342] to a HARDIRQ-irq-unsafe lock: [ 199.583343][ T8342] (tasklist_lock){.+.+}-{2:2} [ 199.583368][ T8342] [ 199.583368][ T8342] ... which became HARDIRQ-irq-unsafe at: [ 199.596020][ T8342] ... [ 199.596029][ T8342] lock_acquire+0x197/0x410 [ 199.603235][ T8342] _raw_read_lock+0x36/0x50 [ 199.607938][ T8342] do_wait+0x294/0xaf0 [ 199.612123][ T8342] kernel_wait+0xac/0x170 [ 199.616546][ T8342] call_usermodehelper_exec_work+0xb9/0x220 [ 199.622538][ T8342] process_scheduled_works+0xa45/0x15b0 [ 199.628177][ T8342] worker_thread+0xa55/0xfc0 [ 199.632857][ T8342] kthread+0x2fa/0x390 [ 199.637017][ T8342] ret_from_fork+0x48/0x80 [ 199.641524][ T8342] ret_from_fork_asm+0x11/0x20 [ 199.646382][ T8342] [ 199.646382][ T8342] other info that might help us debug this: [ 199.646382][ T8342] [ 199.656610][ T8342] Chain exists of: [ 199.656610][ T8342] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 199.656610][ T8342] [ 199.669838][ T8342] Possible interrupt unsafe locking scenario: [ 199.669838][ T8342] [ 199.678156][ T8342] CPU0 CPU1 [ 199.683519][ T8342] ---- ---- [ 199.688891][ T8342] lock(tasklist_lock); [ 199.693163][ T8342] local_irq_disable(); [ 199.699919][ T8342] lock(&dev->event_lock#2); [ 199.707128][ T8342] lock(&f->f_owner.lock); [ 199.714158][ T8342] [ 199.717611][ T8342] lock(&dev->event_lock#2); [ 199.722469][ T8342] [ 199.722469][ T8342] *** DEADLOCK *** [ 199.722469][ T8342] [ 199.730614][ T8342] 5 locks held by syz.5.841/8342: [ 199.735647][ T8342] #0: ffff88801cf90ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 199.744983][ T8342] #1: ffff88807e1ec418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x20e/0x940 [ 199.753874][ T8342] #2: ffffffff96f1d9f0 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: fsnotify+0x4ee/0x1780 [ 199.763367][ T8342] #3: ffff888064dc9038 (&mark->lock){+.+.}-{2:2}, at: dnotify_handle_event+0x62/0x420 [ 199.773043][ T8342] #4: ffff88801cf90118 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x33/0x360 [ 199.782279][ T8342] [ 199.782279][ T8342] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 199.792689][ T8342] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 199.798525][ T8342] IN-HARDIRQ-W at: [ 199.802769][ T8342] lock_acquire+0x197/0x410 [ 199.809446][ T8342] _raw_spin_lock_irqsave+0xa8/0xf0 [ 199.816820][ T8342] input_event+0x7a/0xc0 [ 199.823244][ T8342] psmouse_report_standard_packet+0x53/0x200 [ 199.831406][ T8342] psmouse_process_byte+0x478/0x670 [ 199.838781][ T8342] psmouse_handle_byte+0x43/0x490 [ 199.846023][ T8342] ps2_interrupt+0x164/0x980 [ 199.852822][ T8342] serio_interrupt+0x8b/0x130 [ 199.859681][ T8342] i8042_interrupt+0x394/0x730 [ 199.866639][ T8342] __handle_irq_event_percpu+0x276/0x930 [ 199.874486][ T8342] handle_irq_event+0x8b/0x1e0 [ 199.881450][ T8342] handle_edge_irq+0x247/0xb30 [ 199.888392][ T8342] __common_interrupt+0x13b/0x230 [ 199.895612][ T8342] common_interrupt+0xb4/0xd0 [ 199.902471][ T8342] asm_common_interrupt+0x26/0x40 [ 199.909672][ T8342] pv_native_safe_halt+0x13/0x20 [ 199.916929][ T8342] default_idle+0x13/0x20 [ 199.923435][ T8342] default_idle_call+0x6c/0xa0 [ 199.930376][ T8342] do_idle+0x1eb/0x510 [ 199.936719][ T8342] cpu_startup_entry+0x43/0x60 [ 199.943660][ T8342] start_secondary+0xee/0xf0 [ 199.950432][ T8342] secondary_startup_64_no_verify+0x179/0x17b [ 199.958680][ T8342] IN-SOFTIRQ-W at: [ 199.962953][ T8342] lock_acquire+0x197/0x410 [ 199.969637][ T8342] _raw_spin_lock_irqsave+0xa8/0xf0 [ 199.977010][ T8342] input_inject_event+0xab/0x320 [ 199.984140][ T8342] led_trigger_event+0x133/0x210 [ 199.991257][ T8342] kbd_bh+0x1c0/0x2d0 [ 199.997436][ T8342] tasklet_action_common+0x2eb/0x4c0 [ 200.004907][ T8342] handle_softirqs+0x280/0x820 [ 200.011847][ T8342] __irq_exit_rcu+0xc7/0x190 [ 200.018623][ T8342] irq_exit_rcu+0x9/0x20 [ 200.025049][ T8342] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 200.032866][ T8342] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 200.041031][ T8342] _raw_spin_unlock_irq+0x29/0x50 [ 200.048231][ T8342] n_tty_ioctl_helper+0x279/0x340 [ 200.055443][ T8342] tty_ioctl+0x9bd/0xdd0 [ 200.061863][ T8342] __se_sys_ioctl+0xfd/0x170 [ 200.068629][ T8342] do_syscall_64+0x55/0xb0 [ 200.075223][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.083289][ T8342] INITIAL USE at: [ 200.087448][ T8342] lock_acquire+0x197/0x410 [ 200.094127][ T8342] _raw_spin_lock_irqsave+0xa8/0xf0 [ 200.101410][ T8342] input_inject_event+0xab/0x320 [ 200.108438][ T8342] led_trigger_event+0x133/0x210 [ 200.115468][ T8342] kbd_led_trigger_activate+0xbd/0x100 [ 200.123023][ T8342] led_trigger_set+0x524/0x940 [ 200.129880][ T8342] led_trigger_set_default+0x1a0/0x1e0 [ 200.137445][ T8342] led_classdev_register_ext+0x6e9/0x940 [ 200.145197][ T8342] input_leds_connect+0x4eb/0x6b0 [ 200.152323][ T8342] input_register_device+0xcdc/0x1070 [ 200.159794][ T8342] atkbd_connect+0x6fb/0x9a0 [ 200.166498][ T8342] serio_driver_probe+0x7a/0xa0 [ 200.173453][ T8342] really_probe+0x25b/0xb40 [ 200.180054][ T8342] __driver_probe_device+0x18c/0x330 [ 200.187532][ T8342] driver_probe_device+0x4f/0x420 [ 200.194646][ T8342] __driver_attach+0x44e/0x6f0 [ 200.201503][ T8342] bus_for_each_dev+0x22d/0x2a0 [ 200.208528][ T8342] serio_handle_event+0x1a2/0x860 [ 200.215639][ T8342] process_scheduled_works+0xa45/0x15b0 [ 200.223276][ T8342] worker_thread+0xa55/0xfc0 [ 200.229956][ T8342] kthread+0x2fa/0x390 [ 200.236123][ T8342] ret_from_fork+0x48/0x80 [ 200.242626][ T8342] ret_from_fork_asm+0x11/0x20 [ 200.249484][ T8342] } [ 200.252242][ T8342] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 200.261533][ T8342] -> (&client->buffer_lock){....}-{2:2} { [ 200.267467][ T8342] INITIAL USE at: [ 200.271534][ T8342] lock_acquire+0x197/0x410 [ 200.277951][ T8342] _raw_spin_lock+0x2e/0x40 [ 200.284368][ T8342] evdev_pass_values+0xcb/0xab0 [ 200.291132][ T8342] evdev_events+0x1d8/0x330 [ 200.297554][ T8342] input_pass_values+0x907/0x1300 [ 200.304580][ T8342] input_event_dispose+0x346/0x6c0 [ 200.311607][ T8342] input_inject_event+0x1f9/0x320 [ 200.318558][ T8342] evdev_write+0x32a/0x470 [ 200.324889][ T8342] vfs_write+0x288/0x940 [ 200.331050][ T8342] ksys_write+0x147/0x250 [ 200.337295][ T8342] do_syscall_64+0x55/0xb0 [ 200.343638][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.351449][ T8342] } [ 200.354120][ T8342] ... key at: [] evdev_open.