last executing test programs: 5m41.787932066s ago: executing program 2 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5m40.539248495s ago: executing program 2 (id=177): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000081) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m37.931045805s ago: executing program 2 (id=181): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) truncate(0x0, 0x95a) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x8}, 0x5}}}, 0x7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc00090582"], 0x0) 5m36.28776102s ago: executing program 2 (id=190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c00038018000080"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5m35.213674277s ago: executing program 2 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, &(0x7f0000000040)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) 5m32.799330244s ago: executing program 2 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000f00)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d302c696f636861727365743d63703737352c73686f72746e616d653d77696e39352c756e695f786c6174653d302c6e6f636173652c636f6465706167653d3733372c726f6469722c696f636861727365743d6d6163696e7569742c696f636861727365743d6d6163677265656b2c757466383d302c00f4f168e95dab38d0ec2bd96f7cdbaecb21e70292435ed8777cfa9b37331faa9394479a76a69348cc8f8d0f08d42aed344c00"/203], 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 5m17.258359273s ago: executing program 32 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000f00)=ANY=[@ANYBLOB="757466383d312c726f6469722c756e695f786c6174653d302c696f636861727365743d63703737352c73686f72746e616d653d77696e39352c756e695f786c6174653d302c6e6f636173652c636f6465706167653d3733372c726f6469722c696f636861727365743d6d6163696e7569742c696f636861727365743d6d6163677265656b2c757466383d302c00f4f168e95dab38d0ec2bd96f7cdbaecb21e70292435ed8777cfa9b37331faa9394479a76a69348cc8f8d0f08d42aed344c00"/203], 0x3, 0x350, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) 3m20.932787531s ago: executing program 4 (id=501): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x18, 0x110, 0xc, ')'}], 0x18}, 0x0) 3m20.595067226s ago: executing program 4 (id=504): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) io_uring_enter(0xffffffffffffffff, 0x627, 0xc1040000, 0x43, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 3m17.949421127s ago: executing program 4 (id=507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8b416095cbf5e4b88087b", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x3}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000100)) r7 = mq_open(&(0x7f0000000580)='::+\'*\x00', 0x800, 0x12, &(0x7f00000005c0)={0x1, 0x1, 0x1, 0x8}) mq_getsetattr(r7, 0x0, &(0x7f00000006c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f00000002c0)=""/29, 0x1d}], 0x4, 0xc7, 0x6) 3m12.577169269s ago: executing program 4 (id=521): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa0143, 0x82) 3m9.28046238s ago: executing program 4 (id=528): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 3m7.751627694s ago: executing program 4 (id=532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mount_setattr(r0, 0x0, 0x8000, &(0x7f0000000280)={0x8, 0x0, 0x120000, {r0}}, 0x20) 3m7.282095661s ago: executing program 33 (id=532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mount_setattr(r0, 0x0, 0x8000, &(0x7f0000000280)={0x8, 0x0, 0x120000, {r0}}, 0x20) 33.639864792s ago: executing program 6 (id=918): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000eb0000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 27.91995121s ago: executing program 6 (id=926): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0xffffffff, 0xfffffff6}}) 27.018291034s ago: executing program 6 (id=929): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1000008, &(0x7f0000000540)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@shortname_mixed}, {@numtail}, {@fat=@gid}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@rodir}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fat=@nocase}, {@fat=@errors_remount}]}, 0x1, 0x36a, &(0x7f0000001840)="$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") open(0x0, 0x145102, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, 0x0, 0x0, 0xfecc) 20.407698526s ago: executing program 6 (id=937): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000002c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@prjquota}, {@auto_da_alloc}, {@nobarrier}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000001180)="$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") socket(0x2a, 0x2, 0xfffff864) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000601"], 0x1c}}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x10c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) 14.884075231s ago: executing program 6 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(0x0, 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r8 = openat$dsp1(0xffffff9c, &(0x7f0000000400), 0x400, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000540)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffa}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") 11.095439509s ago: executing program 0 (id=958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xffffffffffffff48, 0x3, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 10.100022604s ago: executing program 0 (id=960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10.086671065s ago: executing program 5 (id=961): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) listxattr(0x0, 0x0, 0xfffffef5) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0x4c}, 0x50) 8.487854129s ago: executing program 0 (id=967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05012ebd7000fedbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB="080015"], 0x28}, 0x1, 0x0, 0x0, 0x200010d4}, 0x4000000) 8.153776554s ago: executing program 5 (id=978): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000076d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb9713", 0x91}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e", 0x34}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @redirect={0x5, 0x1, 0x0, @loopback, {0x5, 0x4, 0x1, 0x2, 0x8, 0x68, 0x44, 0x2, 0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.931987588s ago: executing program 0 (id=969): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) 7.858741889s ago: executing program 5 (id=970): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1300000000000000) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1800004, &(0x7f0000005880)={[{@discard_unit_segment}, {}, {@acl}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=dx\xd5|\xa1\xc8\x96J|\x8c\x04\xd2gisable'}}, {@alloc_mode_def}, {@inline_dentry}, {@nouser_xattr}, {@block_mode}, {@noacl}, {@atgc}, {@background_gc_on}, {@jqfmt_vfsold}, {@prjjquota={'prjjquota', 0x3d, 'checkpoint=dx\xd5|\xa1\xc8\x96J|\x8c\x04\xd2gisable'}}]}, 0xfd, 0x5522, &(0x7f000000cf00)="$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") 6.286840843s ago: executing program 3 (id=972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8b416095cbf5e4b88087b", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x3}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000100)) r7 = mq_open(&(0x7f0000000580)='::+\'*\x00', 0x800, 0x12, &(0x7f00000005c0)={0x1, 0x1, 0x1, 0x8}) mq_getsetattr(r7, &(0x7f0000000680)={0x0, 0x8, 0x3, 0x8}, &(0x7f00000006c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/181, 0xb5}, {0x0}, {&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f00000002c0)=""/29, 0x1d}], 0x4, 0xc7, 0x6) 4.599886859s ago: executing program 0 (id=973): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.588477494s ago: executing program 5 (id=975): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES8], 0x38}}, 0x0) 3.429344437s ago: executing program 3 (id=976): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, 0x0, 0xa0143, 0x82) 3.340643818s ago: executing program 1 (id=977): openat$kvm(0xffffffffffffff9c, 0x0, 0x2900, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x31c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 3.27186836s ago: executing program 0 (id=979): connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'erspan0\x00'}}, 0x1e) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x3000012, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@compress_force}, {@compress_force}, {@acl}, {@nobarrier}, {}, {@nodiscard}, {@rescan_uuid_tree}, {@ssd_spread}, {@nodatacow}]}, 0x23, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1}) 3.076899082s ago: executing program 3 (id=980): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da", 0x29}], 0x2}], 0x1, 0x840) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1}, 0x10001) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) 2.649573049s ago: executing program 1 (id=981): syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0x7, 0x1000, 0x0, 0x2}}]}}, 0x15) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) 2.463869832s ago: executing program 1 (id=982): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000076d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb9713", 0x91}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)}}], 0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @redirect={0x5, 0x1, 0x0, @loopback, {0x5, 0x4, 0x1, 0x2, 0x8, 0x68, 0x44, 0x2, 0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.356974143s ago: executing program 1 (id=983): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2.354333163s ago: executing program 3 (id=984): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) 1.982503719s ago: executing program 5 (id=985): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x80000001, 0x59455247, 0x140, 0xf0, 0x0, @discrete={0x8, 0x6}}) 1.671052404s ago: executing program 6 (id=986): creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) close(r5) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) socket$netlink(0x10, 0x3, 0x0) chroot(&(0x7f0000000040)='./file0\x00') 1.619721025s ago: executing program 1 (id=987): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaabb00006a9ce7f386dd6040000000140600fc00"/37, @ANYRESDEC=r5, @ANYBLOB="5e44b012e96cb92155d7018cd6687cfa4ab5776bdaf424b9cfe3f073e0a88246015537f5b9537541893a9821b74e25257d973625d84f7b71a34e33cd6dd0b66f875f8a7d065e7711a6c66558f97b30e57c9cbec6e8fe1bcf0cb55a79ec7f5ec206d06e2be1656b6262ceb3a021e4455cf31678a37e9121c504a2e128a94edab1804d269546c6f0583b7f7ff99840a816cd7e4e78deb1d7d62f8ed6dc1a5a6b9afca3ff45000e752ad2d6dcd66796916827c78c1f621f539014543ffd5eb47ffe61"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2d0, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x330) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x264082, 0x22) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc3a01, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x8000, 0x9) 1.617437284s ago: executing program 5 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8b416095cbf5e4b88087b", 0x0, 0x1000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x3}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000100)) r7 = mq_open(&(0x7f0000000580)='::+\'*\x00', 0x800, 0x12, &(0x7f00000005c0)={0x1, 0x1, 0x1, 0x8}) mq_getsetattr(r7, &(0x7f0000000680)={0x0, 0x8, 0x3, 0x8}, &(0x7f00000006c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/181, 0xb5}, {0x0}, {&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f00000002c0)=""/29, 0x1d}], 0x4, 0xc7, 0x6) 1.222358511s ago: executing program 3 (id=989): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x3, 0x8, 0x3, 0x3, 0x10001}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8341, 0x0) write$nbd(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x40) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) getrlimit(0x7, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fcntl$getown(r5, 0x9) fstat(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000480)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000080)=0x3, 0x12) setsockopt$packet_rx_ring(r10, 0x107, 0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="99e117f769066baed53897c397e8e9c151570f1187b2f49f5f53480acde061ac884ce211eb5362b94a236016cb26a33412", 0x31}, {&(0x7f0000000280)="2e2493ddfbf7d519f53eb4a0b9dc7b2afa28d5041035b4f8b45a539de352f2582bda87dbfa7673bdbe16cb618b439b9d8c1ca369ad646d6fef9181dff81d02", 0x3f}], 0x2, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x24040000}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)="d6b4f2553b343079b5e055acdeff9749fbf009a682ab854a16caaecbc7524ade09b8acc86706f3f268ab82cf429d322805a240b37ec31004526142aa124b861a482e6ef9276c481801c421adc3cf37ddada9d47b0cbb3e783fdd3aef2b195694e1f77adef0d433cf", 0x68}, {&(0x7f00000007c0)="da7ebdce0e81580711a94686e127dfd51eec52d4321b1859a8f9f18beefb5bc3a298ca73d3c5306e9507b79a3b9b69f58f6663ba4898f67788a339d2d4147173d6268da9fe0c3e1fc1186b8d376286504d369d008e8b682e0a7035d3af97949d24277aef07329039afac744ae0849c2c72", 0x71}, {&(0x7f0000000880)="4012f8219f3dc17d54ab7cf53bb8ae25d06e4ce6be0f38b7f906f704e9e9302044c135b3118842539d4c30edc92cae203046dd13df0e05f1fd93511b9b699a7882766862d18de81d5e9fe21c87c145244a1f18b2fcffd72091eff895b1a0be5a0c25bd38981eaf68392c611195c86303463a72a03d8f3241c01b6f472b2cca9125617464173d4e6b6d287991f44089023df380660e9abe15102e810ee9fd8f29b0127753602d72b77a09f6cc88f2be820854af", 0xb3}, {&(0x7f0000000940)="db4d40526bd4294abf133219787863e71946c3e74b077abac67392bc578e53c9dc06e62267b2054a2087fa031438b7571f2ef03f017a485f72059fc11c26beca887093ea87f64f0202cb01a903f76dc23fac6cc838c9ff25489d61a580681131bea07671ada03b6ca50190b4c022318caaa6621befd3be3fc61d174583f6b9e1e61d1ec4867374dec0b0f3993b3396a8fa6b3f94d091d9a090069993bfcbe7cc0c365994872bbb94d4b94b193cd1ae42901d5c9f29b26329b82b15d3a10ef302aa0427bc42525fd03139b7388faed56e08e72116c84d47c375c6812f07f70f9d88", 0xe1}, {&(0x7f0000000a40)="f340e33f1e92bae9bce86d018c26c193fdc4ab1b2695cbf0c5f616", 0x1b}, {&(0x7f0000000bc0)}, {&(0x7f0000000cc0)="ec4a87b2973556475157aa0c7e0ef06180954b6ebcda60067a723164b7e13bf73cea91d984f8bbe60417377b01296369b1d29bb8e744221d16ba29ae646a7632ba88295e14c5da6bf17ace49d17b11534023168b66bbc9baf880a82b5a6ff24dce326bacc3820ccd809d8fcbb8aad28b9beb73a9e2219caa8b8d67e6e3fefd08b4565575ebf1f5b2510492e6e08b9e9ae2cd15aaf8f397f8d6382bb66a80d708e174e8a2f3c94ec1c26169d159f42d009dea6780ee7eeaecf5799b4d1e4f6c65b553e82d30adedb44d2e2eb185e2c56d14a26d0ebeb4fd236839b239b0f02fe79c4425b6aae88df54740350600", 0xed}], 0x7, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=[@rights={{0x28, 0x1, 0x1, [r3, r2, r5, r3, r1, r10]}}, @rights={{0x10}}], 0x38, 0x4004000}}, {{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x40000}}], 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2814\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0x6, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x3, 0x81, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 291.417725ms ago: executing program 1 (id=990): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, 0x0, 0xa0143, 0x82) 0s ago: executing program 3 (id=991): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): capacity change from 0 to 512 [ 225.525744][ T5823] autofs4:pid:5823:autofs_fill_super: called with bogus options [ 225.582000][ T5818] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.351: corrupted in-inode xattr [ 225.608286][ T5818] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.351: couldn't read orphan inode 15 (err -117) [ 225.733632][ T5818] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 225.792273][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 225.943585][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 225.973331][ T4391] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 226.228664][ T4391] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.239603][ T4272] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 226.313348][ T125] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.364480][ T4391] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.463222][ T4272] usb 1-1: Using ep0 maxpacket: 32 [ 226.470880][ T4272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.543433][ T125] usb 5-1: Using ep0 maxpacket: 32 [ 226.554101][ T125] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 226.582127][ T4391] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.693766][ T4272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.731985][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.761859][ T4391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.890398][ T4272] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.931319][ T4391] usb 2-1: Product: syz [ 227.001079][ T125] usb 5-1: config 0 descriptor?? [ 227.047119][ T4391] usb 2-1: Manufacturer: syz [ 227.083436][ T5827] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 227.133832][ T4272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.174469][ T4391] usb 2-1: SerialNumber: syz [ 227.239997][ T125] gspca_main: sq930x-2.14.0 probing 041e:403c [ 227.510776][ T4272] usb 1-1: config 0 descriptor?? [ 227.617433][ T125] gspca_sq930x: ucbus_write failed -71 [ 227.625157][ T125] sq930x: probe of 5-1:0.0 failed with error -71 [ 227.709918][ T4272] hub 1-1:0.0: USB hub found [ 227.834376][ T125] usb 5-1: USB disconnect, device number 10 [ 227.862334][ T4272] hub 1-1:0.0: 1 port detected [ 227.875010][ T4391] usb 2-1: 0:2 : does not exist [ 227.998826][ T4391] usb 2-1: unit 6 not found! [ 229.075689][ T4272] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 229.118179][ T5847] loop3: detected capacity change from 0 to 1024 [ 229.193071][ T4272] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 229.302250][ T4391] usb 2-1: USB disconnect, device number 6 [ 229.324041][ T5847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.334579][ T4272] usbhid 1-1:0.0: can't add hid device: -32 [ 229.352084][ T4272] usbhid: probe of 1-1:0.0 failed with error -32 [ 229.380724][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 229.462885][ T4272] usb 1-1: USB disconnect, device number 5 [ 229.514786][ T5856] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 230.523098][ T5856] comedi comedi3: reset error (fatal) [ 230.729519][ T4696] udevd[4696]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.775339][ T5861] loop0: detected capacity change from 0 to 64 [ 231.475586][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 232.241673][ T5884] autofs4:pid:5884:autofs_fill_super: called with bogus options [ 233.208418][ T5912] loop0: detected capacity change from 0 to 512 [ 233.270678][ T5912] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.368: corrupted in-inode xattr [ 233.285790][ T5912] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.368: couldn't read orphan inode 15 (err -117) [ 233.319465][ T5912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.353676][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 233.502930][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 233.800028][ T4350] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 234.226828][ T5916] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 235.323294][ T4350] usb 1-1: Using ep0 maxpacket: 32 [ 235.336660][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.555457][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.775481][ T4350] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.826635][ T5921] comedi comedi3: reset error (fatal) [ 236.018016][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.361908][ T4350] usb 1-1: config 0 descriptor?? [ 236.649191][ T4350] usb 1-1: can't set config #0, error -71 [ 236.688442][ T4350] usb 1-1: USB disconnect, device number 6 [ 236.748795][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 236.953071][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 237.786381][ T5943] loop0: detected capacity change from 0 to 256 [ 237.904004][ T5943] FAT-fs (loop0): Directory bread(block 64) failed [ 237.910603][ T5943] FAT-fs (loop0): Directory bread(block 65) failed [ 238.053352][ T5943] FAT-fs (loop0): Directory bread(block 66) failed [ 238.173651][ T5943] FAT-fs (loop0): Directory bread(block 67) failed [ 238.181188][ T5943] FAT-fs (loop0): Directory bread(block 68) failed [ 238.196530][ T5943] FAT-fs (loop0): Directory bread(block 69) failed [ 238.209622][ T5943] FAT-fs (loop0): Directory bread(block 70) failed [ 238.216810][ T5943] FAT-fs (loop0): Directory bread(block 71) failed [ 238.227123][ T5943] FAT-fs (loop0): Directory bread(block 72) failed [ 238.235863][ T5943] FAT-fs (loop0): Directory bread(block 73) failed [ 238.953250][ T4342] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 239.375115][ T4342] usb 6-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 239.405586][ T4342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.448812][ T4342] usb 6-1: config 0 descriptor?? [ 239.488742][ T4342] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 239.677870][ T4342] gspca_sn9c20x: Write register 1000 failed -71 [ 239.687255][ T5933] loop3: detected capacity change from 0 to 32768 [ 239.696523][ T4342] gspca_sn9c20x: Device initialization failed [ 239.712799][ T4342] gspca_sn9c20x: probe of 6-1:0.0 failed with error -71 [ 239.735441][ T5933] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.372 (5933) [ 239.789411][ T4342] usb 6-1: USB disconnect, device number 2 [ 239.827086][ T5933] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 239.865516][ T5933] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 239.866326][ T5962] autofs4:pid:5962:autofs_fill_super: called with bogus options [ 239.891332][ T5933] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 239.917474][ T5933] BTRFS info (device loop3): use zstd compression, level 3 [ 239.924951][ T5933] BTRFS info (device loop3): using free space tree [ 240.165126][ T5933] BTRFS error (device loop3): open_ctree failed: -12 [ 240.202657][ T4696] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4696) [ 240.807081][ T6002] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 241.603594][ T6019] loop1: detected capacity change from 0 to 512 [ 241.749981][ T6019] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.386: corrupted in-inode xattr [ 241.881488][ T6019] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.386: couldn't read orphan inode 15 (err -117) [ 241.913118][ T6002] comedi comedi3: reset error (fatal) [ 241.939870][ T6019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.035284][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 242.109350][ T5993] loop3: detected capacity change from 0 to 32768 [ 242.358160][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.389'. [ 242.371398][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.389'. [ 243.759535][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 244.272975][ T6036] autofs4:pid:6036:autofs_fill_super: called with bogus options [ 245.140308][ T6024] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 245.474201][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 245.598148][ T4430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4430) [ 246.499250][ T6091] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 246.815931][ T6057] loop3: detected capacity change from 0 to 32768 [ 247.146878][ T6057] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 247.636585][ T6092] comedi comedi3: reset error (fatal) [ 247.652774][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 247.734337][ T6111] netlink: 73 bytes leftover after parsing attributes in process `syz.0.403'. [ 248.016066][ T6121] loop1: detected capacity change from 0 to 512 [ 248.109677][ T6121] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.407: corrupted in-inode xattr [ 248.283398][ T6121] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.407: couldn't read orphan inode 15 (err -117) [ 248.337569][ T6121] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 248.413937][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 248.571514][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 248.829746][ T6137] loop4: detected capacity change from 0 to 64 [ 248.853095][ T5165] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.093293][ T5165] usb 2-1: Using ep0 maxpacket: 32 [ 249.119711][ T5165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.423415][ T5165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.796248][ T5165] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.108217][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.265002][ T6150] loop5: detected capacity change from 0 to 128 [ 250.471530][ T5165] usb 2-1: config 0 descriptor?? [ 250.806024][ T5165] hub 2-1:0.0: USB hub found [ 250.979302][ T5165] hub 2-1:0.0: 1 port detected [ 251.219710][ T6150] hpfs: hpfs_map_sector(): read error [ 251.793190][ T6124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 252.194420][ T5165] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 252.200913][ T5165] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 252.415885][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 252.456503][ T5165] usbhid 2-1:0.0: can't add hid device: -71 [ 252.462568][ T5165] usbhid: probe of 2-1:0.0 failed with error -71 [ 252.614399][ T5165] usb 2-1: USB disconnect, device number 7 [ 252.718097][ T4277] Bluetooth: hci5: link tx timeout [ 252.734594][ T4277] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 252.852023][ T6176] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 253.919526][ T6176] comedi comedi3: reset error (fatal) [ 254.271145][ T6208] loop1: detected capacity change from 0 to 512 [ 254.297752][ T6213] loop5: detected capacity change from 0 to 64 [ 254.462008][ T6216] loop0: detected capacity change from 0 to 4096 [ 254.485624][ T6208] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.427: corrupted in-inode xattr [ 254.508181][ T6208] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.427: couldn't read orphan inode 15 (err -117) [ 254.532841][ T6208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 254.557564][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 254.723168][ T6220] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 254.749351][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 254.763135][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 255.273241][ T4314] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 255.513164][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 255.564617][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.645897][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.652452][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.964872][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.230130][ T4314] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.474994][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.789954][ T4314] usb 2-1: config 0 descriptor?? [ 257.024981][ T4314] hub 2-1:0.0: USB hub found [ 257.192608][ T4314] hub 2-1:0.0: 1 port detected [ 258.435195][ T4314] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 258.441637][ T4314] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 258.667395][ T4314] usbhid 2-1:0.0: can't add hid device: -32 [ 258.682395][ T6244] loop4: detected capacity change from 0 to 128 [ 258.716446][ T4314] usbhid: probe of 2-1:0.0 failed with error -32 [ 258.753300][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 258.784643][ T4314] usb 2-1: USB disconnect, device number 8 [ 258.815932][ T6247] loop5: detected capacity change from 0 to 256 [ 258.835112][ T6244] hpfs: hpfs_map_sector(): read error [ 258.950013][ T4696] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.781496][ T6247] FAT-fs (loop5): Directory bread(block 64) failed [ 259.833148][ T6247] FAT-fs (loop5): Directory bread(block 65) failed [ 259.839829][ T6247] FAT-fs (loop5): Directory bread(block 66) failed [ 259.920116][ T6247] FAT-fs (loop5): Directory bread(block 67) failed [ 259.948368][ T6247] FAT-fs (loop5): Directory bread(block 68) failed [ 260.006227][ T6247] FAT-fs (loop5): Directory bread(block 69) failed [ 260.053712][ T6247] FAT-fs (loop5): Directory bread(block 70) failed [ 260.060303][ T6247] FAT-fs (loop5): Directory bread(block 71) failed [ 260.073169][ T6247] FAT-fs (loop5): Directory bread(block 72) failed [ 260.085447][ T6247] FAT-fs (loop5): Directory bread(block 73) failed [ 261.049776][ T6276] loop4: detected capacity change from 0 to 128 [ 261.057085][ T6276] EXT4-fs: Ignoring removed nobh option [ 261.123515][ T6276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 261.150793][ T6276] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.325237][ T26] audit: type=1800 audit(1753066297.743:11): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.443" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 261.415851][ T4427] kernel read not supported for file /vcsu (pid: 4427 comm: kworker/1:8) [ 261.454667][ T6292] loop3: detected capacity change from 0 to 512 [ 261.502764][ T6292] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.446: corrupted in-inode xattr [ 261.503471][ T6292] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.446: couldn't read orphan inode 15 (err -117) [ 261.503683][ T6292] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 261.514622][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 261.530755][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 261.667454][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 261.983305][ T5274] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 262.163196][ T5274] usb 4-1: Using ep0 maxpacket: 32 [ 262.166464][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.166530][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.166602][ T5274] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 262.166709][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.180327][ T5274] usb 4-1: config 0 descriptor?? [ 262.218945][ T5274] hub 4-1:0.0: USB hub found [ 262.382753][ T5274] hub 4-1:0.0: 1 port detected [ 263.716150][ T5274] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 263.716263][ T5274] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 263.731956][ T5274] usbhid 4-1:0.0: can't add hid device: -32 [ 263.732327][ T5274] usbhid: probe of 4-1:0.0 failed with error -32 [ 264.185999][ T6304] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 264.773222][ T6282] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 265.434543][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 265.463318][ T5274] usb 4-1: USB disconnect, device number 9 [ 265.628595][ T6308] comedi comedi3: reset error (fatal) [ 265.848784][ T6311] loop1: detected capacity change from 0 to 4096 [ 265.891161][ T6317] loop0: detected capacity change from 0 to 128 [ 265.932294][ T6317] hpfs: hpfs_map_sector(): read error [ 265.958721][ T6320] loop4: detected capacity change from 0 to 256 [ 266.075068][ T6320] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda2184db, utbl_chksum : 0xe619d30d) [ 267.763346][ T6340] overlayfs: missing 'lowerdir' [ 268.255110][ T6339] lo speed is unknown, defaulting to 1000 [ 268.263555][ T6339] lo speed is unknown, defaulting to 1000 [ 268.271599][ T6339] lo speed is unknown, defaulting to 1000 [ 268.340515][ T6339] infiniband sz1: set active [ 268.345485][ T6339] infiniband sz1: added lo [ 268.555830][ T5267] lo speed is unknown, defaulting to 1000 [ 268.680360][ T6339] RDS/IB: sz1: added [ 268.685474][ T6339] smc: adding ib device sz1 with port count 1 [ 268.692078][ T6339] smc: ib device sz1 port 1 has pnetid [ 268.703635][ T6339] lo speed is unknown, defaulting to 1000 [ 268.781192][ T6339] lo speed is unknown, defaulting to 1000 [ 268.854506][ T6339] lo speed is unknown, defaulting to 1000 [ 268.927344][ T6339] lo speed is unknown, defaulting to 1000 [ 269.001579][ T6339] lo speed is unknown, defaulting to 1000 [ 269.082134][ T5267] lo speed is unknown, defaulting to 1000 [ 269.686073][ T6356] loop3: detected capacity change from 0 to 256 [ 269.744736][ T6356] FAT-fs (loop3): Directory bread(block 64) failed [ 269.762502][ T6356] FAT-fs (loop3): Directory bread(block 65) failed [ 269.784067][ T6356] FAT-fs (loop3): Directory bread(block 66) failed [ 269.805471][ T6356] FAT-fs (loop3): Directory bread(block 67) failed [ 269.826639][ T6356] FAT-fs (loop3): Directory bread(block 68) failed [ 269.850867][ T6356] FAT-fs (loop3): Directory bread(block 69) failed [ 269.872175][ T6356] FAT-fs (loop3): Directory bread(block 70) failed [ 269.894908][ T6356] FAT-fs (loop3): Directory bread(block 71) failed [ 269.916623][ T6356] FAT-fs (loop3): Directory bread(block 72) failed [ 269.938960][ T6356] FAT-fs (loop3): Directory bread(block 