last executing test programs: 10m45.031189025s ago: executing program 3 (id=4): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0x264, 0x23b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'lo\x00'}) setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f00000007c0)="2df8423cdd4e85a8c9f6657764d9278a483125136df213f8d4eb2bf09b83b7f74b424251ac3c7f57c6e0fee87bd34672578064cd4c845b4f026874d67d053d9b2ad78bc2928afd1aaee655470e3f9e341d9f57e942fea4b30911e0b63eaee5950e3e16cc5e090a088740845e1ec3e12ad404fb4e0c3b5b793102d221fe45b73fc189f91a315cb7e48e41002d2e667e23a43136e255d67bcf3cb80f4d8a30dcffaf0b308fdb27ad1f887c1c38904d351f7fb1b1be9c899ab39e4a004371ec03a18f83c0266daa29befb9c8a8eac5943e14e048f4a7c8054a0a4112372bb38e1d4ef5c210f2766c40958a6287b7065735270c5d2cb08f0e5c57bddac40b50c7efceaec7763c4958e76e5fcb15a9fa054320cc8a8d6521a02fe5b13b14759142cbd8dbd56cf6d783b8df8d95e123a76701bee604fec1a198e083245a27e23e1828dbf55d86f8aa8233475be0010380f89648e7b89444a4097379cd2b69619f0edc83a58f6dfaaf9fa84ed6a46bd87e381fba77d42d9e681b37ef49725b0c4b3651a3961ab323bf696b9d8514b76c27e715d735aa355ec598f84400d96ad315568f726bdc8b7ca33f84dfbe761b7e79279e961a4edad2d4efce43b654e1c46f7c8c10c596d28a383a7a82b071ecb8640fe823d0f2770a5d645d74a35ae23729a56c73f413157608cc9da2f130b3de05f549165d814ca4683756db954ec340dee486ae37424575e9df99772d715b18448ccdf835544309c6eedd36e7ce4953af11543a53f309b4564a84f1f6286dc6af3e1df31815b388c9fbbddc003bd4c42d50f9c0c5f616649043ab842703303f9fdc2b6ea9a86221f927308bd377710aa4df3b75dd1b76793cfe9602d014a1b6f407b35f95f6c64d1bef1cf6f195be1413fdacd3deaceef1566d8795ff280a0830a26bc9a9d2ef8b7964698214d28c87c00199b35fe1d35dfea733d6b9654a5edcf8a86967ea70bb56ee6015fdb9d9f66cd27872878704bb738568425c0c46cdf28219cc508a77964fffcd8aafd281d113e7fc00b372a59cd5cbbd4184b62dd89f1befaf97624872edc5c06923f61956dbc5e039d9568f0f2f4a3feead68c7d82430dc71c9432c0e0f95197e2721b869e87ea5b62437cb1dbc62ce96ff90a91ee7ed26447358aac1c99044c6043d542154cc8d13c5290829e51a91483e97f2eb1b5287f62de2b69572ecab596efb1e90f78faaca361fe4bb7ae0858056e9217b1fe7f007f05a70a8296cd4573df49a32f9cfe08f24f2fdadc0c4ceaa8ce2c9558b25ac82d8dd7e808a46f0bbf0171a3820698e511730db9a0dacabb57225d60d80664a817bf43677677221010212d6e95da98c4de8d5d5104b0f2d46ca5992582e8c8cf056b5257cd6ab74b1c4b71882044425bfe713be370fbb8d42af574eb9b839cf21aaf8c16b25ce0fbe1aef99333f1e8e5b8c22deeba262957edf3f74927e7a6c0a78a43963eefd8de6339f2d3754a041a2089bcd64488a17d9e003ea2c69c0a286b8ab42187209d771e1e1c7d2b444612a5798deb39e67334606b80b5a169de2daa501dd70514bf6268701e8c1cf9200bf48736890750c53c8daba03532db577d02e7929bb9a48277d5e904cd08c6422440b0a1ed6f2ae5eda8fabcb497117c2f8a4d88bc7a97ea0cee651a6f6b684f66288ef320ed435db17cf3046aa144bd828098952d4b13e388f3ce3308adcbbdc279cf27d73760d750115a3d9daf110f91244bf12f10f67f62eec787db645db506bad35b67bea5e4163d9cecf4934601ddf92d69f279b693d92152bef1ebb51fd1f137e46c01269a4b923653e663bd777e6360cde25ca12789338b925d164f6ecf3818d6facf9573fe9f27a5d1fc97e7ca22c80321d540604b7ac61d4fe0465d156095e3827e42f5b5c281fba56eea3f3f88c900bbc795ec0673c201ee72006d7bc2134110cba812a938f5eea1cf2ac13da02747178259e7a8afa8323ebd1d37b9c17f986d61e58ef271df7af34bdb2b8a59ca5dbe87747746307d3cd2015fe3b8821bd0260d23ac6ef66d94cc2494e8b14553f84a4eb7f8f4a02ddc14e29bf160e47ee44ddb546ce8f785e6e4072ccb3dc721d9a96e04a54b2f5bfd6c39ad1a02e15425ce3c5ce027311b5de08dbe26e29391bc630c2db1a317af406efb2b2c135006e609cd4471ebfc7fb397f7505d3691349f5be42336aa6dbfa5e9c0fc82560bc1b1d2934f76942eccb01545df1f743a8a6fa36486e0904910b0c5163ff3e53b5eab741c8e158b41efb2b8d37c3877c4edac95df5f3ed763bb142e9757cff802b5b7bbe1f1eddaf96b0b29d519c1140505a97fffa48776e22bc864ebd445e2c65dfd8c9f23d685a8ee4af9dbc745a34476a1208efe5cac108d5da63791edd004e6b697a4fba8d8b2b133de3bdf8d8d08a0f3d53acc8614de14f9b1c645a0dc387bddff9a14f4869f41630fef3a18f347761a9df15dcc41d2fb53efab49510bee690e49d454f24d46ec10947eb5dda45069109f662769ce8d4c8ac948dc254e7186b1aaa669de2d961c19e1b2b9aeacace533321db0cc65ba2f876062b512d606b80cd6bbbc744804aa5c54fbcf8da6a1fdf1c2c812b2655cb5a71472fbe5d94795f22d49499d1e2c3505440c181cec12a450252ab06837dd00e09e6df24e29afa959aebc79abd10eb7a178ec0ed63258cf98145d097a20658bc8227944e8f92ddb00791573a2279e88fdc4fbd39e68abca7ed3cd006f504cc63e2a3f38dda63828f81f6383b31f2d0b33cc9077d1759a05a17e2d91011c9ab49fa6dfa95a50a04ab0be7e4d75be09cdb5c9dc8782400480925f5881bca42ed27f212c27f4da73e0e37b83804f3d214def9ecad6d4aad64b2796bd4b9a23ca83be11f4616e60c020901dc312955f3b2218af5e308e6ba269d100619f5d7f5b7330fc7ca319922b90320f878999c4eaa0138f8d2ef2daf8e0617adb6007a4a30217960215d26ffac7cc2e1ea93ae380ba9535d398de786a04f9fe5bfaedb4cd6ca3016f392b6cf3f9ad1d699c9b64b79198d7eecb29df5e4f053dd2f2241890b3a062746e65e1f409a22b63d39da9ec15a00e0198b823849c7f64fff604ec374e4e1303efb8d9c6563e9a61e28bb140fe7f11a777b0a293e5bed77ea25a17da423aca23606fd32a52c083701a6bfa87a5dd75c0a0bd60564ac9af6305c358ead231a19d216a499d010d31832e07659279cb5be972ca38501401727ae02d60cb7ff32630b7a7d8918de2cc9165234dd4fe62faf181ee7700b3f6cbe94926737335d3def4fe0dc7e67f696c155626fdc0bf821f3794976109452e246d54cb6bc03d8fbfd9df3ae044072935cecdae4e90b397954ce0ba22d90b6733558778c82f0b83de11f9e74fff1caea068392883d0e74d56ba1ee5d852272ccace360155933ff2fa8d01a22f986b25c0f9463a29c3ed089c32021407dfe5cc6b3e1638f95f942a1309e67200b977cac8ae9c1430213d925a2c20dbcb7d167c694ac91a69b2209ced03f6a1604cec937a512a7368ce7cbb26d9f993c7a3c3661d8ceb3ad0864fc756b9a89aea3c56c3df23062c61e0e7972d743c8915141bd5da32f37f532cd1a40a94c6180260483464f52dff5b6cfe4b849e012d41dd320b0f5d9281be0174a441a34cd28fc1b07174185f08304128ffb066773e114779dfc2edd1fb54cf40e0af472b6f0b41edc0b1a5bd92edb8afdc5995ad89112c6b9de68169f078d24fc58bf7ba407a426a282a45eae6b3ea48bae20fa0658ab8d11d1040c5b984f700e4cafad3b110698536b45467fbecf6a6ce7f297fdc9a0ffae5002101eade2bdb840ab104720fceac13ea1478fab9b4f5cafeace75fdc04b27625c29b51e29dc53e0293588ccfc52b34e606e62dd1fa4af88bb82dd600af512a656c7542041c6fde2f953edb87d145eecaf12a9427e6275ec9ef71cc1f87bbbbc3d527f264b02efa9b1c2d15506b52b636bdbda4bf52abe24b824469abe81e20b3075045da9da7c96ee40dd558939d", 0xb22) sendmsg$nl_route_sched(r3, 0x0, 0x800) sendto$inet(r2, &(0x7f00000017c0)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000001980), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10m38.975308385s ago: executing program 3 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000440), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xf, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10m22.145032148s ago: executing program 32 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000440), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xf, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 8.932543516s ago: executing program 4 (id=1247): socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x5) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 7.794304023s ago: executing program 2 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{}, 0x3, 0x858, 0x32a}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000019700), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019740)={0x3f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000019780)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) openat$binfmt_format(0xffffff9c, &(0x7f0000019c00)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711075000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6.234881682s ago: executing program 4 (id=1257): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f00000002c0)) 6.172595339s ago: executing program 2 (id=1258): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) readv(r1, &(0x7f0000002680)=[{&(0x7f0000001340)=""/4073, 0xfe9}, {0x0}], 0x2) 5.651758582s ago: executing program 1 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x1, 0xc91, 0x81, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3c, 0x1, 0x0, 0x0, "269808448093e9b3c65a0f07cb5908d4d47e130b2dcadaa851034cf176d860393ab3b400f3bfefc9578febc2e73a43f9e1cdc4dbf638ad0229fb802ddaca30f8"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 4.249261105s ago: executing program 1 (id=1267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000140)) 4.100527481s ago: executing program 1 (id=1268): syz_mount_image$ext4(&(0x7f0000001c00)='ext4\x00', &(0x7f0000001c40)='./file1\x00', 0x0, &(0x7f0000001c80), 0x1, 0x3d7, &(0x7f0000001cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file1\x00', 0x40, 0x650ce4b086bd45eb) truncate(&(0x7f0000000780)='./file1\x00', 0x2fffffd) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000002180)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.928066998s ago: executing program 1 (id=1270): socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0xb3, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES64=r0], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 3.779020444s ago: executing program 4 (id=1273): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCNXCL(r0, 0x540d) 3.751613167s ago: executing program 0 (id=1274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x2, 0x0, 0x1000, &(0x7f0000c00000/0x1000)=nil}) ioctl(r1, 0x4048aec9, &(0x7f0000000180)="01") 3.658297036s ago: executing program 4 (id=1275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010007, 0x0, 0xfee00d00}]}) 3.560017086s ago: executing program 0 (id=1276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x1, 0xc91, 0x81, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3c, 0x1, 0x0, 0x0, "269808448093e9b3c65a0f07cb5908d4d47e130b2dcadaa851034cf176d860393ab3b400f3bfefc9578febc2e73a43f9e1cdc4dbf638ad0229fb802ddaca30f8"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3.271965496s ago: executing program 1 (id=1277): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@largeio}, {@prjquota}]}, 0x5, 0xb8e1, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000bb80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f000000bbc0)={0xd2f0, 0x0, 0xffffffff, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000bc40)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 3.200363173s ago: executing program 4 (id=1278): socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x5) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2.148697051s ago: executing program 0 (id=1279): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.048158841s ago: executing program 4 (id=1280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206e058c010000010203010902240001012060100904003a0103010205092106000601220c0009058103"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, 0x0, 0x0}, 0x0) 2.039863252s ago: executing program 2 (id=1281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x17, 0x0, 0xffffffffffffffd7}]}) 1.719917945s ago: executing program 2 (id=1282): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000180)={&(0x7f00000014c0)={{@host, 0x7}, {@my=0x1, 0x5485}, 0x400, "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"}, 0x418, 0x40}) 1.719689515s ago: executing program 0 (id=1283): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2000, {0x2, 0xff, 0x2}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) 1.639892113s ago: executing program 0 (id=1284): ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x3, 0x858, 0x32a}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000019700), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019740)={0x3f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000019780)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000019c00)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000019c40)='-1\x00', 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711075000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.606899896s ago: executing program 2 (id=1285): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 528.538857ms ago: executing program 0 (id=1286): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 520.031397ms ago: executing program 2 (id=1287): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 0s ago: executing program 1 (id=1288): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001}}, [0x8, 0xffffffffffffffff, 0xc, 0x4800, 0x7, 0x6, 0x56c, 0x43e, 0x100, 0xcc, 0x6, 0x2, 0x1, 0x7, 0x80000000]}, &(0x7f0000000280)=0x100) kernel console output (not intermixed with test programs): : -5 [ 421.985654][ T8130] SQUASHFS error: Unable to read metadata cache entry [99] [ 421.992978][ T8130] SQUASHFS error: Unable to read inode 0x127 [ 422.036399][ T8076] udevd[8076]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 422.060779][ T8130] loop2: detected capacity change from 0 to 512 [ 422.072948][ T8076] udevd[8076]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 422.211287][ T8076] udevd[8076]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 422.259436][ T8130] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 422.296702][ T8130] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.412: invalid indirect mapped block 256 (level 1) [ 422.330460][ T8130] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.412: invalid indirect mapped block 2683928664 (level 1) [ 422.369704][ T8130] EXT4-fs (loop2): 1 truncate cleaned up [ 422.799139][ T8130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.392457][ T8140] input: syz1 as /devices/virtual/input/input6 [ 423.494698][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.588933][ T8076] udevd[8076]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 423.634864][ T8076] udevd[8076]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 424.677870][ T8143] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 427.348346][ T8166] ip_tables: iptables: counters copy to user failed while replacing table [ 429.674445][ T28] audit: type=1326 audit(1792799435.772:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a83d9f559 code=0x7ffc0000 [ 429.735382][ T8170] 9pnet_fd: Insufficient options for proto=fd [ 429.778557][ T28] audit: type=1326 audit(1792799435.772:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a83d9f559 code=0x7ffc0000 [ 429.807268][ T8170] netlink: 'syz.0.420': attribute type 9 has an invalid length. [ 429.851987][ T28] audit: type=1326 audit(1792799435.782:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a83d9f559 code=0x7ffc0000 [ 429.919060][ T28] audit: type=1326 audit(1792799435.782:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a83d9f559 code=0x7ffc0000 [ 429.950201][ T28] audit: type=1326 audit(1792799435.782:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9a83d9f559 code=0x7ffc0000 [ 429.985672][ T28] audit: type=1326 audit(1792799435.832:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a83d9f559 code=0x7ffc0000 [ 430.055841][ T28] audit: type=1326 audit(1792799435.832:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a83d9f2c2 code=0x7ffc0000 [ 431.028040][ T28] audit: type=1326 audit(1792799435.842:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9a83d9f357 code=0x7ffc0000 [ 431.052792][ T28] audit: type=1326 audit(1792799435.852:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9a83d5c251 code=0x7ffc0000 [ 431.115426][ T28] audit: type=1326 audit(1792799435.852:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.4.421" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9a83da0349 code=0x7ffc0000 [ 431.205717][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 431.298060][ T8189] loop0: detected capacity change from 0 to 8 [ 431.312467][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 431.342897][ T8189] SQUASHFS error: zlib decompression failed, data probably corrupt [ 431.366008][ T8189] SQUASHFS error: Failed to read block 0x9b: -5 [ 431.372418][ T8189] SQUASHFS error: Unable to read metadata cache entry [99] [ 431.395783][ T8189] SQUASHFS error: Unable to read inode 0x127 [ 431.417706][ T8] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 431.435893][ T8] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 431.458594][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 431.475152][ T8189] loop0: detected capacity change from 0 to 512 [ 431.498159][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 431.507517][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.512298][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 431.525730][ T8] usb 3-1: Product: syz [ 431.530004][ T8] usb 3-1: Manufacturer: syz [ 431.534631][ T8] usb 3-1: SerialNumber: syz [ 431.563951][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 431.603069][ T8189] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 431.626592][ T8189] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.425: invalid indirect mapped block 256 (level 1) [ 431.664798][ T8189] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.425: invalid indirect mapped block 2683928664 (level 1) [ 431.708067][ T8189] EXT4-fs (loop0): 1 truncate cleaned up [ 431.725444][ T8189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.793976][ T8] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 431.819790][ T8] dvb_usb_af9015: probe of 3-1:2.0 failed with error -22 [ 431.838163][ T8] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 431.844847][ T8] dvb_usb_af9035: probe of 3-1:2.0 failed with error -22 [ 431.894328][ T8] usb 3-1: USB disconnect, device number 2 [ 432.177114][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.222601][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 432.670041][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 434.529312][ T8207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.952102][ T5879] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 434.967551][ T5879] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 435.106048][ T8209] ceph: No mds server is up or the cluster is laggy [ 439.995102][ T8238] process 'syz.1.434' launched './file2' with NULL