last executing test programs: 3m24.812103655s ago: executing program 4 (id=1479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r4 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x12020) 3m23.639246121s ago: executing program 4 (id=1483): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7, 0x5, {}, {0xee00}, 0x2, 0x36}) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001300290a00000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000014"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_TABLE={0x8, 0xf, 0x1ff}]}, 0x24}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[], 0x97, 0x2a9, &(0x7f0000000500)="$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") creat(0x0, 0xecf86c37d53049cc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r9, &(0x7f0000000180), 0x0}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x88, 0x3, @private=0xa010102, @multicast1}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4e24, @loopback}}) 3m22.069923408s ago: executing program 4 (id=1489): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000280)=0xc7, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @mcast2, 0x8, 0x9, 0x3, 0x0, 0x38, 0x8740005e}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 3m20.478559699s ago: executing program 4 (id=1495): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3m18.992234921s ago: executing program 4 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 3m18.53034222s ago: executing program 4 (id=1501): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYBLOB="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"], 0x0, 0x4f5, &(0x7f00000005c0)="$eJzs3F1oJVcdAPD/mb03e5Mu7e3XdrUFgyIbW7sk2bS7GpGmXWOFoGCagj4oaT7W0HwsSSpN8aMgiqAg+KAFn/vQIrKKoPTJJx98VhH6Ij74KEEKPogoM5n7kextE3tzk83m94Pknjvzn7kzw/2fOefcmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOLpz0wMj6Tj3goA4Ch9fvqLw6PO/wBwqjyn/w8AAKdFiiw+ESnG/7adLhbvd9SmllZfennm2mTnxfpTseSZIj7/q42MXh574skrVxuv7738YftAfGH6uYnBZ9ZWbqwvbGwszA/OrC7Nrc0vHHgN3S6/16PFARhcefGl+cXFjcHRS5d3zX65/vezd52vj18de2KuETtzbXJyui2mUn3fn34LPTw66YssfhUpXvvkL9JQRGTRfS7sU3f0Wn9U8vwrdmLm2mSxI8tLs6ub+czUSITK7pzoa+TIEeRiV4YiHs+3tU9G071qZDERKT4U2+ljEXGmkQePFT8M7r+CyhFsZAf5dl6JiGfjBOQs3KbORha/jRQr99Ti0eNLZ+AYVCKL70eKi5/eTo8V7YH8fJo3m6eeH/zc6uJaW2xK5Rn1pPcPjpK2CbexWmQxVLT4t9PHj3tjgCPVH1l8OVL8+U9fL8aVohiXvmf86lefGm4fYXpon/XksZciYvSAffJqY6wxXzY73H0CAAAAAAAAAACAO10tZfHzSPHNh2vF+2ebF8j/7r+FY94+oIdSFv+JFM//cru4Nb79uRRn2p7v0XTS7/3p7fb3155Zu7G1vnT9a5sd5w/UJl7Y2Fyfnes8O/qj1rouurDfcwygC9WUxYcjxcNTN1vfu3rKy+WtwK0v2uufan03a2nP3KLeuHvneTaNewi+MvnR9nLHr+z/cX9cvfxc9ygDQHdSyuIPkeKzL1wozqspBuKWNmgZdzZSvPOPR8q4rC8vNE7T9eJ/bXFpeWE4j/11pOj/XiM2itiBMvb+VuxIHvt0pPjxD3bH3lXGPtCKHc1jvxMpfv9a59gHW7GX89if5u2a6cFG7EBeeLCMPd+KvTS3tjzfswMMt7G8/f9GpFi+ezA1crnMl7KZfaYZ+/o3Wu39V/eu6F3a/N22/+tt014t66G8vlh860JR9xT1VaVzffWXSPGbfz9Sxu3UFX3l/HuL/6366s1I8cbbu2MbDwq5rxU7cuADCydAnv/nIsUft242c6PM/zID2/r/bfn/wbJ2aI0Z9Cb/722bVi8/9+zh7Dqcehtbr7w4u7y8sK6goKDQLBx3zQT0Wt7+fydS/Gz57WZ/t2z/n9t51+r//+tbrfb/+N4V9aj9f1/btPGyN1KtRNQ2V25UH4qobWy98vjSyuz1hesLq2PDI0+OjoyNjV6p9jU6961S18cK7jR5/n83Uqx96c3m+Pzu/n/n8b+BvSvqUf7f3zZtYFd/petdh1Mvz/+pSPGTf95s/o72XuN/jfG+oY/svDYfpt2j/H+gbVq9/Nxzh7PrAAAAAAAAAAAAcGJVUxY/ihR//WElNZ6NcZDrf295YEaPrv873zZt/ojuV+z6oAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K6yyGItUrz11Hb6dj7hQsTF9lfgjvW/AAAA//8Qgywy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000005100000005"], 0x7000000) 3m17.077998068s ago: executing program 32 (id=1501): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYBLOB="781d0e96d55104451093b10d4ea4dc074199402304cf72ca0a02c1d35c88102f354ea078048157beea7e29afd81c86de0ff859f530732cee6b194825487b4eb5b6ea7f8a8538ff1ddbee684ce19a7f1d56bfde258ce1a64b9827c868c133e2ffd44141348b7e0b56c6e601875153a20b24a90bbc4784d8e9ab2e74b656060d8958a38fca97a003c9bec1e0cd11235758f5078d941b659cf7341c94d7d7e88db5de52a1d1c560cd6af0985899c9f6cd551c5c2ab2a9e0068207bdd867ba2c7f0007b36e518a717236e0666722c1dfdfe73ce829f580ce9a1315191f092fb21a1a4df92799b3f28d91bab028c6175b00b6013e91d64bd638bbcb9019222163a0afa86411ddf9580aca30cc37b00a806707ecd20deeda5a400c8638d802ff9c0c1a3ae8c7d2863b59fce6862726c90198bba04a8b15f14d0a2060165811556898d379ee748a1f55c90903ee36acfe6d5cba3cf02cee5f4e8b7ece22a02cfe6c3504d17b4f6ba71c1b4ca9e16037b6cec1c8aae9c66cefcc80f2a8f71d5df7ac413247ef5affdff641e834a3954824abc8cd6b6611474e4f8d657da30ea9a5292de197a2743cf421dbb628da48702c1b8f6b570c61165d0c5661ea14b2effa0f170f0b6ddb937f39f21409450b028c44310fbc8252bb3ae10441eef3d5388e87b5cdc6464275961746153908437c9d8ec05194cee0d6939c4367444913ec2656e0e7973ce9552f58dcf5f0e1927e980f918b0e2781f64f3ef5ee1d419974c139db919d8c9bdaa80057200a8c3b3622d8a86da583a2818d177f4ae66b9759b421e6ad0b22212e9cd12aae5e2aeb2f6798c9b0b0497f38354d220c22cdec6061f259d4d84a86023f63949c11802feed1db73779d119e533b19e6254f6bb5bdbfc7fef7164a61caed478a6a70d1a7f57a7e8b512aa1e58a730ce4ad017cc9ddc473617eb7ebf0967f4d6d6953e6efef44244684a175c8011e9b6d74ddf04209a40f1b64ac9841ed9568621d47eb9b03429c1b3bb9162a231858239e427efb62099ace89b34c4de95c3eaac302cfc0e65be5e0aad553db5edb320e7a32cedf1b642b449ea3359fa637610633009de2dde3f3abfd43c2ee923536dbe4b2c8494caa180f993f7d790b68c275d55485645a54a021177ac6811ca843146c3929966ae83df2f566cd1d56741aa839fa0e31afb4b4d8e8ec9df86c04d48df63e774d0c9207477214c22678903f1752d95a7ef6e0c8fa46a7e538615c7f6f1bd4e9822f8addf5ae5f64e4258f9416cdac76917fbf58829e41a25f5318f767eb80c8e3fc5e1351053f9f2b05df3c16e89b3729c84b212e9d6fe4d94fe50bcb3c8bf413ee5c7a2918fff0e16f1d39e716563e27f9d865d7c54e730430ba155a0b15644993b084cf632b13160a1959405742d8c6200dd16739efc5939b39eaa328671179660f89c7774d4a90d07fb7e836547a3f0c36f4969bab054cfdb28ec2f148b28cdcedfa03b76b1e556ecc274ae429becbd591db27cc1c9238b4ed6c0364c92abdf2e1096ee75ebc3b1833ef594d757da534f8a98f87c446a4b0f3b782ed820efa5805959b7024d6f228c5e1c97dd8d0f5e61b2493569a96b976b7862e359472ce3f30bc5a97d342c0e161b4a07aa8101fa507334a9b3102e6713c0edefd3943d045a1a5058dc062d0fc2543a6c5156bf84b9428c3024ebfd86152024938b588988abaa5f606e8f5e619b379a7ddbcbbe2e4c9d0f1c6299e441c89045e37820cfbe7c0d65dee0faf3df277457fcbddbc5ac3113bd5f904119e8916fe0641d40bb68b936e501f24e05b12e9a753f70e5601bd8b560d68ed154bae6bec2bc6279784e31b51584334ecf2e16615ac09dde4b6cf790836bcce95416dc6f0c68d622520d4705f65db186a7b95f2973006338a1019d7c2b4443b391a164b426a8b1b55990a5f3d4732bc64eddb11faeb828a65ecde4bb192de321268275ea0c67b45211d9ffe2bbed3d313a221382c5b82baf8cd22e051d4d45d555f69247521daa33e7a07e2fa28b0694f585a8ce447d90c6bf284fa798df22bb9cfd5d0b239e43d63788b52dc9bd8c4743768a16a552292337f7852b4eb9dec2156439923957cc63fea6cc1bf7e512b0ec3d3b0a0d20aae138bbb3f42749f916f0356eade300094c0b8b9d66341159930167ec62ce6a279fed301acc10cbf03fe2f411eb5e3dfeb21455d37b46e0d58ce8568e8530382054e915c49f316a6b6391dadf6c120c16d26776653486c62cfe49f5bc70748086629452ea6d79954a0ab05b57f95c09818acf120a39f39018ecb099acd3479bf065a61cffef6d9f33708619f6ad4eb33351642d9d84e68fdfd8881354fa985f03a10f7ae7b26f7da650cc78f8e3c9025ad78ebae2c4f383290996d93597dc39758487273b07182ecf70d004b120fd1cae806c3f81a95e9b2c81de195b79a2f12b5334994b0e632356f7debeeeecf9fea956173af35ac4bbfe0ad02b8f83a9d3d8ce6e4f2a00c5bb0541180ffe18f9d0b4e7e592c6045d03501626b299990a4466c8c0b4de19a658fd4719168800f659b2a11888ea7a3c8f4b5ea17e2bbc692a09acd060e2d297b98ab9cea0f6d478a858e01365132a6e22656f42c94f2768cfd7dc8ea89a1294270736e6eb659ce481c131cb4d89df6f7be34fcbeef5cd38ccfee19697c76b0072617d97a7586f9faa0568a3e7c2156390de02ae9c7b516ddc817ebe5bbe20f0a36933ff647251536e7155be5670ee0011044e1a2ba27bf43c3afbd91c270e194736cabb0b8d5c309dfecf153d2b0f8a43e50e4e91145fd925c30d4e50ea9ac741cc531453f367d167534d2d347bf6eb90649119f231b4a525ae3628454010981a9143f17272e1915407b07eec6edc8bdc4ffad6c0de42969a976410354a6ee37fbeed1383cdbd375e1a9e4185e2a7c732a040bda32d2d532f8cea98adb439240b4150c2db105504359df843ac7cdac7aa7a66e709baf4052389919bc7694a74573965a4a1672227620be3681c1ece33edca08aec34e33f70c21be71e619aa9b6fabc643ddda43fb278f13376a131e4be60f49d4262c88a7c00efe7e7876f38fdf047fdd7e088d5d74bef8f5139044e71da1b329abe4e6d1e9d105a898b3fa735a2bc4a96214fe7575b70a0de3562aae2223f76457eec4e820f3a4ec151c88aecdb47b28453e53131c77372adbd5d12aa71a4466695e8bb6d50862b814e6db7481f1310a02d60ab6fffd2ce11b1a4393c114282d270a5f1b06d89ee7a9f386fb5b5d2fff97e1cb6f451b039391dea8fa10019d066efd60be52a14f279c8445cb2e2a8effac90172c0c8594259bf888f52216117c425eba28ed040c376dad4295cceb9276e512b4d4ca0b7f3461dbb65dc47d60283e4a71769e2adca84625b5272124e32f26d4448db9bd4a475c605629d6be5d446f9a337e04c46f742a4caad7d69fddfacb0aa53100a0125391a2d525e54e47391c95614d35513d918f36247bfe54889e9f48c978a31b9c53326823665699e7a39f2f5dcb64574da1d55e56ad0fafcbaebcc78e7efd99a78cae2a80298cc063179396ac3fa49b2582e8fcd67483db19b8d8bab1fa283ab6b92902e6fc78d00b5cbc7eca36f1fbd6491829238ada8bdf33aa833aed19d5fdcc12b98dcae069abc113f7bae1224259548e3ca5eab66315e109c6ced801afde73a3836fe63fbf34713151454cca32ade965ac909386660793ff33f00e309d72e8a64a391ee5c7c2534527a94f7c2e2ba47ec0cf361cb180e3e5fb71cf812c7c529aedfcf7c761e2865c5437740a9445f7fb8584617b27713854c49e691bfd180bf1050455423d86d7b5cf0fc8ca924bd9bcdc272c5f4ae2f8a04eccd35928b949a05d6a1245f6f35becc34fd5aa518d827cecf383122cedc58de32a755a879eb7c4f39a3cac5983f1cb356f4e7dfc082ff3a1aa5f3dfc9de12010f410ee9d8049233de3f4264704b59dcf9c9bcb3dd35f7d238631283d797d71aaf43ffdfc09b99f32c755bed1e027127f7b6be0beb202d89b684b8f6b81e10f770ad768596d353a5f574d050ac97f3f858da3d07457f36a8ef7f1d760c947473c083539f713b8f3a93051b7be833e9e4e5f06d6df852cdc2d35947c05b75a451096fe5a7fc1cd8327cadf37a9b7ffd156a9d460d05408d6d0b91b1246619f26738033f9aec9d1f0847ab6779ca3c3970efd7b6d182485b9339ac140d4b46bfa6a93c9c439d6bda57339eb99cf63213311b55b0e25c10f7f65748b4729262a202150f982e498e9e2c316ca416f614d5fb1612f49b9fbb8f46fdb60dc8a545efc60666ffe905fa9d2d8c79f9d8535ba86816e29621c3f1f7f57a9d248bed5a40e57383fb7679115b7a089ecdb0fe118accf7668974badef07f5dfd6f57a709cfe90fe68f5983b603d58c4e51bf2731587aba6af629dec562210d3eb281eb3a239e18fa5de972d80f6417b60c1e2cd75b601730a3110302bd217341add86e23db1d93b68ecd49b97e669f825fe17d6db420001c930a3d45ffa290281425d8ab1c6a02ebb744f53f79c46c6f8da56b792e06bb04a6697882f7e8127f11c8f2092f7871d3e18eff0cacff25270990337f993a3aa0ff7efee557e74a946ad2aa3591cb4d146877a785bed6c5d4bfd39bf728e57a55b9dd8ec946f772481f1b297b611fe2a7d2c51b5ecbe08c51dae53621a1e0c3931024a6a1c75fa0526ea707dd6094364b7422b65ef6ce979efd94c0ab2674e2cd29134fa0df2bb239c09b8d56efbd744c0e025f362d2a2328c30896c4bd26def7c650db83f11e7b7f2e1b9d3a3367bbc954ce2d71f841604fa322cd45171d67d4ae3b1e6aaa47c8293ae4b503f10ba4160f63ac9df6ea96ce2ecbdbdf4bd3d351c17aee774334ea587817ff8d6424cd76a12ade91eaf5176179c1bdcca4744540f2fdc32be769438ae69939e0ecef8a0ea318a507bd8bee2dfbfafcdced1469de40dae0cdcf80586ce86405d7d1a3a92048fc9bd617d4943e0e0652a84bfb6994216db835f3ca6877f926ec8d5e60e9b9efa57aadd18ea2dac2e95762ec50f69978540e77f1058da05f262cf6c74b1d5fd6ad8f81f8fafe5aee65d91b0f7ceae62ed132ad554e164b118ff763ae3b837bfc73a2eecd1098564fb6b0625206cf68e7adbeef7d2ae130f1684d868bc48ddde0cb4a78b07e977458817645a34a4a52eb18c0256773de85db907d0e2a8ba1624b274c7ae4b2e595da38f640d0e9712d8aca419d1c53e70625d5d5aac95aba63aa4531f14dd0823b17a04957081f8fc39f80ef41b2f834c9e364fbe06abd6fa32a65d6d290ff1f50a812709541041f2d20a71a622830cd9c06691ed8f981caf7ac8a935f336e02b74d65d1b9f7d1bf3d2b86419a78a7fca864e6b26e124ee621d816ac31f95f39f61c659f1a941a648f2368287296e40db4a2b5f387db5d24d8277861ba76172c963193a6c63002eb1cded492e768438f682c999b6be75c90525ed557f0841b23d61eac861f4928913c588a3ce8e54059b7727932128134ada12e030b8acf097cbc162789ee664e579d01876c12d851d1061c5f5fd7dad996bf74a176b7f3fe11db1a9c3ca3820d59ca769ac82ca597eca531678ee6fd44358030ea006fc83f7caa0ebc9992d0a75280b386c92210c850b056b4da7dbfc4e9e391cdf2e7821247d7ecb1a913fed2911ddf48cf801a582859355e1662a0e51a2f90cc44104dbefefb68e1496aabcdd28c719a01d7931ec67acf4df336dec447616709172c908f09756921"], 0x0, 0x4f5, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000005100000005"], 0x7000000) 17.744214178s ago: executing program 0 (id=2122): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/135) 14.070253468s ago: executing program 0 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r0}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 13.740024048s ago: executing program 0 (id=2135): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001480)="e2", 0x1}, {0x0}], 0x2}}], 0x1, 0x14) 13.65005707s ago: executing program 0 (id=2136): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}, {&(0x7f0000000000)="9624", 0x2}], 0x2) 9.732682632s ago: executing program 0 (id=2148): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 9.036999291s ago: executing program 3 (id=2152): syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 9.035487026s ago: executing program 0 (id=2153): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="766572626f73652c6a6f75726e616c5f7472616e736163735d60b65f6e616d65732c6e6f7265636f766572792c636f6d7072657373696f6e3d6c7a342c657261737572655f636f64652c636f6de512657373696f6e3d7a7374642c696e6c696e655f646174612c7265636f6e7374727563745f616c6c6f632c636f6d7072657373696f6e3d677a69702c6e6f636f772c72772c736d61636b5e5b402c6673636f6e746578743d756e636f6e6669fe0a645f752c61707072616973652c6f626a5f726f6c653d2c6f626a5f757365723d2c00cceb99cf8efdbbc6ae4181a26bbff460c1c8ed816462d332da99e1c9d501b2f84418795039cb396aaead1ee4cfe08fdb8b98cafc2fc66729648fd8244e38a8ad980cdef833014e304f756960f2584bf7275e4b37d13a426eab66df74902a56a667b4922816529ad484fab6ab007b93cdced73d030400000000000000"], 0xff, 0x5978, &(0x7f0000002080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x68000000) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r1) 6.634744582s ago: executing program 1 (id=2162): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00140660"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 5.922441658s ago: executing program 1 (id=2165): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x2}) syz_open_dev$loop(0x0, 0x207, 0x161a81) r1 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x1) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 3.78407547s ago: executing program 2 (id=2174): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$inet6(0xa, 0x2, 0x0) symlink(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rmdir(0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f000019b000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="f20f519b06000f20d86635080000000f22d866b8000000000f23c80f21f866350400e0000f23f826660feed6b818018ec0f32ef466b9d909000066b8c9231fff66bab8e0386d0f30660fd2c766b90f0400000f3266b04c", 0x57}], 0x1, 0x10, &(0x7f0000000040), 0x0) fanotify_mark(r5, 0x400, 0x48000019, r0, &(0x7f0000000280)='./file0\x00') preadv(r0, &(0x7f0000000f80)=[{&(0x7f0000000580)=""/76, 0x4c}], 0x1, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000200006100302e61616161006100"], 0x0, 0x64, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 3.782292728s ago: executing program 3 (id=2175): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) 3.754891088s ago: executing program 5 (id=2176): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0x2f67, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0xf2}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 3.534764478s ago: executing program 5 (id=2177): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.048365444s ago: executing program 3 (id=2178): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000007, 0x8010, r1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x58}) 2.611096587s ago: executing program 1 (id=2179): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2.61079391s ago: executing program 5 (id=2180): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) 2.610237199s