73) failed [ 271.033514][ T6348] loop5: detected capacity change from 0 to 32768 [ 271.095883][ T6377] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 271.106419][ T6348] [ 271.106419][ T6348] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.106419][ T6348] [ 272.123056][ T6377] comedi comedi3: reset error (fatal) [ 272.262573][ T6348] [ 272.262573][ T6348] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.262573][ T6348] [ 272.294077][ T6381] 9pnet_fd: Insufficient options for proto=fd [ 272.318621][ T6348] [ 272.318621][ T6348] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.318621][ T6348] [ 272.381304][ T6348] [ 272.381304][ T6348] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.381304][ T6348] [ 272.439454][ T106] [ 272.439454][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.439454][ T106] [ 272.498223][ T6383] ERROR: (device loop5): diWrite: ixpxd invalid [ 272.498223][ T6383] [ 272.572145][ T6383] ERROR: (device loop5): txCommit: [ 272.572145][ T6383] [ 272.716393][ T6390] loop1: detected capacity change from 0 to 164 [ 273.734943][ T5181] [ 273.734943][ T5181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.734943][ T5181] [ 273.776853][ T5181] [ 273.776853][ T5181] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.776853][ T5181] [ 274.715863][ T6407] loop1: detected capacity change from 0 to 256 [ 274.780961][ T6407] FAT-fs (loop1): Directory bread(block 64) failed [ 274.803245][ T6407] FAT-fs (loop1): Directory bread(block 65) failed [ 274.849745][ T6407] FAT-fs (loop1): Directory bread(block 66) failed [ 274.903274][ T6407] FAT-fs (loop1): Directory bread(block 67) failed [ 274.937316][ T6407] FAT-fs (loop1): Directory bread(block 68) failed [ 274.963474][ T6407] FAT-fs (loop1): Directory bread(block 69) failed [ 275.003746][ T6407] FAT-fs (loop1): Directory bread(block 70) failed [ 275.023257][ T6407] FAT-fs (loop1): Directory bread(block 71) failed [ 275.060572][ T6407] FAT-fs (loop1): Directory bread(block 72) failed [ 275.088562][ T6392] loop0: detected capacity change from 0 to 32768 [ 275.101722][ T6407] FAT-fs (loop1): Directory bread(block 73) failed [ 275.183566][ T6392] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 275.296939][ T6392] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 276.186225][ T6392] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 276.249840][ T5267] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 276.261414][ T5267] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 276.386994][ T6431] loop3: detected capacity change from 0 to 128 [ 276.421573][ T5267] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 160ms [ 276.458694][ T6431] hpfs: hpfs_map_sector(): read error [ 276.475865][ T5267] gfs2: fsid=syz:syz.0: jid=0: Done [ 276.505693][ T6392] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 276.552767][ T6392] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 276.841918][ T6440] 9pnet_fd: Insufficient options for proto=fd [ 277.696197][ T6454] loop0: detected capacity change from 0 to 4096 [ 277.873678][ T6456] loop1: detected capacity change from 0 to 40427 [ 277.903183][ T6454] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 277.953332][ T6456] F2FS-fs (loop1): invalid crc value [ 278.006729][ T6456] F2FS-fs (loop1): Found nat_bits in checkpoint [ 278.094041][ T6456] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 279.834286][ T6454] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 280.090104][ T6483] loop3: detected capacity change from 0 to 256 [ 280.137473][ T6485] loop5: detected capacity change from 0 to 128 [ 280.176801][ T6483] FAT-fs (loop3): Directory bread(block 64) failed [ 280.192017][ T6483] FAT-fs (loop3): Directory bread(block 65) failed [ 280.203522][ T6483] FAT-fs (loop3): Directory bread(block 66) failed [ 280.210292][ T6483] FAT-fs (loop3): Directory bread(block 67) failed [ 280.256742][ T6483] FAT-fs (loop3): Directory bread(block 68) failed [ 280.279794][ T6485] hpfs: hpfs_map_sector(): read error [ 280.305422][ T6483] FAT-fs (loop3): Directory bread(block 69) failed [ 280.343095][ T5274] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 280.368986][ T6483] FAT-fs (loop3): Directory bread(block 70) failed [ 280.422681][ T6483] FAT-fs (loop3): Directory bread(block 71) failed [ 280.466987][ T6483] FAT-fs (loop3): Directory bread(block 72) failed [ 280.493091][ T6483] FAT-fs (loop3): Directory bread(block 73) failed [ 280.522957][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 280.552673][ T6491] loop5: detected capacity change from 0 to 128 [ 280.564371][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 280.592948][ T5274] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 280.601557][ T5274] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 280.629127][ T5274] usb 5-1: config 166 has no interface number 0 [ 280.645963][ T5274] usb 5-1: config 166 has no interface number 1 [ 280.656103][ T5274] usb 5-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 280.677372][ T5274] usb 5-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 280.770518][ T5274] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 280.847256][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 281.343139][ T5274] usb 5-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 281.423154][ T5274] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 281.463282][ T5274] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 281.515135][ T5274] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 281.541290][ T6500] 9pnet_fd: Insufficient options for proto=fd [ 281.564273][ T5274] usb 5-1: config 166 interface 177 has no altsetting 0 [ 281.591759][ T5274] usb 5-1: config 166 interface 34 has no altsetting 0 [ 281.593119][ T4427] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 281.630392][ T5274] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 281.670584][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.708378][ T5274] usb 5-1: Product: syz [ 281.733161][ T5274] usb 5-1: Manufacturer: syz [ 281.750377][ T5274] usb 5-1: SerialNumber: syz [ 281.823177][ T4427] usb 2-1: Using ep0 maxpacket: 32 [ 281.832380][ T4427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.873083][ T4427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.913073][ T4427] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.953855][ T4427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.017484][ T4427] usb 2-1: config 0 descriptor?? [ 282.065509][ T4427] hub 2-1:0.0: USB hub found [ 282.080281][ T5274] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 282.789289][ T4427] hub 2-1:0.0: 1 port detected [ 282.907485][ T5274] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 282.985479][ T4427] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 283.006686][ T4427] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 283.021792][ T6525] autofs4:pid:6525:autofs_fill_super: called with bogus options [ 283.030972][ T4427] usbhid 2-1:0.0: can't add hid device: -71 [ 283.037668][ T4427] usbhid: probe of 2-1:0.0 failed with error -71 [ 283.074127][ T4427] usb 2-1: USB disconnect, device number 9 [ 283.105358][ T5274] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 283.124704][ T5274] usb 5-1: No valid video chain found. [ 283.164597][ T5274] usb 5-1: USB disconnect, device number 11 [ 283.357107][ T6487] loop0: detected capacity change from 0 to 65536 [ 284.893098][ T5267] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 285.389817][ T6558] loop1: detected capacity change from 0 to 40427 [ 285.464599][ T6558] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 286.123297][ T6558] F2FS-fs (loop1): invalid crc value [ 286.137725][ T5267] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.156752][ T5267] usb 6-1: config 0 has no interface number 0 [ 286.173072][ T5267] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.202899][ T6558] F2FS-fs (loop1): Found nat_bits in checkpoint [ 286.239850][ T5267] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.255108][ T5267] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 286.265306][ T5267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.278605][ T5267] usb 6-1: config 0 descriptor?? [ 286.309904][ T6558] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 286.841438][ T5267] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0 [ 287.266352][ T6568] loop3: detected capacity change from 0 to 40427 [ 287.276423][ T5267] prodikeys 0003:041E:2801.0001: unexpected long global item [ 287.289084][ T5267] prodikeys 0003:041E:2801.0001: hid parse failed [ 287.295881][ T5267] prodikeys: probe of 0003:041E:2801.0001 failed with error -22 [ 287.307402][ T5267] usb 6-1: USB disconnect, device number 3 [ 287.353797][ T6568] F2FS-fs (loop3): invalid crc value [ 287.421121][ T6568] F2FS-fs (loop3): Found nat_bits in checkpoint [ 287.463319][ T6568] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 289.094136][ T6592] loop3: detected capacity change from 0 to 512 [ 289.169972][ T6592] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.512: corrupted in-inode xattr [ 289.186937][ T6592] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.512: couldn't read orphan inode 15 (err -117) [ 289.234624][ T6592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.270687][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.513'. [ 289.391234][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 289.553257][ T5165] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 289.816767][ T5165] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.886456][ T5165] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 289.913183][ T4314] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 290.037048][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.133109][ T4314] usb 4-1: Using ep0 maxpacket: 32 [ 290.149532][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.190630][ T5165] usb 2-1: Product: syz [ 290.251746][ T5165] usb 2-1: Manufacturer: syz [ 290.300699][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.320447][ T5165] usb 2-1: SerialNumber: syz [ 290.428741][ T5165] usb 2-1: config 0 descriptor?? [ 290.452481][ T4314] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 290.588727][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.870532][ T4314] usb 4-1: config 0 descriptor?? [ 291.014789][ T4314] hub 4-1:0.0: USB hub found [ 291.086090][ T4317] usb 2-1: USB disconnect, device number 10 [ 291.180027][ T4314] hub 4-1:0.0: 1 port detected [ 291.553338][ T6597] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 292.434344][ T4314] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 292.440909][ T4314] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 292.594017][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 292.603717][ T4314] usbhid 4-1:0.0: can't add hid device: -71 [ 292.609755][ T4314] usbhid: probe of 4-1:0.0 failed with error -71 [ 292.633186][ T6610] loop0: detected capacity change from 0 to 256 [ 292.693822][ T4314] usb 4-1: USB disconnect, device number 10 [ 292.800996][ T6610] FAT-fs (loop0): Directory bread(block 64) failed [ 292.829499][ T6610] FAT-fs (loop0): Directory bread(block 65) failed [ 292.861852][ T6610] FAT-fs (loop0): Directory bread(block 66) failed [ 292.928353][ T6610] FAT-fs (loop0): Directory bread(block 67) failed [ 292.935162][ T6610] FAT-fs (loop0): Directory bread(block 68) failed [ 292.941731][ T6610] FAT-fs (loop0): Directory bread(block 69) failed [ 292.948431][ T6610] FAT-fs (loop0): Directory bread(block 70) failed [ 292.955194][ T6610] FAT-fs (loop0): Directory bread(block 71) failed [ 292.961858][ T6610] FAT-fs (loop0): Directory bread(block 72) failed [ 292.968666][ T6610] FAT-fs (loop0): Directory bread(block 73) failed [ 294.660513][ T6620] loop5: detected capacity change from 0 to 40427 [ 295.261919][ T6620] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 295.272468][ T6620] F2FS-fs (loop5): invalid crc value [ 295.321789][ T6633] loop4: detected capacity change from 0 to 256 [ 295.417631][ T6620] F2FS-fs (loop5): Found nat_bits in checkpoint [ 295.425654][ T6633] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.466004][ T6633] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 295.481487][ T6633] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 295.493799][ T6620] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 295.953489][ T6633] loop4: detected capacity change from 256 to 64 [ 296.860224][ T6656] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 296.887067][ T6656] CIFS mount error: No usable UNC path provided in device string! [ 296.887067][ T6656] [ 296.897669][ T6656] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 297.558956][ T6660] loop5: detected capacity change from 0 to 512 [ 297.690925][ T6660] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.530: corrupted in-inode xattr [ 297.797498][ T6660] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.530: couldn't read orphan inode 15 (err -117) [ 297.858219][ T6660] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 297.887767][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.530'. [ 297.895367][ T5842] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.364513][ T4335] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 298.583204][ T4335] usb 6-1: Using ep0 maxpacket: 32 [ 298.591972][ T4335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.695974][ T5842] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.781863][ T4335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.959908][ T4335] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.138494][ T4335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.334135][ T4335] usb 6-1: config 0 descriptor?? [ 299.471947][ T4335] hub 6-1:0.0: USB hub found [ 299.622402][ T4335] hub 6-1:0.0: 1 port detected [ 299.884884][ T5842] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.513541][ T6662] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 300.715437][ T5842] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.834219][ T4335] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 300.843133][ T4335] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 301.098728][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.109302][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.117712][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.128586][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.137717][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 301.145094][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.160982][ T5181] EXT4-fs (loop5): unmounting filesystem. [ 301.179924][ T4335] usbhid 6-1:0.0: can't add hid device: -71 [ 301.186111][ T4335] usbhid: probe of 6-1:0.0 failed with error -71 [ 301.223838][ T4335] usb 6-1: USB disconnect, device number 4 [ 301.442372][ T6671] lo speed is unknown, defaulting to 1000 [ 302.032739][ T6676] loop0: detected capacity change from 0 to 40427 [ 302.044284][ T6676] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 302.054487][ T6676] F2FS-fs (loop0): invalid crc value [ 302.090196][ T6676] F2FS-fs (loop0): Found nat_bits in checkpoint [ 302.167710][ T6676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 303.258108][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 303.974202][ T6699] CIFS mount error: No usable UNC path provided in device string! [ 303.974202][ T6699] [ 303.984663][ T6699] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.276479][ T6711] loop1: detected capacity change from 0 to 128 [ 304.317943][ T6713] loop3: detected capacity change from 0 to 512 [ 304.340571][ T6711] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 304.360627][ T6713] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.544: corrupted in-inode xattr [ 304.375139][ T6711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.406111][ T6705] loop5: detected capacity change from 0 to 4096 [ 304.433044][ T6713] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.544: couldn't read orphan inode 15 (err -117) [ 304.487544][ T6713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 304.543596][ T6716] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.563728][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 304.598657][ T26] audit: type=1800 