argv: empty string added [ 440.527469][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.538794][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.168649][ T8245] loop0: detected capacity change from 0 to 512 [ 441.178013][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 441.225540][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 441.242402][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 441.559361][ T8249] loop0: detected capacity change from 0 to 164 [ 442.500754][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 443.284639][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 443.369879][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 443.728108][ T8261] loop4: detected capacity change from 0 to 1024 [ 443.760038][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 443.875296][ T8261] __quota_error: 52 callbacks suppressed [ 443.875316][ T8261] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 444.046109][ T8261] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 444.110335][ T8261] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.439: Failed to acquire dquot type 0 [ 444.158889][ T8267] loop2: detected capacity change from 0 to 256 [ 444.221044][ T8267] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 444.228891][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 444.245553][ T8261] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 444.742287][ T8274] netlink: 10 bytes leftover after parsing attributes in process `syz.0.442'. [ 445.255875][ T8261] EXT4-fs (loop4): 1 truncate cleaned up [ 445.263228][ T8261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.302195][ T28] audit: type=1800 audit(1792799452.242:248): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.436" name="file1" dev="loop2" ino=1048657 res=0 errno=0 [ 446.341047][ T8277] loop0: detected capacity change from 0 to 512 [ 446.374184][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 446.382961][ T8277] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.444: iget: bad extended attribute block 6 [ 446.383393][ T8277] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.444: couldn't read orphan inode 15 (err -117) [ 446.426964][ T8261] fuse: Bad value for 'fd' [ 446.427234][ T8277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.501997][ T8284] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.605195][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 447.685426][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 448.021055][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 448.034940][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 448.300818][ T8293] SET target dimension over the limit! [ 448.746532][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.298653][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 450.360602][ T8299] loop4: detected capacity change from 0 to 128 [ 450.368849][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 450.388145][ T8299] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.465876][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 450.491997][ T8299] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.926702][ T8310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.451'. [ 451.941161][ T52] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 453.367272][ T6049] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 453.464128][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 453.496160][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 453.558286][ T8313] loop4: detected capacity change from 0 to 512 [ 453.583519][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 453.597656][ T8313] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.453: casefold flag without casefold feature [ 453.622278][ T8313] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.453: couldn't read orphan inode 15 (err -117) [ 453.654891][ T8313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 453.852434][ T8315] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.926644][ T8315] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 454.040912][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 454.091938][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 454.128919][ T8186] udevd[8186]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 455.125699][ T8332] Cannot find del_set index 4 as target [ 455.204287][ T8333] overlayfs: conflicting options: nfs_export=on,index=off [ 458.226281][ T8353] loop4: detected capacity change from 0 to 1024 [ 458.307973][ T8354] udevd[8354]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 459.886775][ T8354] udevd[8354]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 459.927540][ T8354] udevd[8354]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 460.021186][ T8362] futex_wake_op: syz.1.463 tries to shift op by 144; fix this program [ 460.056242][ T8362] rxe_eth0 speed is unknown, defaulting to 1000 [ 460.735812][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 462.153381][ T8373] loop4: detected capacity change from 0 to 128 [ 463.702885][ T8373] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 464.702641][ T8377] udevd[8377]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 466.542253][ T8377] udevd[8377]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 466.599041][ T8377] udevd[8377]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 468.018599][ T8386] input: syz1 as /devices/virtual/input/input7 [ 469.174834][ T8389] loop2: detected capacity change from 0 to 4096 [ 469.216232][ T8377] udevd[8377]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 469.357010][ T8393] Cannot find add_set index 0 as target [ 470.896304][ T1209] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 470.907961][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 470.993050][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 471.155713][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 471.167909][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 471.196484][ T1209] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 471.216535][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.235766][ T1209] usb 5-1: Product: syz [ 471.241526][ T1209] usb 5-1: Manufacturer: syz [ 471.259539][ T1209] usb 5-1: SerialNumber: syz [ 471.276541][ T1209] usb 5-1: config 0 descriptor?? [ 471.412288][ T1209] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 471.420715][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 471.435101][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 471.447801][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 471.913085][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.020118][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.457966][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 472.465916][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 472.473608][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 472.483786][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 472.501351][ T1209] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 472.556829][ T1209] usb 5-1: USB disconnect, device number 4 [ 472.596937][ T1209] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 472.628175][ T1209] keyspan 5-1:0.0: device disconnected [ 474.199316][ T8427] input: syz1 as /devices/virtual/input/input8 [ 475.374356][ T8433] vxcan1: tx drop: invalid sa for name 0xfffffffffffffff7 [ 476.509908][ T8441] loop2: detected capacity change from 0 to 1024 [ 477.221433][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 478.012036][ T8441] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 478.021569][ T8441] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 478.031301][ T8441] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.483: Failed to acquire dquot type 0 [ 478.048693][ T8441] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 478.073703][ T8441] EXT4-fs (loop2): 1 truncate cleaned up [ 478.082239][ T8441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.408698][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.447549][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 478.626201][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 479.794319][ T8457] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 481.159874][ T8472] Cannot find del_set index 4 as target [ 482.468630][ T8478] loop4: detected capacity change from 0 to 1024 [ 482.476389][ T8478] EXT4-fs: Ignoring removed oldalloc option [ 482.488606][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 482.592730][ T8479] loop2: detected capacity change from 0 to 8 [ 482.640615][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 482.669006][ T8479] SQUASHFS error: zlib decompression failed, data probably corrupt [ 482.713151][ T8478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 482.725937][ T8478] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.758820][ T8478] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.492: Freeing blocks not in datazone - block = 0, count = 16 [ 482.799447][ T8478] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.492: bg 0: block 112: padding at end of block bitmap is not set [ 482.816015][ T8478] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 117 [ 482.828975][ T8478] EXT4-fs (loop4): This should not happen!! Data will be lost [ 482.828975][ T8478] [ 483.476209][ T8479] SQUASHFS error: Failed to read block 0x9b: -5 [ 483.502927][ T8479] SQUASHFS error: Unable to read metadata cache entry [99] [ 483.537554][ T8479] SQUASHFS error: Unable to read inode 0x127 [ 484.170501][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 484.404873][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 484.407595][ T8479] loop2: detected capacity change from 0 to 512 [ 484.432740][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 484.584653][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 485.495218][ T8493] IPv6: NLM_F_CREATE should be specified when creating new route [ 485.503315][ T8493] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 485.617345][ T8479] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 485.636695][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 485.662451][ T8479] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.493: invalid indirect mapped block 256 (level 1) [ 485.692614][ T8479] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.493: invalid indirect mapped block 2683928664 (level 1) [ 485.712088][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 485.722848][ T8479] EXT4-fs (loop2): 1 truncate cleaned up [ 485.735500][ T8479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.047461][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.899443][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 486.969787][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 487.216942][ T8506] loop2: detected capacity change from 0 to 1024 [ 487.270410][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 487.759973][ T8510] Cannot find del_set index 4 as target [ 488.047734][ T8506] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 488.057016][ T8506] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 488.066579][ T8506] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.498: Failed to acquire dquot type 0 [ 488.079687][ T8506] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 488.105232][ T8506] EXT4-fs (loop2): 1 truncate cleaned up [ 488.112485][ T8506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.139817][ T8505] fuse: Bad value for 'fd' [ 488.848843][ T8520] FAULT_INJECTION: forcing a failure. [ 488.848843][ T8520] name failslab, interval 1, probability 0, space 0, times 1 [ 488.848960][ T8520] CPU: 1 PID: 8520 Comm: syz.4.502 Not tainted syzkaller #0 [ 488.848985][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 488.848999][ T8520] Call Trace: [ 488.849064][ T8520] [ 488.849122][ T8520] dump_stack_lvl+0x18c/0x250 [ 488.849225][ T8520] ? show_regs_print_info+0x20/0x20 [ 488.849277][ T8520] ? load_image+0x420/0x420 [ 488.849320][ T8520] ? __might_sleep+0xe0/0xe0 [ 488.849408][ T8520] ? __lock_acquire+0x7eb0/0x7eb0 [ 488.849460][ T8520] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 488.849491][ T8520] should_fail_ex+0x394/0x4c0 [ 488.849565][ T8520] should_failslab+0x9/0x20 [ 488.849616][ T8520] slab_pre_alloc_hook+0x59/0x300 [ 488.849665][ T8520] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 488.849698][ T8520] kmem_cache_alloc+0x5a/0x2d0 [ 488.849719][ T8520] ? __kernfs_new_node+0xe5/0x7f0 [ 488.849773][ T8520] __kernfs_new_node+0xe5/0x7f0 [ 488.849807][ T8520] ? preempt_schedule+0xc0/0xd0 [ 488.849898][ T8520] ? schedule_preempt_disabled+0x20/0x20 [ 488.849929][ T8520] ? kernfs_new_node+0x260/0x260 [ 488.849965][ T8520] ? preempt_schedule_thunk+0x1a/0x30 [ 488.850018][ T8520] ? up_write+0x1e7/0x410 [ 488.850048][ T8520] kernfs_new_node+0x14c/0x260 [ 488.850085][ T8520] __kernfs_create_file+0x4b/0x2e0 [ 488.850112][ T8520] sysfs_add_file_mode_ns+0x237/0x2f0 [ 488.850146][ T8520] sysfs_merge_group+0x184/0x320 [ 488.850176][ T8520] ? sysfs_remove_groups+0xa0/0xa0 [ 488.850199][ T8520] ? device_add_attrs+0x725/0x830 [ 488.850246][ T8520] ? device_add_class_symlinks+0x240/0x240 [ 488.850287][ T8520] dpm_sysfs_add+0xd2/0x270 [ 488.850322][ T8520] device_add+0x55c/0xc40 [ 488.850351][ T8520] device_create+0x26a/0x300 [ 488.850381][ T8520] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 488.850408][ T8520] ? _raw_spin_unlock+0x40/0x40 [ 488.850441][ T8520] ? root_device_unregister+0x100/0x100 [ 488.850464][ T8520] ? update_attr+0x550/0x730 [ 488.850516][ T8520] ? is_console_locked+0x9/0x20 [ 488.850542][ T8520] ? csi_J+0xa16/0xea0 [ 488.850571][ T8520] vcs_make_sysfs+0x32/0x80 [ 488.850600][ T8520] vc_allocate+0x60c/0x6e0 [ 488.850632][ T8520] ? vc_cons_allocated+0x70/0x70 [ 488.850668][ T8520] con_install+0xa0/0x720 [ 488.850694][ T8520] ? mutex_lock_nested+0x20/0x20 [ 488.850728][ T8520] ? show_tty_active+0x30/0x30 [ 488.850768][ T8520] tty_init_dev+0xd3/0x4c0 [ 488.850812][ T8520] tty_open+0x7dd/0xcc0 [ 488.850846][ T8520] ? __lock_acquire+0x7eb0/0x7eb0 [ 488.850878][ T8520] ? tty_compat_ioctl+0x8b0/0x8b0 [ 488.850909][ T8520] ? do_raw_spin_unlock+0x121/0x230 [ 488.850942][ T8520] chrdev_open+0x58c/0x600 [ 488.850973][ T8520] ? cd_forget+0x160/0x160 [ 488.851005][ T8520] ? fsnotify_perm+0x3ed/0x5e0 [ 488.851062][ T8520] do_dentry_open+0x880/0x14b0 [ 488.851096][ T8520] ? cd_forget+0x160/0x160 [ 488.851130][ T8520] path_openat+0x284f/0x3270 [ 488.851176][ T8520] ? trace_irq_disable+0x37/0xe0 [ 488.851218][ T8520] ? do_sys_openat2+0xda/0x1d0 [ 488.851247][ T8520] ? verify_lock_unused+0x140/0x140 [ 488.851273][ T8520] ? do_filp_open+0x430/0x430 [ 488.851296][ T8520] ? lockdep_hardirqs_on+0x98/0x150 [ 488.851355][ T8520] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 488.851448][ T8520] do_filp_open+0x1f2/0x430 [ 488.851482][ T8520] ? vfs_tmpfile+0x620/0x620 [ 488.851539][ T8520] ? _raw_spin_unlock+0x28/0x40 [ 488.851563][ T8520] ? alloc_fd+0x590/0x640 [ 488.851613][ T8520] do_sys_openat2+0x134/0x1d0 [ 488.851640][ T8520] ? lockdep_hardirqs_on+0x98/0x150 [ 488.851675][ T8520] ? do_sys_open+0xe0/0xe0 [ 488.851711][ T8520] ? __x64_sys_openat+0x31/0x160 [ 488.851746][ T8520] __x64_sys_openat+0x139/0x160 [ 488.851778][ T8520] do_syscall_64+0x55/0xb0 [ 488.851802][ T8520] ? clear_bhb_loop+0x40/0x90 [ 488.851829][ T8520] ? clear_bhb_loop+0x40/0x90 [ 488.851860][ T8520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.851888][ T8520] RIP: 0033:0x7f9a83d5fd8e [ 488.851933][ T8520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 488.851975][ T8520] RSP: 002b:00007f9a84d19b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 488.852002][ T8520] RAX: ffffffffffffffda RBX: 00007f9a84d1a6c0 RCX: 00007f9a83d5fd8e [ 488.852019][ T8520] RDX: 0000000000000002 RSI: 00007f9a84d19c00 RDI: ffffffffffffff9c [ 488.852034][ T8520] RBP: 00007f9a83e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 488.852049][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.852063][ T8520] R13: 00007f9a84026218 R14: 00007f9a84026180 R15: 00007ffdf45541a8 [ 488.852101][ T8520] [ 489.317582][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.468992][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 489.555460][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 489.832352][ T8529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 492.001784][ T8539] loop4: detected capacity change from 0 to 2048 [ 492.053960][ T8541] file system registered [ 492.165836][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 492.264850][ T8539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.352728][ T8542] Cannot find add_set index 0 as target [ 492.867304][ T5786] ffs_data_put(): freeing [ 493.222659][ T8545] x_tables: duplicate underflow at hook 1 [ 493.698615][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 493.720754][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 493.735168][ T8551] loop2: detected capacity change from 0 to 512 [ 493.748461][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 493.788586][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 493.810330][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 495.028426][ T8555] loop2: detected capacity change from 0 to 512 [ 495.117926][ T8556] loop4: detected capacity change from 0 to 1024 [ 495.322923][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 495.324673][ T8416] udevd[8416]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 495.728736][ T8556] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 495.738436][ T8556] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 