last executing test programs: 15.135121534s ago: executing program 2 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) accept4(r2, 0x0, 0x0, 0x80800) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r3 = syz_open_dev$video(&(0x7f0000000580), 0x10000000007, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000200)={0x3, @capture={0x1000, 0x1, {0x2, 0x8000}, 0x1, 0xffff}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206010800006b3456631ac623ff99b10500010006000000050004d01358ef0f1603f0e10a30bae75ca1ba00000000000900020073797a3100000000050005000a00000012000300"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="00000000090601080000000000000000070000000900020073797a310000000005000100070000002c0007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$kcm(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500000000005c007eeb0000030a0300000000000000000005000000010073797a30000000000900030073797a3000000000ebff094000000003280004800800024000000012080001400000000014000300776c616e300000000000000000000000140000001100010000000000080000000000000a0000"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 11.944924282s ago: executing program 2 (id=617): mount$tmpfs(0x0, 0x0, 0x0, 0x8c03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0xa084c2, &(0x7f0000000100)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 11.185522251s ago: executing program 1 (id=618): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.63429805s ago: executing program 1 (id=622): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x0, &(0x7f0000000400)={[{@coherency_full}, {@noacl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@err_cont}, {@data_writeback}, {@resv_level={'resv_level', 0x3d, 0x3}}, {@commit}]}, 0x1, 0x4474, &(0x7f000001aa40)="$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") 9.349073308s ago: executing program 0 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8b, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$nbd(r2, &(0x7f0000000240)={0x1000000, 0x0, 0xffff, 0x0, 0x200000}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000040)={0x7, 0x5, 0x1, 0x0, 0x0, [{{r3}}]}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", '\x00', "9e87dc79f4c04982"}, 0x3b) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="9771"}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 8.278491934s ago: executing program 0 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in=@private=0xa010102, 0x4e1f, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x0, 0x29}, {0x7ff, 0x200000008, 0x40000000007, 0x68112219, 0x110000000, 0x4, 0x200000003, 0xd}, {0x4, 0xfffffffffffffffd, 0x7}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x6}, {{@in=@multicast1, 0x0, 0x2b}, 0x2, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r5 = syz_io_uring_setup(0x3b, &(0x7f00000002c0)={0x0, 0x4f67, 0x1, 0x0, 0x27a}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r5, 0x5e40, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r2, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) read$eventfd(r6, &(0x7f0000000080), 0x51) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) sync_file_range(0xffffffffffffffff, 0x3, 0x9517, 0x6) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) process_vm_writev(r2, &(0x7f00000005c0), 0x0, &(0x7f0000000d00)=[{&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f00000007c0)=""/203, 0xcb}, {&(0x7f00000008c0)=""/255, 0xff}, {&(0x7f00000009c0)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/205, 0xcd}, {&(0x7f0000000c00)=""/247, 0xf7}], 0x7, 0x0) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) 7.286125176s ago: executing program 2 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0xff, 0x6355, &(0x7f00000082c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101142, 0xeaff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x29f) 7.161890733s ago: executing program 0 (id=628): syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 6.161616226s ago: executing program 0 (id=630): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.07519277s ago: executing program 0 (id=631): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02"], 0x1, 0x25a, &(0x7f0000000240)="$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") open$dir(&(0x7f0000000500)='./file1\x00', 0x0, 0x100) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000, 0x0, 0xff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000004c0)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000380)=[{r0, 0x508a}], 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 6.000869553s ago: executing program 2 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x4004084, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x181000, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) r8 = fsmount(r4, 0x1, 0x1) fchdir(r8) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{}, {0x8}, [], {0x4, 0x2}, [], {}, {0x20, 0x4}}, 0x24, 0x3) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 5.596362275s ago: executing program 1 (id=633): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f000028c000/0x3000)=nil], &(0x7f0000000140), 0x0, 0x2) 5.184367946s ago: executing program 3 (id=634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f00000002c0)={[{@noautodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@nodiscard}, {@clear_cache}, {@rescan_uuid_tree}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x143042, 0xd1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x192, &(0x7f0000009480)="$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") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000000)={0x1, 0xffffffffff7ffe01, 0x6, 0x53d9, 0x3, [0xe, 0x2500, 0x1000000, 0x7fffffff]}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e00090026bd70000000a10004000000050011802e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) 3.352972093s ago: executing