audit(1753066341.013:12): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.542" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 304.703095][ T6715] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 305.313175][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 305.393334][ T4317] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 305.623155][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 305.651162][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.937868][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.206341][ T4317] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.446004][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.786901][ T4317] usb 4-1: config 0 descriptor?? [ 307.079852][ T4317] hub 4-1:0.0: USB hub found [ 307.219742][ T4317] hub 4-1:0.0: 1 port detected [ 307.393586][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 308.100022][ T26] audit: type=1800 audit(1753066344.503:13): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.542" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 308.435791][ T4317] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 308.442355][ T4317] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 308.633804][ T6719] syz.5.542 (6719) used greatest stack depth: 18976 bytes left [ 308.683976][ T6739] loop0: detected capacity change from 0 to 128 [ 308.716081][ T4317] usbhid 4-1:0.0: can't add hid device: -32 [ 308.722139][ T4317] usbhid: probe of 4-1:0.0 failed with error -32 [ 308.853833][ T6671] chnl_net:caif_netlink_parms(): no params data found [ 308.869584][ T4317] usb 4-1: USB disconnect, device number 11 [ 308.970368][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 309.124341][ T6747] loop0: detected capacity change from 0 to 256 [ 309.205177][ T6747] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.309598][ T6747] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 309.429484][ T6747] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 309.565910][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 310.587673][ T6772] loop1: detected capacity change from 0 to 8 [ 310.701549][ T6772] Major/Minor mismatch, trying to mount newer 12.0 filesystem [ 310.709547][ T6772] Please update your kernel [ 311.373785][ T4317] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 311.442795][ T5033] Bluetooth: hci3: Frame reassembly failed (-90) [ 311.521796][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.539598][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.548379][ T6671] device bridge_slave_0 entered promiscuous mode [ 311.578752][ T4317] usb 4-1: unable to get BOS descriptor set [ 311.606960][ T4317] usb 4-1: config 1 interface 0 altsetting 248 endpoint 0x82 is Bulk; changing to Interrupt [ 311.626682][ T6783] CIFS mount error: No usable UNC path provided in device string! [ 311.626682][ T6783] [ 311.636822][ T6783] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 311.950461][ T4317] usb 4-1: config 1 interface 0 altsetting 248 endpoint 0x3 is Bulk; changing to Interrupt [ 312.214334][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.238418][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.267350][ T4317] usb 4-1: config 1 interface 0 has no altsetting 0 [ 312.283449][ T4317] usb 4-1: string descriptor 0 read error: -22 [ 312.289796][ T4317] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.303644][ T6671] device bridge_slave_1 entered promiscuous mode [ 312.305980][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.335280][ T6770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.346114][ T6770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.378934][ T4317] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 312.590653][ T6671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.613518][ T4335] usb 4-1: USB disconnect, device number 12 [ 312.630201][ T6671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.791486][ T6671] team0: Port device team_slave_0 added [ 312.970625][ T6671] team0: Port device team_slave_1 added [ 312.981343][ T5842] device hsr_slave_0 left promiscuous mode [ 312.989140][ T5842] device hsr_slave_1 left promiscuous mode [ 313.563594][ T4281] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 315.593683][ T4277] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 315.731430][ T6802] loop3: detected capacity change from 0 to 512 [ 315.743278][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.750903][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.917031][ T6802] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 315.930433][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.938028][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.959174][ T6802] EXT4-fs (loop3): 1 truncate cleaned up [ 315.965432][ T5842] device bridge_slave_1 left promiscuous mode [ 315.973201][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.982717][ T6802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 316.013907][ T5842] device bridge_slave_0 left promiscuous mode [ 316.021754][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.128843][ T6807] loop1: detected capacity change from 0 to 512 [ 316.213909][ T5842] device veth1_macvtap left promiscuous mode [ 316.220514][ T5842] device veth0_macvtap left promiscuous mode [ 316.259402][ T6807] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.562: corrupted in-inode xattr [ 316.263178][ T5842] device veth1_vlan left promiscuous mode [ 316.277693][ T5842] device veth0_vlan left promiscuous mode [ 316.379168][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 316.403280][ T6807] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.562: couldn't read orphan inode 15 (err -117) [ 316.588960][ T6807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 316.647330][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 317.075498][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.082241][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.673371][ T4391] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 318.343151][ T4391] usb 2-1: Using ep0 maxpacket: 32 [ 318.351812][ T4391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.489478][ T4391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.602521][ T4391] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.705728][ T4391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.134668][ T4391] usb 2-1: config 0 descriptor?? [ 320.154780][ T4391] hub 2-1:0.0: USB hub found [ 320.480086][ T6832] loop0: detected capacity change from 0 to 4096 [ 320.549458][ T6837] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.569333][ T26] audit: type=1800 audit(1753066356.983:14): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.566" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 320.593181][ T6804] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 321.650571][ T26] audit: type=1800 audit(1753066358.063:15): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.566" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 321.807419][ T5842] team0 (unregistering): Port device team_slave_1 removed [ 321.877952][ T5842] team0 (unregistering): Port device team_slave_0 removed [ 322.672476][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.686643][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.723872][ T6671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.740689][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.748025][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.776408][ T6671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.809605][ T6836] netlink: 'syz.3.567': attribute type 13 has an invalid length. [ 322.897185][ T4391] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 323.033983][ T4391] usbhid 2-1:0.0: can't add hid device: -71 [ 323.053927][ T4391] usbhid: probe of 2-1:0.0 failed with error -71 [ 323.125308][ T4391] usb 2-1: USB disconnect, device number 11 [ 323.808715][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.817417][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.330000][ T6836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.376652][ T6836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.685469][ T4284] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 324.694626][ T4284] Bluetooth: hci0: Injecting HCI hardware error event [ 324.704309][ T4277] Bluetooth: hci0: hardware error 0x00 [ 324.907786][ T6836] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.916859][ T6836] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.927050][ T6836] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.939512][ T6836] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.180495][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 325.574527][ T6671] device hsr_slave_0 entered promiscuous mode [ 325.623609][ T6671] device hsr_slave_1 entered promiscuous mode [ 325.633469][ T6671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.673175][ T6671] Cannot create hsr debugfs directory [ 325.747358][ T6881] loop1: detected capacity change from 0 to 256 [ 325.812333][ T6881] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.871978][ T6881] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 325.930185][ T6881] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 326.125641][ T6890] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 326.186875][ T6892] loop5: detected capacity change from 0 to 256 [ 326.337572][ T6892] FAT-fs (loop5): Directory bread(block 64) failed [ 326.364153][ T6892] FAT-fs (loop5): Directory bread(block 65) failed [ 326.378937][ T6892] FAT-fs (loop5): Directory bread(block 66) failed [ 326.407727][ T6671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 326.428221][ T6892] FAT-fs (loop5): Directory bread(block 67) failed [ 326.449883][ T6671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 326.465559][ T6892] FAT-fs (loop5): Directory bread(block 68) failed [ 326.495775][ T6892] FAT-fs (loop5): Directory bread(block 69) failed [ 326.508363][ T6671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 326.532115][ T6892] FAT-fs (loop5): Directory bread(block 70) failed [ 326.566584][ T6671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 326.584592][ T6892] FAT-fs (loop5): Directory bread(block 71) failed [ 326.660691][ T6892] FAT-fs (loop5): Directory bread(block 72) failed [ 326.737484][ T6892] FAT-fs (loop5): Directory bread(block 73) failed [ 326.746900][ T6904] loop0: detected capacity change from 0 to 512 [ 326.833390][ T4277] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 326.920913][ T6904] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.579: corrupted in-inode xattr [ 326.981694][ T6671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.165758][ T6904] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.579: couldn't read orphan inode 15 (err -117) [ 327.226685][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.753878][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.762309][ T6904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 327.835712][ T6671] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.856580][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 327.884104][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.473135][ T4385] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 328.858669][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.405916][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.413111][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.433062][ T4385] usb 1-1: Using ep0 maxpacket: 32 [ 329.443768][ T4385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.606894][ T4385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.749071][ T6922] loop5: detected capacity change from 0 to 8 [ 329.759442][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.770156][ T4385] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 329.790743][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.871432][ T4385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.923824][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.067053][ T4385] usb 1-1: config 0 descriptor?? [ 330.083444][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.090635][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.203541][ T4385] hub 1-1:0.0: USB hub found [ 330.341628][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.353862][ T6908] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 330.382844][ T4385] hub 1-1:0.0: 1 port detected [ 330.480353][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.692522][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.933722][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.096089][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.188249][ T6922] Major/Minor mismatch, trying to mount newer 12.0 filesystem [ 331.202349][ T6922] Please update your kernel [ 331.239638][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.334720][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.396665][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.449660][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.492542][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.559625][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.650174][ T4385] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 331.672652][ T4385] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 331.686053][ T6671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.884009][ T4385] usbhid 1-1:0.0: can't add hid device: -32 [ 331.890062][ T4385] usbhid: probe of 1-1:0.0 failed with error -32 [ 332.034081][ T4385] usb 1-1: USB disconnect, device number 7 [ 332.058689][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 332.640345][ T6958] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 333.075015][ T6968] loop1: detected capacity change from 0 to 256 [ 333.181344][ T6968] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.265027][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.351330][ T6968] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 333.460128][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.541645][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.898243][ T6968] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 334.476718][ T6949] loop3: detected capacity change from 0 to 32768 [ 334.526922][ T6949] gfs2: quota_quantum mount option requires a positive numeric argument [ 337.394802][ T4284] Bluetooth: hci3: command 0x1003 tx timeout [ 337.403468][ T4277] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 337.482196][ T6991] loop0: detected capacity change from 0 to 512 [ 337.592533][ T6991] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.595: corrupted in-inode xattr [ 337.740372][ T6991] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.595: couldn't read orphan inode 15 (err -117) [ 337.813852][ T6991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 337.889127][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 338.353387][ T4317] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 338.583207][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 338.597704][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.849278][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.983696][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.065555][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.078182][ T4317] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.271609][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.537871][ T4317] usb 1-1: config 0 descriptor?? [ 339.690742][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.709441][ T4317] hub 1-1:0.0: USB hub found [ 339.785587][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.854082][ T4317] hub 1-1:0.0: 1 port detected [ 340.011611][ T6671] device veth0_vlan entered promiscuous mode [ 340.542913][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.629340][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.913513][ T6994] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 341.074265][ T4317] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 341.080671][ T4317] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 341.119852][ T6671] device veth1_vlan entered promiscuous mode [ 341.315710][ T4317] usbhid 1-1:0.0: can't add hid device: -32 [ 341.353630][ T4317] usbhid: probe of 1-1:0.0 failed with error -32 [ 341.443285][ T6671] device veth0_macvtap