495.748181][ T8556] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.513: Failed to acquire dquot type 0 [ 495.773426][ T8556] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 496.053305][ T8556] EXT4-fs (loop4): 1 truncate cleaned up [ 496.060565][ T8556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.131788][ T8563] veth1_to_bond: entered promiscuous mode [ 496.139082][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 496.173841][ T8554] fuse: Bad value for 'fd' [ 497.120847][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.140167][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 497.178419][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 497.245365][ T8563] bond0: (slave bond_slave_1): Releasing backup interface [ 497.259874][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 497.288422][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 497.925736][ T8569] autofs4:pid:8569:autofs_fill_super: called with bogus options [ 499.598760][ T8579] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5789] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8579] [ 499.857898][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 500.143631][ T8581] Cannot find add_set index 0 as target [ 500.173185][ T8583] loop4: detected capacity change from 0 to 1024 [ 500.206979][ T8583] EXT4-fs: inline encryption not supported [ 500.222400][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 500.261155][ T8583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.306472][ T8588] tc_dump_action: action bad kind [ 501.320913][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.390315][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 501.416727][ T8399] udevd[8399]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 501.648491][ T8] IPVS: starting estimator thread 0... [ 502.194739][ T8609] input: syz1 as /devices/virtual/input/input9 [ 503.107549][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.114295][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.121715][ T8612] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 503.247015][ T8603] IPVS: using max 31 ests per chain, 74400 per kthread [ 505.099970][ T8629] Cannot find add_set index 0 as target [ 505.153369][ T8629] overlayfs: conflicting options: nfs_export=on,index=off [ 505.377869][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 505.402708][ T8634] syz_tun: left promiscuous mode [ 505.422933][ T8634] bridge0: port 3(syz_tun) entered disabled state [ 505.492622][ T8634] bridge_slave_1: left allmulticast mode [ 505.505765][ T8634] bridge_slave_1: left promiscuous mode [ 505.511734][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.538114][ T8634] bridge_slave_0: left allmulticast mode [ 505.554135][ T8634] bridge_slave_0: left promiscuous mode [ 505.939481][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.682265][ T8655] tc_dump_action: action bad kind [ 508.313434][ T8661] input: syz1 as /devices/virtual/input/input11 [ 509.510930][ T8670] loop4: detected capacity change from 0 to 512 [ 509.531989][ T8668] netlink: 'syz.1.538': attribute type 3 has an invalid length. [ 509.574596][ T8664] udevd[8664]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 509.630586][ T8670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.662261][ T8670] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.851926][ T8679] Cannot find del_set index 4 as target [ 510.794542][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.857563][ T8681] tc_dump_action: action bad kind [ 510.870552][ T8687] overlayfs: conflicting options: nfs_export=on,index=off [ 511.067709][ T8664] udevd[8664]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 511.133518][ T8664] udevd[8664]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 512.049376][ T23] Process accounting resumed [ 512.269329][ T8701] fuse: Bad value for 'fd' [ 516.837303][ T8732] loop4: detected capacity change from 0 to 512 [ 516.857217][ T8732] EXT4-fs (loop4): invalid inodes per group: 0 [ 516.857217][ T8732] [ 516.910344][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 517.189592][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 517.717956][ T8737] loop4: detected capacity change from 0 to 1024 [ 517.724943][ T8737] ext4: Unknown parameter 'noacl' [ 517.978112][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 518.030662][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 518.174546][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 518.390190][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 519.158776][ T8741] loop4: detected capacity change from 0 to 256 [ 519.226027][ T8741] exfat: Deprecated parameter 'utf8' [ 519.249396][ T8734] udevd[8734]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 519.259871][ T8741] exfat: Deprecated parameter 'namecase' [ 519.280127][ T8741] exfat: Deprecated parameter 'namecase' [ 519.296032][ T8741] exfat: Deprecated parameter 'namecase' [ 519.338484][ T8741] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 520.180510][ T8748] x_tables: duplicate underflow at hook 1 [ 523.519124][ T5792] libceph: connect (1)[c::]:6789 error -22 [ 523.547893][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 523.804635][ T8755] ceph: No mds server is up or the cluster is laggy [ 523.976767][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 524.092604][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 524.278791][ T8774] loop4: detected capacity change from 0 to 1024 [ 524.294304][ T8774] EXT4-fs: Ignoring removed i_version option [ 524.300723][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 525.239937][ T8774] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.876286][ T8786] fuse: Bad value for 'fd' [ 526.735370][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 526.894670][ T52] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 526.929257][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 526.961872][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 527.024309][ T8799] rxe_eth0 speed is unknown, defaulting to 1000 [ 527.091877][ T8793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 527.141567][ T8793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 527.150942][ T8793] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 527.185070][ T8793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 527.192251][ T8793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 527.199049][ T8793] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 527.402549][ T8807] overlayfs: failed to resolve './file0': -2 [ 529.675296][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 529.681895][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 529.688130][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 529.696091][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 530.523930][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 530.546131][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 531.209478][ T8832] input: syz1 as /devices/virtual/input/input14 [ 532.096704][ T8814] Bluetooth: hci2: command 0x0406 tx timeout [ 532.096720][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 532.240079][ T8821] ceph: No mds server is up or the cluster is laggy [ 532.257214][ T23] libceph: connect (1)[c::]:6789 error -101 [ 532.263342][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 532.639355][ T8839] x_tables: duplicate underflow at hook 1 [ 535.846689][ T5797] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 536.313065][ T8856] loop2: detected capacity change from 0 to 1024 [ 536.348899][ T8856] EXT4-fs: Ignoring removed i_version option [ 536.360650][ T8825] udevd[8825]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 536.401421][ T8856] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.480133][ T8870] Cannot find del_set index 4 as target [ 538.076605][ T8871] input: syz1 as /devices/virtual/input/input15 [ 538.977103][ T8867] overlayfs: conflicting options: nfs_export=on,index=off [ 539.091820][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 539.195211][ T8878] udevd[8878]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 539.245120][ T8825] udevd[8825]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 539.810098][ T8883] input: syz1 as /devices/virtual/input/input16 [ 542.251032][ T8895] fuse: Bad value for 'fd' [ 545.602596][ T8912] loop2: detected capacity change from 0 to 256 [ 545.626824][ T8912] exfat: Deprecated parameter 'utf8' [ 545.632935][ T8912] exfat: Deprecated parameter 'namecase' [ 545.655765][ T8912] exfat: Deprecated parameter 'namecase' [ 545.661548][ T8912] exfat: Deprecated parameter 'namecase' [ 545.676904][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 545.778083][ T8916] Cannot find del_set index 4 as target [ 545.855192][ T8917] overlayfs: conflicting options: nfs_export=on,index=off [ 546.590629][ T8912] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 547.301481][ T8921] input: syz1 as /devices/virtual/input/input17 [ 548.329874][ T8924] Cannot find del_set index 4 as target [ 548.645469][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 548.695091][ T8913] udevd[8913]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 549.938590][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 550.238195][ T5879] usb 3-1: config 1 has an invalid interface number: 4 but max is 0 [ 550.283860][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.401224][ T5879] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 550.427541][ T5879] usb 3-1: config 1 has no interface number 1 [ 550.498112][ T5879] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 550.602875][ T5879] usb 3-1: config 1 interface 0 has no altsetting 0 [ 550.703405][ T8942] Cannot find del_set index 4 as target [ 551.383713][ T5879] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 551.451920][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.510539][ T5879] usb 3-1: Product: syz [ 551.514775][ T5879] usb 3-1: Manufacturer: syz [ 551.551081][ T5879] usb 3-1: SerialNumber: syz [ 551.566040][ T5879] usb-storage 3-1:1.4: USB Mass Storage device detected [ 551.622371][ T5879] usb-storage 3-1:1.4: Quirks match for vid 174c pid 55aa: 400000 [ 551.643512][ T5879] scsi host1: usb-storage 3-1:1.4 [ 551.677310][ T5879] usb-storage 3-1:1.0: USB Mass Storage device detected [ 551.699368][ T5879] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 551.889742][ T5879] usb 3-1: USB disconnect, device number 3 [ 551.972177][ T8956] netlink: 72 bytes leftover after parsing attributes in process `syz.0.601'. [ 552.281920][ T8959] loop2: detected capacity change from 0 to 2048 [ 552.297518][ T5776] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 552.342307][ T8959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 552.398706][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 553.299439][ T5776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 553.314235][ T5776] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 553.329362][ T5776] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 553.355766][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.366957][ T5776] usb 5-1: Product: syz [ 553.371253][ T5776] usb 5-1: Manufacturer: syz [ 553.376826][ T5776] usb 5-1: SerialNumber: syz [ 554.115718][ T8966] x_tables: duplicate underflow at hook 1 [ 555.049273][ T8957] udevd[8957]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 555.111646][ T8957] udevd[8957]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 555.123755][ T5776] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 555.180073][ T5776] usb 5-1: USB disconnect, device number 5 [ 555.214540][ T5776] usblp0: removed [ 555.435850][ T8979] loop4: detected capacity change from 0 to 1024 [ 555.709340][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 555.793959][ T8979] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 555.804502][ T8979] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 555.814107][ T8979] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.607: Failed to acquire dquot type 0 [ 555.843156][ T8979] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 555.884326][ T8979] EXT4-fs (loop4): 1 truncate cleaned up [ 555.898424][ T8979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.948224][ T8979] fuse: Bad value for 'fd' [ 556.310110][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.371978][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 556.402575][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 556.452151][ T5797] Bluetooth: hci4: unexpected event for opcode 0x203c [ 556.475768][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 556.624739][ T8989] Cannot find del_set index 4 as target [ 556.705292][ T23] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 556.713895][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.725419][ T23] usb 3-1: config 0 has no interface number 0 [ 556.731867][ T23] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 556.744308][ T23] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 556.754448][ T5797] Bluetooth: hci1: unexpected event for opcode 0x200f [ 556.761421][ T23] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.780959][ T23] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 556.790184][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.798356][ T23] usb 3-1: Product: syz [ 556.802546][ T23] usb 3-1: Manufacturer: syz [ 556.807261][ T23] usb 3-1: SerialNumber: syz [ 556.813790][ T23] usb 3-1: config 0 descriptor?? [ 556.823234][ T23] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 556.834124][ T23] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 556.843173][ T23] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 556.962489][ T5797] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 557.013922][ T8997] loop4: detected capacity change from 0 to 512 [ 557.022970][ T8997] EXT4-fs: inline encryption not supported [ 557.033622][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 557.046744][ T8997] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 557.060868][ T8997] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 557.082824][ T8997] EXT4-fs (loop4): orphan cleanup on readonly fs [ 557.084542][ T5776] usb 3-1: USB disconnect, device number 4 [ 557.097116][ T8997] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.614: inode #15: comm syz.4.614: iget: illegal inode # [ 557.104398][ T5776] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 557.124568][ T8997] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.614: couldn't read orphan inode 15 (err -117) [ 557.129741][ T5776] cyberjack 3-1:0.69: device disconnected [ 557.146292][ T8997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 557.190523][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.216665][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 557.241783][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 559.067640][ T9008] Cannot find del_set index 4 as target [ 559.422915][ T9016] loop4: detected capacity change from 0 to 2048 [ 559.434398][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 559.446211][ T5776] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 559.472417][ T9016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.129482][ T9019] x_tables: duplicate underflow at hook 1 [ 561.000678][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 561.044633][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 561.077402][ T5776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 561.097621][ T5776] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 561.114835][ T5776] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 561.136269][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.164196][ T5776] dln2 3-1:1.0: USB write failed: -90 [ 561.186471][ T5776] dln2 3-1:1.0: failed to initialize hardware [ 562.809385][ T5776] dln2: probe of 3-1:1.0 failed with error -90 [ 562.898991][ T5776] usb 3-1: USB disconnect, device number 5 [ 563.149408][ T9031] loop2: detected capacity change from 0 to 4096 [ 563.171209][ T9033] Cannot find del_set index 4 as target [ 563.237741][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 563.247215][ T9031] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 563.302084][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.309313][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.514896][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 563.608901][ T9038] fuse: Bad value for 'fd' [ 563.638394][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 566.001523][ T9057] loop2: detected capacity change from 0 to 1024 [ 566.833846][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 567.932612][ T9057] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 567.941847][ T9057] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 567.951334][ T9057] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.635: Failed to acquire dquot type 0 [ 567.964122][ T9057] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 567.996712][ T9057] EXT4-fs (loop2): 1 truncate cleaned up [ 568.003929][ T9057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.034873][ T9055] fuse: Bad value for 'fd' [ 568.208521][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.413792][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 568.492033][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 568.642624][ T9074] Cannot find del_set index 4 as target [ 569.597549][ T5797] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 570.682996][ T9085] input: syz1 as /devices/virtual/input/input20 [ 571.901385][ T9095] fuse: Bad value for 'fd' [ 