ago: executing program 2 (id=2181): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x2}) syz_open_dev$loop(0x0, 0x207, 0x161a81) r1 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) lseek(r4, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) syz_open_procfs$namespace(0x0, 0x0) fallocate(r0, 0x11, 0x1000000, 0x174000) 1.4938742s ago: executing program 5 (id=2184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000c72000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 400.248868ms ago: executing program 2 (id=2185): unshare(0x20040600) r0 = socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000dc0)="d0b4163e96457321d877d01a892f", 0xe, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r1, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) 140.179324ms ago: executing program 1 (id=2186): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mknod(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x2) 133.700742ms ago: executing program 5 (id=2187): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, 0x0) symlink(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rmdir(0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000400)=""/159, 0x9f}], 0x1, 0x105, 0x97e) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f000019b000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="f20f519b06000f20d86635080000000f22d866b8000000000f23c80f21f866350400e0000f23f826660feed6b818018ec0f32ef466b9d909000066b8c9231fff66bab8e0386d0f30660fd2c766b90f0400000f3266b04c", 0x57}], 0x1, 0x10, &(0x7f0000000040), 0x0) preadv(r0, &(0x7f0000000f80)=[{&(0x7f0000000580)=""/76, 0x4c}], 0x1, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000084010000000a000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000200006100302e61616161006100"], 0x0, 0x64, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 55.568263ms ago: executing program 2 (id=2188): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0xd91d4a42db5b92d1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040014}, 0x4000800) 0s ago: executing program 3 (id=2189): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x27f, &(0x7f0000000480)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): alling back to nfs_export=off. [ 624.935157][T11018] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 625.994900][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1330'. [ 626.285048][T11035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1335'. [ 627.184097][T11047] loop2: detected capacity change from 0 to 256 [ 627.239078][T11047] vfat: Unknown parameter '·' [ 627.832719][T11064] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 627.841774][T11064] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 627.853770][T11064] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 631.132960][T11091] loop0: detected capacity change from 0 to 164 [ 631.384709][T11099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1354'. [ 631.708136][T11105] loop4: detected capacity change from 0 to 256 [ 631.751182][T11105] exfat: Deprecated parameter 'utf8' [ 631.845565][T11105] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 632.230915][T11115] overlayfs: missing 'lowerdir' [ 634.078895][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1365'. [ 634.128151][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 634.383884][T11139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1368'. [ 635.328698][T11141] bridge0: entered promiscuous mode [ 635.389965][T11141] bridge0: port 1(macsec3) entered blocking state [ 635.448809][T11141] bridge0: port 1(macsec3) entered disabled state [ 635.492229][T11141] macsec3: entered allmulticast mode [ 635.543446][T11141] bridge0: entered allmulticast mode [ 635.585063][T11141] macsec3: left allmulticast mode [ 635.617889][T11141] bridge0: left allmulticast mode [ 635.632346][T11134] loop2: detected capacity change from 0 to 256 [ 635.660121][T11141] bridge0: left promiscuous mode [ 635.685265][T11134] vfat: Unknown parameter '·' [ 636.181104][T11161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1373'. [ 637.410344][T11170] vlan2: entered allmulticast mode [ 637.453433][T11170] macvlan0: entered allmulticast mode [ 637.583629][T11170] veth1_vlan: entered allmulticast mode [ 637.754425][T11157] loop0: detected capacity change from 0 to 32768 [ 638.082594][ T5845] Bluetooth: hci3: command 0x0405 tx timeout [ 638.204973][T11157] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 639.366090][ T5834] ocfs2: Unmounting device (7,0) on (node local) [ 639.487907][T11192] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1383'. [ 639.555321][T11194] loop4: detected capacity change from 0 to 256 [ 639.559305][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'. [ 639.576597][T11194] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 639.590469][T11194] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 639.615912][T11194] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 639.637953][T11197] loop3: detected capacity change from 0 to 256 [ 639.803579][T11197] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 639.816233][T11197] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 639.872228][T11197] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 640.363150][T11199] loop2: detected capacity change from 0 to 256 [ 640.392211][T11199] vfat: Unknown parameter '·' [ 640.677304][T11206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1382'. [ 640.820833][T11208] loop0: detected capacity change from 0 to 256 [ 642.592872][T11233] loop0: detected capacity change from 0 to 256 [ 642.659796][T11233] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 642.721761][T11233] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 642.737173][T11233] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x84a51190, utbl_chksum : 0xe619d30d) [ 643.019676][T11233] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 643.072955][T11243] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1399'. [ 643.092259][T11233] exFAT-fs (loop0): Filesystem has been set read-only [ 643.187649][T11233] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 643.208171][T11233] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 643.216914][T11245] loop3: detected capacity change from 0 to 24 [ 643.234686][T11245] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 643.290791][T11245] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 643.683916][T11255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1405'. [ 643.710083][T11258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1403'. [ 643.723556][T11255] netem: unknown loss type 13 [ 643.738206][T11255] netem: change failed [ 644.010372][T11261] loop0: detected capacity change from 0 to 256 [ 645.096526][T11271] sp0: Synchronizing with TNC [ 645.194622][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 645.323626][ T45] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 645.367535][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 645.388590][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 645.412024][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 645.454924][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 645.465623][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.478790][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.488755][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.506539][ T45] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 645.535951][ T45] usb 3-1: config 0 has no interface number 0 [ 645.557911][ T45] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 645.593516][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.782061][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 645.817253][ T45] usb 3-1: Product: syz [ 645.821940][ T45] usb 3-1: Manufacturer: syz [ 645.828152][ T45] usb 3-1: SerialNumber: syz [ 645.840957][ T10] usbtmc 4-1:16.0: can't read capabilities [ 645.954361][ T45] usb 3-1: config 0 descriptor?? [ 645.995176][T11285] batadv_slave_0: entered promiscuous mode [ 646.013671][T11285] macvtap1: entered allmulticast mode [ 646.031915][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 646.044350][T11285] batadv_slave_0: entered allmulticast mode [ 646.053449][T11269] usbtmc 4-1:16.0: Unable to send data, error -71 [ 646.068498][ T9] usb 4-1: USB disconnect, device number 9 [ 646.171423][ T45] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 646.184665][T11276] loop4: detected capacity change from 0 to 32768 [ 646.222338][ T45] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 646.227885][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 646.246343][ T45] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 646.256199][ T45] usb 3-1: media controller created [ 646.288948][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.356140][T11276] JBD2: Ignoring recovery information on journal [ 646.402815][ T45] DVB: Unable to find symbol dib7000p_attach() [ 646.409535][ T45] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 646.419071][ T45] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 646.429095][ T45] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 646.446318][ T45] usb 3-1: media controller created [ 646.466902][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.486201][T11276] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 646.503484][ T45] dib0700: the master dib7090 has to be initialized first [ 646.535089][T11299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1418'. [ 646.545599][ T45] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 646.814697][ T5850] ocfs2: Unmounting device (7,4) on (node local) [ 646.820758][ T45] rc_core: IR keymap rc-dib0700-rc5 not found [ 646.862065][ T45] Registered IR keymap rc-empty [ 646.896223][ T45] dvb-usb: could not initialize remote control. [ 646.955919][ T45] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 647.020419][ T45] usb 3-1: USB disconnect, device number 10 [ 647.200999][ T45] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 647.421674][T11319] loop3: detected capacity change from 0 to 256 [ 647.454286][T11319] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 647.468686][T11319] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 647.527068][T11319] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 647.697591][T11321] netlink: 'syz.0.1427': attribute type 2 has an invalid length. [ 648.547573][T11333] loop2: detected capacity change from 0 to 256 [ 648.615691][T11333] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 648.690398][T11333] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 648.733389][T11333] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 648.751417][T11333] UDF-fs: Scanning with blocksize 512 failed [ 648.787160][T11333] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 648.834234][T11333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.063766][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 649.141531][T11339] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 649.233393][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 649.242700][ T45] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 649.281626][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 649.307347][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.347722][ T45] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.362477][T11344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1435'. [ 649.402322][ T45] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 649.433570][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.688575][ T45] usb 1-1: GET_CAPABILITIES returned 0 [ 650.695341][ T45] usbtmc 1-1:16.0: can't read capabilities [ 651.665123][ T45] usb 1-1: USB disconnect, device number 14 [ 651.983373][T11358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.991195][T11358] IPv6: NLM_F_CREATE should be set when creating new route [ 651.998656][T11358] IPv6: NLM_F_CREATE should be set when creating new route [ 652.005967][T11358] IPv6: NLM_F_CREATE should be set when creating new route [ 652.907701][T11366] loop2: detected capacity change from 0 to 2048 [ 652.974475][T11366] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 653.015849][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 653.089372][ T8743] udevd[8743]: incorrect nilfs2 checksum on /dev/loop2 [ 653.106382][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1443'. [ 653.163795][T11373] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 653.226135][T11376] overlayfs: missing 'workdir' [ 654.058531][T11390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1448'. [ 654.258027][T11395] loop4: detected capacity change from 0 to 256 [ 654.993928][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 655.509629][T11420] syzkaller1: entered promiscuous mode [ 655.553688][T11420] syzkaller1: entered allmulticast mode [ 655.600534][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.626028][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.652763][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 140, setting to 64 [ 655.668159][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.689695][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.703203][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.712428][ T10] usb 5-1: Product: syz [ 655.721319][ T10] usb 5-1: Manufacturer: syz [ 655.746330][ T10] usb 5-1: SerialNumber: syz [ 655.986245][T11430] can0: slcan on ptm0. [ 656.005855][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 656.226497][T11429] can0 (unregistered): slcan off ptm0. [ 656.528049][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 656.598965][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 656.792806][ T10] cdc_ncm 5-1:1.0: bind() failure [ 656.867573][ T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 656.922683][ T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 656.938855][T11450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1469'. [ 657.519704][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 657.599504][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1469'. [ 657.623829][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 657.633598][ T10] usb 5-1: USB disconnect, device number 10 [ 657.787266][T11453] loop2: detected capacity change from 0 to 256 [ 657.793658][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 657.836407][T11453] vfat: Unknown parameter '·' [ 657.841314][ T45] usb 2-1: config 0 has no interfaces? [ 657.857549][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 657.911774][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.970508][ T45] usb 2-1: config 0 descriptor?? [ 658.190909][T11437] hid-generic 0000:0000:0000.000A: pid 11437 passed too short report [ 658.219363][ T45] usb 2-1: USB disconnect, device number 8 [ 660.493764][T11511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1483'. [ 660.543579][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1483'. [ 660.644232][T11513] loop4: detected capacity change from 0 to 256 [ 660.697794][T11513] vfat: Unknown parameter '·' [ 662.235338][T11537] netlink: 'syz.3.1491': attribute type 8 has an invalid length. [ 663.565959][T11548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.632386][T11552] loop4: detected capacity change from 0 to 1024 [ 663.762137][T11552] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 663.773339][ T5895] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 663.847598][T11552] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 