__key.28+0x0/0x20 [ 200.362452][ T8342] ... acquired at: [ 200.366432][ T8342] _raw_spin_lock+0x2e/0x40 [ 200.371111][ T8342] evdev_pass_values+0xcb/0xab0 [ 200.376142][ T8342] evdev_events+0x1d8/0x330 [ 200.380821][ T8342] input_pass_values+0x907/0x1300 [ 200.386027][ T8342] input_event_dispose+0x346/0x6c0 [ 200.391511][ T8342] input_inject_event+0x1f9/0x320 [ 200.396757][ T8342] evdev_write+0x32a/0x470 [ 200.401368][ T8342] vfs_write+0x288/0x940 [ 200.405790][ T8342] ksys_write+0x147/0x250 [ 200.410299][ T8342] do_syscall_64+0x55/0xb0 [ 200.414897][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.420991][ T8342] [ 200.423335][ T8342] -> (&new->fa_lock){....}-{2:2} { [ 200.428558][ T8342] INITIAL USE at: [ 200.432544][ T8342] lock_acquire+0x197/0x410 [ 200.438792][ T8342] _raw_write_lock_irq+0xa3/0xe0 [ 200.445469][ T8342] fasync_remove_entry+0xf4/0x1c0 [ 200.452235][ T8342] lease_modify+0x1a6/0x390 [ 200.458484][ T8342] locks_remove_file+0x4c0/0xe20 [ 200.465163][ T8342] __fput+0x18f/0x970 [ 200.471067][ T8342] task_work_run+0x1ce/0x250 [ 200.477400][ T8342] exit_to_user_mode_loop+0xe6/0x110 [ 200.484433][ T8342] exit_to_user_mode_prepare+0xf6/0x180 [ 200.491749][ T8342] syscall_exit_to_user_mode+0x1a/0x50 [ 200.498961][ T8342] do_syscall_64+0x61/0xb0 [ 200.505125][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.512791][ T8342] INITIAL READ USE at: [ 200.517213][ T8342] lock_acquire+0x197/0x410 [ 200.523890][ T8342] _raw_read_lock_irqsave+0xb0/0x100 [ 200.531353][ T8342] kill_fasync+0x192/0x4b0 [ 200.537950][ T8342] lease_break_callback+0x26/0x30 [ 200.545242][ T8342] __break_lease+0x4a7/0x12c0 [ 200.552096][ T8342] do_dentry_open+0x823/0x1500 [ 200.559098][ T8342] path_openat+0x274b/0x3190 [ 200.565869][ T8342] do_filp_open+0x1c5/0x3d0 [ 200.572556][ T8342] do_sys_openat2+0x12c/0x1c0 [ 200.579505][ T8342] __x64_sys_creat+0x90/0xb0 [ 200.586286][ T8342] do_syscall_64+0x55/0xb0 [ 200.592909][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.600999][ T8342] } [ 200.603585][ T8342] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 200.612361][ T8342] ... acquired at: [ 200.616249][ T8342] _raw_read_lock_irqsave+0xb0/0x100 [ 200.621710][ T8342] kill_fasync+0x192/0x4b0 [ 200.626305][ T8342] evdev_pass_values+0x54b/0xab0 [ 200.631423][ T8342] evdev_events+0x1d8/0x330 [ 200.636105][ T8342] input_pass_values+0x907/0x1300 [ 200.641315][ T8342] input_event_dispose+0x346/0x6c0 [ 200.646604][ T8342] input_inject_event+0x1f9/0x320 [ 200.651833][ T8342] evdev_write+0x32a/0x470 [ 200.656462][ T8342] vfs_write+0x288/0x940 [ 200.660899][ T8342] ksys_write+0x147/0x250 [ 200.665453][ T8342] do_syscall_64+0x55/0xb0 [ 200.670070][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.676249][ T8342] [ 200.678592][ T8342] -> (&f->f_owner.lock){...-}-{2:2} { [ 200.684007][ T8342] IN-SOFTIRQ-R at: [ 200.688018][ T8342] lock_acquire+0x197/0x410 [ 200.694199][ T8342] _raw_read_lock_irqsave+0xb0/0x100 [ 200.701157][ T8342] send_sigurg+0x29/0x3c0 [ 200.707668][ T8342] sk_send_sigurg+0x6f/0xc0 [ 200.713829][ T8342] tcp_check_urg+0x200/0x750 [ 200.720071][ T8342] tcp_urg+0x161/0x3f0 [ 200.725802][ T8342] tcp_rcv_established+0xa2e/0x1cf0 [ 200.732657][ T8342] tcp_v4_do_rcv+0x4ed/0xb80 [ 200.738927][ T8342] tcp_v4_rcv+0x2334/0x2a50 [ 200.745115][ T8342] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 200.752233][ T8342] ip_local_deliver_finish+0x2ca/0x510 [ 200.759352][ T8342] NF_HOOK+0x303/0x390 [ 200.765082][ T8342] NF_HOOK+0x303/0x390 [ 200.770827][ T8342] __netif_receive_skb+0xcc/0x290 [ 200.777533][ T8342] process_backlog+0x380/0x6e0 [ 200.783960][ T8342] __napi_poll+0xc0/0x460 [ 200.789957][ T8342] net_rx_action+0x5ea/0xbf0 [ 200.796197][ T8342] handle_softirqs+0x280/0x820 [ 200.802613][ T8342] run_ksoftirqd+0x9c/0xf0 [ 200.808693][ T8342] smpboot_thread_fn+0x635/0xa00 [ 200.815337][ T8342] kthread+0x2fa/0x390 [ 200.821072][ T8342] ret_from_fork+0x48/0x80 [ 200.827157][ T8342] ret_from_fork_asm+0x11/0x20 [ 200.833580][ T8342] INITIAL USE at: [ 200.837494][ T8342] lock_acquire+0x197/0x410 [ 200.843568][ T8342] _raw_write_lock_irq+0xa3/0xe0 [ 200.850072][ T8342] __f_setown+0x3b/0x330 [ 200.855880][ T8342] fcntl_dirnotify+0x6e2/0x8d0 [ 200.862228][ T8342] do_fcntl+0x37c/0x1380 [ 200.868050][ T8342] __se_sys_fcntl+0xc9/0x1a0 [ 200.874215][ T8342] do_syscall_64+0x55/0xb0 [ 200.880206][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.887672][ T8342] INITIAL READ USE at: [ 200.892003][ T8342] lock_acquire+0x197/0x410 [ 200.898518][ T8342] _raw_read_lock_irqsave+0xb0/0x100 [ 200.905804][ T8342] send_sigio+0x33/0x360 [ 200.912145][ T8342] dnotify_handle_event+0x153/0x420 [ 200.919346][ T8342] fsnotify+0x132e/0x1780 [ 200.925671][ T8342] __fsnotify_parent+0x5e6/0x720 [ 200.932613][ T8342] __vfs_setxattr_noperm+0x45c/0x5e0 [ 200.939904][ T8342] vfs_setxattr+0x16c/0x2f0 [ 200.946413][ T8342] path_setxattr+0x362/0x550 [ 200.953005][ T8342] __x64_sys_setxattr+0xbb/0xd0 [ 200.959868][ T8342] do_syscall_64+0x55/0xb0 [ 200.966286][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.974179][ T8342] } [ 200.976730][ T8342] ... key at: [] init_file.__key+0x0/0x20 [ 200.984546][ T8342] ... acquired at: [ 200.988346][ T8342] _raw_read_lock_irqsave+0xb0/0x100 [ 200.993807][ T8342] send_sigio+0x33/0x360 [ 200.998233][ T8342] kill_fasync+0x228/0x4b0 [ 201.002826][ T8342] lease_break_callback+0x26/0x30 [ 201.008043][ T8342] __break_lease+0x4a7/0x12c0 [ 201.012897][ T8342] do_dentry_open+0x823/0x1500 [ 201.017837][ T8342] path_openat+0x274b/0x3190 [ 201.022612][ T8342] do_filp_open+0x1c5/0x3d0 [ 201.027299][ T8342] do_sys_openat2+0x12c/0x1c0 [ 201.032153][ T8342] __x64_sys_creat+0x90/0xb0 [ 201.036918][ T8342] do_syscall_64+0x55/0xb0 [ 201.041516][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.047587][ T8342] [ 201.049907][ T8342] [ 201.049907][ T8342] the dependencies between the lock to be acquired [ 201.049915][ T8342] and HARDIRQ-irq-unsafe lock: [ 201.063436][ T8342] -> (tasklist_lock){.+.+}-{2:2} { [ 201.068572][ T8342] HARDIRQ-ON-R at: [ 201.072553][ T8342] lock_acquire+0x197/0x410 [ 201.078709][ T8342] _raw_read_lock+0x36/0x50 [ 201.084862][ T8342] do_wait+0x294/0xaf0 [ 201.090589][ T8342] kernel_wait+0xac/0x170 [ 201.096593][ T8342] call_usermodehelper_exec_work+0xb9/0x220 [ 201.104192][ T8342] process_scheduled_works+0xa45/0x15b0 [ 201.111406][ T8342] worker_thread+0xa55/0xfc0 [ 201.117656][ T8342] kthread+0x2fa/0x390 [ 201.123384][ T8342] ret_from_fork+0x48/0x80 [ 201.129455][ T8342] ret_from_fork_asm+0x11/0x20 [ 201.135885][ T8342] SOFTIRQ-ON-R at: [ 201.139909][ T8342] lock_acquire+0x197/0x410 [ 201.146075][ T8342] _raw_read_lock+0x36/0x50 [ 201.152235][ T8342] do_wait+0x294/0xaf0 [ 201.158022][ T8342] kernel_wait+0xac/0x170 [ 201.164049][ T8342] call_usermodehelper_exec_work+0xb9/0x220 [ 201.171624][ T8342] process_scheduled_works+0xa45/0x15b0 [ 201.179024][ T8342] worker_thread+0xa55/0xfc0 [ 201.185462][ T8342] kthread+0x2fa/0x390 [ 201.191219][ T8342] ret_from_fork+0x48/0x80 [ 201.197330][ T8342] ret_from_fork_asm+0x11/0x20 [ 201.203773][ T8342] INITIAL USE at: [ 201.207677][ T8342] lock_acquire+0x197/0x410 [ 201.213763][ T8342] _raw_write_lock_irq+0xa3/0xe0 [ 201.220268][ T8342] copy_process+0x225d/0x3d70 [ 201.226511][ T8342] kernel_clone+0x21b/0x840 [ 201.232588][ T8342] user_mode_thread+0xde/0x130 [ 201.239093][ T8342] rest_init+0x27/0x300 [ 201.244823][ T8342] arch_call_rest_init+0xe/0x10 [ 201.251342][ T8342] start_kernel+0x459/0x4e0 [ 201.257416][ T8342] x86_64_start_reservations+0x2a/0x30 [ 201.264444][ T8342] copy_bootdata+0x0/0xe0 [ 201.270340][ T8342] secondary_startup_64_no_verify+0x179/0x17b [ 201.278013][ T8342] INITIAL READ USE at: [ 201.282344][ T8342] lock_acquire+0x197/0x410 [ 201.288852][ T8342] _raw_read_lock+0x36/0x50 [ 201.295353][ T8342] do_wait+0x294/0xaf0 [ 201.301428][ T8342] kernel_wait+0xac/0x170 [ 201.307797][ T8342] call_usermodehelper_exec_work+0xb9/0x220 [ 201.315696][ T8342] process_scheduled_works+0xa45/0x15b0 [ 201.323251][ T8342] worker_thread+0xa55/0xfc0 [ 201.329840][ T8342] kthread+0x2fa/0x390 [ 201.335905][ T8342] ret_from_fork+0x48/0x80 [ 201.342325][ T8342] ret_from_fork_asm+0x11/0x20 [ 201.349123][ T8342] } [ 201.351681][ T8342] ... key at: [] tasklist_lock+0x18/0x40 [ 201.359428][ T8342] ... acquired at: [ 201.363244][ T8342] _raw_read_lock+0x36/0x50 [ 201.368042][ T8342] send_sigio+0xf9/0x360 [ 201.372476][ T8342] dnotify_handle_event+0x153/0x420 [ 201.377865][ T8342] fsnotify+0x132e/0x1780 [ 201.382369][ T8342] __fsnotify_parent+0x5e6/0x720 [ 201.387658][ T8342] vfs_write+0x7b2/0x940 [ 201.392089][ T8342] ksys_write+0x147/0x250 [ 201.396598][ T8342] do_syscall_64+0x55/0xb0 [ 201.401202][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.407276][ T8342] [ 201.409599][ T8342] [ 201.409599][ T8342] stack backtrace: [ 201.415524][ T8342] CPU: 1 PID: 8342 Comm: syz.5.841 Not tainted syzkaller #0 [ 201.422870][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.432940][ T8342] Call Trace: [ 201.436230][ T8342] [ 201.439169][ T8342] dump_stack_lvl+0x16c/0x230 [ 201.443864][ T8342] ? load_image+0x3b0/0x3b0 [ 201.448377][ T8342] ? show_regs_print_info+0x20/0x20 [ 201.453588][ T8342] ? load_image+0x3b0/0x3b0 [ 201.458107][ T8342] ? print_shortest_lock_dependencies+0xf4/0x160 [ 201.464449][ T8342] __lock_acquire+0x678f/0x7c80 [ 201.469314][ T8342] ? verify_lock_unused+0x140/0x140 [ 201.474535][ T8342] lock_acquire+0x197/0x410 [ 201.479046][ T8342] ? send_sigio+0xf9/0x360 [ 201.483479][ T8342] ? read_lock_is_recursive+0x20/0x20 [ 201.488859][ T8342] ? do_raw_read_lock+0x3d/0x90 [ 201.493733][ T8342] ? _raw_read_lock_irqsave+0xbc/0x100 [ 201.499196][ T8342] ? _raw_read_lock+0x50/0x50 [ 201.504327][ T8342] ? do_raw_spin_lock+0x121/0x2c0 [ 201.509363][ T8342] _raw_read_lock+0x36/0x50 [ 201.513873][ T8342] ? send_sigio+0xf9/0x360 [ 201.518290][ T8342] send_sigio+0xf9/0x360 [ 201.522539][ T8342] dnotify_handle_event+0x153/0x420 [ 