entered promiscuous mode [ 341.462559][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.476692][ T4317] usb 1-1: USB disconnect, device number 8 [ 341.503761][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 341.524245][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.593925][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.642272][ T6671] device veth1_macvtap entered promiscuous mode [ 341.686853][ T7027] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 341.719106][ T7031] loop0: detected capacity change from 0 to 256 [ 341.725563][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.742115][ T7030] loop5: detected capacity change from 0 to 1024 [ 341.767448][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.803094][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.833061][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.842945][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.855790][ T7031] FAT-fs (loop0): Directory bread(block 64) failed [ 341.872874][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.914050][ T7031] FAT-fs (loop0): Directory bread(block 65) failed [ 341.947428][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.974975][ T7031] FAT-fs (loop0): Directory bread(block 66) failed [ 341.976183][ T7036] loop1: detected capacity change from 0 to 8 [ 341.981562][ T7031] FAT-fs (loop0): Directory bread(block 67) failed [ 342.014834][ T7031] FAT-fs (loop0): Directory bread(block 68) failed [ 342.022686][ T7031] FAT-fs (loop0): Directory bread(block 69) failed [ 342.042853][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.060485][ T7031] FAT-fs (loop0): Directory bread(block 70) failed [ 342.079715][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.113301][ T7031] FAT-fs (loop0): Directory bread(block 71) failed [ 342.126888][ T7031] FAT-fs (loop0): Directory bread(block 72) failed [ 342.135929][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.153580][ T7031] FAT-fs (loop0): Directory bread(block 73) failed [ 342.163827][ T7036] squashfs: Unknown parameter 'threads' [ 342.187246][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.220432][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.232859][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.239666][ T7030] hfsplus: request for non-existent node 16777216 in B*Tree [ 342.243399][ T6671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.261770][ T6671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.294162][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.301634][ T7030] hfsplus: request for non-existent node 16777216 in B*Tree [ 342.348294][ T6671] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.404631][ T7030] hfsplus: request for non-existent node 16777216 in B*Tree [ 342.462586][ T6671] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.471767][ T7030] hfsplus: request for non-existent node 16777216 in B*Tree [ 342.511304][ T6671] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.520858][ T6671] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.531938][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.553422][ T7030] hfsplus: request for non-existent node 16777216 in B*Tree [ 342.563615][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.573198][ T7030] hfsplus: request for non-existent node 16777216 in B*Tree [ 343.342905][ T5034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.402783][ T5034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.442711][ T5033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.506860][ T7033] loop3: detected capacity change from 0 to 32768 [ 343.527813][ T5033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.544611][ T7033] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.606 (7033) [ 344.414311][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.286841][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.084957][ T7033] BTRFS error (device loop3): open_ctree failed: -4 [ 346.508864][ T7058] 9pnet_fd: Insufficient options for proto=fd [ 346.572390][ T7060] loop6: detected capacity change from 0 to 128 [ 346.588158][ T7057] loop5: detected capacity change from 0 to 1024 [ 346.648491][ T7060] EXT4-fs: Ignoring removed nobh option [ 346.673250][ T4281] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 346.735821][ T7057] hfsplus: unable to parse mount options [ 346.854122][ T7060] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 347.012990][ T7060] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.072210][ T4429] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by udevd (4429) [ 347.173834][ T26] audit: type=1800 audit(1753066383.593:16): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.533" name="bus" dev="loop6" ino=14 res=0 errno=0 [ 347.262562][ T7069] loop0: detected capacity change from 0 to 136 [ 347.399456][ T7073] loop5: detected capacity change from 0 to 256 [ 347.434991][ T6671] EXT4-fs (loop6): unmounting filesystem. [ 347.453104][ T7073] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.520837][ T7073] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 347.595987][ T7073] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 347.720425][ T7077] loop6: detected capacity change from 0 to 512 [ 347.881014][ T7077] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.612: corrupted in-inode xattr [ 347.905779][ T7077] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.612: couldn't read orphan inode 15 (err -117) [ 347.991030][ T7077] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 348.051995][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.612'. [ 348.493051][ T6155] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 348.636849][ T7065] loop3: detected capacity change from 0 to 32768 [ 348.668785][ T7065] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.608 (7065) [ 348.742590][ T7065] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 348.763118][ T7065] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 348.772591][ T7065] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 348.813193][ T6155] usb 7-1: Using ep0 maxpacket: 32 [ 348.822131][ T6155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.855198][ T7065] BTRFS info (device loop3): use lzo compression, level 0 [ 348.865730][ T6155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.890382][ T7065] BTRFS info (device loop3): turning on async discard [ 348.891744][ T6155] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 348.939084][ T7065] BTRFS info (device loop3): using free space tree [ 348.958390][ T7095] loop0: detected capacity change from 0 to 256 [ 348.959622][ T6155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.024783][ T6155] usb 7-1: config 0 descriptor?? [ 349.041190][ T6155] hub 7-1:0.0: USB hub found [ 349.065584][ T7095] FAT-fs (loop0): Directory bread(block 64) failed [ 349.073396][ T7095] FAT-fs (loop0): Directory bread(block 65) failed [ 349.080060][ T7095] FAT-fs (loop0): Directory bread(block 66) failed [ 349.128350][ T7095] FAT-fs (loop0): Directory bread(block 67) failed [ 349.136018][ T7095] FAT-fs (loop0): Directory bread(block 68) failed [ 349.142705][ T7095] FAT-fs (loop0): Directory bread(block 69) failed [ 349.150743][ T7095] FAT-fs (loop0): Directory bread(block 70) failed [ 349.160056][ T7095] FAT-fs (loop0): Directory bread(block 71) failed [ 349.169160][ T7095] FAT-fs (loop0): Directory bread(block 72) failed [ 349.176886][ T7095] FAT-fs (loop0): Directory bread(block 73) failed [ 349.195807][ T7067] loop1: detected capacity change from 0 to 32768 [ 349.234983][ T6155] hub 7-1:0.0: 1 port detected [ 349.289654][ T7067] jfs: Unrecognized mount option "" or missing value [ 349.492480][ T6155] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 349.503212][ T7065] BTRFS info (device loop3): enabling ssd optimizations [ 349.518360][ T6155] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 350.040252][ T6155] usbhid 7-1:0.0: can't add hid device: -71 [ 350.070316][ T6155] usbhid: probe of 7-1:0.0 failed with error -71 [ 350.474018][ T6155] usb 7-1: USB disconnect, device number 2 [ 351.261073][ T7083] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 351.290899][ T4268] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 351.395517][ T6671] EXT4-fs (loop6): unmounting filesystem. [ 354.731456][ T4429] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (4429) [ 355.114534][ T4281] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 355.970454][ T7154] loop5: detected capacity change from 0 to 136 [ 356.003477][ T7142] loop1: detected capacity change from 0 to 128 [ 356.020824][ T7142] EXT4-fs: Ignoring removed nobh option [ 356.123880][ T7142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 356.204494][ T7142] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 356.456533][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 356.733624][ T7174] overlayfs: missing 'lowerdir' [ 357.244787][ T7173] loop0: detected capacity change from 0 to 256 [ 357.262184][ T7175] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 357.313635][ T7173] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 357.453226][ T7173] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 357.495726][ T7173] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 357.752658][ T26] audit: type=1804 audit(1753066394.163:17): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.636" name="/newroot/143/file1/bus" dev="loop0" ino=1048667 res=1 errno=0 [ 358.817365][ T7195] 9pnet_fd: Insufficient options for proto=fd [ 359.306994][ T7180] loop1: detected capacity change from 0 to 32768 [ 359.342262][ T7180] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.637 (7180) [ 359.431412][ T7180] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 359.439865][ T7185] loop5: detected capacity change from 0 to 32768 [ 359.442775][ T7180] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 359.462904][ T7180] BTRFS info (device loop1): using free space tree [ 359.536411][ T7218] loop3: detected capacity change from 0 to 136 [ 359.557933][ T7185] XFS (loop5): Mounting V5 Filesystem [ 359.670435][ T7180] BTRFS info (device loop1): enabling ssd optimizations [ 359.759986][ T7185] XFS (loop5): Ending clean mount [ 359.942480][ T5181] XFS (loop5): Unmounting Filesystem [ 360.353420][ T7251] overlayfs: missing 'lowerdir' [ 360.921529][ T7249] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 360.968872][ T4282] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 361.023772][ T7254] loop3: detected capacity change from 0 to 1024 [ 361.039308][ T7254] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 361.052501][ T7254] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 361.193869][ T7254] EXT4-fs (loop3): invalid journal inode [ 361.199893][ T7254] EXT4-fs (loop3): can't get journal size [ 361.269449][ T7254] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.653: blocks 2-2 from inode overlap system zone [ 361.339510][ T7254] EXT4-fs (loop3): failed to initialize system zone (-117) [ 361.373227][ T7254] EXT4-fs (loop3): mount failed [ 361.663178][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 361.793735][ T7265] 9pnet_fd: Insufficient options for proto=fd [ 362.675245][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 362.694654][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.707764][ T34] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 362.733000][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.741572][ T34] usb 7-1: Product: syz [ 362.745867][ T34] usb 7-1: Manufacturer: syz [ 362.750503][ T34] usb 7-1: SerialNumber: syz [ 362.757600][ T34] usb 7-1: config 0 descriptor?? [ 362.836056][ T7280] loop5: detected capacity change from 0 to 256 [ 362.888282][ T7280] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.926434][ T7280] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 362.950662][ T7280] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 362.991458][ T6862] usb 7-1: USB disconnect, device number 3 [ 363.054308][ T26] audit: type=1804 audit(1753066399.473:18): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.651" name="/newroot/74/file1/bus" dev="loop5" ino=1048669 res=1 errno=0 [ 364.284853][ T7300] loop1: detected capacity change from 0 to 256 [ 364.349939][ T7300] FAT-fs (loop1): Directory bread(block 64) failed [ 364.374396][ T7300] FAT-fs (loop1): Directory bread(block 65) failed [ 364.433280][ T7300] FAT-fs (loop1): Directory bread(block 66) failed [ 364.439883][ T7300] FAT-fs (loop1): Directory bread(block 67) failed [ 364.470043][ T7300] FAT-fs (loop1): Directory bread(block 68) failed [ 364.485107][ T7300] FAT-fs (loop1): Directory bread(block 69) failed [ 364.491781][ T7300] FAT-fs (loop1): Directory bread(block 70) failed [ 364.568402][ T7300] FAT-fs (loop1): Directory bread(block 71) failed [ 364.575690][ T7300] FAT-fs (loop1): Directory bread(block 72) failed [ 364.582432][ T7300] FAT-fs (loop1): Directory bread(block 73) failed [ 364.620333][ T7306] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 365.840858][ T7327] netlink: 176 bytes leftover after parsing attributes in process `syz.1.669'. [ 366.060296][ T7331] loop6: detected capacity change from 0 to 256 [ 366.188351][ T7331] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.229103][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 366.243470][ T7331] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 366.294182][ T7331] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 366.336232][ T7298] loop3: detected capacity change from 0 to 32768 [ 366.376014][ T26] audit: type=1804 audit(1753066402.793:19): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.672" name="/newroot/12/file1/bus" dev="loop6" ino=1048672 res=1 errno=0 [ 366.429377][ T7298] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 366.535580][ T7298] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 367.100403][ T6862] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 367.375597][ T6862] usb 2-1: Using ep0 maxpacket: 8 [ 367.475532][ T6862] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 367.610856][ T6862] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 367.678848][ T6862] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 367.715541][ T6862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.748804][ T6862] usb 2-1: Product: syz [ 367.768869][ T6862] usb 2-1: Manufacturer: syz [ 367.812659][ T6862] usb 2-1: SerialNumber: syz [ 368.407755][ T6862] cytherm 2-1:5.0: Cypress thermometer device now attached [ 368.686574][ T6862] usb 2-1: USB disconnect, device number 12 [ 368.765367][ T7370] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 368.813340][ T6862] cytherm 2-1:5.0: Cypress thermometer now disconnected [ 369.097298][ T7385] loop5: detected capacity change from 0 to 1024 [ 369.191877][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 369.232026][ T7385] hfsplus: request for non-existent node 16777216 in B*Tree [ 369.263153][ T7385] hfsplus: request for non-existent node 16777216 in B*Tree [ 369.270797][ T7385] hfsplus: request for non-existent node 16777216 in B*Tree [ 369.349770][ T7385] hfsplus: request for non-existent node 16777216 in B*Tree [ 369.417798][ T7385] hfsplus: request for non-existent node 16777216 in B*Tree [ 369.484622][ T7390] loop6: detected capacity change from 0 to 256 [ 369.492343][ T7385] hfsplus: request for non-existent node 16777216 in B*Tree [ 369.585602][ T7390] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.718635][ T7390] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 370.183940][ T7390] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 370.249302][ T7398] loop3: detected capacity change from 0 to 256 [ 370.353321][ T7398] FAT-fs (loop3): Directory bread(block 64) failed [ 370.382276][ T7398] FAT-fs (loop3): Directory bread(block 65) failed [ 370.473207][ T7398] FAT-fs (loop3): Directory bread(block 66) failed [ 370.481155][ T7398] FAT-fs (loop3): Directory bread(block 67) failed [ 370.516779][ T7398] FAT-fs (loop3): Directory bread(block 68) failed [ 370.533043][ T7398] FAT-fs (loop3): Directory bread(block 69) failed [ 370.548749][ T7398] FAT-fs (loop3): Directory bread(block 70) failed [ 370.586263][ T7398] FAT-fs (loop3): Directory bread(block 71) failed [ 370.618066][ T7398] FAT-fs (loop3): Directory bread(block 72) failed [ 370.639392][ T7398] FAT-fs (loop3): Directory bread(block 73) failed [ 371.555510][ T7419] loop6: detected capacity change from 0 to 1764 [ 371.633532][ T4391] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 371.823047][ T4391] usb 2-1: Using ep0 maxpacket: 8 [ 371.829973][ T4391] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.851123][ T4391] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 371.871438][ T4391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.911553][ T4391] usb 2-1: config 0 descriptor?? [ 371.959578][ T4391] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 372.064016][ T7433] netlink: 176 bytes leftover after parsing attributes in process `syz.5.704'. [ 372.941320][ T7439] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 373.178308][ T7444] loop3: detected capacity change from 0 to 256 [ 373.199814][ T7447] loop6: detected capacity change from 0 to 512 [ 373.288407][ T7444] FAT-fs (loop3): Directory bread(block 64) failed [ 373.313450][ T7444] FAT-fs (loop3): Directory bread(block 65) failed [ 373.346509][ T7444] FAT-fs (loop3): Directory bread(block 66) failed [ 373.348191][ T7447] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 373.373272][ T7447] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 373.393076][ T7444] FAT-fs (loop3): Directory bread(block 67) failed [ 373.399854][ T7444] FAT-fs (loop3): Directory bread(block 68) failed [ 373.441152][ T7444] FAT-fs (loop3): Directory bread(block 69) failed [ 373.454716][ T7444] FAT-fs (loop3): Directory bread(block 70) failed [ 373.462764][ T7444] FAT-fs (loop3): Directory bread(block 71) failed [ 373.472794][ T7444] FAT-fs (loop3): Directory bread(block 72) failed [ 373.481713][ T7444] FAT-fs (loop3): Directory bread(block 73) failed [ 373.672121][ T4391] gspca_vc032x: reg_w err -71 [ 373.676963][ T4391] vc032x: probe of 2-1:0.0 failed with error -71 [ 373.685814][ T4391] usb 2-1: USB disconnect, device number 13 [ 375.008623][ T7458] loop5: detected capacity change from 0 to 1024 [ 375.150364][ T6671] EXT4-fs (loop6): unmounting filesystem. [ 375.205082][ T7458] hfsplus: request for non-existent node 16777216 in B*Tree [ 375.212439][ T7458] hfsplus: request for non-existent node 16777216 in B*Tree [ 375.273579][ T7458] hfsplus: request for non-existent node 16777216 in B*Tree [ 375.394445][ T7458] hfsplus: request for non-existent node 16777216 in B*Tree [ 375.474229][ T7458] hfsplus: request for non-existent node 16777216 in B*Tree [ 375.623156][ T7458] hfsplus: request for non-existent node 16777216 in B*Tree [ 376.425750][ T7480] loop6: detected capacity change from 0 to 32768 [ 376.433659][ T7480] XFS: attr2 mount option is deprecated. [ 376.525845][ T7480] XFS (loop6): Mounting V5 Filesystem [ 376.606897][ T7480] XFS (loop6): Ending clean mount [ 376.633455][ T7480] XFS (loop6): Quotacheck needed: Please wait. [ 376.793022][ T7480] XFS (loop6): Quotacheck: Done. [ 377.659056][ T6671] XFS (loop6): Unmounting Filesystem [ 377.688672][ T7504] netlink: 176 bytes leftover after parsing attributes in process `syz.3.710'. [ 377.729256][ T7487] loop1: detected capacity change from 0 to 32768 [ 377.786860][ T7487] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.709 (7487) [ 377.865702][ T7487] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 377.920038][ T7487] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 377.961481][ T7487] BTRFS info (device loop1): turning on sync discard [ 378.008002][ T7487] BTRFS info (device loop1): doing ref verification [ 378.037957][ T7487] BTRFS info (device loop1): max_inline at 0 [ 378.087580][ T7487] BTRFS info (device loop1): force clearing of disk cache [ 378.124293][ T7487] BTRFS info (device loop1): setting nodatacow, compression disabled [ 378.143104][ T7487] BTRFS info (device loop1): doing ref verification [ 378.149765][ T7487] BTRFS info (device loop1): using free space tree [ 378.189205][ T7521] loop5: detected capacity change from 0 to 1024 [ 378.518979][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.525355][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.663872][ T7555] loop6: detected capacity change from 0 to 512 [ 380.760136][ T7487] BTRFS error (device loop1): open_ctree failed: -22 [ 380.948014][ T7555] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.713: corrupted in-inode xattr [ 381.103081][ T7555] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.713: couldn't read orphan inode 15 (err -117) [ 381.135233][ T7555] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 381.769510][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.713'. [ 382.283369][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 382.397310][ T4429] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4429) [ 382.493089][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 382.500470][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.710899][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.911963][ T34] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 383.045106][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.240330][ T34] usb 7-1: config 0 descriptor?? [ 383.375690][ T34] hub 7-1:0.0: USB hub found [ 383.593392][ T34] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 383.713924][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 383.774227][ T34] usbhid: probe of 7-1:0.0 failed with error -71 [ 383.924637][ T34] usb 7-1: USB disconnect, device number 4 [ 384.613868][ T7598] loop3: detected capacity change from 0 to 128 [ 384.718216][ T7598] EXT4-fs: Ignoring removed nobh option [ 384.761323][ T6671] EXT4-fs (loop6): unmounting filesystem. [ 384.798655][ T7598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 384.909086][ T7605] loop1: detected capacity change from 0 to 256 [ 384.953332][ T7598] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.996663][ T26] audit: type=1800 audit(1753066421.413:20): pid=7598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.729" name="bus" dev="loop3" ino=13 res=0 errno=0 [ 385.022232][ T7605] FAT-fs (loop1): Directory bread(block 64) failed [ 385.093748][ T7605] FAT-fs (loop1): Directory bread(block 65) failed [ 385.133181][ T7605] FAT-fs (loop1): Directory bread(block 66) failed [ 385.150051][ T7605] FAT-fs (loop1): Directory bread(block 67) failed [ 385.175479][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 385.202057][ T7605] FAT-fs (loop1): Directory bread(block 68) failed [ 385.253269][ T7605] FAT-fs (loop1): Directory bread(block 69) failed [ 385.259950][ T7605] FAT-fs (loop1): Directory bread(block 70) failed [ 385.383357][ T7605] FAT-fs (loop1): Directory bread(block 71) failed [ 385.812116][ T7616] loop5: detected capacity change from 0 to 1024 [ 385.840677][ T7605] FAT-fs (loop1): Directory bread(block 72) failed [ 385.849282][ T7605] FAT-fs (loop1): Directory bread(block 73) failed [ 385.910956][ T7618] loop3: detected capacity change from 0 to 128 [ 386.191722][ T7621] fuseblk: Bad value for 'fd' [ 387.723443][ T7635] loop3: detected capacity change from 0 to 512 [ 387.979021][ T7635] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.741: corrupted in-inode xattr [ 388.039562][ T7635] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.741: couldn't read orphan inode 15 (err -117) [ 388.091946][ T7635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 388.187612][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 388.312762][ T7143] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 388.594272][ T7143] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 388.739359][ T7143] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.749737][ T7143] usb 7-1: config 0 descriptor?? [ 389.123074][ T6155] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 389.333484][ T6155] usb 4-1: Using ep0 maxpacket: 32 [ 389.350342][ T6155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.423135][ T6155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.477107][ T6155] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.520736][ T6155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.588926][ T6155] usb 4-1: config 0 descriptor?? [ 389.632203][ T6155] hub 4-1:0.0: USB hub found [ 389.813833][ T6155] hub 4-1:0.0: 1 port detected [ 389.833452][ T7669] loop1: detected capacity change from 0 to 128 [ 389.921120][ T7638] loop5: detected capacity change from 0 to 32768 [ 389.928179][ T7669] EXT4-fs: Ignoring removed nobh option [ 389.953305][ T7645] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 389.969542][ T7143] pegasus 7-1:0.0: can't reset MAC [ 389.975254][ T7143] pegasus: probe of 7-1:0.0 failed with error -5 [ 390.016950][ T7669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 390.031205][ T6155] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 390.043156][ T7143] usb 7-1: USB disconnect, device number 5 [ 390.071455][ T6155] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 390.133533][ T7669] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.179115][ T7638] XFS (loop5): Mounting V5 Filesystem [ 390.195193][ T6155] usbhid 4-1:0.0: can't add hid device: -71 [ 390.201243][ T6155] usbhid: probe of 4-1:0.0 failed with error -71 [ 390.258170][ T7638] XFS (loop5): AIL initialisation failed: error -12 [ 390.329555][ T26] audit: type=1800 audit(1753066426.743:21): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.746" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 390.352600][ T7638] XFS (loop5): log mount failed [ 390.413622][ T6155] usb 4-1: USB disconnect, device number 13 [ 390.500693][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 390.724106][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 390.884347][ T7687] loop1: detected capacity change from 0 to 512 [ 390.921826][ T7687] EXT4-fs (loop1): Test dummy encryption mode enabled [ 390.973531][ T7687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 391.076012][ T7687] EXT4-fs (loop1): 1 truncate cleaned up [ 391.544157][ T7693] loop0: detected capacity change from 0 to 256 [ 391.562104][ T7687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 391.685612][ T7693] FAT-fs (loop0): Directory bread(block 64) failed [ 391.722893][ T7693] FAT-fs (loop0): Directory bread(block 65) failed [ 391.730157][ T7693] FAT-fs (loop0): Directory bread(block 66) failed [ 391.753533][ T7693] FAT-fs (loop0): Directory bread(block 67) failed [ 391.839494][ T7693] FAT-fs (loop0): Directory bread(block 68) failed [ 391.870064][ T7693] FAT-fs (loop0): Directory bread(block 69) failed [ 391.903910][ T7693] FAT-fs (loop0): Directory bread(block 70) failed [ 391.935469][ T7693] FAT-fs (loop0): Directory bread(block 71) failed [ 391.959812][ T7702] loop5: detected capacity change from 0 to 1024 [ 391.982780][ T7693] FAT-fs (loop0): Directory bread(block 72) failed [ 392.023141][ T7693] FAT-fs (loop0): Directory bread(block 73) failed [ 392.717442][ T7685] loop6: detected capacity change from 0 to 32768 [ 392.822487][ T7685] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.749 (7685) [ 393.080166][ T7685] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 393.242902][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 393.331129][ T7685] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 393.483309][ T7685] BTRFS info (device loop6): using free space tree [ 393.846799][ T7687] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 393.945885][ T7754] loop0: detected capacity change from 0 to 512 [ 394.048471][ T7754] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.758: corrupted in-inode xattr [ 394.075511][ T7685] BTRFS error (device loop6): open_ctree failed: -12 [ 394.084100][ T4429] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (4429) [ 394.087209][ T7754] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.758: couldn't read orphan inode 15 (err -117) [ 394.188722][ T7754] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 394.205547][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 394.450632][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 395.563253][ T4350] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 397.233314][ T4350] usb 1-1: Using ep0 maxpacket: 32 [ 397.308960][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.108488][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.188739][ T4350] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 398.200226][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.696396][ T7756] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 398.721932][ T4350] usb 1-1: config 0 descriptor?? [ 398.772441][ T7782] loop5: detected capacity change from 0 to 1024 [ 399.012573][ T4350] usb 1-1: can't set config #0, error -71 [ 399.020158][ T4350] usb 1-1: USB disconnect, device number 9 [ 399.860774][ T7789] loop6: detected capacity change from 0 to 256 [ 399.904424][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 399.964185][ T7789] FAT-fs (loop6): Directory bread(block 64) failed [ 400.008515][ T7789] FAT-fs (loop6): Directory bread(block 65) failed [ 400.193208][ T7789] FAT-fs (loop6): Directory bread(block 66) failed [ 400.199808][ T7789] FAT-fs (loop6): Directory bread(block 67) failed [ 400.261951][ T7789] FAT-fs (loop6): Directory bread(block 68) failed [ 400.379063][ T7789] FAT-fs (loop6): Directory bread(block 69) failed [ 400.723914][ T7789] FAT-fs (loop6): Directory bread(block 70) failed [ 400.886126][ T7789] FAT-fs (loop6): Directory bread(block 71) failed [ 400.897384][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.769'. [ 400.955026][ T7789] FAT-fs (loop6): Directory bread(block 72) failed [ 401.002247][ T7789] FAT-fs (loop6): Directory bread(block 73) failed [ 401.368180][ T7813] loop1: detected capacity change from 0 to 256 [ 401.378239][ T7815] loop5: detected capacity change from 0 to 512 [ 401.418935][ T7815] EXT4-fs (loop5): Test dummy encryption mode enabled [ 401.460705][ T7815] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 401.484829][ T7813] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.536450][ T7813] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 401.652334][ T7815] EXT4-fs (loop5): 1 truncate cleaned up [ 401.654014][ T7813] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 401.658331][ T7815] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 403.765872][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 403.773544][ T7847] loop1: detected capacity change from 0 to 1024 [ 403.849571][ T7853] smc: net device bond0 applied user defined pnetid SYZ2 [ 403.896762][ T7853] smc: net device bond0 erased user defined pnetid SYZ2 [ 403.953431][ T7815] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 404.125094][ T7863] loop1: detected capacity change from 0 to 128 [ 404.269534][ T7863] EXT4-fs: Ignoring removed nobh option [ 404.292364][ T7815] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 405.114683][ T7863] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 405.128158][ T7863] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 405.164002][ T26] audit: type=1800 audit(1753066441.583:22): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.782" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 405.300957][ T5181] EXT4-fs (loop5): unmounting filesystem. [ 405.324025][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 405.557188][ T7880] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 405.570728][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 405.797523][ T7885] loop0: detected capacity change from 0 to 256 [ 407.439206][ T7896] fuse: Bad value for 'fd' [ 407.671543][ T7885] FAT-fs (loop0): Directory bread(block 64) failed [ 407.773117][ T7885] FAT-fs (loop0): Directory bread(block 65) failed [ 407.833271][ T7885] FAT-fs (loop0): Directory bread(block 66) failed [ 407.903047][ T7885] FAT-fs (loop0): Directory bread(block 67) failed [ 408.000101][ T7885] FAT-fs (loop0): Directory bread(block 68) failed [ 408.040640][ T7885] FAT-fs (loop0): Directory bread(block 69) failed [ 408.063141][ T7885] FAT-fs (loop0): Directory bread(block 70) failed [ 408.087188][ T7885] FAT-fs (loop0): Directory bread(block 71) failed [ 408.108592][ T7885] FAT-fs (loop0): Directory bread(block 72) failed [ 408.115665][ T7906] loop1: detected capacity change from 0 to 1024 [ 408.213588][ T7885] FAT-fs (loop0): Directory bread(block 73) failed [ 408.650485][ T7916] overlayfs: failed