572.767804][ T5797] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 572.786299][ T5797] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 572.888275][ T9101] Cannot find del_set index 4 as target [ 572.943255][ T9101] overlayfs: failed to resolve './file1': -2 [ 573.411668][ T9106] Cannot find del_set index 4 as target [ 573.483390][ T9107] overlayfs: failed to resolve './file1': -2 [ 574.099103][ T5797] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 574.108232][ T5797] Bluetooth: hci1: Injecting HCI hardware error event [ 574.122253][ T8814] Bluetooth: hci1: hardware error 0x00 [ 574.223029][ T5797] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 574.876009][ T23] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 575.205610][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 575.243375][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.285268][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 575.320390][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 575.355244][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.430947][ T5797] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 575.595758][ T23] usb 3-1: string descriptor 0 read error: -71 [ 575.602838][ T23] usb 3-1: Found UVC 0.00 device (046d:0825) [ 575.610458][ T23] usb 3-1: No valid video chain found. [ 575.618166][ T23] usb 3-1: USB disconnect, device number 6 [ 576.875484][ T8814] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 577.149641][ T9134] loop4: detected capacity change from 0 to 512 [ 577.169024][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 577.179827][ T9135] loop2: detected capacity change from 0 to 512 [ 577.200321][ T9134] EXT4-fs error (device loop4): ext4_quota_enable:7140: inode #4: comm syz.4.659: iget: bad i_size value: -6629298651489363968 [ 577.222228][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 577.238826][ T9135] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 1536 [ 577.254351][ T9134] EXT4-fs error (device loop4): ext4_quota_enable:7143: comm syz.4.659: Bad quota inode: 4, type: 1 [ 577.267870][ T9134] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 577.289658][ T9134] EXT4-fs (loop4): mount failed [ 577.321742][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 577.343767][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 577.366917][ T8971] udevd[8971]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 577.392326][ T8953] udevd[8953]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 577.604915][ T8814] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 581.048648][ T9160] loop2: detected capacity change from 0 to 4096 [ 581.110011][ T9164] udevd[9164]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 581.422425][ T9164] udevd[9164]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 581.478935][ T9164] udevd[9164]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 581.580077][ T8814] Bluetooth: hci2: ACL packet too small [ 582.249525][ T9178] input: syz1 as /devices/virtual/input/input21 [ 584.534398][ T9186] loop2: detected capacity change from 0 to 128 [ 584.560988][ T9164] udevd[9164]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 584.849830][ T9164] udevd[9164]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 584.890558][ T9164] udevd[9164]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 585.154961][ T5797] Bluetooth: hci2: unexpected subevent 0x0a length: 3 < 30 [ 585.586962][ T9202] Cannot find del_set index 4 as target [ 585.646344][ T9202] overlayfs: conflicting options: nfs_export=on,index=off [ 586.759940][ T9198] loop4: detected capacity change from 0 to 40427 [ 586.785163][ T9210] loop2: detected capacity change from 0 to 1024 [ 586.789770][ T9164] udevd[9164]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 586.856260][ T9198] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 586.875576][ T9198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 586.888458][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 586.932995][ T28] audit: type=1800 audit(1792799593.872:249): pid=9210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.689" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 586.956342][ T9198] F2FS-fs (loop4): invalid crc value [ 586.989173][ T9198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 587.004915][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 587.057398][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 587.163943][ T9198] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 587.176415][ T9198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 587.215865][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 587.399718][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 587.457686][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 587.878072][ T9232] Cannot find del_set index 4 as target [ 587.962837][ T9233] overlayfs: conflicting options: nfs_export=on,index=off [ 588.816135][ T9244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'. [ 588.857673][ T9246] loop4: detected capacity change from 0 to 8 [ 588.872140][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 589.591079][ T9251] input: syz1 as /devices/virtual/input/input22 [ 590.682741][ T9238] loop2: detected capacity change from 0 to 32768 [ 590.717992][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 590.773132][ T9257] Cannot find del_set index 4 as target [ 590.837855][ T9257] overlayfs: conflicting options: nfs_export=on,index=off [ 590.881756][ T9238] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 591.433707][ T9275] fuse: Bad value for 'fd' [ 591.709012][ T9238] XFS (loop2): Ending clean mount [ 592.237394][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 592.426075][ T9279] fuse: Bad value for 'fd' [ 592.698011][ T9281] loop4: detected capacity change from 0 to 8 [ 592.946729][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 592.969396][ T9281] SQUASHFS error: zlib decompression failed, data probably corrupt [ 593.139078][ T9164] udevd[9164]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 593.154846][ T9281] SQUASHFS error: Failed to read block 0x9b: -5 [ 593.174400][ T9281] SQUASHFS error: Unable to read metadata cache entry [99] [ 593.199029][ T9281] SQUASHFS error: Unable to read inode 0x127 [ 593.201065][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 594.271747][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 594.336864][ T9281] loop4: detected capacity change from 0 to 512 [ 594.348078][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 594.384546][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 595.285635][ T9289] input: syz1 as /devices/virtual/input/input23 [ 595.411509][ T9281] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 595.428464][ T9281] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.705: invalid indirect mapped block 256 (level 1) [ 595.455393][ T9281] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.705: invalid indirect mapped block 2683928664 (level 1) [ 595.472897][ T9281] EXT4-fs (loop4): 1 truncate cleaned up [ 595.482084][ T9281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.549128][ T9295] Cannot find del_set index 4 as target [ 595.602307][ T9295] overlayfs: conflicting options: nfs_export=on,index=off [ 595.639814][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.731682][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 595.776447][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 596.086463][ T9303] loop4: detected capacity change from 0 to 256 [ 596.107617][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 596.224311][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 596.260459][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 596.619987][ T9308] loop4: detected capacity change from 0 to 1024 [ 596.749577][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 596.786785][ T9308] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 596.798239][ T9308] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 596.808243][ T9308] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.722: Failed to acquire dquot type 0 [ 596.850143][ T9308] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 596.870788][ T9308] EXT4-fs (loop4): 1 truncate cleaned up [ 596.878692][ T9308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.900524][ T9308] fuse: Bad value for 'fd' [ 597.598596][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.646991][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 597.672284][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 597.726717][ T9316] loop4: detected capacity change from 0 to 16 [ 597.736349][ T9316] erofs: (device loop4): mounted with root inode @ nid 36. [ 597.752004][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 597.817749][ T9213] udevd[9213]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 598.780620][ T9320] input: syz1 as /devices/virtual/input/input24 [ 599.282731][ T9332] loop2: detected capacity change from 0 to 512 [ 599.317856][ T9332] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 601.193111][ T9352] Cannot find del_set index 4 as target [ 601.346124][ T9354] overlayfs: conflicting options: nfs_export=on,index=off [ 602.155395][ T9357] Cannot find del_set index 4 as target [ 602.229439][ T9358] overlayfs: conflicting options: nfs_export=on,index=off [ 605.189890][ T9387] Cannot find del_set index 4 as target [ 605.262552][ T9388] overlayfs: conflicting options: nfs_export=on,index=off [ 605.988644][ T9390] loop2: detected capacity change from 0 to 512 [ 606.052557][ T9390] EXT4-fs (loop2): orphan cleanup on readonly fs [ 606.095367][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 606.129681][ T9390] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 606.206180][ T9390] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 606.227410][ T9390] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #13: comm syz.2.750: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 606.276516][ T9390] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.750: couldn't read orphan inode 13 (err -117) [ 606.309089][ T9390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 606.377179][ T9397] loop4: detected capacity change from 0 to 2048 [ 606.401872][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 606.402391][ T9397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 606.417136][ T9390] EXT4-fs error (device loop2): ext4_lookup:1864: inode #2: comm syz.2.750: deleted inode referenced: 12 [ 606.527840][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.552526][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 606.600301][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 606.662987][ T9401] udevd[9401]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 606.715433][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 607.671943][ T9407] input: syz1 as /devices/virtual/input/input25 [ 607.929468][ T9414] Cannot find del_set index 4 as target [ 608.008035][ T9415] overlayfs: conflicting options: nfs_export=on,index=off [ 608.886687][ T5797] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 610.059898][ T9433] loop4: detected capacity change from 0 to 64 [ 610.105295][ T5797] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 610.114988][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 610.207377][ T9439] loop2: detected capacity change from 0 to 8 [ 610.228874][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 610.236199][ T9439] SQUASHFS error: zlib decompression failed, data probably corrupt [ 610.246057][ T9439] SQUASHFS error: Failed to read block 0x9b: -5 [ 610.253791][ T9439] SQUASHFS error: Unable to read metadata cache entry [99] [ 610.261892][ T9439] SQUASHFS error: Unable to read inode 0x127 [ 610.282579][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 611.250141][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 611.276951][ T9401] udevd[9401]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 611.299445][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 611.314262][ T9439] loop2: detected capacity change from 0 to 512 [ 611.337558][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 611.351285][ T9439] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 611.355199][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 611.386229][ T9439] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.769: invalid indirect mapped block 256 (level 1) [ 611.412774][ T9439] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.769: invalid indirect mapped block 2683928664 (level 1) [ 611.438001][ T9439] EXT4-fs (loop2): 1 truncate cleaned up [ 611.445142][ T9439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.489612][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.591616][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 612.618669][ T9471] overlayfs: conflicting options: nfs_export=on,index=off [ 612.683049][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 612.757342][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 612.924264][ T9465] loop4: detected capacity change from 0 to 32768 [ 612.947107][ T9478] loop2: detected capacity change from 0 to 256 [ 612.963199][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 612.973153][ T9465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.779 (9465) [ 612.992282][ T9478] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 613.001237][ T9401] udevd[9401]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 613.084825][ T9465] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 613.111477][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 613.121921][ T9465] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 613.148443][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 613.166252][ T9465] BTRFS info (device loop4): using free space tree [ 613.318271][ T9486] loop2: detected capacity change from 0 to 4096 [ 613.328161][ T9465] BTRFS info (device loop4): enabling ssd optimizations [ 613.345684][ T9465] BTRFS info (device loop4): auto enabling async discard [ 613.442601][ T9486] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 613.461814][ T9486] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 613.525863][ T6049] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 613.628724][ T12] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 613.648138][ T5786] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 613.667832][ T5786] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 613.686143][ T5786] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 613.716826][ T12] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 614.378064][ T9508] Cannot find del_set index 4 as target [ 614.452392][ T9509] overlayfs: conflicting options: nfs_export=on,index=off [ 615.455388][ T9513] overlayfs: conflicting options: nfs_export=on,index=off [ 616.340562][ T9505] loop2: detected capacity change from 0 to 32768 [ 616.357736][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 616.410492][ T9517] ip_tables: iptables: counters copy to user failed while replacing table [ 616.482803][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 616.534046][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 616.831124][ T9531] Cannot find del_set index 4 as target [ 616.908498][ T9533] overlayfs: conflicting options: nfs_export=on,index=off [ 618.838759][ T9540] loop4: detected capacity change from 0 to 1024 [ 618.895134][ T9542] fuse: Bad value for 'fd' [ 619.081799][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 619.165107][ T9540] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 619.174641][ T9540] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 619.184173][ T9540] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.804: Failed to acquire dquot type 0 [ 619.203667][ T9540] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 619.220952][ T9540] EXT4-fs (loop4): 1 truncate cleaned up [ 619.228158][ T9540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.249035][ T9540] fuse: Bad value for 'fd' [ 619.431530][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.477978][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 619.518922][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 619.629325][ T9548] loop4: detected capacity change from 0 to 2048 [ 619.654965][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 619.736539][ T9551] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 619.863089][ T9548] NILFS (loop4): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 619.877994][ T9548] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=13) [ 619.915151][ T9548] Remounting filesystem read-only [ 619.920592][ T9548] NILFS (loop4): error -5 truncating bmap (ino=13) [ 619.927594][ T9554] Cannot find del_set index 4 as target [ 619.935342][ T9548] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 620.008192][ T9554] overlayfs: conflicting options: nfs_export=on,index=off [ 620.088435][ T6049] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 620.110003][ T6049] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 620.138330][ T6049] NILFS (loop4): discard dirty page: offset=0, ino=12 [ 620.157635][ T6049] NILFS (loop4): discard dirty block: blocknr=17, size=1024 [ 620.190011][ T6049] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 620.203240][ T6049] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 620.217803][ T6049] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 620.285987][ T9560] overlayfs: conflicting options: nfs_export=on,index=off [ 620.321158][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 620.365291][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 