663.888833][T11552] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1495: Failed to acquire dquot type 0 [ 663.926197][T11552] EXT4-fs (loop4): 1 truncate cleaned up [ 663.944190][ T5895] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 663.944350][T11552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.980171][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.028110][ T5895] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 664.060700][T11560] loop3: detected capacity change from 0 to 256 [ 664.086480][ T5895] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 664.117314][T11560] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 664.130066][T11560] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 664.170986][ T5895] usb 2-1: Manufacturer: syz [ 664.190972][T11552] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 664.200613][ T5895] usb 2-1: config 0 descriptor?? [ 664.219853][T11560] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 664.389659][T11561] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 664.688151][T11561] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 664.703583][ T5895] rc_core: IR keymap rc-hauppauge not found [ 664.709562][ T5895] Registered IR keymap rc-empty [ 664.783201][T11561] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 664.797118][T11561] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1495: Failed to acquire dquot type 0 [ 664.826931][ T5895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 664.834115][T11561] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 664.886772][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.913912][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.960070][ T5895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 665.024683][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 665.045913][ T5895] usb 2-1: USB disconnect, device number 9 [ 665.231580][ T5850] syz_tun (unregistering): left allmulticast mode [ 665.647574][ T8740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.617701][ T8740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.788128][ T8740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.928759][ T8740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.945506][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'. [ 666.974757][T11592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1503'. [ 667.113213][T11593] loop0: detected capacity change from 0 to 256 [ 667.157922][T11593] vfat: Unknown parameter '·' [ 669.187384][T11610] loop0: detected capacity change from 0 to 256 [ 669.216876][T11610] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 669.229578][T11610] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 669.261060][T11610] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 669.429748][T11601] vlan2: entered allmulticast mode [ 669.463649][T11601] bond0: entered allmulticast mode [ 669.514662][T11601] bond_slave_0: entered allmulticast mode [ 669.548700][T11601] bond_slave_1: entered allmulticast mode [ 669.737186][T10089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 669.749263][T10089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 669.759418][T10089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 669.771321][T10089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 669.780591][T10089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 670.952838][T11626] loop2: detected capacity change from 0 to 1024 [ 671.052825][ T8740] dummy0: left allmulticast mode [ 671.061267][ T8740] bridge0: port 3(dummy0) entered disabled state [ 671.751315][ T8740] bridge_slave_1: left allmulticast mode [ 671.824320][ T5845] Bluetooth: hci4: command tx timeout [ 671.832341][ T8740] bridge_slave_1: left promiscuous mode [ 671.920150][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.036441][ T8740] bridge_slave_0: left allmulticast mode [ 672.043157][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.374644][T11652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1520'. [ 672.658042][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 672.714467][T11648] loop2: detected capacity change from 0 to 256 [ 672.735022][T11648] vfat: Unknown parameter '·' [ 672.827514][ T9] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 672.854849][ T9] usb 1-1: config 0 has no interface number 0 [ 672.901309][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 672.916756][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.926145][ T9] usb 1-1: Product: syz [ 672.930373][ T9] usb 1-1: Manufacturer: syz [ 672.952758][ T9] usb 1-1: SerialNumber: syz [ 672.974636][ T9] usb 1-1: config 0 descriptor?? [ 673.408318][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 673.416675][ T9] usb 1-1: Please update to version 0.2 or newer [ 673.435838][ T9] usb 1-1: Firmware: build [ 673.589598][ T8740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.605960][ T8740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.617052][ T8740] bond0 (unregistering): Released all slaves [ 673.908749][ T5845] Bluetooth: hci4: command tx timeout [ 674.388986][ T9] usb 1-1: USB disconnect, device number 15 [ 674.404362][ T8740] tipc: Left network mode [ 674.448222][T11616] lo speed is unknown, defaulting to 1000 [ 674.546210][T11642] lo speed is unknown, defaulting to 1000 [ 674.893499][T11678] lo speed is unknown, defaulting to 1000 [ 675.359261][ T8740] hsr_slave_0: left promiscuous mode [ 675.422013][ T8740] hsr_slave_1: left promiscuous mode [ 675.439585][T11707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1528'. [ 675.449414][ T8740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.483372][ T8740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.501850][ T8740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.521198][ T8740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.983731][ T5845] Bluetooth: hci4: command tx timeout [ 676.087165][ T8740] veth1_macvtap: left promiscuous mode [ 676.092792][ T8740] veth0_macvtap: left promiscuous mode [ 676.106647][ T8740] veth1_vlan: left promiscuous mode [ 676.112912][ T8740] veth0_vlan: left promiscuous mode [ 676.186098][T11717] loop0: detected capacity change from 0 to 256 [ 676.218694][T11717] vfat: Unknown parameter '·' [ 677.050757][ T8740] team0 (unregistering): Port device team_slave_1 removed [ 677.112083][ T8740] team0 (unregistering): Port device team_slave_0 removed [ 678.113712][ T5845] Bluetooth: hci4: command tx timeout [ 679.535903][T11616] chnl_net:caif_netlink_parms(): no params data found [ 679.657229][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 679.769738][ T8740] IPVS: stop unused estimator thread 0... [ 679.844385][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 679.861371][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 679.880027][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 679.895770][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 679.905912][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.916365][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.931814][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 679.941240][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.119847][T11616] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.138028][T11616] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.159125][T11616] bridge_slave_0: entered allmulticast mode [ 680.181632][T11616] bridge_slave_0: entered promiscuous mode [ 680.210616][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 680.226918][ T9] usbtmc 2-1:16.0: can't read capabilities [ 680.252576][T11616] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.274245][T11616] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.291911][T11616] bridge_slave_1: entered allmulticast mode [ 680.318831][T11616] bridge_slave_1: entered promiscuous mode [ 680.421696][T11734] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 680.434053][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 680.453778][ T24] usb 2-1: USB disconnect, device number 10 [ 680.477954][T11616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.518016][T11616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.615341][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 680.645308][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 680.673315][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.688537][T11616] team0: Port device team_slave_0 added [ 680.712792][T11616] team0: Port device team_slave_1 added [ 680.719433][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 680.739362][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.763299][ T45] usb 3-1: Product: syz [ 680.769847][ T5845] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 680.777045][ T45] usb 3-1: Manufacturer: syz [ 680.791925][ T45] usb 3-1: SerialNumber: syz [ 680.875222][T11616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.902607][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.947830][T11616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.028270][T11616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.047591][ T45] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 681.053495][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.118207][T11616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.267433][ T9] usb 3-1: USB disconnect, device number 11 [ 681.433880][T11616] hsr_slave_0: entered promiscuous mode [ 681.445933][T11616] hsr_slave_1: entered promiscuous mode [ 681.452429][T11616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.460448][T11616] Cannot create hsr debugfs directory [ 681.524846][T11749] usblp0: removed [ 681.588026][T11763] loop0: detected capacity change from 0 to 4096 [ 681.624259][T11770] netlink: 'syz.3.1542': attribute type 11 has an invalid length. [ 681.633818][T11772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1541'. [ 682.129406][T11780] net_ratelimit: 823 callbacks suppressed [ 682.129436][T11780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.342130][T11786] netlink: 'syz.2.1546': attribute type 3 has an invalid length. [ 684.109598][T11616] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 684.164923][T11616] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 684.341485][T11616] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 684.441399][T11616] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 685.577551][T11616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.833839][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.074380][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.150547][T11832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1554'. [ 686.164002][T11616] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.198671][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.206041][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.345607][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.352822][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.419828][T11837] loop0: detected capacity change from 0 to 256 [ 686.464965][T11837] vfat: Unknown parameter '·' [ 686.688928][T11839] loop2: detected capacity change from 0 to 4096 [ 687.530408][T11616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.523927][T11865] loop2: detected capacity change from 0 to 1024 [ 688.660110][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'. [ 688.804725][ T7273] hfsplus: b-tree write err: -5, ino 4 [ 688.929357][T11874] loop3: detected capacity change from 0 to 1024 [ 689.025398][ T30] audit: type=1326 audit(1749025905.417:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c8f32ab39 code=0x7ffc0000 [ 689.272222][ T30] audit: type=1326 audit(1749025905.417:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c8f32ab39 code=0x7ffc0000 [ 690.181350][ T30] audit: type=1326 audit(1749025905.417:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f38e969 code=0x7ffc0000 [ 690.295809][ T30] audit: type=1326 audit(1749025905.417:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c8f32ab39 code=0x7ffc0000 [ 690.341351][T11890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1565'. [ 690.440920][ T30] audit: type=1326 audit(1749025905.417:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c8f32ab39 code=0x7ffc0000 [ 690.522369][T11616] veth0_vlan: entered promiscuous mode [ 690.555375][ T30] audit: type=1326 audit(1749025905.417:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c8f32ab39 code=0x7ffc0000 [ 690.665645][T11616] veth1_vlan: entered promiscuous mode [ 690.701346][ T30] audit: type=1326 audit(1749025905.417:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c8f32ab39 code=0x7ffc0000 [ 690.893414][ T30] audit: type=1326 audit(1749025905.417:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f38e969 code=0x7ffc0000 [ 690.926087][T11616] veth0_macvtap: entered promiscuous mode [ 690.984594][T11616] veth1_macvtap: entered promiscuous mode [ 691.031233][ T30] audit: type=1326 audit(1749025905.447:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f38e969 code=0x7ffc0000 [ 691.127027][T11616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.181686][T11616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.191655][ T30] audit: type=1326 audit(1749025905.447:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c8f32ab39 code=0x7ffc0000 [ 691.222252][T11616] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.273672][T11616] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.282446][T11616] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.799446][T11904] loop0: detected capacity change from 0 to 256 [ 691.909636][T11616] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.963108][T11904] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 692.023778][T11904] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 692.181484][T11902] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 692.302940][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.329147][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.381690][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.391907][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.458793][T11920] loop3: detected capacity change from 0 to 1024 [ 694.141760][ T6674] hfsplus: b-tree write err: -5, ino 4 [ 694.219152][T11931] loop5: detected capacity change from 0 to 512 [ 694.478285][T11931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.562880][T11931] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 694.576163][T11939] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 694.650586][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 694.669253][T11931] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1573: corrupted inode contents [ 694.694014][T11931] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.1573: mark_inode_dirty error [ 694.712515][ T5878] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 694.736440][T11941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1576'. [ 694.739478][T11931] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1573: corrupted inode contents [ 694.762076][T11931] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1573: mark_inode_dirty error [ 694.851704][T11931] EXT4-fs (loop5): shut down requested (1) [ 694.879107][T11944] loop2: detected capacity change from 0 to 512 [ 694.923006][ T5878] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 694.955159][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.993835][ T5878] usb 4-1: Product: syz [ 694.999700][T11952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'. [ 