to clone upperpath [ 409.991817][ T7928] loop6: detected capacity change from 0 to 512 [ 410.064406][ T7928] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.800: corrupted in-inode xattr [ 410.076843][ T7930] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 410.293999][ T7928] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.800: couldn't read orphan inode 15 (err -117) [ 410.362718][ T7928] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 411.156117][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.800'. [ 411.212905][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 411.533096][ T7143] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 411.783367][ T7143] usb 7-1: Using ep0 maxpacket: 32 [ 411.823985][ T7143] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.000115][ T7143] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.184540][ T7143] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 412.321212][ T7143] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.541149][ T7143] usb 7-1: config 0 descriptor?? [ 412.682084][ T7143] hub 7-1:0.0: USB hub found [ 412.833208][ T7932] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 412.841550][ T7143] hub 7-1:0.0: 1 port detected [ 414.117123][ T7143] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 414.203125][ T7143] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 414.263657][ T7143] usbhid 7-1:0.0: can't add hid device: -32 [ 414.303157][ T7143] usbhid: probe of 7-1:0.0 failed with error -32 [ 414.338424][ T7946] loop1: detected capacity change from 0 to 32768 [ 414.412304][ T6671] EXT4-fs (loop6): unmounting filesystem. [ 414.420050][ T7143] usb 7-1: USB disconnect, device number 6 [ 414.450754][ T7946] (syz.1.804,7946,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 414.504344][ T7946] (syz.1.804,7946,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 414.745628][ T7963] loop6: detected capacity change from 0 to 1024 [ 414.803018][ T5265] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 415.005472][ T5265] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.053901][ T5265] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 415.095205][ T7975] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 415.105365][ T5265] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.241651][ T5265] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.286846][ T5265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.334729][ T5265] usb 1-1: Product: syz [ 415.353098][ T5265] usb 1-1: Manufacturer: syz [ 415.357750][ T5265] usb 1-1: SerialNumber: syz [ 415.464001][ T5265] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 415.505982][ T5265] cdc_mbim 1-1:1.0: bind() failure [ 416.342248][ T7143] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 416.374937][ T5265] usb 1-1: USB disconnect, device number 10 [ 416.433283][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 416.702439][ T7143] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 416.723008][ T7143] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.733216][ T7143] usb 7-1: config 0 descriptor?? [ 416.741188][ T7143] gspca_main: spca508-2.14.0 probing 8086:0110 [ 416.962211][ T7143] gspca_spca508: reg_read err -32 [ 416.971717][ T7143] gspca_spca508: reg_read err -32 [ 417.103016][ T7143] gspca_spca508: reg_read err -32 [ 417.970987][ T7143] gspca_spca508: reg_read err -71 [ 417.978781][ T7143] gspca_spca508: reg write: error -71 [ 417.999996][ T8000] loop0: detected capacity change from 0 to 512 [ 418.009190][ T7143] spca508: probe of 7-1:0.0 failed with error -71 [ 418.027693][ T7143] usb 7-1: USB disconnect, device number 7 [ 418.107282][ T8000] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.821: corrupted in-inode xattr [ 418.163828][ T8000] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.821: couldn't read orphan inode 15 (err -117) [ 418.176064][ T8000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 418.213552][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 418.234401][ T8009] loop5: detected capacity change from 0 to 256 [ 418.512669][ T8009] FAT-fs (loop5): Directory bread(block 64) failed [ 418.593254][ T34] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 418.705455][ T8009] FAT-fs (loop5): Directory bread(block 65) failed [ 418.823320][ T34] usb 1-1: Using ep0 maxpacket: 32 [ 418.836771][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.873812][ T8009] FAT-fs (loop5): Directory bread(block 66) failed [ 418.985230][ T8009] FAT-fs (loop5): Directory bread(block 67) failed [ 419.029558][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.106719][ T8009] FAT-fs (loop5): Directory bread(block 68) failed [ 419.204771][ T34] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 419.236171][ T8009] FAT-fs (loop5): Directory bread(block 69) failed [ 419.356172][ T8009] FAT-fs (loop5): Directory bread(block 70) failed [ 419.377913][ T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.479624][ T8009] FAT-fs (loop5): Directory bread(block 71) failed [ 419.602235][ T34] usb 1-1: config 0 descriptor?? [ 419.638652][ T8009] FAT-fs (loop5): Directory bread(block 72) failed [ 419.781070][ T34] hub 1-1:0.0: USB hub found [ 419.791289][ T8009] FAT-fs (loop5): Directory bread(block 73) failed [ 419.939670][ T34] hub 1-1:0.0: 1 port detected [ 421.156651][ T34] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 421.223870][ T8013] loop6: detected capacity change from 0 to 256 [ 421.233485][ T8004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 421.267679][ T34] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 421.375026][ T8013] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.382597][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 421.411984][ T34] usbhid 1-1:0.0: can't add hid device: -71 [ 421.421315][ T34] usbhid: probe of 1-1:0.0 failed with error -71 [ 421.433017][ T8013] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 421.503725][ T34] usb 1-1: USB disconnect, device number 11 [ 421.542507][ T8013] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 421.577596][ T8022] loop1: detected capacity change from 0 to 256 [ 421.625003][ T26] audit: type=1804 audit(1753066458.043:23): pid=8013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.825" name="/newroot/38/file1/bus" dev="loop6" ino=1048683 res=1 errno=0 [ 421.657016][ T8022] exfat: Deprecated parameter 'namecase' [ 421.706150][ T8022] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 423.100531][ T8046] loop5: detected capacity change from 0 to 256 [ 424.221449][ T8054] loop6: detected capacity change from 0 to 524287999 [ 425.023992][ T8057] loop1: detected capacity change from 0 to 512 [ 425.030921][ T8057] EXT4-fs: Ignoring removed i_version option [ 425.037041][ T8057] ext4: Bad value for 'min_batch_time' [ 425.680418][ T8046] FAT-fs (loop5): Directory bread(block 64) failed [ 425.898004][ T8046] FAT-fs (loop5): Directory bread(block 65) failed [ 426.084743][ T8046] FAT-fs (loop5): Directory bread(block 66) failed [ 426.092040][ T8046] FAT-fs (loop5): Directory bread(block 67) failed [ 426.097510][ T8054] Dev loop6: unable to read RDB block 8 [ 426.099292][ T8046] FAT-fs (loop5): Directory bread(block 68) failed [ 426.104888][ T8054] loop6: unable to read partition table [ 426.111186][ T8046] FAT-fs (loop5): Directory bread(block 69) failed [ 426.117187][ T8054] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 426.123640][ T8046] FAT-fs (loop5): Directory bread(block 70) failed [ 426.178969][ T8046] FAT-fs (loop5): Directory bread(block 71) failed [ 426.246524][ T8046] FAT-fs (loop5): Directory bread(block 72) failed [ 426.348259][ T8046] FAT-fs (loop5): Directory bread(block 73) failed [ 426.673053][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 427.021489][ T4430] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.255809][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.838'. [ 428.613236][ T5270] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 428.864363][ T5270] usb 7-1: Using ep0 maxpacket: 32 [ 428.893430][ T5270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.071584][ T5270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.237986][ T5270] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 429.470843][ T5270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.574765][ T5270] usb 7-1: config 0 descriptor?? [ 429.603551][ T5270] usb 7-1: can't set config #0, error -71 [ 429.640111][ T5270] usb 7-1: USB disconnect, device number 8 [ 429.811455][ T8093] loop0: detected capacity change from 0 to 128 [ 429.893977][ T8093] EXT4-fs: Ignoring removed nobh option [ 429.961561][ T8093] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 430.087587][ T8093] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.785953][ T8109] loop5: detected capacity change from 0 to 1024 [ 430.894871][ T8109] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 430.961091][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 431.015178][ T8109] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 431.075372][ T8109] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.849: missing EA_INODE flag [ 431.131904][ T8116] loop0: detected capacity change from 0 to 16 [ 431.183097][ T8109] EXT4-fs (loop5): Remounting filesystem read-only [ 431.190306][ T8109] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.849: error while reading EA inode 11 err=-117 [ 431.217659][ T8116] erofs: (device loop0): mounted with root inode @ nid 36. [ 431.241089][ T8116] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 431.263213][ T8109] EXT4-fs (loop5): Remounting filesystem read-only [ 431.269840][ T8109] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 431.735095][ T5181] EXT4-fs (loop5): unmounting filesystem. [ 431.915051][ T8141] loop5: detected capacity change from 0 to 256 [ 431.938395][ T8141] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 431.950828][ T8141] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 431.987218][ T8141] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 432.139947][ T26] audit: type=1804 audit(1753066468.553:24): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.857" name="/newroot/115/file1/bus" dev="loop5" ino=1048686 res=1 errno=0 [ 432.647342][ T8152] loop5: detected capacity change from 0 to 128 [ 432.679036][ T8152] EXT4-fs: Ignoring removed nobh option [ 433.510367][ T8152] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 433.628944][ T8152] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 434.533010][ T5270] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 434.537295][ T5181] EXT4-fs (loop5): unmounting filesystem. [ 434.737252][ T5270] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 434.750375][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.790160][ T5270] usb 1-1: Product: syz [ 434.802310][ T8179] loop6: detected capacity change from 0 to 64 [ 434.813303][ T5270] usb 1-1: Manufacturer: syz [ 434.817952][ T5270] usb 1-1: SerialNumber: syz [ 434.848177][ T5270] usb 1-1: config 0 descriptor?? [ 434.856441][ T8179] hfs: unable to locate alternate MDB [ 434.862458][ T8179] hfs: continuing without an alternate MDB [ 434.889444][ T5270] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 012 [ 435.039918][ T8184] loop5: detected capacity change from 0 to 256 [ 435.094358][ T8184] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 435.119693][ T8184] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 435.157841][ T8184] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 435.605355][ T7143] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 436.132084][ T5270] i2c i2c-1: failure reading functionality [ 436.171822][ T5270] i2c i2c-1: connected i2c-tiny-usb device [ 436.198643][ T5270] usb 1-1: USB disconnect, device number 12 [ 436.355785][ T7143] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 436.360321][ T8205] loop0: detected capacity change from 0 to 128 [ 436.385013][ T7143] usb 7-1: config 0 has no interface number 0 [ 436.389264][ T8205] EXT4-fs: Ignoring removed nobh option [ 436.407864][ T7143] usb 7-1: config 0 interface 96 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 436.458318][ T8205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 436.472518][ T8205] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.597006][ T26] audit: type=1800 audit(1753066472.983:25): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.878" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 436.620802][ T7143] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10ad, bcdDevice=b7.e9 [ 436.635768][ T7143] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.663514][ T7143] usb 7-1: Product: syz [ 436.667821][ T7143] usb 7-1: Manufacturer: syz [ 436.680193][ T7143] usb 7-1: SerialNumber: syz [ 436.815941][ T7143] usb 7-1: config 0 descriptor?? [ 437.429945][ T8192] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 437.479145][ T7143] em28xx 7-1:0.96: New device syz syz @ 12 Mbps (0ccd:10ad, interface 96, class 96) [ 437.523555][ T7143] em28xx 7-1:0.96: Device initialization failed. [ 437.540256][ T7143] em28xx 7-1:0.96: Device must be connected to a high-speed USB 2.0 port. [ 437.573989][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 438.094709][ T5270] usb 7-1: USB disconnect, device number 9 [ 438.780612][ T8235] loop5: detected capacity change from 0 to 2048 [ 439.090704][ T8235] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 439.196558][ T8230] loop1: detected capacity change from 0 to 32768 [ 439.265166][ T8245] loop0: detected capacity change from 0 to 256 [ 439.313122][ T8245] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.347538][ T8230] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 439.354498][ T5181] EXT4-fs (loop5): unmounting filesystem. [ 439.383453][ T8245] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 439.550289][ T8245] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 439.583201][ T8230] XFS (loop1): Mounting V5 Filesystem [ 439.707719][ T26] audit: type=1804 audit(1753066476.123:26): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.889" name="/newroot/194/file1/bus" dev="loop0" ino=1048690 res=1 errno=0 [ 439.956873][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.963322][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.149778][ T8230] XFS (loop1): Ending clean mount [ 441.208947][ T8230] XFS (loop1): Quotacheck needed: Please wait. [ 442.012390][ T8230] XFS (loop1): Quotacheck: Done. [ 442.547425][ T4282] XFS (loop1): Unmounting Filesystem [ 442.656682][ T8276] netlink: 'syz.3.896': attribute type 21 has an invalid length. [ 442.729370][ T8276] netlink: 156 bytes leftover after parsing attributes in process `syz.3.896'. [ 443.329957][ T8276] netlink: 'syz.3.896': attribute type 21 has an invalid length. [ 443.338252][ T8276] netlink: 156 bytes leftover after parsing attributes in process `syz.3.896'. [ 443.624683][ T8276] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 443.632352][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 443.673559][ T8276] netlink: 'syz.3.896': attribute type 2 has an invalid length. [ 444.059394][ T8297] Cannot find set identified by id 0 to match [ 444.716764][ T8294] loop0: detected capacity change from 0 to 4096 [ 444.791332][ T8294] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 444.888431][ T8304] loop6: detected capacity change from 0 to 256 [ 445.043128][ T8304] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.238406][ T8304] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 445.354624][ T8304] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 445.446229][ T26] audit: type=1804 audit(1753066481.863:27): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.904" name="/newroot/51/file1/bus" dev="loop6" ino=1048692 res=1 errno=0 [ 448.178928][ T8319] loop6: detected capacity change from 0 to 32768 [ 448.377454][ T8319] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 448.423764][ T8319] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 448.432640][ T8319] BTRFS info (device loop6): using free space tree [ 451.214567][ T8319] BTRFS error (device loop6): open_ctree failed: -12 [ 451.247483][ T4429] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (4429) [ 451.825474][ T8365] loop5: detected capacity change from 0 to 512 [ 451.891880][ T8365] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.927: corrupted in-inode xattr [ 451.924517][ T8365] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.927: couldn't read orphan inode 15 (err -117) [ 451.986571][ T8365] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 452.023730][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 452.093139][ T8368] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 453.523143][ T5269] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 453.773144][ T5269] usb 6-1: Using ep0 maxpacket: 32 [ 453.788260][ T5269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.415271][ T5269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.678907][ T5269] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.713473][ T5269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.288755][ T5269] usb 6-1: config 0 descriptor?? [ 457.401961][ T5269] usb 6-1: can't set config #0, error -71 [ 457.413276][ T5269] usb 6-1: USB disconnect, device number 5 [ 457.465540][ T5181] EXT4-fs (loop5): unmounting filesystem. [ 458.659647][ T8412] loop6: detected capacity change from 0 to 256 [ 459.630792][ T8419] loop0: detected capacity change from 0 to 512 [ 459.641132][ T8419] EXT4-fs: Ignoring removed i_version option [ 459.647428][ T8419] ext4: Bad value for 'min_batch_time' [ 460.121637][ T8412] FAT-fs (loop6): Directory bread(block 64) failed [ 463.691220][ T8412] FAT-fs (loop6): Directory bread(block 65) failed [ 463.822677][ T8412] FAT-fs (loop6): Directory bread(block 66) failed [ 463.863167][ T8412] FAT-fs (loop6): Directory bread(block 67) failed [ 463.943754][ T8412] FAT-fs (loop6): Directory bread(block 68) failed [ 463.973088][ T4696] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 463.984142][ T8412] FAT-fs (loop6): Directory bread(block 69) failed [ 464.023151][ T8412] FAT-fs (loop6): Directory bread(block 70) failed [ 464.043069][ T8412] FAT-fs (loop6): Directory bread(block 71) failed [ 464.177307][ T8412] FAT-fs (loop6): Directory bread(block 72) failed [ 464.213073][ T8412] FAT-fs (loop6): Directory bread(block 73) failed [ 465.002967][ C0] hrtimer: interrupt took 96944 ns [ 465.099061][ T8437] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 465.506421][ T8449] loop6: detected capacity change from 0 to 512 [ 465.572411][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 465.582750][ T8449] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.937: corrupted in-inode xattr [ 465.704892][ T8449] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.937: couldn't read orphan inode 15 (err -117) [ 465.933931][ T8449] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 467.649496][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 467.713092][ T4342] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 469.083006][ T5269] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 469.433105][ T5269] usb 7-1: Using ep0 maxpacket: 32 [ 469.441477][ T5269] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.544898][ T5269] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.633056][ T8458] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 469.646537][ T5269] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 469.763831][ T5269] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.908160][ T5269] usb 7-1: config 0 descriptor?? [ 469.976711][ T5269] hub 7-1:0.0: USB hub found [ 470.165895][ T5269] hub 7-1:0.0: 1 port detected [ 470.539561][ T5269] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 470.550378][ T5269] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 470.653561][ T8485] loop1: detected capacity change from 0 to 256 [ 470.662451][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.956'. [ 470.676092][ T6671] EXT4-fs (loop6): unmounting filesystem. [ 470.716848][ T5269] usbhid 7-1:0.0: can't add hid device: -71 [ 470.722891][ T5269] usbhid: probe of 7-1:0.0 failed with error -71 [ 470.725978][ T8485] FAT-fs (loop1): Directory bread(block 64) failed [ 470.733225][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 470.780384][ T8485] FAT-fs (loop1): Directory bread(block 65) failed [ 470.795733][ T8485] FAT-fs (loop1): Directory bread(block 66) failed [ 470.804137][ T5269] usb 7-1: USB disconnect, device number 10 [ 470.837740][ T8485] FAT-fs (loop1): Directory bread(block 67) failed [ 470.891742][ T8485] FAT-fs (loop1): Directory bread(block 68) failed [ 470.935790][ T8485] FAT-fs (loop1): Directory bread(block 69) failed [ 470.966533][ T8485] FAT-fs (loop1): Directory bread(block 70) failed [ 471.017668][ T8485] FAT-fs (loop1): Directory bread(block 71) failed [ 471.034766][ T8485] FAT-fs (loop1): Directory bread(block 72) failed [ 471.061742][ T8485] FAT-fs (loop1): Directory bread(block 73) failed [ 472.843264][ T4427] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 473.033129][ T4427] usb 2-1: Using ep0 maxpacket: 8 [ 473.048604][ T4427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.060693][ T4427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.085946][ T4427] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.107318][ T8506] loop6: detected capacity change from 0 to 524287999 [ 473.381359][ T4427] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 473.390635][ T4427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.411572][ T4427] usb 2-1: config 0 descriptor?? [ 473.507159][ T8508] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 474.530611][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 475.426838][ T4427] usbhid 2-1:0.0: can't add hid device: -71 [ 475.433360][ T4427] usbhid: probe of 2-1:0.0 failed with error -71 [ 475.495536][ T4427] usb 2-1: USB disconnect, device number 14 [ 476.873536][ T8546] netlink: 'syz.3.965': attribute type 9 has an invalid length. [ 476.881723][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 476.935675][ T8546] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.944970][ T8546] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.953814][ T8546] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.962533][ T8546] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.021395][ T8546] netlink: 'syz.3.965': attribute type 9 has an invalid length. [ 477.047834][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 477.081516][ T8548] loop1: detected capacity change from 0 to 512 [ 477.174719][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 477.283641][ T8548] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.966: corrupted in-inode xattr [ 477.389176][ T8548] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.966: couldn't read orphan inode 15 (err -117) [ 477.445532][ T8548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 477.570803][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 478.003216][ T34] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 478.421753][ T34] usb 2-1: Using ep0 maxpacket: 32 [ 479.552069][ T8569] loop5: detected capacity change from 0 to 40427 [ 480.754808][ T8552] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 480.783420][ T8569] F2FS-fs (loop5): Invalid log sectors per block(0) log sectorsize(9) [ 480.791767][ T8569] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 480.807096][ T8569] F2FS-fs (loop5): invalid crc value [ 480.993481][ T8569] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 481.056007][ T8569] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 481.062840][ T8569] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 481.079669][ T34] usb 2-1: device descriptor read/all, error -71 [ 481.173116][ T8569] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 481.180219][ T8569] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 481.321249][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 481.798314][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 482.001701][ T8582] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 483.200855][ T8606] loop1: detected capacity change from 0 to 128 [ 483.207691][ T8588] loop0: detected capacity change from 0 to 32768 [ 483.280587][ T8606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 483.290509][ T8588] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 483.316666][ T8606] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 483.373461][ T8588] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 483.382167][ T8588] BTRFS info (device loop0): setting nodatacow, compression disabled [ 483.432755][ T8588] BTRFS info (device loop0): force zlib compression, level 3 [ 483.444245][ T8588] BTRFS info (device loop0): turning off barriers [ 483.503083][ T8588] BTRFS info (device loop0): allowing degraded mounts [ 483.510013][ T8588] BTRFS info (device loop0): enabling ssd optimizations [ 483.520382][ T26] audit: type=1800 audit(1753066519.933:28): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.983" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 483.532969][ T8588] BTRFS info (device loop0): using spread ssd allocation scheme [ 483.663113][ T8588] BTRFS info (device loop0): setting nodatacow [ 483.677203][ T8588] BTRFS info (device loop0): using free space tree [ 483.797972][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 483.990311][ T8588] BTRFS info (device loop0): checking UUID tree [ 485.208718][ T8588] BTRFS info (device loop0): balance: start -d -m [ 485.260504][ T8588] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 485.299669][ T8652] loop1: detected capacity change from 0 to 256 [ 485.358738][ T8652] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.412541][ T8652] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 485.475902][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 485.505431][ T8650] BTRFS info (device loop0): scrub: started on devid 1 [ 485.528844][ T8588] ------------[ cut here ]------------ [ 485.537101][ T8652] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 485.571952][ T8588] WARNING: CPU: 0 PID: 8588 at fs/btrfs/volumes.c:3265 btrfs_remove_chunk+0x14b5/0x19c0 [ 485.582068][ T8588] Modules linked in: [ 485.586570][ T8588] CPU: 0 PID: 8588 Comm: syz.0.979 Not tainted 6.1.146-syzkaller #0 [ 485.594854][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.605015][ T8588] RIP: 0010:btrfs_remove_chunk+0x14b5/0x19c0 [ 485.611056][ T8588] Code: 48 c7 c7 60 05 d0 8a 44 89 f6 e8 e6 25 e1 fd 0f 0b e9 76 fe ff ff e8 4a 04 15 fe 48 c7 c7 60 05 d0 8a 44 89 f6 e8 cb 25 e1 fd <0f> 0b e9 95 fe ff ff e8 2f 04 15 fe 48 c7 c7 60 05 d0 8a 44 89 f6 [ 485.630755][ T8588] RSP: 0018:ffffc90004c07920 EFLAGS: 00010246 [ 485.636926][ T8588] RAX: 480448c9f5cb6300 RBX: 0000000000000000 RCX: 0000000000080000 [ 485.644970][ T8588] RDX: ffffc9000caa9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 485.653033][ T8588] RBP: ffffc90004c07ad0 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 485.661060][ T8588] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: 1ffff11005eac8f0 [ 485.669130][ T8588] R13: dffffc0000000000 R14: ffffffffffffffe4 R15: ffff88807522c001 [ 485.677179][ T8588] FS: 00007fec0fd916c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 485.686210][ T8588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.692851][ T8588] CR2: 00007f644a212000 CR3: 000000007e027000 CR4: 00000000003526f0 [ 485.700929][ T8588] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.709002][ T8588] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.717166][ T8588] Call Trace: [ 485.720490][ T8588] [ 485.723628][ T8588] ? btrfs_get_chunk_map+0x160/0x160 [ 485.728997][ T8588] btrfs_relocate_chunk+0x296/0x3b0 [ 485.734300][ T8588] __btrfs_balance+0x1894/0x21e0 [ 485.739333][ T8588] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 485.745076][ T8588] ? describe_balance_start_or_resume+0x4b0/0x4b0 [ 485.751546][ T8588] ? __mutex_unlock_slowpath+0xdf/0x6a0 [ 485.757214][ T8588] ? __rwlock_init+0xf0/0x140 [ 485.761952][ T8588] ? do_raw_spin_unlock+0x11d/0x230 [ 485.767275][ T8588] btrfs_balance+0xcad/0x11b0 [ 485.772046][ T8588] btrfs_ioctl_balance+0x49f/0x720 [ 485.777268][ T8588] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 485.783769][ T8588] __se_sys_ioctl+0xfa/0x170 [ 485.788415][ T8588] do_syscall_64+0x4c/0xa0 [ 485.792888][ T8588] ? clear_bhb_loop+0x60/0xb0 [ 485.797681][ T8588] ? clear_bhb_loop+0x60/0xb0 [ 485.802415][ T8588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.808421][ T8588] RIP: 0033:0x7fec0ef8e9a9 [ 485.812936][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.832704][ T8588] RSP: 002b:00007fec0fd91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.841231][ T8588] RAX: ffffffffffffffda RBX: 00007fec0f1b5fa0 RCX: 00007fec0ef8e9a9 [ 485.849289][ T8588] RDX: 0000200000000180 RSI: 00000000c4009420 RDI: 0000000000000005 [ 485.857370][ T8588] RBP: 00007fec0f010d69 R08: 0000000000000000 R09: 0000000000000000 [ 485.865425][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.873497][ T8588] R13: 0000000000000000 R14: 00007fec0f1b5fa0 R15: 00007fff7824a128 [ 485.881539][ T8588] [ 485.884662][ T8588] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 485.891972][ T8588] CPU: 0 PID: 8588 Comm: syz.0.979 Not tainted 6.1.146-syzkaller #0 [ 485.899991][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.910086][ T8588] Call Trace: [ 485.913412][ T8588] [ 485.916380][ T8588] dump_stack_lvl+0x168/0x22e [ 485.921125][ T8588] ? memcpy+0x3c/0x60 [ 485.925159][ T8588] ? show_regs_print_info+0x12/0x12 [ 485.930403][ T8588] ? load_image+0x3b0/0x3b0 [ 485.934967][ T8588] panic+0x2c9/0x710 [ 485.938909][ T8588] ? bpf_jit_dump+0xd0/0xd0 [ 485.943476][ T8588] __warn+0x2f8/0x4f0 [ 485.947497][ T8588] ? btrfs_remove_chunk+0x14b5/0x19c0 [ 485.952920][ T8588] ? btrfs_remove_chunk+0x14b5/0x19c0 [ 485.958425][ T8588] report_bug+0x2ba/0x4f0 [ 485.962794][ T8588] ? btrfs_remove_chunk+0x14b5/0x19c0 [ 485.968221][ T8588] handle_bug+0x3a/0x70 [ 485.972416][ T8588] exc_invalid_op+0x16/0x40 [ 485.976960][ T8588] asm_exc_invalid_op+0x16/0x20 [ 485.981859][ T8588] RIP: 0010:btrfs_remove_chunk+0x14b5/0x19c0 [ 485.987896][ T8588] Code: 48 c7 c7 60 05 d0 8a 44 89 f6 e8 e6 25 e1 fd 0f 0b e9 76 fe ff ff e8 4a 04 15 fe 48 c7 c7 60 05 d0 8a 44 89 f6 e8 cb 25 e1 fd <0f> 0b e9 95 fe ff ff e8 2f 04 15 fe 48 c7 c7 60 05 d0 8a 44 89 f6 [ 486.007540][ T8588] RSP: 0018:ffffc90004c07920 EFLAGS: 00010246 [ 486.013658][ T8588] RAX: 480448c9f5cb6300 RBX: 0000000000000000 RCX: 0000000000080000 [ 486.021644][ T8588] RDX: ffffc9000caa9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 486.029642][ T8588] RBP: ffffc90004c07ad0 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 486.037630][ T8588] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: 1ffff11005eac8f0 [ 486.045702][ T8588] R13: dffffc0000000000 R14: ffffffffffffffe4 R15: ffff88807522c001 [ 486.053723][ T8588] ? btrfs_get_chunk_map+0x160/0x160 [ 486.059050][ T8588] btrfs_relocate_chunk+0x296/0x3b0 [ 486.064285][ T8588] __btrfs_balance+0x1894/0x21e0 [ 486.069274][ T8588] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 486.074923][ T8588] ? describe_balance_start_or_resume+0x4b0/0x4b0 [ 486.081357][ T8588] ? __mutex_unlock_slowpath+0xdf/0x6a0 [ 486.086956][ T8588] ? __rwlock_init+0xf0/0x140 [ 486.091659][ T8588] ? do_raw_spin_unlock+0x11d/0x230 [ 486.096927][ T8588] btrfs_balance+0xcad/0x11b0 [ 486.101641][ T8588] btrfs_ioctl_balance+0x49f/0x720 [ 486.106779][ T8588] ? btrfs_ioctl_get_supported_features+0x40/0x40 [ 486.113207][ T8588] __se_sys_ioctl+0xfa/0x170 [ 486.117818][ T8588] do_syscall_64+0x4c/0xa0 [ 486.122246][ T8588] ? clear_bhb_loop+0x60/0xb0 [ 486.127018][ T8588] ? clear_bhb_loop+0x60/0xb0 [ 486.131705][ T8588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.137616][ T8588] RIP: 0033:0x7fec0ef8e9a9 [ 486.142046][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.161842][ T8588] RSP: 002b:00007fec0fd91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.170269][ T8588] RAX: ffffffffffffffda RBX: 00007fec0f1b5fa0 RCX: 00007fec0ef8e9a9 [ 486.178253][ T8588] RDX: 0000200000000180 RSI: 00000000c4009420 RDI: 0000000000000005 [ 486.186234][ T8588] RBP: 00007fec0f010d69 R08: 0000000000000000 R09: 0000000000000000 [ 486.194216][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.202314][ T8588] R13: 0000000000000000 R14: 00007fec0f1b5fa0 R15: 00007fff7824a128 [ 486.210426][ T8588] [ 486.213788][ T8588] Kernel Offset: disabled [ 486.218243][ T8588] Rebooting in 86400 seconds..