620.401567][ T9562] Cannot find del_set index 4 as target [ 620.461566][ T9562] overlayfs: conflicting options: nfs_export=on,index=off [ 620.830222][ T9573] fuse: Bad value for 'fd' [ 621.807080][ T9581] Cannot find del_set index 4 as target [ 621.879142][ T9579] loop4: detected capacity change from 0 to 4096 [ 621.902834][ T9581] overlayfs: conflicting options: nfs_export=on,index=off [ 621.941932][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 621.953868][ T9579] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 622.014968][ T9579] ntfs3: loop4: ino=19, mi_enum_attr [ 622.052376][ T9579] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 622.124606][ T9585] Cannot find del_set index 4 as target [ 622.204914][ T9585] overlayfs: conflicting options: nfs_export=on,index=off [ 623.273191][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 623.335130][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 623.354319][ T9592] loop4: detected capacity change from 0 to 512 [ 623.380879][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 623.464873][ T9592] EXT4-fs (loop4): 1 orphan inode deleted [ 623.496643][ T7857] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 623.516113][ T7857] EXT4-fs error (device loop4): ext4_release_dquot:6985: comm kworker/u4:14: Failed to release dquot type 1 [ 623.537856][ T9592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.624972][ T9592] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.808518][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.827851][ T9606] Cannot find del_set index 4 as target [ 623.893724][ T9606] overlayfs: conflicting options: nfs_export=on,index=off [ 623.939654][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 624.009456][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 624.946378][ T9610] input: syz1 as /devices/virtual/input/input26 [ 624.961328][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.980902][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.107945][ T9622] input: syz1 as /devices/virtual/input/input27 [ 627.133033][ T9630] Cannot find del_set index 4 as target [ 627.196124][ T9630] overlayfs: conflicting options: nfs_export=on,index=off [ 627.609586][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 628.260201][ T9645] nvme_fabrics: missing parameter 'nqn=%s' [ 628.647068][ T9654] Cannot find del_set index 4 as target [ 628.722008][ T9654] overlayfs: conflicting options: nfs_export=on,index=off [ 628.779394][ T9656] netlink: 'syz.4.848': attribute type 3 has an invalid length. [ 629.130639][ T9661] input: syz1 as /devices/virtual/input/input28 [ 629.923481][ T9667] loop4: detected capacity change from 0 to 1024 [ 630.003314][ T9667] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 630.012961][ T9667] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 630.022532][ T9667] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.852: Failed to acquire dquot type 0 [ 630.045817][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 630.057244][ T9667] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 630.075690][ T9667] EXT4-fs (loop4): 1 truncate cleaned up [ 630.086258][ T9667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.153438][ T9667] fuse: Bad value for 'fd' [ 630.726781][ T9671] netlink: 'syz.1.853': attribute type 20 has an invalid length. [ 630.872416][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.970176][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 631.020849][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 631.141903][ T9680] loop4: detected capacity change from 0 to 8 [ 631.188610][ T9680] SQUASHFS error: zlib decompression failed, data probably corrupt [ 631.189407][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 631.208845][ T9680] SQUASHFS error: Failed to read block 0x9b: -5 [ 631.215287][ T9680] SQUASHFS error: Unable to read metadata cache entry [99] [ 631.225939][ T9680] SQUASHFS error: Unable to read inode 0x127 [ 631.259148][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 631.276656][ T9684] Cannot find del_set index 4 as target [ 631.331700][ T9684] overlayfs: conflicting options: nfs_export=on,index=off [ 631.352899][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 631.392649][ T9680] loop4: detected capacity change from 0 to 512 [ 631.412784][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 631.419362][ T9680] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 631.446802][ T9680] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.856: invalid indirect mapped block 256 (level 1) [ 631.478015][ T9680] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.856: invalid indirect mapped block 2683928664 (level 1) [ 631.731757][ T9680] EXT4-fs (loop4): 1 truncate cleaned up [ 631.747430][ T9680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.828709][ T9694] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 631.865350][ T9694] team0: Device vxcan1 is of different type [ 632.562273][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.644221][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 632.671820][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 632.918083][ T9721] input: syz1 as /devices/virtual/input/input29 [ 633.467315][ T9722] Cannot find del_set index 4 as target [ 633.545288][ T9723] overlayfs: conflicting options: nfs_export=on,index=off [ 633.924266][ T9729] fuse: Bad value for 'fd' [ 634.069347][ T9733] loop4: detected capacity change from 0 to 1024 [ 634.162398][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 634.943644][ T9733] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 634.953083][ T9733] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 634.963724][ T9733] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.875: Failed to acquire dquot type 0 [ 634.980060][ T9733] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 634.999272][ T9733] EXT4-fs (loop4): 1 truncate cleaned up [ 635.008637][ T9733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.034215][ T9732] fuse: Bad value for 'fd' [ 635.219158][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.272187][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 635.300793][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 635.312374][ T9746] loop2: detected capacity change from 0 to 8 [ 635.338767][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 635.357809][ T9746] SQUASHFS error: zlib decompression failed, data probably corrupt [ 635.375097][ T9746] SQUASHFS error: Failed to read block 0x9b: -5 [ 635.383310][ T9746] SQUASHFS error: Unable to read metadata cache entry [99] [ 635.391599][ T9746] SQUASHFS error: Unable to read inode 0x127 [ 636.151254][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 636.202532][ T9746] loop2: detected capacity change from 0 to 512 [ 636.221139][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 636.261037][ T9746] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 636.282023][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 636.315190][ T9746] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.881: invalid indirect mapped block 256 (level 1) [ 636.351052][ T9746] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.881: invalid indirect mapped block 2683928664 (level 1) [ 636.379918][ T9746] EXT4-fs (loop2): 1 truncate cleaned up [ 636.393669][ T9746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.436478][ T9764] loop4: detected capacity change from 0 to 1024 [ 636.480785][ T9764] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 636.490413][ T9764] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 636.500965][ T9764] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.886: Failed to acquire dquot type 0 [ 636.520079][ T9764] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 636.535930][ T9764] EXT4-fs (loop4): 1 truncate cleaned up [ 636.543091][ T9764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.608894][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 636.635239][ T9764] fuse: Bad value for 'fd' [ 637.138222][ T9770] fuse: Bad value for 'fd' [ 637.177020][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.242913][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 637.302726][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 637.403697][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.417998][ T9774] loop4: detected capacity change from 0 to 128 [ 637.437737][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 637.608081][ T6049] sysv_free_block: flc_count > flc_size [ 637.646820][ T6049] sysv_free_block: flc_count > flc_size [ 637.652447][ T6049] sysv_free_block: flc_count > flc_size [ 637.689274][ T6049] sysv_free_block: flc_count > flc_size [ 637.694902][ T6049] sysv_free_block: flc_count > flc_size [ 637.705153][ T6049] sysv_free_block: flc_count > flc_size [ 637.715206][ T6049] sysv_free_block: flc_count > flc_size [ 637.742448][ T6049] sysv_free_block: flc_count > flc_size [ 637.750527][ T6049] sysv_free_block: flc_count > flc_size [ 637.765106][ T6049] sysv_free_block: flc_count > flc_size [ 637.774220][ T6049] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 638.601204][ T9789] input: syz1 as /devices/virtual/input/input30 [ 638.696105][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 638.916348][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 638.932185][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.974120][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.994627][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 639.015607][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.042863][ T23] usb 3-1: config 0 descriptor?? [ 639.057212][ T23] hub 3-1:0.0: USB hub found [ 639.086861][ T9800] bond0: option arp_interval: invalid value (18446744073709551615) [ 639.094837][ T9800] bond0: option arp_interval: allowed values 0 - 2147483647 [ 639.264300][ T23] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 639.342806][ T9806] Cannot find del_set index 4 as target [ 639.351211][ T9806] overlayfs: conflicting options: nfs_export=on,index=off [ 639.478584][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 639.484895][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 639.527684][ T23] usb 3-1: USB disconnect, device number 7 [ 639.658932][ T9813] fuse: Bad value for 'fd' [ 639.799478][ T9819] ip_tables: iptables: counters copy to user failed while replacing table [ 641.240141][ T9828] loop2: detected capacity change from 0 to 40427 [ 641.279642][ T9828] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 641.298813][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 641.300915][ T9828] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 641.338214][ T9837] Cannot find del_set index 4 as target [ 641.403703][ T9837] overlayfs: conflicting options: nfs_export=on,index=off [ 641.442526][ T9828] F2FS-fs (loop2): invalid crc_offset: 1 [ 641.781004][ T9828] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 641.822892][ T9828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 641.878377][ T9835] loop4: detected capacity change from 0 to 32768 [ 641.890208][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 641.899215][ T5797] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 641.926752][ T9835] ea_get: invalid extended attribute [ 641.932587][ T9835] ffff888055caf230: 04 00 00 00 .... [ 641.998631][ T9852] ialloc: diAlloc returned -17! [ 642.049780][ T9855] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 642.069286][ T9855] team0: Device ipvlan1 failed to register rx_handler [ 642.130966][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 642.181576][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 642.460652][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 642.505092][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 643.339734][ T9864] loop4: detected capacity change from 0 to 40427 [ 643.359512][ T9864] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 643.366987][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 643.371769][ T9864] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 643.386207][ T9864] F2FS-fs (loop4): invalid crc value [ 643.405521][ T9864] F2FS-fs (loop4): Found nat_bits in checkpoint [ 643.526817][ T9864] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 643.534023][ T9864] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 643.656158][ T6049] bio_check_eod: 1 callbacks suppressed [ 643.656201][ T6049] syz-executor: attempt to access beyond end of device [ 643.656201][ T6049] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 643.739344][ T6049] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 644.152352][ T9888] loop2: detected capacity change from 0 to 1024 [ 644.252374][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 644.260216][ T9888] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 644.270786][ T9888] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 644.281521][ T9888] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.938: Failed to acquire dquot type 0 [ 644.318447][ T9888] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 644.334032][ T9888] EXT4-fs (loop2): 1 truncate cleaned up [ 644.341343][ T9888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.355685][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 644.378811][ T9888] fuse: Bad value for 'fd' [ 644.463925][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.484563][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 644.597038][ T9892] overlayfs: conflicting options: nfs_export=on,index=off [ 645.788594][ T9901] input: syz1 as /devices/virtual/input/input31 [ 645.959441][ T9904] overlayfs: conflicting options: nfs_export=on,index=off [ 646.041488][ T9908] block device autoloading is deprecated and will be removed. [ 646.230153][ T9914] loop4: detected capacity change from 0 to 1024 [ 646.270633][ T9914] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 646.280096][ T9914] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 646.290891][ T9914] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.949: Failed to acquire dquot type 0 [ 646.318585][ T9914] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 646.336518][ T9914] EXT4-fs (loop4): 1 truncate cleaned up [ 646.344325][ T9914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.366699][ T9914] fuse: Bad value for 'fd' [ 646.440200][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.521844][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 646.675047][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 648.239842][ T9931] Cannot find del_set index 4 as target [ 648.314967][ T9934] overlayfs: conflicting options: nfs_export=on,index=off [ 649.673791][ T9938] input: syz1 as /devices/virtual/input/input32 [ 650.673777][ T9957] loop4: detected capacity change from 0 to 1024 [ 650.723816][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 651.039073][ T9963] loop2: detected capacity change from 0 to 4096 [ 651.072042][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 651.087928][ T9957] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 651.155699][ T9957] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 651.170037][ T9965] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 651.205728][ T9957] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.965: Failed to acquire dquot type 0 [ 651.240818][ T9957] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 651.307626][ T9957] EXT4-fs (loop4): 1 truncate cleaned up [ 651.314917][ T9957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.259136][ T9957] fuse: Bad value for 'fd' [ 652.594827][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 652.609195][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 653.641450][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.688906][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 653.758776][ T9983] loop4: detected capacity change from 0 to 256 [ 653.759135][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 653.823770][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 653.896660][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 653.971722][ T8814] Bluetooth: hci2: unexpected event for opcode 0x202f [ 653.980364][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 654.178348][ T9995] Cannot find del_set index 4 as target [ 654.256651][ T9997] overlayfs: conflicting options: nfs_export=on,index=off [ 654.826033][ T8814] Bluetooth: hci4: command 0x0406 tx timeout [ 655.091817][T10003] loop4: detected capacity change from 0 to 64 [ 655.155158][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 655.275416][ T7857] kworker/u4:14: attempt to access beyond end of device [ 655.275416][ T7857] loop4: rw=1, sector=2320, nr_sectors = 1 limit=64 [ 655.314445][ T7857] Buffer I/O error on dev loop4, logical block 2320, lost async page write [ 655.343270][ T7857] kworker/u4:14: attempt to access beyond end of device [ 655.343270][ T7857] loop4: rw=1, sector=2321, nr_sectors = 1 limit=64 [ 655.385687][ T7857] Buffer I/O error on dev loop4, logical block 2321, lost async page write [ 655.404688][ T7857] kworker/u4:14: attempt to access beyond end of device [ 655.404688][ T7857] loop4: rw=1, sector=2322, nr_sectors = 1 limit=64 [ 655.439240][ T7857] Buffer I/O error on dev loop4, logical block 2322, lost async page write [ 655.471011][ T7857] kworker/u4:14: attempt to access beyond end of device [ 655.471011][ T7857] loop4: rw=1, sector=2323, nr_sectors = 1 limit=64 [ 655.510662][ T7857] Buffer I/O error on dev loop4, logical block 2323, lost async page write [ 655.560581][ T7857] kworker/u4:14: attempt to