program 1 (id=635): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x85) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x4, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="c80100001e005f5b2abd7000fcdbdf2500008000000000000000ffffac1414aa000004d200003c000000000000000000000000000000000105000000003500000c0015005a073500ffffffff2c0017"], 0x1c8}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) 2.878594888s ago: executing program 3 (id=636): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xf, 0xa4, 0x80, 0x7fffffff, 0x3, "88ea10fa2b5ac81c299584e4241ddaaadb789c"}) 2.65282154s ago: executing program 0 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) accept4(r2, 0x0, 0x0, 0x80800) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r4 = syz_open_dev$video(&(0x7f0000000580), 0x10000000007, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000200)={0x3, @capture={0x1000, 0x1, {0x2, 0x8000}, 0x1, 0xffff}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206010800006b3456631ac623ff99b10500010006000000050004d01358ef0f1603f0e10a30bae75ca1ba00000000000900020073797a3100000000050005000a00000012000300"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="00000000090601080000000000000000070000000900020073797a310000000005000100070000002c0007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$kcm(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500000000005c007eeb0000030a0300000000000000000005000000010073797a30000000000900030073797a3000000000ebff094000000003280004800800024000000012080001400000000014000300776c616e300000000000000000000000140000001100010000000000080000000000000a0000"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 2.390174944s ago: executing program 1 (id=638): syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 2.287334429s ago: executing program 3 (id=639): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.8930448s ago: executing program 2 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0xff, 0x6355, &(0x7f00000082c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x29f) 1.370027587s ago: executing program 1 (id=641): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 1.336197089s ago: executing program 3 (id=642): syz_mount_image$iso9660(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x9b4, &(0x7f0000000a80)="$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") 1.093013272s ago: executing program 3 (id=643): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0xa8f}, &(0x7f0000000ac0)=0x8) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 24.744868ms ago: executing program 3 (id=644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f00000002c0)={[{@noautodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@nodiscard}, {@clear_cache}, {@rescan_uuid_tree}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x143042, 0xd1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x192, &(0x7f0000009480)="$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") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000000)={0x1, 0xffffffffff7ffe01, 0x6, 0x53d9, 0x3, [0xe, 0x2500, 0x1000000, 0x7fffffff]}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e00090026bd70000000a10004000000050011802e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) 0s ago: executing program 2 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8b, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$nbd(r2, &(0x7f0000000240)={0x1000000, 0x0, 0xffff, 0x0, 0x200000}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000040)={0x7, 0x5, 0x1, 0x0, 0x0, [{{r3}}]}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0xaf0, 0x101100) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", '\x00', "9e87dc79f4c04982"}, 0x3b) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="9771"}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) kernel console output (not intermixed with test programs): k: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 205.104203][ T6937] loop0: detected capacity change from 0 to 256 [ 205.112169][ T6937] exfat: Deprecated parameter 'utf8' [ 205.125661][ T5836] usb 2-1: USB disconnect, device number 11 [ 205.126184][ T6937] exfat: Deprecated parameter 'namecase' [ 205.137347][ T6937] exfat: Deprecated parameter 'namecase' [ 205.143093][ T6937] exfat: Unknown parameter 'zero_size_dir' [ 205.200899][ T6806] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.241963][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 205.268598][ T6937] loop0: detected capacity change from 0 to 16 [ 205.268759][ T6806] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.327876][ T6937] erofs: (device loop0): mounted with root inode @ nid 36. [ 205.449372][ T6948] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 206.726554][ T6954] loop3: detected capacity change from 0 to 8192 [ 206.750204][ T6954] NILFS (loop3): unsupported revision (superblock rev.=0.0, current rev.=2.0). Please check the version of mkfs.nilfs(2). [ 206.809800][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 207.182060][ T6963] fuse: Bad value for 'user_id' [ 208.207824][ T6970] loop2: detected capacity change from 0 to 32768 [ 208.236721][ T6970] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 208.237244][ T6968] loop0: detected capacity change from 0 to 32768 [ 208.256413][ T6968] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.280 (6968) [ 208.274324][ T6968] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.284574][ T6968] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 208.293885][ T6968] BTRFS info (device loop0): force clearing of disk cache [ 208.301089][ T6968] BTRFS info (device loop0): turning off barriers [ 208.307532][ T6968] BTRFS info (device loop0): use no compression [ 208.313862][ T6968] BTRFS info (device loop0): disabling free space tree [ 208.321031][ T6968] BTRFS info (device loop0): enabling