695.108663][T11616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.137172][T11944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.225158][ T5878] usb 4-1: Manufacturer: syz [ 695.230512][ T5878] usb 4-1: SerialNumber: syz [ 695.255680][ T5878] usb 4-1: config 0 descriptor?? [ 695.263545][T11944] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.280160][T11954] loop0: detected capacity change from 0 to 256 [ 695.456489][ T5878] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 010 [ 695.537998][T11954] vfat: Unknown parameter '·' [ 695.960564][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 695.960585][ T30] audit: type=1800 audit(1749025912.347:213): pid=11944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1578" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 696.063736][T10089] Bluetooth: hci4: command 0x0405 tx timeout [ 696.148273][ T5878] (null): failure reading functionality [ 696.212731][ T5878] i2c i2c-1: connected i2c-tiny-usb device [ 696.466075][ T24] usb 4-1: USB disconnect, device number 10 [ 696.506919][ T8008] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.629658][T11988] Illegal XDP return value 717707776 on prog (id 269) dev syz_tun, expect packet loss! [ 698.344062][T11994] loop3: detected capacity change from 0 to 256 [ 698.600415][T11994] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 698.674949][T11994] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 698.740904][T11996] loop5: detected capacity change from 0 to 4096 [ 698.804197][T11996] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 698.815566][T11991] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 699.450550][T11996] ntfs3(loop5): ino=19, mi_enum_attr [ 699.481979][T11996] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 699.740326][T11989] loop0: detected capacity change from 0 to 32768 [ 700.174990][T11989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1586 (11989) [ 700.309533][T12012] loop2: detected capacity change from 0 to 2048 [ 700.450482][T11989] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 700.503511][T11989] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 700.528096][T11989] BTRFS info (device loop0): using free-space-tree [ 700.573923][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 700.576753][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 700.598656][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 700.646720][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 700.688940][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 700.718624][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 700.760847][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 700.796704][T12031] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1593'. [ 700.823946][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 700.824388][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 700.884473][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 700.934345][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 700.946246][T12035] syz_tun: entered allmulticast mode [ 700.991556][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 700.994407][T11989] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 701.062816][T12035] loop5: detected capacity change from 0 to 256 [ 701.140130][T11989] BTRFS error (device loop0): open_ctree failed: -12 [ 701.166403][T12035] vfat: Unknown parameter '·' [ 704.081443][T12066] loop0: detected capacity change from 0 to 4096 [ 704.313807][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 704.463161][T12083] loop5: detected capacity change from 0 to 4096 [ 704.503745][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 704.525140][ T9] usb 4-1: config 0 has no interfaces? [ 704.546180][T12087] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 704.558872][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 704.592763][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.648447][ T9] usb 4-1: config 0 descriptor?? [ 705.060545][ T5893] usb 4-1: USB disconnect, device number 11 [ 705.580111][ T30] audit: type=1800 audit(1749025921.957:214): pid=12083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1607" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 705.671029][T12097] bridge0: port 3(gretap0) entered blocking state [ 705.710677][T12101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1610'. [ 705.739014][T12097] bridge0: port 3(gretap0) entered disabled state [ 705.756797][T12097] gretap0: entered allmulticast mode [ 705.791972][T12097] gretap0: entered promiscuous mode [ 705.818925][T12097] bridge0: port 3(gretap0) entered blocking state [ 705.826025][T12097] bridge0: port 3(gretap0) entered forwarding state [ 705.891537][T12102] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 705.909985][T12102] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 705.946351][T12104] gretap0: left allmulticast mode [ 705.951607][T12104] gretap0: left promiscuous mode [ 705.961921][T12103] loop0: detected capacity change from 0 to 256 [ 705.985388][T12104] bridge0: port 3(gretap0) entered disabled state [ 706.001144][T12103] vfat: Unknown parameter '·' [ 707.404628][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1620'. [ 708.662168][T12150] loop3: detected capacity change from 0 to 1024 [ 709.050812][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1627'. [ 709.125173][T12166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1628'. [ 709.203469][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 709.324712][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1627'. [ 709.362881][T12172] loop0: detected capacity change from 0 to 256 [ 709.374638][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 709.389129][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.393449][T12167] nbd: device at index 64 is going down [ 709.408111][T12172] vfat: Unknown parameter '·' [ 709.446585][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.511078][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 709.543133][T12135] loop5: detected capacity change from 0 to 32768 [ 709.549991][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.629197][ T9] usb 3-1: config 0 descriptor?? [ 709.654204][T12135] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 709.737577][T12135] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 709.898700][T12135] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 709.958726][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 709.974621][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 710.655764][ T5878] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 710.843848][ T9] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 710.879001][ T9] usb 3-1: USB disconnect, device number 12 [ 710.943681][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 710.950682][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 976ms [ 710.975090][ T5878] usb 4-1: config 0 has no interfaces? [ 710.993573][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 710.998889][T12135] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 711.008090][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 711.054844][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.066311][T12135] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 711.079581][ T5878] usb 4-1: Product: syz [ 711.085784][ T5878] usb 4-1: Manufacturer: syz [ 711.090453][ T5878] usb 4-1: SerialNumber: syz [ 711.098773][ T5878] usb 4-1: config 0 descriptor?? [ 711.334291][T12191] loop2: detected capacity change from 0 to 1024 [ 711.397434][ T9] usb 4-1: USB disconnect, device number 12 [ 711.487707][T12191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.586099][T12191] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.857284][T12186] fido_id[12186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 712.172974][T12197] loop0: detected capacity change from 0 to 4096 [ 712.187530][ T13] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 393: padding at end of block bitmap is not set [ 712.253434][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 712.267110][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1856 with error 117 [ 712.283850][ T13] EXT4-fs (loop2): This should not happen!! Data will be lost [ 712.283850][ T13] [ 712.332712][T12197] ntfs3(loop0): ino=1a, mi_enum_attr [ 712.356910][T12197] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 712.433909][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 712.475541][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 712.498049][T12203] loop5: detected capacity change from 0 to 512 [ 712.510218][ T13] EXT4-fs (loop2): This should not happen!! Data will be lost [ 712.510218][ T13] [ 712.522508][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 712.563459][ T13] EXT4-fs (loop2): Total free blocks count 0 [ 712.578317][ T13] EXT4-fs (loop2): Free/Dirty block details [ 712.583470][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 712.589661][ T13] EXT4-fs (loop2): free_blocks=0 [ 712.599081][ T13] EXT4-fs (loop2): dirty_blocks=32 [ 712.604302][ T13] EXT4-fs (loop2): Block reservation details [ 712.628768][T12203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 712.659425][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.677373][T12199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 712.690787][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 712.780241][T12203] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.1638: Unimplemented hash flags: 0x0001 [ 712.851588][T12203] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1638: Corrupt directory, running e2fsck is recommended [ 712.893564][ T13] ntfs3(loop0): ino=5, mi_enum_attr [ 712.958326][T12203] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.1638: path /13/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 713.001221][ T10] usb 4-1: USB disconnect, device number 13 [ 713.340072][T11616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.952526][T12228] loop5: detected capacity change from 0 to 256 [ 713.983207][T12228] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 713.996209][T12228] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 714.011725][T12228] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 715.012954][T12256] syzkaller1: entered promiscuous mode [ 715.078875][T12256] syzkaller1: entered allmulticast mode [ 719.016069][T12301] loop0: detected capacity change from 0 to 1024 [ 719.035449][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 719.148140][T12301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.223852][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 719.235542][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.253327][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.285520][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 719.323340][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.351934][ T24] usb 6-1: Product: syz [ 719.362077][ T24] usb 6-1: Manufacturer: syz [ 719.382394][ T24] usb 6-1: SerialNumber: syz [ 720.090159][ T24] usb 6-1: cannot find UAC_HEADER [ 720.298832][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 720.364228][ T24] usb 6-1: USB disconnect, device number 2 [ 720.422602][ T8743] udevd[8743]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.899629][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.686500][T12352] loop5: detected capacity change from 0 to 256 [ 721.743147][T12352] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 721.756593][T12352] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 721.779358][T12352] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 722.533345][T10157] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 722.723186][T10157] usb 2-1: Using ep0 maxpacket: 32 [ 722.777351][T10157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.813362][T10157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.866698][T10157] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 722.903687][T10157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.967353][T10157] usb 2-1: config 0 descriptor?? [ 723.161508][T12340] loop0: detected capacity change from 0 to 32768 [ 723.185227][T12340] XFS: ikeep mount option is deprecated. [ 724.194523][T12340] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 724.224673][T10157] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 724.268413][T10157] usb 2-1: USB disconnect, device number 11 [ 724.637623][T12370] fido_id[12370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 724.793170][T12378] loop5: detected capacity change from 0 to 64 [ 725.869961][ T5893] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 726.055437][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 726.133697][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 726.182660][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 726.236304][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.296687][T12386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 726.337806][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.599608][ T5893] usb 2-1: USB disconnect, device number 12 [ 727.687341][T12417] loop2: detected capacity change from 0 to 2048 [ 728.466128][ T5845] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 728.474972][ T5845] Bluetooth: hci4: Injecting HCI hardware error event [ 728.494359][T10089] Bluetooth: hci4: hardware error 0x00 [ 729.361766][T12448] syzkaller1: entered promiscuous mode [ 729.396685][T12448] syzkaller1: entered allmulticast mode [ 729.646444][T12452] veth0: entered promiscuous mode [ 729.666078][T12451] veth0: left promiscuous mode [ 730.108628][T12468] loop2: detected capacity change from 0 to 512 [ 730.800323][T12468] EXT4-fs: Ignoring removed i_version option [ 730.823455][T10089] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 730.858792][T12468] EXT4-fs (loop2): 1 truncate cleaned up [ 730.897990][T12468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.503124][ T8008] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.892131][T12482] gretap0: entered promiscuous mode [ 731.910862][T12482] macsec3: entered promiscuous mode [ 731.916663][T12482] macsec3: entered allmulticast mode [ 731.922225][T12482] gretap0: entered allmulticast mode [ 732.753555][T12493] loop5: detected capacity change from 0 to 1024 [ 732.781616][T12493] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 732.828993][T12493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.960110][T12493] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1714: missing EA_INODE flag [ 733.116586][T12493] EXT4-fs (loop5): Remounting filesystem read-only [ 733.314793][T11616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.916127][T12534] smc: net device lo applied user defined pnetid SYZ1 [ 740.646337][T12570] loop0: detected capacity change from 0 to 4096 [ 740.711815][T12549] loop2: detected capacity change from 0 to 40427 [ 741.547589][T12570] ntfs3(loop0): ino=1a, mi_enum_attr [ 741.599201][T12570] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 742.876771][ T36] kworker/u8:2 (36) used greatest stack depth: 18424 bytes left [ 744.786216][T12591] loop0: detected capacity change from 0 to 32768 [ 744.829113][T12591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1736 (12591) [ 745.177861][T12591] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 745.215065][T12591] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 746.181168][T12591] BTRFS info (device loop0): using free-space-tree [ 