access beyond end of device [ 655.560581][ T7857] loop4: rw=2049, sector=2320, nr_sectors = 1 limit=64 [ 655.584709][ T7857] Buffer I/O error on dev loop4, logical block 2320, lost async page write [ 656.016992][ T7857] kworker/u4:14: attempt to access beyond end of device [ 656.016992][ T7857] loop4: rw=2049, sector=2321, nr_sectors = 1 limit=64 [ 656.081198][ T7857] Buffer I/O error on dev loop4, logical block 2321, lost async page write [ 656.125549][ T7857] kworker/u4:14: attempt to access beyond end of device [ 656.125549][ T7857] loop4: rw=2049, sector=2322, nr_sectors = 1 limit=64 [ 656.152169][ T7857] Buffer I/O error on dev loop4, logical block 2322, lost async page write [ 656.163499][ T7857] kworker/u4:14: attempt to access beyond end of device [ 656.163499][ T7857] loop4: rw=2049, sector=2323, nr_sectors = 1 limit=64 [ 656.170463][T10022] Set syz0 is full, maxelem 2 reached [ 656.177868][ T7857] Buffer I/O error on dev loop4, logical block 2323, lost async page write [ 656.239092][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 656.288873][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 656.980092][T10050] Cannot find del_set index 4 as target [ 657.056295][T10052] overlayfs: conflicting options: nfs_export=on,index=off [ 657.869073][T10061] loop2: detected capacity change from 0 to 1024 [ 657.881343][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 657.908083][T10061] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 657.917769][T10061] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 657.927372][T10061] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1000: Failed to acquire dquot type 0 [ 657.957233][T10061] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 657.973195][T10061] EXT4-fs (loop2): 1 truncate cleaned up [ 657.980525][T10061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.002313][T10061] fuse: Bad value for 'fd' [ 658.041812][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.138814][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 658.150087][T10067] Bluetooth: hci0: unsupported parameter 5135 [ 658.158847][T10067] Bluetooth: hci0: unsupported parameter 8192 [ 658.165078][T10067] Bluetooth: hci0: unsupported parameter 5135 [ 658.172303][T10067] Bluetooth: hci0: unsupported parameter 8192 [ 658.189290][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 660.033641][T10069] loop2: detected capacity change from 0 to 32768 [ 660.062431][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 660.088127][T10082] Cannot find del_set index 4 as target [ 660.101849][T10069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1004 (10069) [ 660.158369][T10083] overlayfs: conflicting options: nfs_export=on,index=off [ 660.318081][T10069] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 660.334211][T10069] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 660.382713][T10069] BTRFS info (device loop2): force clearing of disk cache [ 660.525604][T10069] BTRFS info (device loop2): enabling auto defrag [ 660.532177][T10069] BTRFS info (device loop2): max_inline at 0 [ 660.538444][T10069] BTRFS info (device loop2): enabling disk space caching [ 660.545568][T10069] BTRFS info (device loop2): disk space caching is enabled [ 661.334927][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 661.360416][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 661.438643][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 661.496461][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 661.526140][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 661.547567][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 661.591163][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 661.630841][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 661.657212][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 661.693240][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 661.735122][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 661.758670][T10096] loop4: detected capacity change from 0 to 4096 [ 661.766417][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 661.786931][T10069] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 661.800919][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 661.851398][T10069] BTRFS error (device loop2): open_ctree failed: -12 [ 661.923318][T10096] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 661.994834][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 662.031214][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 662.131681][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 662.179253][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 664.703781][T10119] input: syz1 as /devices/virtual/input/input33 [ 664.828437][T10125] Cannot find del_set index 4 as target [ 664.906679][T10125] overlayfs: conflicting options: nfs_export=on,index=off [ 665.155002][T10128] Cannot find del_set index 4 as target [ 665.210320][T10128] overlayfs: conflicting options: nfs_export=on,index=off [ 667.659424][T10152] Cannot find del_set index 4 as target [ 667.807907][T10155] Cannot find del_set index 4 as target [ 667.880367][T10156] overlayfs: conflicting options: nfs_export=on,index=off [ 668.523414][T10152] overlayfs: conflicting options: nfs_export=on,index=off [ 670.111323][T10159] input: syz1 as /devices/virtual/input/input34 [ 672.268096][T10190] loop2: detected capacity change from 0 to 512 [ 672.300495][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 672.391680][T10190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.427119][T10190] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.557619][T10196] Cannot find del_set index 4 as target [ 672.635223][T10197] overlayfs: conflicting options: nfs_export=on,index=off [ 673.263997][T10190] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz.2.1040: Directory hole found for htree leaf block 0 [ 673.536862][T10190] EXT4-fs (loop2): Remounting filesystem read-only [ 673.650025][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.670310][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 673.691568][ T12] Quota error (device loop2): write_blk: dquota write failed [ 673.715784][ T12] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 673.757575][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 673.789829][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 674.960847][T10211] loop2: detected capacity change from 0 to 1024 [ 675.084709][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 675.117137][T10211] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 675.126578][T10211] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 675.136135][T10211] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1046: Failed to acquire dquot type 0 [ 675.149538][T10211] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 675.165264][T10211] EXT4-fs (loop2): 1 truncate cleaned up [ 675.172602][T10211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.192343][T10211] fuse: Bad value for 'fd' [ 675.884769][T10217] input: syz1 as /devices/virtual/input/input35 [ 676.209805][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.488030][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 676.520791][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 676.600923][T10223] loop2: detected capacity change from 0 to 256 [ 676.631930][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 676.812793][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 676.869601][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 677.353681][T10239] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 677.376835][T10239] device-mapper: table: 248:0: multipath: invalid number of paths (-EINVAL) [ 677.385742][T10239] device-mapper: ioctl: error adding target to table [ 679.236306][T10257] device-mapper: table: 248:1: verity: Invalid number of feature args (-EINVAL) [ 679.255953][T10257] device-mapper: ioctl: error adding target to table [ 679.333932][T10261] loop2: detected capacity change from 0 to 128 [ 679.358108][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 679.620000][T10266] Cannot find del_set index 4 as target [ 679.693153][T10268] overlayfs: conflicting options: nfs_export=on,index=off [ 679.757734][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 680.572489][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 680.759806][T10276] loop4: detected capacity change from 0 to 256 [ 680.790508][T10167] udevd[10167]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 680.822627][T10276] FAT-fs (loop4): Directory bread(block 64) failed [ 680.859237][T10276] FAT-fs (loop4): Directory bread(block 65) failed [ 680.883157][T10276] FAT-fs (loop4): Directory bread(block 66) failed [ 680.929712][T10276] FAT-fs (loop4): Directory bread(block 67) failed [ 680.947733][T10276] FAT-fs (loop4): Directory bread(block 68) failed [ 680.958845][T10282] ip_tables: iptables: counters copy to user failed while replacing table [ 680.967955][T10276] FAT-fs (loop4): Directory bread(block 69) failed [ 681.016107][T10276] FAT-fs (loop4): Directory bread(block 70) failed [ 681.035529][T10284] Cannot find del_set index 4 as target [ 681.093872][T10276] FAT-fs (loop4): Directory bread(block 71) failed [ 681.102472][T10284] overlayfs: conflicting options: nfs_export=on,index=off [ 681.120159][T10276] FAT-fs (loop4): Directory bread(block 72) failed [ 681.148548][T10276] FAT-fs (loop4): Directory bread(block 73) failed [ 681.423774][T10289] udevd[10289]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 681.461474][T10289] udevd[10289]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 681.536058][ T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 681.763745][ T23] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.045677][T10297] input: syz1 as /devices/virtual/input/input36 [ 683.132241][ T23] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.261718][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 683.271523][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 683.284376][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.306825][ T23] usb 3-1: config 0 descriptor?? [ 683.757494][ T23] wacom 0003:056A:00BA.0002: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 683.823811][ T23] wacom 0003:056A:00BA.0002: hidraw0: USB HID ve0.fe Joystick [HID 056a:00ba] on usb-dummy_hcd.2-1/input0 [ 683.868442][ T23] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BA.0002/input/input37 [ 683.888494][T10300] udevd[10300]: open /dev/null failed: Not a directory [ 684.021786][ T23] usb 3-1: USB disconnect, device number 8 [ 684.890216][T10289] udevd[10289]: inotify_add_watch(7, /dev/nbd0, 10) failed: Not a directory [ 685.699119][T10322] loop2: detected capacity change from 0 to 1024 [ 685.744015][T10322] EXT4-fs: inline encryption not supported [ 685.751223][T10289] udevd[10289]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 685.846959][T10322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.032851][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.136323][T10289] udevd[10289]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 686.182203][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.188892][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.209949][T10289] udevd[10289]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 686.261028][T10313] loop4: detected capacity change from 0 to 32768 [ 686.308677][T10289] udevd[10289]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 686.323291][T10313] (syz.4.1085,10313,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 686.365719][T10313] (syz.4.1085,10313,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 686.433428][T10313] (syz.4.1085,10313,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 686.506144][T10313] JBD2: Ignoring recovery information on journal [ 686.708562][T10313] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 686.908648][T10338] (syz.4.1085,10338,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC. [ 686.965725][T10338] (syz.4.1085,10338,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c [ 686.995614][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 687.016257][T10338] (syz.4.1085,10338,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 687.035669][T10338] (syz.4.1085,10338,0):ocfs2_quota_read:201 ERROR: status = -5 [ 687.063762][T10338] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1 [ 687.088577][T10338] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 687.113423][T10338] (syz.4.1085,10338,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 688.072525][T10338] (syz.4.1085,10338,1):ocfs2_mknod:315 ERROR: status = -5 [ 688.100771][T10338] (syz.4.1085,10338,1):ocfs2_mknod:504 ERROR: status = -5 [ 688.144898][ T23] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 688.186940][T10338] (syz.4.1085,10338,1):ocfs2_mkdir:661 ERROR: status = -5 [ 688.194304][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.230582][ T23] usb 3-1: Product: syz [ 688.252941][ T23] usb 3-1: Manufacturer: syz [ 688.262628][ T23] usb 3-1: SerialNumber: syz [ 688.301366][ T23] usb 3-1: config 0 descriptor?? [ 688.518843][ T6049] ocfs2: Unmounting device (7,4) on (node local) [ 688.580016][ T5792] usb 3-1: USB disconnect, device number 9 [ 688.668519][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 688.759162][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 689.216769][T10352] loop4: detected capacity change from 0 to 1024 [ 689.238974][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 689.308807][T10352] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 689.349379][T10352] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 689.379271][T10352] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.1096: Failed to acquire dquot type 0 [ 689.420850][T10352] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 689.487634][T10352] EXT4-fs (loop4): 1 truncate cleaned up [ 689.522340][T10352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.614564][T10352] fuse: Bad value for 'fd' [ 689.726001][ T5776] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 689.932486][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.951197][ T5776] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 689.991485][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.024539][ T5776] usb 3-1: config 0 descriptor?? [ 690.469114][ T5776] hid (null): invalid report_size -292171435 [ 690.490461][ T5776] wacom 0003:056A:0318.0003: invalid report_size -292171435 [ 690.515946][ T5776] wacom 0003:056A:0318.0003: item 0 4 1 7 parsing failed [ 690.530916][ T5776] wacom 0003:056A:0318.0003: parse failed [ 690.546294][ T5776] wacom: probe of 0003:056A:0318.0003 failed with error -22 [ 690.677640][ T6049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.750199][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 690.779835][ T5776] usb 3-1: USB disconnect, device number 10 [ 690.810322][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 692.432156][T10370] loop4: detected capacity change from 0 to 32768 [ 692.450753][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 692.545333][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 692.560100][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 692.736782][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 692.783761][T10382] Cannot find del_set index 4 as target [ 692.879952][T10385] overlayfs: conflicting options: nfs_export=on,index=off [ 692.936356][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 692.950709][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 692.962755][T10387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1109'. [ 692.963469][ T8] usb 3-1: config 0 has no interface number 0 [ 692.995327][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 693.006798][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.006998][T10387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1109'. [ 693.014960][ T8] usb 3-1: Product: syz [ 693.036763][ T8] usb 3-1: Manufacturer: syz [ 693.041680][ T8] usb 3-1: SerialNumber: syz [ 693.064734][ T8] usb 3-1: config 0 descriptor?? [ 693.069972][T10387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1109'. [ 693.095278][ T8] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 693.107958][ T8] usb 3-1: selecting invalid altsetting 1 [ 693.114231][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 693.153191][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 693.171573][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 693.181961][ T8] usb 3-1: media controller created [ 693.255295][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.456120][T10391] fuse: Bad value for 'fd' [ 695.217111][T10378] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 695.248041][T10393] device-mapper: table: 248:2: crypt: Error allocating crypto tfm (-ENOENT) [ 695.266660][T10393] device-mapper: ioctl: error adding target to table [ 695.297256][ T8] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 695.336138][ T8] zl10353_read_register: readreg error (reg=127, ret==-32) [ 695.386440][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 695.517056][ T8] usb 3-1: USB disconnect, device number 11 [ 696.040472][T10406] input: syz1 as /devices/virtual/input/input40 [ 697.608124][T10413] loop2: detected capacity change from 0 to 2048 [ 697.636124][T10413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.639627][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 697.794598][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 697.848936][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 699.421603][T10428] input: syz1 as /devices/virtual/input/input41 [ 699.741443][T10436] capability: warning: `syz.4.1124' uses 32-bit capabilities (legacy support in use) [ 699.818432][T10436] program syz.4.1124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 700.906365][T10446] loop2: detected capacity change from 0 to 164 [ 700.924805][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 701.100056][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 701.144754][T10344] udevd[10344]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 701.444871][T10460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.881566][T10489] Cannot find del_set index 4 as target [ 702.963288][T10490] overlayfs: conflicting options: nfs_export=on,index=off [ 703.086345][ T5776] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 703.316249][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 703.387321][ T5776] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 703.487980][ T5776] usb 3-1: config 2 has no interface number 0 [ 703.559654][ T5776] usb 3-1: config 2 interface 31 has no altsetting 0 [ 703.677063][ T5776] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 703.715250][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.801967][ T5776] usb 3-1: Product: syz [ 703.817632][ T5776] usb 3-1: Manufacturer: syz [ 703.822380][ T5776] usb 3-1: SerialNumber: syz [ 703.909957][T10498] Cannot find del_set index 4 as target [ 703.978678][T10498] overlayfs: conflicting options: nfs_export=on,index=off [ 704.032810][T10499] Cannot find del_set index 4 as target [ 704.222708][T10500] overlayfs: conflicting options: nfs_export=on,index=off [ 704.562053][ T5776] ch9200: probe of 3-1:2.31 failed with error -22 [ 704.581194][ T5776] usb 3-1: USB disconnect, device number 12 [ 704.761606][T10510] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1155'. [ 705.039590][T10518] Cannot find del_set index 4 as target [ 705.103328][T10518] overlayfs: conflicting options: nfs_export=on,index=off [ 705.727001][T10531] Cannot find del_set index 4 as target [ 705.815680][T10532] overlayfs: conflicting options: nfs_export=on,index=off [ 706.688173][T10543] Cannot find del_set index 4 as target [ 706.762954][T10550] overlayfs: conflicting options: nfs_export=on,index=off [ 707.012701][T10560] fuse: Bad value for 'fd' [ 707.495556][T10566] fuse: Bad value for 'fd' [ 708.488690][T10572] bond0: entered promiscuous mode [ 708.508179][T10572] bond_slave_0: entered promiscuous mode [ 708.542718][T10572] batadv0: entered promiscuous mode [ 708.557393][T10572] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 708.572371][T10572] Cannot create hsr debugfs directory [ 708.587561][T10572] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 708.597021][T10572] bond0: left promiscuous mode [ 708.602148][T10572] bond_slave_0: left promiscuous mode [ 708.611566][T10572] batadv0: left promiscuous mode [ 708.770475][T10578] loop2: detected capacity change from 0 to 2048 [ 708.832719][T10579] udevd[10579]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 708.842731][T10578] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 708.855586][T10578] loop2: partition table partially beyond EOD, truncated [ 708.879347][T10579] udevd[10579]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 708.889084][T10578] loop2: p1 start 3405774849 is beyond EOD, truncated [ 708.916093][T10578] loop2: p2 start 53543428 is beyond EOD, truncated [ 708.924887][T10578] loop2: p3 start 4284289 is beyond EOD, truncated [ 708.950494][T10578] loop2: p5 start 3405774849 is beyond EOD, truncated [ 708.963298][T10579] udevd[10579]: inotify_add_watch(7, /dev/loop2p4, 10) failed: Not a directory [ 708.983415][T10578] loop2: p6 start 53543428 is beyond EOD, truncated [ 708.989119][T10564] loop4: detected capacity change from 0 to 32768 [ 709.063718][T10564] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 709.084915][T10589] udevd[10589]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 709.161094][T10564] XFS (loop4): Ending clean mount [ 709.275685][ T5792] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 709.396624][ T6049] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 709.474724][T10589] udevd[10589]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 709.486680][ T5792] usb 3-1: Using ep0 maxpacket: 32 [ 709.516339][ T5792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 709.631986][T10600] fuse: Bad value for 'fd' [ 709.716201][ T5792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024 [ 709.924188][ T5792] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 709.994124][T10589] udevd[10589]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 710.061973][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.326162][ T5792] usb 3-1: config 0 descriptor?? [ 710.381137][ T5792] hub 3-1:0.0: USB hub found [ 710.604460][ T5792] hub 3-1:0.0: 26 ports detected [ 710.616209][ T5792] hub 3-1:0.0: insufficient power available to use all downstream ports [ 710.709757][T10606] fuse: Bad value for 'fd' [ 710.917249][ T5792] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 711.047334][ T5792] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 711.068202][ T5792] usbhid 3-1:0.0: can't add hid device: -71 [ 711.075796][ T5792] usbhid: probe of 3-1:0.0 failed with error -71 [ 711.117364][ T5792] usb 3-1: USB disconnect, device number 13 [ 711.158815][T10609] Cannot find del_set index 4 as target [ 711.427146][T10610] overlayfs: conflicting options: nfs_export=on,index=off [ 711.788548][T10589] udevd[10589]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 712.239217][T10589] udevd[10589]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 712.693667][T10626] Cannot find del_set index 4 as target [ 712.813064][T10626] overlayfs: conflicting options: nfs_export=on,index=off [ 713.697213][T10649] udevd[10649]: open /dev/null failed: Not a directory [ 713.713701][T10648] pimreg: entered allmulticast mode [ 714.048900][T10589] udevd[10589]: inotify_add_watch(7, /dev/sda, 10) failed: Not a directory [ 714.149223][T10589] udevd[10589]: inotify_add_watch(7, /dev/sda1, 10) failed: Not a directory [ 714.842195][T10661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1209'. [ 715.149339][T10667] fuse: Bad value for 'fd' [ 715.162352][T10667] overlayfs: missing 'lowerdir' [ 715.179131][ T8] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 716.040046][ T8] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 716.067376][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.686056][ T8] usb 3-1: Product: syz [ 716.696921][ T8] usb 3-1: Manufacturer: syz [ 716.711605][ T8] usb 3-1: SerialNumber: syz [ 716.739140][ T8] usb 3-1: config 0 descriptor?? [ 716.762118][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 716.896504][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 716.994500][T10695] fuse: Bad value for 'fd' [ 717.085619][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 717.092882][ T23] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 717.114189][ T23] usb 5-1: config 179 has no interface number 0 [ 717.121059][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 717.132336][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 717.144048][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 717.155677][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 717.186394][ T23] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 717.210398][ T23] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 717.226965][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.243997][T10685] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 717.598404][ T8] gspca_stk1135: reg_w 0x5 err -71 [ 717.616262][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 717.648074][ T8] gspca_stk1135: Sensor write failed [ 717.658606][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 717.677844][ T8] gspca_stk1135: Sensor write failed [ 717.683441][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 717.701332][ T8] gspca_stk1135: Sensor read failed [ 717.712478][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 717.728927][ T8] gspca_stk1135: Sensor read failed [ 717.736088][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 717.753043][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 717.767315][ T5776] usb 5-1: USB disconnect, device number 6 [ 717.767313][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 717.779064][ T8] gspca_stk1135: Sensor read failed [ 717.783036][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 717.791621][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 717.825133][ T8] gspca_stk1135: Sensor read failed [ 717.839286][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 717.849514][ T8] gspca_stk1135: Sensor write failed [ 717.854881][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 717.865882][ T8] gspca_stk1135: Sensor write failed [ 717.871366][ T8] stk1135: probe of 3-1:0.0 failed with error -71 [ 717.894862][ T8] usb 3-1: USB disconnect, device number 14 [ 718.233017][T10707] Cannot find del_set index 4 as target [ 718.351388][T10707] overlayfs: conflicting options: nfs_export=on,index=off [ 719.726069][T10734] Cannot find del_set index 4 as target [ 719.830725][T10737] overlayfs: conflicting options: nfs_export=on,index=off [ 721.322099][T10754] input: syz1 as /devices/virtual/input/input42 [ 724.500227][T10784] input: syz1 as /devices/virtual/input/input43 [ 725.374279][T10787] bond2: entered promiscuous mode [ 725.605920][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 725.817362][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 725.835607][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 725.855752][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.098218][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 726.115709][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 726.123865][ T23] usb 5-1: Product: syz [ 726.135572][ T23] usb 5-1: Manufacturer: syz [ 726.140250][ T23] usb 5-1: SerialNumber: syz [ 726.366913][ T23] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 726.519418][ T57] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 726.571350][ T23] usb 5-1: USB disconnect, device number 7 [ 726.639907][ T23] usblp0: removed [ 727.530720][ T57] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 727.543452][ T57] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 727.553894][ T57] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 727.563420][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.579533][T10805] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 727.604970][ T57] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 727.935360][ T57] usb 3-1: USB disconnect, device number 15 [ 727.955181][T10829] kvm: kvm [10828]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xfee00d00 [ 729.738164][ T5776] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 729.945782][ T5776] usb 5-1: Using ep0 maxpacket: 32 [ 730.913318][ T5776] usb 5-1: unable to get BOS descriptor or descriptor too short [ 730.923250][ T5776] usb 5-1: config 1 interface 0 altsetting 58 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.945184][ T5776] usb 5-1: config 1 interface 0 altsetting 58 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.964915][ T5776] usb 5-1: config 1 interface 0 has no altsetting 0 [ 730.976761][ T5776] usb 5-1: New USB device found, idVendor=056e, idProduct=018c, bcdDevice= 0.00 [ 731.006264][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.016671][ T5776] usb 5-1: Product: syz [ 731.020883][ T5776] usb 5-1: Manufacturer: syz [ 731.037383][ T5776] usb 5-1: SerialNumber: syz [ 736.124109][ T5776] usbhid 5-1:1.0: can't add hid device: -32 [ 736.132006][ T5776] usbhid: probe of 5-1:1.0 failed with error -32 [ 747.619234][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.626324][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.057907][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.064356][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.498295][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.504647][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.456277][ T29] INFO: task syz-executor:5774 blocked for more than 143 seconds. [ 879.464164][ T29] Not tainted syzkaller #0 [ 879.471883][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 879.480784][ T29] task:syz-executor state:D stack:22000 pid:5774 ppid:5773 flags:0x00004002 [ 879.494280][ T29] Call Trace: [ 879.497688][ T29] [ 879.500659][ T29] __schedule+0x15ae/0x4700 [ 879.505253][ T29] ? mark_lock+0x94/0x320 [ 879.510020][ T29] ? asan.module_dtor+0x20/0x20 [ 879.514923][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 879.521006][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 879.527098][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 879.532368][ T29] schedule+0xbd/0x170 [ 879.537512][ T29] io_schedule+0x80/0xd0 [ 879.541807][ T29] bit_wait_io+0x11/0xd0 [ 879.546361][ T29] __wait_on_bit+0x9f/0x2c0 [ 879.550927][ T29] ? bit_wait+0xd0/0xd0 [ 879.555127][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 879.560712][ T29] ? bit_wait+0xd0/0xd0 [ 879.564917][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 879.569995][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 879.575114][ T29] ? bit_waitqueue+0x30/0x30 [ 879.582613][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 879.588077][ T29] do_get_write_access+0x5c9/0xe00 [ 879.593796][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 879.600024][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 879.606387][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 879.612567][ T29] ? __might_sleep+0xe0/0xe0 [ 879.617667][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 879.623245][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 879.629101][ T29] ext4_dirty_inode+0xcb/0x110 [ 879.634003][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 879.639937][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 879.645049][ T29] file_update_time+0x187/0x1a0 [ 879.650186][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 879.655326][ T29] ? do_wp_page+0x4ce/0x34d0 [ 879.660109][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 879.666682][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 879.671747][ T29] do_page_mkwrite+0x153/0x3f0 [ 879.676601][ T29] do_wp_page+0xd4d/0x34d0 [ 879.681052][ T29] ? folio_put+0xd0/0xd0 [ 879.685295][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 879.690921][ T29] ? __rwlock_init+0x150/0x150 [ 879.705560][ T29] handle_mm_fault+0x1300/0x4a40 [ 879.710566][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 879.716943][ T29] ? numa_migrate_prep+0x350/0x350 [ 879.722099][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 879.727524][ T29] do_user_addr_fault+0x736/0x12d0 [ 879.732715][ T29] exc_page_fault+0x64/0x100 [ 879.737524][ T29] ? clear_bhb_loop+0x40/0x90 [ 879.742276][ T29] asm_exc_page_fault+0x26/0x30 [ 879.747288][ T29] RIP: 0033:0x7f511e67dad6 [ 879.751820][ T29] RSP: 002b:00007ffd32e9bed0 EFLAGS: 00010202 [ 879.758069][ T29] RAX: 00007f511c454000 RBX: 00005555771cb1d0 RCX: 0000000000000001 [ 879.766147][ T29] RDX: 0000000000003efd RSI: 00005555771c9898 RDI: 0000000000000002 [ 879.774149][ T29] RBP: 00007ffd32e9c3d0 R08: 00005555771c98a0 R09: 0000000000000094 [ 879.782281][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd32e9c210 [ 879.790546][ T29] R13: 00007ffd32e9c000 R14: 585858582e7a7973 R15: 00007ffd32e9bf50 [ 879.799507][ T29] [ 879.802586][ T29] INFO: task syz.4.1280:10844 blocked for more than 143 seconds. [ 879.812670][ T29] Not tainted syzkaller #0 [ 879.817765][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 879.826568][ T29] task:syz.4.1280 state:D stack:27048 pid:10844 ppid:6049 flags:0x00004004 [ 879.835973][ T29] Call Trace: [ 879.839287][ T29] [ 879.842245][ T29] __schedule+0x15ae/0x4700 [ 879.846918][ T29] ? mark_lock+0x94/0x320 [ 879.851306][ T29] ? asan.module_dtor+0x20/0x20 [ 879.856477][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 879.861566][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 879.867590][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 879.872843][ T29] schedule+0xbd/0x170 [ 879.877127][ T29] io_schedule+0x80/0xd0 [ 879.881410][ T29] bit_wait_io+0x11/0xd0 [ 879.885784][ T29] __wait_on_bit+0x9f/0x2c0 [ 879.890349][ T29] ? bit_wait+0xd0/0xd0 [ 879.894561][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 879.900835][ T29] ? bit_wait+0xd0/0xd0 [ 879.905198][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 879.910066][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 879.915123][ T29] ? bit_waitqueue+0x30/0x30 [ 879.919968][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 879.925228][ T29] do_get_write_access+0x5c9/0xe00 [ 879.930443][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 879.936613][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 879.942814][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 879.949083][ T29] ? __might_sleep+0xe0/0xe0 [ 879.953733][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 879.959447][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 879.964971][ T29] ext4_dirty_inode+0xcb/0x110 [ 879.969865][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 879.975905][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 879.980976][ T29] file_update_time+0x187/0x1a0 [ 879.985973][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 879.991037][ T29] ? filemap_fault+0x103c/0x1540 [ 879.996241][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 880.002559][ T29] ? pte_alloc_one+0x3b6/0x540 [ 880.007466][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 