ssd optimizations [ 208.328056][ T6968] BTRFS info (device loop0): using spread ssd allocation scheme [ 208.335709][ T6968] BTRFS info (device loop0): not using ssd optimizations [ 208.342807][ T6968] BTRFS info (device loop0): not using spread ssd allocation scheme [ 209.352084][ T6968] BTRFS info (device loop0): rebuilding free space tree [ 209.375190][ T6968] BTRFS info (device loop0): disabling free space tree [ 209.382392][ T6968] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.392903][ T6968] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.409336][ T6968] BTRFS info (device loop0): checking UUID tree [ 209.438873][ T5836] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.671468][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 209.706009][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 209.758072][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 210.511058][ T5836] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 210.538025][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.559399][ T5836] usb 4-1: config 0 descriptor?? [ 210.773306][ T5836] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 210.802893][ T5836] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 210.841503][ T5836] dib0700: firmware download failed at 7 with -22 [ 210.871812][ T786] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 211.058123][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 211.090080][ T786] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 211.893944][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 211.918017][ T27] audit: type=1326 audit(1777234733.236:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 211.998107][ T5761] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.052452][ T27] audit: type=1326 audit(1777234733.236:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 212.193818][ T786] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.210389][ T5804] usb 4-1: USB disconnect, device number 9 [ 212.220064][ T786] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 212.228589][ T27] audit: type=1326 audit(1777234733.236:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 212.238214][ T786] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.273540][ T786] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.282899][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.314427][ T27] audit: type=1326 audit(1777234733.236:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 212.336906][ T27] audit: type=1326 audit(1777234733.236:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 212.361675][ T786] usbtmc 2-1:16.0: bulk endpoints not found [ 212.380565][ T27] audit: type=1326 audit(1777234733.236:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 212.419884][ T27] audit: type=1326 audit(1777234733.236:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 212.653517][ T27] audit: type=1326 audit(1777234733.236:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 213.331306][ T27] audit: type=1326 audit(1777234733.236:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 213.353628][ T27] audit: type=1326 audit(1777234733.236:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 213.582685][ T7022] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 213.664272][ T7024] fuse: Bad value for 'user_id' [ 213.972570][ T7026] loop3: detected capacity change from 0 to 32768 [ 214.016711][ T7026] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 214.492416][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 214.547216][ T6806] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 214.561796][ T5804] usb 2-1: USB disconnect, device number 12 [ 215.438498][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 215.636396][ T7034] loop0: detected capacity change from 0 to 32768 [ 215.759677][ T7034] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.298 (7034) [ 215.840183][ T7034] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.850499][ T7034] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 215.859272][ T7034] BTRFS info (device loop0): force clearing of disk cache [ 215.866438][ T7034] BTRFS info (device loop0): turning off barriers [ 215.873628][ T7034] BTRFS info (device loop0): use no compression [ 215.879966][ T7034] BTRFS info (device loop0): disabling free space tree [ 215.886835][ T7034] BTRFS info (device loop0): enabling ssd optimizations [ 215.893828][ T7034] BTRFS info (device loop0): using spread ssd allocation scheme [ 215.901533][ T7034] BTRFS info (device loop0): not using ssd optimizations [ 215.908622][ T7034] BTRFS info (device loop0): not using spread ssd allocation scheme [ 216.657666][ T7034] BTRFS info (device loop0): rebuilding free space tree [ 216.682053][ T7034] BTRFS info (device loop0): disabling free space tree [ 216.689714][ T7034] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.699448][ T7034] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.714755][ T7034] BTRFS info (device loop0): checking UUID tree [ 216.741157][ T7065] fuse: Bad value for 'fd' [ 217.896007][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 218.458051][ T5809] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 219.616876][ T5761] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 219.718101][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 219.858193][ T5809] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 219.873513][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.924750][ T5809] usb 2-1: config 0 descriptor?? [ 220.203022][ T5809] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 220.349260][ T5809] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 220.415210][ T5809] dib0700: firmware download failed at 7 with -22 [ 220.545300][ T7086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.304'. [ 220.573828][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 