746.250229][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 746.251107][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 746.261295][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 746.271857][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 746.284652][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 746.294539][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 746.306666][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 746.316795][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 746.328485][T12591] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 746.343027][T12591] BTRFS error (device loop0): open_ctree failed: -12 [ 747.803896][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.810275][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.054389][T12647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1745'. [ 748.322177][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1748'. [ 748.370739][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 748.569093][T12662] 9pnet: p9_errstr2errno: server reported unknown error [ 750.126785][T10157] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 750.153699][T12671] lo speed is unknown, defaulting to 1000 [ 750.324544][T10157] usb 4-1: Using ep0 maxpacket: 8 [ 750.367094][T10157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.397686][T10157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.438651][T10157] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 750.456633][T10157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.470675][T10157] usb 4-1: config 0 descriptor?? [ 750.617848][T12698] loop5: detected capacity change from 0 to 256 [ 750.864665][T10157] usbhid 4-1:0.0: can't add hid device: -71 [ 750.870897][T10157] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 750.917635][T12698] FAT-fs (loop5): Directory bread(block 64) failed [ 750.944101][T10157] usb 4-1: USB disconnect, device number 14 [ 750.983348][T12698] FAT-fs (loop5): Directory bread(block 65) failed [ 751.024228][T12698] FAT-fs (loop5): Directory bread(block 66) failed [ 751.063335][T12698] FAT-fs (loop5): Directory bread(block 67) failed [ 751.083458][T12698] FAT-fs (loop5): Directory bread(block 68) failed [ 751.105629][T12698] FAT-fs (loop5): Directory bread(block 69) failed [ 751.123400][T12698] FAT-fs (loop5): Directory bread(block 70) failed [ 751.130047][T12698] FAT-fs (loop5): Directory bread(block 71) failed [ 751.185344][T12698] FAT-fs (loop5): Directory bread(block 72) failed [ 751.213742][T12698] FAT-fs (loop5): Directory bread(block 73) failed [ 751.795481][T12725] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 751.822051][T12729] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 751.861988][T12725] netlink: 508 bytes leftover after parsing attributes in process `syz.3.1764'. [ 753.762267][T12755] loop0: detected capacity change from 0 to 1024 [ 753.783033][T12755] EXT4-fs: Ignoring removed bh option [ 753.921867][T12755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.965897][T12755] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1774: Allocating blocks 481-513 which overlap fs metadata [ 754.035723][T12755] EXT4-fs (loop0): Remounting filesystem read-only [ 754.177921][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.603462][T10157] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 756.013423][T10157] usb 3-1: Using ep0 maxpacket: 32 [ 756.020893][T10157] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 756.031570][T10157] usb 3-1: config 0 has no interface number 0 [ 756.043021][T10157] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 756.054620][T10157] usb 3-1: config 0 interface 85 has no altsetting 0 [ 756.065030][T10157] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 756.082351][T12764] loop3: detected capacity change from 0 to 32768 [ 756.103341][T10157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.146024][T10157] usb 3-1: Product: syz [ 756.169388][T10157] usb 3-1: Manufacturer: syz [ 756.201403][T10157] usb 3-1: SerialNumber: syz [ 756.233006][T12764] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 756.255822][T10157] usb 3-1: config 0 descriptor?? [ 757.220409][T12764] XFS (loop3): Ending clean mount [ 757.325519][T12794] bridge0: port 3(syz_tun) entered blocking state [ 757.332286][T12794] bridge0: port 3(syz_tun) entered disabled state [ 757.363149][T12764] XFS (loop3): Quotacheck needed: Please wait. [ 757.371803][T12794] syz_tun: entered promiscuous mode [ 757.449788][T10157] appletouch 3-1:0.85: Geyser mode initialized. [ 757.457178][T12794] bridge0: port 3(syz_tun) entered blocking state [ 757.463810][T12794] bridge0: port 3(syz_tun) entered forwarding state [ 757.491274][T10157] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input14 [ 757.600775][T12764] XFS (loop3): Quotacheck: Done. [ 758.313844][T10157] usb 3-1: USB disconnect, device number 13 [ 758.436572][ T5836] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 758.471489][T10157] appletouch 3-1:0.85: input: appletouch disconnected [ 758.560627][T12808] loop0: detected capacity change from 0 to 512 [ 758.642530][T12808] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 758.761841][T12808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.946273][T12815] netlink: 'syz.3.1787': attribute type 10 has an invalid length. [ 758.985151][T12815] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 759.028243][T12815] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 759.057767][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.723069][T12854] loop2: detected capacity change from 0 to 2048 [ 761.776664][T12854] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 761.809691][T12854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.583790][ T5845] Bluetooth: hci3: command 0x0405 tx timeout [ 766.457735][T12897] loop0: detected capacity change from 0 to 256 [ 766.908932][T12897] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 766.921482][T12897] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 767.015481][T12897] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 768.752960][T12901] loop5: detected capacity change from 0 to 32768 [ 770.510119][T12901] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 770.510119][T12901] allowing incompatible features above 0.0: (unknown version) [ 770.510119][T12901] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 770.564892][T12936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1828'. [ 770.613645][T12901] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 770.679413][T12901] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 770.713975][T12901] bcachefs (loop5): Version upgrade required: [ 770.713975][T12901] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 770.713975][T12901] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 770.713975][T12901] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 770.857095][T12901] bcachefs (loop5): dropping and reconstructing all alloc info [ 770.903894][T12901] warn_alloc: 1 callbacks suppressed [ 770.903917][T12901] syz.5.1819: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 770.969585][T12901] CPU: 0 UID: 0 PID: 12901 Comm: syz.5.1819 Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 770.969615][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.969630][T12901] Call Trace: [ 770.969638][T12901] [ 770.969647][T12901] dump_stack_lvl+0x189/0x250 [ 770.969677][T12901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.969698][T12901] ? __pfx__printk+0x10/0x10 [ 770.969721][T12901] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 770.969745][T12901] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 770.969773][T12901] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 770.969799][T12901] warn_alloc+0x214/0x310 [ 770.969830][T12901] ? __pfx_warn_alloc+0x10/0x10 [ 770.969871][T12901] ? __get_vm_area_node+0x28f/0x300 [ 770.969894][T12901] ? bch2_fs_journal_start+0x480/0x1510 [ 770.969928][T12901] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 770.969992][T12901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 770.970022][T12901] ? rcu_is_watching+0x15/0xb0 [ 770.970055][T12901] ? bch2_fs_journal_start+0x480/0x1510 [ 770.970080][T12901] ? bch2_fs_journal_start+0x480/0x1510 [ 770.970103][T12901] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 770.970126][T12901] ? bch2_fs_journal_start+0x480/0x1510 [ 770.970161][T12901] bch2_fs_journal_start+0x480/0x1510 [ 770.970206][T12901] ? bch2_journal_log_msg+0xd9/0x120 [ 770.970240][T12901] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 770.970268][T12901] ? __pfx_bch2_journal_log_msg+0x10/0x10 [ 770.970299][T12901] ? bch2_reconstruct_alloc+0x32b/0x360 [ 770.970342][T12901] bch2_fs_recovery+0x229a/0x39a0 [ 770.970390][T12901] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 770.970423][T12901] ? __pfx___console_unlock+0x10/0x10 [ 770.970462][T12901] ? __lock_acquire+0xab9/0xd20 [ 770.970517][T12901] ? __lock_acquire+0xab9/0xd20 [ 770.970555][T12901] ? __lock_acquire+0xab9/0xd20 [ 770.970608][T12901] ? bch2_fs_start+0x9fe/0xd90 [ 770.970633][T12901] ? up_write+0x1c4/0x420 [ 770.970651][T12901] ? bch2_fs_start+0x5c4/0xd90 [ 770.970675][T12901] bch2_fs_start+0xa99/0xd90 [ 770.970697][T12901] ? bch2_fs_start+0x5c4/0xd90 [ 770.970741][T12901] ? __pfx_bch2_fs_start+0x10/0x10 [ 770.970787][T12901] ? sget+0x267/0x620 [ 770.970824][T12901] bch2_fs_get_tree+0xb6c/0x1460 [ 770.970890][T12901] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 770.970960][T12901] ? aa_get_newest_label+0xf7/0x5d0 [ 770.970990][T12901] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 770.971030][T12901] ? apparmor_capable+0x137/0x1b0 [ 770.971058][T12901] vfs_get_tree+0x8f/0x2b0 [ 770.971082][T12901] do_new_mount+0x24a/0xa40 [ 770.971125][T12901] __se_sys_mount+0x317/0x410 [ 770.971157][T12901] ? __pfx___se_sys_mount+0x10/0x10 [ 770.971189][T12901] ? do_syscall_64+0xbe/0x3b0 [ 770.971212][T12901] ? __x64_sys_mount+0x20/0xc0 [ 770.971239][T12901] do_syscall_64+0xfa/0x3b0 [ 770.971272][T12901] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.971293][T12901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.971314][T12901] ? clear_bhb_loop+0x60/0xb0 [ 770.971340][T12901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.971360][T12901] RIP: 0033:0x7f51bd99010a [ 770.971379][T12901] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.971397][T12901] RSP: 002b:00007f51be817e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 770.971420][T12901] RAX: ffffffffffffffda RBX: 00007f51be817ef0 RCX: 00007f51bd99010a [ 770.971435][T12901] RDX: 0000200000000000 RSI: 0000200000005900 RDI: 00007f51be817eb0 [ 770.971449][T12901] RBP: 0000200000000000 R08: 00007f51be817ef0 R09: 0000000000010000 [ 770.971462][T12901] R10: 0000000000010000 R11: 0000000000000246 R12: 0000200000005900 [ 770.971474][T12901] R13: 00007f51be817eb0 R14: 00000000000058d9 R15: 0000200000000340 [ 770.971506][T12901] [ 770.972061][T12901] Mem-Info: [ 771.361205][T12901] active_anon:17014 inactive_anon:0 isolated_anon:0 [ 771.361205][T12901] active_file:10800 inactive_file:40304 isolated_file:0 [ 771.361205][T12901] unevictable:768 dirty:171 writeback:0 [ 771.361205][T12901] slab_reclaimable:11052 slab_unreclaimable:104065 [ 771.361205][T12901] mapped:30433 shmem:11412 pagetables:1634 [ 771.361205][T12901] sec_pagetables:0 bounce:0 [ 771.361205][T12901] kernel_misc_reclaimable:0 [ 771.361205][T12901] free:1247458 free_pcp:19073 free_cma:0 [ 771.438802][T12901] Node 0 active_anon:68828kB inactive_anon:0kB active_file:43200kB inactive_file:160984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121732kB dirty:676kB writeback:0kB shmem:44884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11496kB pagetables:6384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 771.474171][T12901] Node 1 active_anon:128kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 771.594135][T12901] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 771.788213][T12901] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 772.055743][T12901] Node 0 DMA32 free:1086568kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81444kB inactive_anon:0kB active_file:43200kB inactive_file:159156kB unevictable:1536kB writepending:676kB present:3129332kB managed:2560992kB mlocked:0kB bounce:0kB free_pcp:29772kB local_pcp:10832kB free_cma:0kB [ 772.393812][ T5893] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 772.402037][T12901] lowmem_reserve[]: 0 0 1 1 1 [ 772.408422][T12901] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 772.438221][T12901] lowmem_reserve[]: 0 0 0 0 0 [ 772.443137][T12901] Node 1 Normal free:3888056kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:33212kB local_pcp:25336kB free_cma:0kB [ 772.592021][T12901] lowmem_reserve[]: 0 0 0 0 0 [ 772.616349][T12901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 772.696796][T12901] Node 0 DMA32: 7*4kB (UM) 259*8kB (UME) 7*16kB (UE) 47*32kB (UE) 171*64kB (UME) 65*128kB (UME) 32*256kB (UM) 44*512kB (UM) 30*1024kB (UME) 14*2048kB (UME) 236*4096kB (UM) = 1079748kB [ 772.723796][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 772.735978][ T5893] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 772.763420][ T5893] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 772.772112][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 772.782183][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 772.805463][T12901] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 772.923033][ T5893] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 772.946295][T12901] Node 1 Normal: 198*4kB (UM) 60*8kB (UME) 50*16kB (UME) 155*32kB (UME) 59*64kB (UME) 17*128kB (UME) 3*256kB (UE) 3*512kB (UM) 4*1024kB (UME) 3*2048kB (UME) 943*4096kB (M) = 3888056kB [ 773.151930][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 773.436376][ T5893] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 773.473604][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.487036][T12901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.536195][ T5893] usb 1-1: config 0 descriptor?? [ 773.543375][T12901] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 773.580251][T12901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.614347][T12901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 773.653694][T12901] 60475 total pagecache pages [ 773.658798][T12901] 0 pages in swap cache [ 773.663505][T12901] Free swap = 124996kB [ 773.675491][T12901] Total swap = 124996kB [ 773.680125][T12901] 2097051 pages RAM [ 773.699335][T12901] 0 pages HighMem/MovableOnly [ 773.704511][T12901] 424697 pages reserved [ 773.708886][T12901] 0 pages cma reserved [ 773.733152][T12901] bcachefs (loop5): error reallocating journal fifo (32768 open entries) [ 773.742028][T12901] bcachefs (loop5): error in recovery: ENOMEM_journal_pin_fifoemergency read only at seq 0 [ 773.759712][T12901] bcachefs (loop5): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 773.769648][T12901] bcachefs (loop5): shutting down [ 773.829687][T12901] bcachefs (loop5): shutdown complete [ 773.923103][ T5893] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 773.954653][ T5893] usb 1-1: USB disconnect, device number 16 [ 774.158541][ T5893] usblp0: removed [ 775.430012][ T5893] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 776.941632][T12986] batadv_slave_0: entered promiscuous mode [ 777.324517][T12979] loop3: detected capacity change from 0 to 32768 [ 777.342211][T12979] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1840 (12979) [ 778.086750][T12979] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 778.117327][T12979] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 778.166500][T12979] BTRFS info (device loop3): using free-space-tree [ 779.503437][T13024] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 779.569019][T12901] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 779.584252][T13026] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1851'. [ 779.697508][ T5836] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 779.921119][T12998] loop2: detected capacity change from 0 to 32768 [ 780.231601][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 781.149030][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 781.169255][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 781.208987][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 781.246437][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 781.289393][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 781.373364][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 782.163309][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 782.194790][ T9] usb 2-1: Product: syz [ 782.203857][ T9] usb 2-1: Manufacturer: syz [ 782.220406][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 782.256915][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 782.315770][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 782.321770][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 782.402303][T13055] netlink: 'syz.2.1861': attribute type 34 has an invalid length. [ 783.461752][ T5895] usb 2-1: USB disconnect, device number 13 [ 783.487803][T13063] Dead loop on virtual device ip6_vti0, fix it urgently! [ 783.533592][T13063] Dead loop on virtual device ip6_vti0, fix it urgently! [ 783.541163][T13063] Dead loop on virtual device ip6_vti0, fix it urgently! [ 783.585510][T13063] Dead loop on virtual device ip6_vti0, fix it urgently! [ 783.604103][T13063] Dead loop on virtual device ip6_vti0, fix it urgently! [ 783.611622][T13063] Dead loop on virtual device ip6_vti0, fix it urgently! [ 783.732005][T13047] loop0: detected capacity change from 0 to 32768 [ 783.815246][T13047] [ 783.815246][T13047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 783.815246][T13047] [ 783.872799][T13047] ERROR: (device loop0): diWrite: ixpxd invalid [ 783.872799][T13047] [ 783.909633][T13047] ERROR: (device loop0): txCommit: [ 783.909633][T13047] [ 783.975428][T13047] ERROR: (device loop0): diWrite: ixpxd invalid [ 783.975428][T13047] [ 783.995091][T13051] loop5: detected capacity change from 0 to 32768 [ 784.028841][T13051] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1859 (13051) [ 784.065944][T13047] ERROR: (device loop0): txCommit: [ 784.065944][T13047] [ 784.125593][T13051] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 784.156520][T13051] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 784.213838][T13051] BTRFS info (device loop5): using free-space-tree [ 784.269697][ T5834] [ 784.269697][ T5834] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 784.269697][ T5834] [ 784.306043][ T5834] [ 784.306043][ T5834] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 784.306043][ T5834] [ 785.414509][T13051] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 785.414962][T13051] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 785.532351][T13051] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 785.822268][T13051] BTRFS error (device loop5): open_ctree failed: -12 [ 786.153321][ T5895] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 786.280872][ T5893] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 786.333480][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 786.356301][ T5895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 786.388358][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 786.440505][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.534206][T13114] loop3: detected capacity change from 0 to 256 [ 786.594711][T13114] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 786.608159][T13114] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 786.705531][T13114] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 787.314254][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.340261][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.381597][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 787.451281][ T5893] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.503256][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.559781][ T5893] usb 1-1: config 0 descriptor?? [ 787.568901][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.607536][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 787.627324][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.906645][ T5895] usb 2-1: GET_CAPABILITIES returned 0 [ 787.912283][ T5895] usbtmc 2-1:16.0: can't read capabilities [ 788.137577][ T5895] usb 2-1: USB disconnect, device number 14 [ 788.166714][ T5893] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 788.188677][ T5893] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 788.202677][T13131] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 789.001890][ T10] usb 1-1: USB disconnect, device number 18 [ 789.107301][T13134] fido_id[13134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 789.146748][T13136] macvlan0: entered allmulticast mode [ 789.183688][T13136] veth1_vlan: entered allmulticast mode [ 789.201533][T13135] macvlan0: left allmulticast mode [ 789.223598][T13140] loop2: detected capacity change from 0 to 1024 [ 789.228859][T13135] veth1_vlan: left allmulticast mode [ 789.241288][T13140] EXT4-fs: Ignoring removed orlov option [ 789.264553][T13140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 789.531007][T13140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.984608][ T8008] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.356075][T13171] loop2: detected capacity change from 0 to 256 [ 791.371620][T13171] exfat: Deprecated parameter 'namecase' [ 791.420738][T13171] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 791.863081][T13162] loop0: detected capacity change from 0 to 32768 [ 791.896292][T13181] tipc: Started in network mode [ 791.901251][T13181] tipc: Node identity ff55, cluster identity 4711 [ 791.941842][T13181] tipc: Enabling of bearer rejected, failed to enable media [ 791.982656][T13162] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 792.108078][T13197] sctp: [Deprecated]: syz.2.1907 (pid 13197) Use of int in max_burst socket option deprecated. [ 792.108078][T13197] Use struct sctp_assoc_value instead [ 792.165327][T13162] XFS (loop0): Starting recovery (logdev: internal) [ 792.271173][T13162] XFS (loop0): Ending recovery (logdev: internal) [ 792.522292][T13162] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 792.552518][T13162] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 792.592251][T13162] XFS (loop0): Unmount and run xfs_repair [ 792.627574][T13162] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 792.711967][T13162] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 792.791217][T13162] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 792.804783][T13211] misc userio: Invalid payload size [ 792.856851][T13162] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 792.912262][T13162] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 792.958047][T13162] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 793.038610][T13162] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 793.058171][T13162] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 793.068464][T13162] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 793.082133][T13162] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x4 len 4 error 74 [ 793.313485][ T5834] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 793.358266][ T5834] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 794.425197][T13230] loop0: detected capacity change from 0 to 128 [ 794.505225][T13230] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 794.543176][T13230] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.654531][ T30] audit: type=1800 audit(1749026011.037:215): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1918" name="file0" dev="loop0" ino=12 res=0 errno=0 [ 794.846225][ T5834] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 795.024148][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 795.024557][T10089] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 795.091451][T13240] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.292894][T13226] loop3: detected capacity change from 0 to 40427 [ 795.350639][T13226] F2FS-fs (loop3): build fault injection rate: 771 [ 795.397567][T13226] F2FS-fs (loop3): invalid crc value [ 797.381606][T13226] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 798.063731][ T5878] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 798.273923][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 798.292674][ T5878] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 798.333660][ T5878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 798.394307][ T5878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 798.438350][ T5878] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.485968][ T5878] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 798.523416][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.574247][ T5895] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 798.750258][ T5895] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 798.774157][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.793981][ T5878] usb 1-1: GET_CAPABILITIES returned 0 [ 798.797958][ T5895] usb 3-1: Product: syz [ 798.810067][ T5895] usb 3-1: Manufacturer: syz [ 798.813829][ T5878] usbtmc 1-1:16.0: can't read capabilities [ 798.841196][ T5895] usb 3-1: SerialNumber: syz [ 798.861510][ T5895] usb 3-1: config 0 descriptor?? [ 798.900370][ T5895] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 799.020718][ T9] usb 1-1: USB disconnect, device number 19 [ 800.683604][ T5895] usb 3-1: USB disconnect, device number 14 [ 800.857363][T13307] lo speed is unknown, defaulting to 1000 [ 802.232356][T13302] loop0: detected capacity change from 0 to 32768 [ 802.288276][T13302] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 802.351217][T13325] loop2: detected capacity change from 0 to 4096 [ 802.385845][T13325] ntfs3(loop2): It is recommened to use chkdsk. [ 802.440223][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 802.467513][T13302] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 802.497086][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 802.514159][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 802.606439][T13336] loop3: detected capacity change from 0 to 256 [ 802.645248][T13336] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 802.658733][T13336] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 802.683563][T13336] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 802.711201][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 803.495720][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 803.562813][T13339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'. [ 803.597234][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 803.650172][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 803.662198][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 803.671270][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 803.681612][T13325] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 803.706327][ T5834] ocfs2: Unmounting device (7,0) on (node local) [ 803.719544][T13339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'. [ 805.336966][T13360] loop3: detected capacity change from 0 to 1 [ 805.350349][ T8743] Dev loop3: unable to read RDB block 1 [ 805.359272][ T8743] loop3: unable to read partition table [ 806.107200][ T8743] loop3: partition table beyond EOD, truncated [ 806.994675][T13373] loop2: detected capacity change from 0 to 7 [ 807.012734][ T8008] loop2: [POWERTEC] p1 p2 p3 [ 807.018280][ T8008] loop2: p1 start 1769236852 is beyond EOD, truncated [ 807.025583][ T8008] loop2: p2 start 1869179756 is beyond EOD, truncated [ 807.032717][ T8008] loop2: p3 size 788529152 extends beyond EOD, truncated [ 807.051269][T13373] loop2: [POWERTEC] p1 p2 p3 [ 807.057237][T13373] loop2: p1 start 1769236852 is beyond EOD, truncated [ 807.064665][T13373] loop2: p2 start 1869179756 is beyond EOD, truncated [ 807.071629][T13373] loop2: p3 size 788529152 extends beyond EOD, truncated [ 807.121244][ T5205] loop2: [POWERTEC] p1 p2 p3 [ 807.133965][ T5205] loop2: p1 start 1769236852 is beyond EOD, truncated [ 807.140858][ T5205] loop2: p2 start 1869179756 is beyond EOD, truncated [ 807.147753][ T5205] loop2: p3 size 788529152 extends beyond EOD, truncated [ 807.327108][T13379] loop2: detected capacity change from 0 to 256 [ 807.404315][T13379] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 807.417498][T13379] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 807.446172][T13379] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 808.708862][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.716441][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.320343][ T8743] udevd[8743]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 810.353518][T13409] loop5: detected capacity change from 0 to 1024 [ 810.382431][T13409] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 810.449994][ T8743] udevd[8743]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 810.506843][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 810.547996][T13409] loop5: detected capacity change from 0 to 1764 [ 810.560189][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 810.571858][ T8743] udevd[8743]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 810.743516][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 810.780829][T13419] loop3: detected capacity change from 0 to 1024 [ 810.787820][ T45] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 810.812020][ T45] usb 3-1: config 0 has no interface number 0 [ 810.826634][T13419] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 810.863607][ T45] usb 3-1: config 0 interface 12 has no altsetting 0 [ 810.904927][ T45] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 810.923792][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.956886][ T45] usb 3-1: Product: syz [ 810.971416][ T45] usb 3-1: Manufacturer: syz [ 810.989173][ T45] usb 3-1: SerialNumber: syz [ 811.048560][ T45] usb 3-1: config 0 descriptor?? [ 812.133421][ T5895] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 812.313461][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 812.327884][ T5895] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 812.368081][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.420983][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 812.444278][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 812.455098][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.464896][ T45] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 812.472463][ T45] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 812.483118][ T5895] usb 4-1: Product: syz [ 812.492209][ T5895] usb 4-1: Manufacturer: syz [ 812.508587][ T5895] usb 4-1: SerialNumber: syz [ 812.509973][ T45] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 812.537208][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1997'. [ 812.546545][ T45] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 812.603992][ T45] usb 3-1: USB disconnect, device number 15 [ 812.788255][T13448] bond0: (slave bond_slave_1): Releasing backup interface [ 812.913476][T10157] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 812.951318][T13451] lo speed is unknown, defaulting to 1000 [ 812.972711][ T5895] usb 4-1: 0:2 : does not exist [ 813.127455][T10157] usb 6-1: config 0 has no interfaces? [ 813.160218][T10157] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 813.203406][T10157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.211515][T10157] usb 6-1: Product: syz [ 813.256429][T10157] usb 6-1: Manufacturer: syz [ 813.263972][T10157] usb 6-1: SerialNumber: syz [ 813.296814][T10157] usb 6-1: config 0 descriptor?? [ 813.533550][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 813.630727][T13451] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.706611][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 813.721310][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.727959][ T10] usb 6-1: USB disconnect, device number 3 [ 813.735144][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 813.750065][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.815473][ T5895] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 813.897014][ T5895] usb 4-1: USB disconnect, device number 15 [ 813.970655][ T8743] udevd[8743]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.126553][ T24] usb 3-1: usb_control_msg returned -32 [ 814.132760][ T24] usbtmc 3-1:16.0: can't read capabilities [ 814.922251][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 814.935604][T13490] tipc: Started in network mode [ 814.940677][T13490] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 814.950706][T13490] tipc: Enabling of bearer rejected, failed to enable media [ 815.027197][ T24] usb 3-1: USB disconnect, device number 16 [ 815.091092][T13492] loop0: detected capacity change from 0 to 1024 [ 815.127813][T13492] EXT4-fs: Ignoring removed orlov option [ 815.128829][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 815.154397][T13497] netlink: 'syz.3.2012': attribute type 30 has an invalid length. [ 815.175629][T13492] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 815.209557][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 815.281406][T13500] netlink: 'syz.3.2012': attribute type 30 has an invalid length. [ 815.301462][T13492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.466220][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.686985][T13498] batadv_slave_0: left promiscuous mode [ 816.633416][T13498] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.720347][T13498] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.750711][T13498] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.761824][T13498] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.935403][T13498] hsr0: left allmulticast mode [ 816.940713][T13498] hsr_slave_0: left allmulticast mode [ 816.947606][T13498] hsr_slave_1: left allmulticast mode [ 816.978928][T13498] macvlan0: left promiscuous mode [ 816.989868][T13498] macvlan0: left allmulticast mode [ 817.008205][T13498] gretap0: left allmulticast mode [ 817.023608][T13498] macsec3: left promiscuous mode [ 817.039965][T13498] macsec3: left allmulticast mode [ 817.072954][T13497] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.082899][T13497] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.091860][T13497] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.100687][T13497] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.136676][ T5878] lo speed is unknown, defaulting to 1000 [ 817.142509][ T5878] syz2: Port: 1 Link DOWN [ 817.490078][T13519] lo speed is unknown, defaulting to 1000 [ 817.672556][T13539] syzkaller1: entered promiscuous mode [ 817.699324][T13539] syzkaller1: entered allmulticast mode [ 818.577833][T13548] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 819.092216][T13560] loop3: detected capacity change from 0 to 4096 [ 819.954429][T13572] loop5: detected capacity change from 0 to 512 [ 820.019866][T13572] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 820.072548][T13578] hsr0: entered allmulticast mode [ 820.101784][T13578] hsr_slave_0: entered allmulticast mode [ 820.113859][T13572] EXT4-fs (loop5): 1 truncate cleaned up [ 820.152975][T13572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.182853][T13578] hsr_slave_1: entered allmulticast mode [ 820.239096][T13580] hsr_slave_0: left promiscuous mode [ 820.303929][T13580] hsr_slave_1: left promiscuous mode [ 820.397063][T13580] hsr0 (unregistering): left allmulticast mode [ 820.708290][T11616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.698321][T13607] loop3: detected capacity change from 0 to 128 [ 821.781209][T13607] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 821.813715][T13612] loop2: detected capacity change from 0 to 512 [ 821.844167][T13612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 821.864375][T13607] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 821.952273][T13612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.996988][T13612] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.000448][ T5836] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 822.033459][ T5878] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 822.294578][T13621] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:335: inode #15: comm syz.2.2038: verity file corrupted; can't find descriptor [ 822.323268][T13612] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:335: inode #15: comm syz.2.2038: verity file corrupted; can't find descriptor [ 822.361126][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 822.554354][ T5878] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 822.680480][T13621] EXT4-fs (loop2): Remounting filesystem read-only [ 822.831098][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 823.020511][T13621] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 823.051263][ T5878] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.063036][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 823.074232][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 823.088522][ T5878] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 823.103892][T13612] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 823.319423][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 823.331431][ T5878] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.344223][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 823.355373][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 823.367938][ T5878] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 823.369701][ T8008] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.375587][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 823.375619][ T5878] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.375645][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 823.375672][ T5878] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 823.379242][ T5878] usb 1-1: string descriptor 0 read error: -22 [ 823.542790][ T5878] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 824.136634][T13640] loop2: detected capacity change from 0 to 128 [ 824.165403][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.203976][ T5878] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 824.243806][T13640] EXT4-fs: Ignoring removed nobh option [ 824.291859][T13640] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 824.322379][T13640] ext4 filesystem being mounted at /283/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 824.342974][T13643] loop3: detected capacity change from 0 to 1024 [ 824.364563][T13643] EXT4-fs: Ignoring removed nobh option [ 824.370193][T13643] EXT4-fs: Ignoring removed bh option [ 824.454533][T13643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.535831][ T5878] usb 1-1: USB disconnect, device number 20 [ 824.542419][T13649] usb 1-1: Couldn't submit interrupt_out_urb -19 [ 824.563309][ T30] audit: type=1804 audit(1749026040.947:216): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2044" name="/newroot/283/mnt/bus" dev="loop2" ino=12 res=1 errno=0 [ 824.735918][ T8008] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.811738][T13643] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 825.877491][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.889626][T13664] loop0: detected capacity change from 0 to 256 [ 825.904787][T13664] exfat: Deprecated parameter 'utf8' [ 825.994690][T13664] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 826.740610][ T30] audit: type=1326 audit(1749026043.127:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13667 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e558e969 code=0x7fc00000 [ 826.769022][T13650] loop5: detected capacity change from 0 to 32768 [ 826.815636][ T30] audit: type=1326 audit(1749026043.127:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13667 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e558e969 code=0x7fc00000 [ 826.843610][ T30] audit: type=1326 audit(1749026043.127:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13667 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e558e969 code=0x7fc00000 [ 826.880493][ T30] audit: type=1326 audit(1749026043.127:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13667 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e558e969 code=0x7fc00000 [ 826.917157][T13650] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 827.018302][T13650] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 827.107338][T13650] XFS (loop5): Ending clean mount [ 827.213151][T13650] XFS (loop5): Quotacheck needed: Please wait. [ 827.323971][T13660] loop2: detected capacity change from 0 to 32768 [ 827.805780][T13660] (syz.2.2048,13660,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 828.044372][T13660] (syz.2.2048,13660,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 828.159581][T13650] XFS (loop5): Quotacheck: Done. [ 828.169270][T13660] (syz.2.2048,13660,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 828.188856][T13695] loop3: detected capacity change from 0 to 256 [ 828.197858][T13692] kvm: Disabled LAPIC found during irq injection [ 828.205759][T13695] exfat: Deprecated parameter 'utf8' [ 828.241779][T13695] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 828.276326][T13660] JBD2: Ignoring recovery information on journal [ 828.346400][T11616] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 828.385413][T13660] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 828.541622][T13660] (syz.2.2048,13660,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 828.612974][T13660] (syz.2.2048,13660,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 828.743987][T13660] (syz.2.2048,13660,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 828.781869][T13660] (syz.2.2048,13660,1):ocfs2_quota_read:201 ERROR: status = -5 [ 828.802765][ T5855] Bluetooth: hci3: command 0x0405 tx timeout [ 828.820038][T13660] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5 [ 828.898747][T13660] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 828.976177][T13660] (syz.2.2048,13660,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 829.224149][T13704] (syz.2.2048,13704,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 829.381281][T13660] (syz.2.2048,13660,0):ocfs2_mknod:314 ERROR: status = -5 [ 829.398955][T13660] (syz.2.2048,13660,0):ocfs2_mknod:502 ERROR: status = -5 [ 829.429440][T13704] (syz.2.2048,13704,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 829.543396][T13660] (syz.2.2048,13660,1):ocfs2_create:675 ERROR: status = -5 [ 829.554629][T13704] (syz.2.2048,13704,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 829.606623][T13704] (syz.2.2048,13704,1):ocfs2_quota_read:201 ERROR: status = -5 [ 829.646444][T13704] Quota error (device loop2): find_next_id: Can't read quota tree block 5 [ 829.695172][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 829.716547][T13704] (syz.2.2048,13704,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 829.866710][T13525] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 829.890323][ T8008] ocfs2: Unmounting device (7,2) on (node local) [ 829.898268][T13716] loop3: detected capacity change from 0 to 1 [ 830.110351][T13716] Dev loop3: unable to read RDB block 1 [ 830.204423][T13716] loop3: unable to read partition table [ 830.299142][T13716] loop3: partition table beyond EOD, truncated [ 830.397041][T13716] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 830.615423][T13721] loop0: detected capacity change from 0 to 256 [ 830.643961][T13525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.678990][T13721] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 830.693733][T13721] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 830.711026][T13525] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 830.724660][T13525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.728584][T13721] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 830.737082][T13525] usb 4-1: config 0 descriptor?? [ 831.229534][T13525] hid (null): usage index exceeded [ 831.272874][T13525] asus 0003:048D:CE50.000E: ignoring exceeding usage max [ 831.329765][T13525] asus 0003:048D:CE50.000E: ignoring exceeding usage max [ 831.355672][T13525] asus 0003:048D:CE50.000E: usage index exceeded [ 831.362095][T13525] asus 0003:048D:CE50.000E: item 0 1 2 2 parsing failed [ 831.394136][T13525] asus 0003:048D:CE50.000E: Asus hid parse failed: -22 [ 831.419221][T13525] asus 0003:048D:CE50.000E: probe with driver asus failed with error -22 [ 831.473997][T13525] usb 4-1: USB disconnect, device number 16 [ 836.068233][T13764] loop3: detected capacity change from 0 to 512 [ 836.232401][T13764] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2080: corrupted inode contents [ 836.268492][T13764] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.2080: mark_inode_dirty error [ 836.366175][T13764] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2080: corrupted inode contents [ 836.409128][T13764] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2080: mark_inode_dirty error [ 836.465655][T13764] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2080: corrupted inode contents [ 836.562655][T13764] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 836.597476][T13764] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.2080: corrupted inode contents [ 836.686005][T13764] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.2080: mark_inode_dirty error [ 836.704661][T13764] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 836.745325][T13764] EXT4-fs (loop3): 1 truncate cleaned up [ 836.986783][ T1111] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 837.319740][T13764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.334685][ T1111] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 837.395378][T13764] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.561862][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.254102][T13823] tipc: New replicast peer: 255.255.255.255 [ 839.306292][T13823] tipc: Enabled bearer , priority 10 [ 839.334424][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2097'. [ 839.519311][T13827] tipc: Disabling bearer [ 841.220498][T13846] loop2: detected capacity change from 0 to 512 [ 841.564891][T13846] EXT4-fs (loop2): 1 orphan inode deleted [ 841.589659][ T7273] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 