880.013735][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.019071][ T29] do_page_mkwrite+0x153/0x3f0 [ 880.023958][ T29] handle_mm_fault+0x1a26/0x4a40 [ 880.029131][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 880.034112][ T29] ? numa_migrate_prep+0x350/0x350 [ 880.039403][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 880.044741][ T29] do_user_addr_fault+0x736/0x12d0 [ 880.050055][ T29] exc_page_fault+0x64/0x100 [ 880.054693][ T29] asm_exc_page_fault+0x26/0x30 [ 880.059690][ T29] RIP: 0033:0x7f9a83c73c09 [ 880.064185][ T29] RSP: 002b:00007ffdf45541f0 EFLAGS: 00010202 [ 880.070357][ T29] RAX: 0000001b2eb24000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 880.078500][ T29] RDX: 0000001b2eb23ffc RSI: 00000000003ffde8 RDI: 00007f9a84b55700 [ 880.086638][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f9a84012000 [ 880.094652][ T29] R10: 00007f9a84b55700 R11: 0000000000000000 R12: 0000000000000000 [ 880.103681][ T29] R13: 0000000000018b08 R14: ffffffff8132425e R15: 00007f9a84b55720 [ 880.112005][ T29] ? fpregs_activate+0x8e/0x1b0 [ 880.117091][ T29] [ 880.120148][ T29] INFO: task syz.2.1287:10864 blocked for more than 144 seconds. [ 880.128037][ T29] Not tainted syzkaller #0 [ 880.133049][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.141935][ T29] task:syz.2.1287 state:D stack:27560 pid:10864 ppid:5786 flags:0x00004004 [ 880.151275][ T29] Call Trace: [ 880.154558][ T29] [ 880.157680][ T29] __schedule+0x15ae/0x4700 [ 880.162237][ T29] ? mark_lock+0x94/0x320 [ 880.166661][ T29] ? asan.module_dtor+0x20/0x20 [ 880.171544][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.176816][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 880.182740][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 880.188167][ T29] schedule+0xbd/0x170 [ 880.192277][ T29] io_schedule+0x80/0xd0 [ 880.196693][ T29] bit_wait_io+0x11/0xd0 [ 880.201059][ T29] __wait_on_bit+0x9f/0x2c0 [ 880.206509][ T29] ? bit_wait+0xd0/0xd0 [ 880.210743][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 880.216401][ T29] ? bit_wait+0xd0/0xd0 [ 880.220605][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 880.225502][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 880.230583][ T29] ? bit_waitqueue+0x30/0x30 [ 880.235213][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 880.240597][ T29] do_get_write_access+0x5c9/0xe00 [ 880.245954][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 880.251993][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 880.258335][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 880.264521][ T29] ? __might_sleep+0xe0/0xe0 [ 880.269253][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 880.275012][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 880.280832][ T29] ext4_dirty_inode+0xcb/0x110 [ 880.285770][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 880.291604][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 880.296784][ T29] file_update_time+0x187/0x1a0 [ 880.301676][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 880.307731][ T29] ? filemap_fault+0x103c/0x1540 [ 880.312727][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 880.318674][ T29] ? pte_alloc_one+0x3b6/0x540 [ 880.323501][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 880.329841][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.334896][ T29] do_page_mkwrite+0x153/0x3f0 [ 880.339831][ T29] handle_mm_fault+0x1a26/0x4a40 [ 880.344833][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 880.349884][ T29] ? numa_migrate_prep+0x350/0x350 [ 880.355046][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 880.360739][ T29] do_user_addr_fault+0x736/0x12d0 [ 880.366080][ T29] exc_page_fault+0x64/0x100 [ 880.370732][ T29] ? clear_bhb_loop+0x40/0x90 [ 880.375636][ T29] asm_exc_page_fault+0x26/0x30 [ 880.380535][ T29] RIP: 0033:0x7efd3d06cea3 [ 880.384980][ T29] RSP: 002b:00007ffdef278c10 EFLAGS: 00010246 [ 880.391144][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2e464000 [ 880.399256][ T29] RDX: 0000001b2e424000 RSI: 0000000000600000 RDI: 00007efd3d3e7708 [ 880.407439][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.416415][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 880.424526][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdef278ea0 [ 880.432618][ T29] [ 880.435791][ T29] INFO: task syz.1.1288:10865 blocked for more than 144 seconds. [ 880.443531][ T29] Not tainted syzkaller #0 [ 880.448541][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.457359][ T29] task:syz.1.1288 state:D stack:26760 pid:10865 ppid:5788 flags:0x00004004 [ 880.466756][ T29] Call Trace: [ 880.470063][ T29] [ 880.473011][ T29] __schedule+0x15ae/0x4700 [ 880.477748][ T29] ? mark_lock+0x94/0x320 [ 880.482108][ T29] ? asan.module_dtor+0x20/0x20 [ 880.487077][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.492177][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 880.498287][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 880.503541][ T29] schedule+0xbd/0x170 [ 880.507837][ T29] io_schedule+0x80/0xd0 [ 880.512949][ T29] bit_wait_io+0x11/0xd0 [ 880.517386][ T29] __wait_on_bit+0x9f/0x2c0 [ 880.521925][ T29] ? bit_wait+0xd0/0xd0 [ 880.526203][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 880.531707][ T29] ? bit_wait+0xd0/0xd0 [ 880.536033][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 880.540823][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 880.545943][ T29] ? bit_waitqueue+0x30/0x30 [ 880.550567][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 880.556037][ T29] do_get_write_access+0x5c9/0xe00 [ 880.561220][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 880.567293][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 880.573467][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 880.579842][ T29] ? __might_sleep+0xe0/0xe0 [ 880.584479][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 880.590282][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 880.595981][ T29] ext4_dirty_inode+0xcb/0x110 [ 880.600810][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 880.606720][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 880.611792][ T29] file_update_time+0x187/0x1a0 [ 880.617582][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 880.622651][ T29] ? filemap_fault+0x103c/0x1540 [ 880.627734][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 880.633532][ T29] ? pte_alloc_one+0x3b6/0x540 [ 880.638497][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 880.644771][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.649904][ T29] do_page_mkwrite+0x153/0x3f0 [ 880.654723][ T29] handle_mm_fault+0x1a26/0x4a40 [ 880.660121][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 880.665166][ T29] ? numa_migrate_prep+0x350/0x350 [ 880.670479][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 880.675974][ T29] do_user_addr_fault+0x736/0x12d0 [ 880.681239][ T29] exc_page_fault+0x64/0x100 [ 880.686051][ T29] ? clear_bhb_loop+0x40/0x90 [ 880.690761][ T29] asm_exc_page_fault+0x26/0x30 [ 880.695821][ T29] RIP: 0033:0x7f5517c6cea3 [ 880.700323][ T29] RSP: 002b:00007fffb4441680 EFLAGS: 00010246 [ 880.706469][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2e364000 [ 880.714464][ T29] RDX: 0000001b2e324000 RSI: 0000000000400000 RDI: 00007f5517fe7708 [ 880.723460][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.731511][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 880.740535][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffb4441910 [ 880.754880][ T29] [ 880.758349][ T29] INFO: task syz.0.1286:10866 blocked for more than 144 seconds. [ 880.766768][ T29] Not tainted syzkaller #0 [ 880.771743][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.780846][ T29] task:syz.0.1286 state:D stack:27416 pid:10866 ppid:5789 flags:0x00004004 [ 880.790692][ T29] Call Trace: [ 880.794004][ T29] [ 880.797378][ T29] __schedule+0x15ae/0x4700 [ 880.801913][ T29] ? mark_lock+0x94/0x320 [ 880.806816][ T29] ? asan.module_dtor+0x20/0x20 [ 880.811714][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.817915][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 880.824453][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 880.830354][ T29] schedule+0xbd/0x170 [ 880.834442][ T29] io_schedule+0x80/0xd0 [ 880.839171][ T29] bit_wait_io+0x11/0xd0 [ 880.843454][ T29] __wait_on_bit+0x9f/0x2c0 [ 880.848546][ T29] ? bit_wait+0xd0/0xd0 [ 880.852770][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 880.858718][ T29] ? bit_wait+0xd0/0xd0 [ 880.862962][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 880.868303][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 880.873379][ T29] ? bit_waitqueue+0x30/0x30 [ 880.878456][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 880.883669][ T29] do_get_write_access+0x5c9/0xe00 [ 880.889365][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 880.896455][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 880.902737][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 880.909610][ T29] ? __might_sleep+0xe0/0xe0 [ 880.914258][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 880.920218][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 880.927563][ T29] ext4_dirty_inode+0xcb/0x110 [ 880.932389][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 880.938631][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 880.943710][ T29] file_update_time+0x187/0x1a0 [ 880.949182][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 880.954272][ T29] ? filemap_fault+0x103c/0x1540 [ 880.959686][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 880.965878][ T29] ? pte_alloc_one+0x3b6/0x540 [ 880.970763][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 880.977532][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.982569][ T29] do_page_mkwrite+0x153/0x3f0 [ 880.987907][ T29] handle_mm_fault+0x1a26/0x4a40 [ 880.992908][ T29] ? handle_mm_fault+0xe6/0x4a40 [ 880.998433][ T29] ? numa_migrate_prep+0x350/0x350 [ 881.003601][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 881.009445][ T29] do_user_addr_fault+0x736/0x12d0 [ 881.014611][ T29] exc_page_fault+0x64/0x100 [ 881.019627][ T29] ? clear_bhb_loop+0x40/0x90 [ 881.025299][ T29] asm_exc_page_fault+0x26/0x30 [ 881.030720][ T29] RIP: 0033:0x7f1483a6cea3 [ 881.035247][ T29] RSP: 002b:00007fff6f511290 EFLAGS: 00010246 [ 881.041949][ T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2e264000 [ 881.049997][ T29] RDX: 0000001b2e224000 RSI: 0000000000400000 RDI: 00007f1483de7708 [ 881.058044][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.066642][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 881.074653][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff6f511520 [ 881.083130][ T29] [ 881.086660][ T29] [ 881.086660][ T29] Showing all locks held in the system: [ 881.094431][ T29] 1 lock held by khungtaskd/29: [ 881.099754][ T29] #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 881.110097][ T29] 2 locks held by getty/5545: [ 881.114785][ T29] #0: ffff8880332920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 881.125050][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 881.136310][ T29] 3 locks held by syz-executor/5774: [ 881.141635][ T29] #0: ffff88802f02ea20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 881.152304][ T29] #1: ffff88814d520510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 881.162428][ T29] #2: ffff88814d524990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 881.172606][ T29] 3 locks held by syz.4.1280/10844: [ 881.178239][ T29] #0: ffff888018c69e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 881.188662][ T29] #1: ffff88814d520510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 881.198974][ T29] #2: ffff88814d524990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 881.209170][ T29] 3 locks held by syz.2.1287/10864: [ 881.214397][ T29] #0: ffff888018c694a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 881.224785][ T29] #1: ffff88814d520510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 881.235667][ T29] #2: ffff88814d524990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 881.245871][ T29] 3 locks held by syz.1.1288/10865: [ 881.251094][ T29] #0: ffff888018c6baa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 881.261533][ T29] #1: ffff88814d520510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 881.271743][ T29] #2: ffff88814d524990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 881.281938][ T29] 3 locks held by syz.0.1286/10866: [ 881.287713][ T29] #0: ffff888018c68b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 881.298098][ T29] #1: ffff88814d520510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 881.308436][ T29] #2: ffff88814d524990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 881.318551][ T29] [ 881.320938][ T29] ============================================= [ 881.320938][ T29] [ 881.329968][ T29] NMI backtrace for cpu 0 [ 881.334415][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 881.341616][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 881.351718][ T29] Call Trace: [ 881.355008][ T29] [ 881.357972][ T29] dump_stack_lvl+0x18c/0x250 [ 881.362677][ T29] ? __wake_up_klogd+0xd9/0x100 [ 881.367560][ T29] ? show_regs_print_info+0x20/0x20 [ 881.372811][ T29] ? load_image+0x420/0x420 [ 881.377324][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 881.382305][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 881.388478][ T29] ? load_image+0x420/0x420 [ 881.393002][ T29] ? wq_watchdog_touch+0xef/0x170 [ 881.398044][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 881.404213][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 881.410221][ T29] watchdog+0xf59/0xfa0 [ 881.414409][ T29] ? watchdog+0x1e1/0xfa0 [ 881.418751][ T29] kthread+0x2fa/0x390 [ 881.422831][ T29] ? hungtask_pm_notify+0x50/0x50 [ 881.427884][ T29] ? kthread_blkcg+0xd0/0xd0 [ 881.432526][ T29] ret_from_fork+0x48/0x80 [ 881.436980][ T29] ? kthread_blkcg+0xd0/0xd0 [ 881.441587][ T29] ret_from_fork_asm+0x11/0x20 [ 881.446383][ T29] [ 881.450969][ T29] Sending NMI from CPU 0 to CPUs 1: [ 881.457057][ C1] NMI backtrace for cpu 1 [ 881.457070][ C1] CPU: 1 PID: 50 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 881.457086][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 881.457095][ C1] Workqueue: bat_events batadv_nc_worker [ 881.457192][ C1] RIP: 0010:lock_release+0x56d/0x8c0 [ 881.457213][ C1] Code: ff ff ff 65 0f c1 05 ea 28 99 7e 83 f8 01 75 7f 43 c6 44 2f 04 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 [ 881.457227][ C1] RSP: 0018:ffffc90000baf9a0 EFLAGS: 00000046 [ 881.457240][ C1] RAX: 0000000000000001 RBX: 17423a1e2a29eb40 RCX: fe81f2ed594e8000 [ 881.457251][ C1] RDX: 0000000000000002 RSI: ffffffff8aeae2c0 RDI: ffffffff8b3c50e0 [ 881.457262][ C1] RBP: ffffc90000bafaa8 R08: ffffffff8f8dd86f R09: 1ffffffff1f1bb0d [ 881.457273][ C1] R10: dffffc0000000000 R11: fffffbfff1f1bb0e R12: ffff88801ca92938 [ 881.457284][ C1] R13: dffffc0000000000 R14: ffff88801ca928d8 R15: 1ffff92000175f40 [ 881.457296][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 881.457310][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.457321][ C1] CR2: 0000563614f87660 CR3: 000000000df32000 CR4: 00000000003506e0 [ 881.457347][ C1] Call Trace: [ 881.457352][ C1] [ 881.457362][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 881.457384][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 881.457402][ C1] ? __rwlock_init+0x150/0x150 [ 881.457419][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 881.457436][ C1] ? _local_bh_enable+0xa0/0xa0 [ 881.457454][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 881.457473][ C1] _raw_spin_unlock_bh+0x1b/0x40 [ 881.457491][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 881.457511][ C1] batadv_nc_purge_paths+0x300/0x3a0 [ 881.457531][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 881.457552][ C1] batadv_nc_worker+0x363/0x600 [ 881.457572][ C1] ? process_scheduled_works+0x975/0x1600 [ 881.457593][ C1] process_scheduled_works+0xa60/0x1600 [ 881.457625][ C1] ? worker_attach_to_pool+0x370/0x370 [ 881.457647][ C1] ? assign_work+0x3cc/0x5d0 [ 881.457669][ C1] worker_thread+0xa5e/0xfe0 [ 881.457700][ C1] kthread+0x2fa/0x390 [ 881.457715][ C1] ? pr_cont_work+0x550/0x550 [ 881.457733][ C1] ? kthread_blkcg+0xd0/0xd0 [ 881.457749][ C1] ret_from_fork+0x48/0x80 [ 881.457767][ C1] ? kthread_blkcg+0xd0/0xd0 [ 881.457783][ C1] ret_from_fork_asm+0x11/0x20 [ 881.457809][ C1] [ 881.460788][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 881.709295][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 881.716508][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 881.726569][ T29] Call Trace: [ 881.729856][ T29] [ 881.732909][ T29] dump_stack_lvl+0x18c/0x250 [ 881.737611][ T29] ? show_regs_print_info+0x20/0x20 [ 881.742925][ T29] ? load_image+0x420/0x420 [ 881.747470][ T29] panic+0x2ca/0x720 [ 881.751581][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 881.756099][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 881.761665][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 881.767054][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 881.773249][ T29] watchdog+0xf98/0xfa0 [ 881.777421][ T29] ? watchdog+0x1e1/0xfa0 [ 881.781769][ T29] kthread+0x2fa/0x390 [ 881.785849][ T29] ? hungtask_pm_notify+0x50/0x50 [ 881.790895][ T29] ? kthread_blkcg+0xd0/0xd0 [ 881.795579][ T29] ret_from_fork+0x48/0x80 [ 881.800005][ T29] ? kthread_blkcg+0xd0/0xd0 [ 881.804636][ T29] ret_from_fork_asm+0x11/0x20 [ 881.809423][ T29] [ 881.812567][ T29] Kernel Offset: disabled [ 881.816988][ T29] Rebooting in 86400 seconds..