201.527778][ T8342] fsnotify+0x132e/0x1780 [ 201.532123][ T8342] ? fsnotify+0x4ee/0x1780 [ 201.536567][ T8342] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 201.542833][ T8342] ? do_raw_spin_unlock+0x121/0x230 [ 201.548050][ T8342] __fsnotify_parent+0x5e6/0x720 [ 201.553000][ T8342] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 201.559595][ T8342] ? up_write+0x1c3/0x410 [ 201.563931][ T8342] ? file_update_time+0x1a2/0x1b0 [ 201.568994][ T8342] ? shmem_file_write_iter+0x106/0x120 [ 201.574462][ T8342] vfs_write+0x7b2/0x940 [ 201.578734][ T8342] ? file_end_write+0x250/0x250 [ 201.583594][ T8342] ? __fget_files+0x44a/0x4d0 [ 201.588288][ T8342] ? __fdget_pos+0x2a3/0x330 [ 201.592973][ T8342] ? ksys_write+0x75/0x250 [ 201.597399][ T8342] ksys_write+0x147/0x250 [ 201.601743][ T8342] ? __ia32_sys_read+0x90/0x90 [ 201.606520][ T8342] ? lockdep_hardirqs_on+0x98/0x150 [ 201.611735][ T8342] do_syscall_64+0x55/0xb0 [ 201.616360][ T8342] ? clear_bhb_loop+0x40/0x90 [ 201.621062][ T8342] ? clear_bhb_loop+0x40/0x90 [ 201.625774][ T8342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.631686][ T8342] RIP: 0033:0x7f019a58f6c9 [ 201.636115][ T8342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.655764][ T8342] RSP: 002b:00007f019b434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.664189][ T8342] RAX: ffffffffffffffda RBX: 00007f019a7e5fa0 RCX: 00007f019a58f6c9 [ 201.672171][ T8342] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 201.680149][ T8342] RBP: 00007f019a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.688137][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.696111][ T8342] R13: 00007f019a7e6038 R14: 00007f019a7e5fa0 R15: 00007ffc36e2d1e8 [ 201.704106][ T8342] [ 201.711159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 201.722905][ T968] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 201.807500][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 201.907233][ T968] usb 2-1: Using ep0 maxpacket: 8 [ 201.913934][ T968] usb 2-1: config 0 has no interfaces? [ 201.921671][ T968] usb 2-1: New USB device found, idVendor=19d2, idProduct=0167, bcdDevice=bc.89 [ 201.930953][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.939066][ T968] usb 2-1: Product: syz [ 201.943259][ T968] usb 2-1: Manufacturer: syz [ 201.948158][ T968] usb 2-1: SerialNumber: syz [ 201.954190][ T968] usb 2-1: config 0 descriptor?? [ 201.998840][ T27] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 202.009818][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.020880][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.030669][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.045130][ T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 202.054494][ T27] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 202.064367][ T968] usb 2-1: USB disconnect, device number 10 [ 202.070455][ T27] usb 5-1: Manufacturer: syz [ 202.077532][ T27] usb 5-1: config 0 descriptor?? [ 202.175938][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 202.182321][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 202.190825][ T27] usb 5-1: USB disconnect, device number 3 [ 203.768477][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 203.768779][ T5793] Bluetooth: hci1: command 0x0406 tx timeout