841.595754][T13846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.622545][T13846] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.633338][ T7273] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 842.060091][T13843] loop5: detected capacity change from 0 to 32768 [ 843.405249][T13843] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 843.505874][T13843] XFS (loop5): Ending clean mount [ 843.536699][ T8008] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.556799][T13843] XFS (loop5): Quotacheck needed: Please wait. [ 843.969074][T13843] XFS (loop5): Quotacheck: Done. [ 844.435248][T13888] loop3: detected capacity change from 0 to 128 [ 844.528212][T11616] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 844.575112][T13888] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 844.869035][T13893] loop0: detected capacity change from 0 to 32768 [ 844.921500][T13893] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2118 (13893) [ 844.939456][T13888] ext4 filesystem being mounted at /431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 844.993744][T13893] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 845.004562][T13893] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 845.014108][T13893] BTRFS info (device loop0): using free-space-tree [ 846.013809][ T30] audit: type=1800 audit(1749026062.377:221): pid=13893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2118" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 846.187339][ T5834] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 846.306684][ T5836] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 846.529137][T13926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.711614][T13525] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 846.894528][T13525] usb 1-1: Using ep0 maxpacket: 16 [ 846.911224][T13525] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 846.932024][T13525] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 846.957369][T13525] usb 1-1: Product: syz [ 846.967535][T13525] usb 1-1: Manufacturer: syz [ 846.988930][T13525] usb 1-1: SerialNumber: syz [ 847.033631][T13525] usb 1-1: config 0 descriptor?? [ 847.993714][T13525] usb 1-1: USB disconnect, device number 21 [ 848.094059][ T5878] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 848.350584][ T9919] udevd[9919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.977777][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 849.997027][ T5878] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 850.007627][ T5878] usb 4-1: config 0 has no interface number 0 [ 850.027705][ T5878] usb 4-1: config 0 interface 184 has no altsetting 0 [ 850.044365][ T5878] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 850.063644][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.071771][ T5878] usb 4-1: Product: syz [ 850.083333][ T5878] usb 4-1: Manufacturer: syz [ 850.088045][ T5878] usb 4-1: SerialNumber: syz [ 850.090579][T13948] loop2: detected capacity change from 0 to 4096 [ 850.116476][ T5878] usb 4-1: config 0 descriptor?? [ 850.136128][ T5878] smsc75xx v1.0.0 [ 850.173266][T13525] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 850.198200][T13948] NILFS (loop2): invalid segment: Checksum error in segment payload [ 850.225050][T13948] NILFS (loop2): trying rollback from an earlier position [ 850.272757][T13948] NILFS (loop2): recovery complete [ 850.287952][T13956] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 850.306667][T13953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.364803][T13525] usb 2-1: Using ep0 maxpacket: 32 [ 850.380991][T13525] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 850.421309][T13525] usb 2-1: config 0 has no interface number 0 [ 850.450601][T13525] usb 2-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 850.480765][T13525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.497028][T13525] usb 2-1: Product: syz [ 850.508437][T13525] usb 2-1: Manufacturer: syz [ 850.527523][T13525] usb 2-1: SerialNumber: syz [ 850.549482][T13525] usb 2-1: config 0 descriptor?? [ 850.586625][T13525] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 850.633587][T13953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.673416][ T45] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 850.760605][T13953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.833606][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 850.843231][ T45] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 850.851773][ T45] usb 1-1: config 0 has no interface number 0 [ 850.860950][ T45] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 850.888475][ T45] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 850.926141][ T45] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 851.165513][ T5878] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 851.177262][ T45] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 851.191127][ T5878] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 851.202200][ T45] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 851.212007][ T5878] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 851.224727][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.233229][ T5878] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 851.242948][ T5878] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 851.893538][ T5878] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 851.911895][ T5878] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 851.922104][ T45] usb 1-1: config 0 descriptor?? [ 851.970607][ T45] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 852.010145][ T5878] usb 4-1: USB disconnect, device number 17 [ 852.018683][T13525] gspca_sunplus: reg_w_riv err -71 [ 852.052599][T13525] sunplus 2-1:0.250: probe with driver sunplus failed with error -71 [ 852.101902][T13525] usb 2-1: USB disconnect, device number 15 [ 852.199784][T13953] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.261127][T13953] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.302699][T13953] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.336474][T13953] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.996055][ T45] usb 1-1: USB disconnect, device number 22 [ 854.064994][ T45] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 855.533305][T13524] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 855.724762][T13524] usb 4-1: Using ep0 maxpacket: 8 [ 855.782169][T13524] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 855.852885][T13524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 856.543571][T13524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 856.565310][T13524] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 856.574984][T13524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.583013][T13524] usb 4-1: Product: syz [ 856.592371][T13524] usb 4-1: Manufacturer: syz [ 857.050992][T14026] loop0: detected capacity change from 0 to 32768 [ 857.247181][T13524] usb 4-1: SerialNumber: syz [ 857.314358][T13524] usb 4-1: config 0 descriptor?? [ 857.350565][T13524] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 857.472546][T14026] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 857.472546][T14026] allowing incompatible features above 0.0: (unknown version) [ 857.472546][T14026] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 857.547976][T13524] usb 4-1: USB disconnect, device number 18 [ 857.671791][T14026] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 857.703697][T14026] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 857.716365][T14026] bcachefs (loop0): Version upgrade required: [ 857.716365][T14026] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 857.716365][T14026] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 857.716365][T14026] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 857.812715][T14026] bcachefs (loop0): dropping and reconstructing all alloc info [ 857.952686][T14026] bcachefs (loop0): btree node read error at btree dirents level 0/0 [ 857.952724][T14026] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 281474976710656: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 857.952743][T14026] loop0 node offset 0/24: incorrect min_key: got 0:0:7 should be POS_MIN [ 857.952757][T14026] flagging btree dirents lost data [ 857.952768][T14026] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 857.952781][T14026] ret btree_node_read_validate_error [ 858.431863][T14026] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 858.674160][T14026] bcachefs (loop0): scan_for_btree_nodes... [ 858.858343][T14026] bcachefs (loop0): btree node scan found 7 nodes after overwrites [ 858.916501][ T30] audit: type=1326 audit(1749026075.307:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915298e969 code=0x7fc00000 [ 858.930504][T14026] done [ 858.974934][T14026] bcachefs (loop0): check_topology... [ 858.975423][T14026] bcachefs (loop0): btree root dirents unreadable, must recover from scan [ 859.084300][T14026] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=dirents level=0 POS_MIN - SPOS_MAX [ 859.127957][T14093] loop3: detected capacity change from 0 to 256 [ 859.203846][T14026] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key 0:0:7 durability: 1 ptr: 0:41:0 gen 0 [ 859.365568][T14026] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=dirents level=0 POS_MIN - 0:0:6 [ 859.430674][T14026] bcachefs (loop0): error in recovery: ENOMEMemergency read only at seq 10 [ 859.633373][T14026] bcachefs (loop0): bch2_fs_start(): error starting filesystem ENOMEM [ 859.807422][T14026] bcachefs (loop0): shutting down [ 860.136046][T14026] bcachefs (loop0): shutdown complete [ 860.521296][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2177'. [ 860.686066][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2177'. [ 862.239470][ T30] audit: type=1326 audit(1749026078.627:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14125 comm="syz.2.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f38e969 code=0x7fc00000 [ 862.350161][ T30] audit: type=1326 audit(1749026078.627:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14125 comm="syz.2.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4c8f38e969 code=0x7fc00000 [ 862.421510][ T30] audit: type=1326 audit(1749026078.627:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14125 comm="syz.2.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f38e969 code=0x7fc00000 [ 862.653434][ T30] audit: type=1326 audit(1749026078.627:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14125 comm="syz.2.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f38e969 code=0x7fc00000 [ 863.428989][T14122] loop3: detected capacity change from 0 to 32768 [ 863.570135][T14122] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 863.681871][ T30] audit: type=1800 audit(1749026080.067:227): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2178" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 863.803883][ T30] audit: type=1800 audit(1749026080.067:228): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2178" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 863.879339][T14026] bcachefs: bch2_fs_get_tree() error: ENOMEM [ 863.973471][T14026] Filesystem bcachefs get_tree() didn't set fc->root, returned 12 [ 863.981827][T14026] ------------[ cut here ]------------ [ 863.987524][T14026] kernel BUG at fs/super.c:1812! [ 864.052186][T14026] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 864.058687][T14026] CPU: 0 UID: 0 PID: 14026 Comm: syz.0.2153 Not tainted 6.15.0-next-20250604-syzkaller #0 PREEMPT(full) [ 864.070021][T14026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 864.080119][T14026] RIP: 0010:vfs_get_tree+0x29f/0x2b0 [ 864.085457][T14026] Code: 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 8b ee ff 48 8b 33 48 c7 c7 00 31 99 8b 44 89 f2 e8 d2 42 f2 fe 90 <0f> 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 864.105109][T14026] RSP: 0018:ffffc90003fefd58 EFLAGS: 00010246 [ 864.111200][T14026] RAX: 000000000000003f RBX: ffffffff8e7829a0 RCX: 763e3deb27611200 [ 864.119182][T14026] RDX: ffffc90005199000 RSI: 000000000007ffff RDI: 0000000000080000 [ 864.127170][T14026] RBP: 0000000000000000 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 864.135174][T14026] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 1ffff1100b3f9996 [ 864.143169][T14026] R13: dffffc0000000000 R14: 000000000000000c R15: 0000000000000000 [ 864.151165][T14026] FS: 00007f42e63866c0(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 864.160115][T14026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.166809][T14026] CR2: 00007ff558793000 CR3: 0000000035f62000 CR4: 00000000003526f0 [ 864.174802][T14026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 864.182784][T14026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 864.190765][T14026] Call Trace: [ 864.194060][T14026] [ 864.197010][T14026] do_new_mount+0x24a/0xa40 [ 864.201536][T14026] __se_sys_mount+0x317/0x410 [ 864.206233][T14026] ? __pfx___se_sys_mount+0x10/0x10 [ 864.212319][T14026] ? do_syscall_64+0xbe/0x3b0 [ 864.217010][T14026] ? __x64_sys_mount+0x20/0xc0 [ 864.221789][T14026] do_syscall_64+0xfa/0x3b0 [ 864.226305][T14026] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.231521][T14026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.237603][T14026] ? clear_bhb_loop+0x60/0xb0 [ 864.242292][T14026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.248194][T14026] RIP: 0033:0x7f42e559010a [ 864.252625][T14026] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.272266][T14026] RSP: 002b:00007f42e6385e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 864.280697][T14026] RAX: ffffffffffffffda RBX: 00007f42e6385ef0 RCX: 00007f42e559010a [ 864.288679][T14026] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f42e6385eb0 [ 864.296665][T14026] RBP: 00002000000000c0 R08: 00007f42e6385ef0 R09: 0000000000800000 [ 864.304653][T14026] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000000 [ 864.312636][T14026] R13: 00007f42e6385eb0 R14: 0000000000005978 R15: 00002000000003c0 [ 864.320629][T14026] [ 864.323677][T14026] Modules linked in: [ 864.328474][T14026] ---[ end trace 0000000000000000 ]--- [ 864.355270][T14026] RIP: 0010:vfs_get_tree+0x29f/0x2b0 [ 864.361136][T14026] Code: 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 14 8b ee ff 48 8b 33 48 c7 c7 00 31 99 8b 44 89 f2 e8 d2 42 f2 fe 90 <0f> 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 864.389233][ T5836] ocfs2: Unmounting device (7,3) on (node local) [ 864.533990][T14026] RSP: 0018:ffffc90003fefd58 EFLAGS: 00010246 [ 864.540847][T14026] RAX: 000000000000003f RBX: ffffffff8e7829a0 RCX: 763e3deb27611200 [ 864.840969][T14026] RDX: ffffc90005199000 RSI: 000000000007ffff RDI: 0000000000080000 [ 864.891115][T14026] RBP: 0000000000000000 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 864.922264][T14026] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 1ffff1100b3f9996 [ 864.930459][T14026] R13: dffffc0000000000 R14: 000000000000000c R15: 0000000000000000 [ 864.938548][T14026] FS: 00007f42e63866c0(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 864.958680][T14026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.980188][T14026] CR2: 00007f9152b7d2d8 CR3: 0000000035f62000 CR4: 00000000003526f0 [ 864.997422][T14026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 865.006673][T14026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 865.015177][T14026] Kernel panic - not syncing: Fatal exception [ 865.021668][T14026] Kernel Offset: disabled [ 865.026014][T14026] Rebooting in 86400 seconds..