221.030801][ T5804] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 222.338062][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 222.454983][ T5804] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 222.483152][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 222.483186][ T27] audit: type=1326 audit(1777234744.386:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 222.597306][ T5804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 222.618471][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 222.639015][ T5804] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 223.146761][ T27] audit: type=1326 audit(1777234744.386:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 223.351696][ T5804] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.462161][ T5804] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.510310][ T27] audit: type=1326 audit(1777234744.396:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 223.541194][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.709578][ T27] audit: type=1326 audit(1777234744.396:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 223.789179][ T7097] fuse: Bad value for 'fd' [ 223.911925][ T27] audit: type=1326 audit(1777234744.396:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 223.946915][ T786] usb 2-1: USB disconnect, device number 13 [ 224.226511][ T27] audit: type=1326 audit(1777234744.396:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 224.249588][ T27] audit: type=1326 audit(1777234744.396:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 224.272913][ T27] audit: type=1326 audit(1777234744.396:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 224.295546][ T27] audit: type=1326 audit(1777234744.396:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 224.362353][ T5804] usb 4-1: can't set config #16, error -71 [ 224.371077][ T27] audit: type=1326 audit(1777234744.396:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 224.406229][ T5804] usb 4-1: USB disconnect, device number 10 [ 225.747512][ T7111] loop3: detected capacity change from 0 to 32768 [ 225.768162][ T7111] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.317 (7111) [ 225.784804][ T7111] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 225.795096][ T7111] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 225.804904][ T7111] BTRFS info (device loop3): force clearing of disk cache [ 225.812127][ T7111] BTRFS info (device loop3): turning off barriers [ 225.818602][ T7111] BTRFS info (device loop3): use no compression [ 225.824873][ T7111] BTRFS info (device loop3): disabling free space tree [ 225.831844][ T7111] BTRFS info (device loop3): enabling ssd optimizations [ 225.838933][ T7111] BTRFS info (device loop3): using spread ssd allocation scheme [ 225.846682][ T7111] BTRFS info (device loop3): not using ssd optimizations [ 225.853848][ T7111] BTRFS info (device loop3): not using spread ssd allocation scheme [ 225.903037][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 226.070238][ T7115] loop0: detected capacity change from 0 to 32768 [ 226.094433][ T7115] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 226.638922][ T7111] BTRFS info (device loop3): rebuilding free space tree [ 226.658669][ T7111] BTRFS info (device loop3): disabling free space tree [ 226.665758][ T7111] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.675715][ T7111] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.705467][ T7111] BTRFS info (device loop3): checking UUID tree [ 226.979269][ T7138] fuse: Bad value for 'fd' [ 227.958095][ T786] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.093340][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 228.149190][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 228.185769][ T786] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 228.205826][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.208294][ T5772] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.214329][ T5804] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 228.246140][ T786] usb 3-1: config 0 descriptor?? [ 228.419679][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 228.439281][ T5804] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 228.475023][ T786] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 228.490258][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.585375][ T786] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 228.605170][ T5804] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 228.700303][ T786] dib0700: firmware download failed at 7 with -22 [ 228.734106][ T5804] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.256436][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 229.256450][ T27] audit: type=1326 audit(1777234751.266:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 229.414529][ T7162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.323'. [ 229.431253][ T27] audit: type=1326 audit(1777234751.266:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 229.477518][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 230.700198][ T27] audit: type=1326 audit(1777234751.266:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 230.913602][ T27] audit: type=1326 audit(1777234751.266:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 232.167375][ T5804] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.983424][ T27] audit: type=1326 audit(1777234751.266:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 233.452984][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.462867][ T5804] usb 1-1: can't set config #16, error -71 [ 233.470769][ T5804] usb 1-1: USB disconnect, device number 12 [ 233.492413][ T27] audit: type=1326 audit(1777234751.266:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 233.498093][ T7169] fuse: Bad value for 'fd' [ 233.538000][ T27] audit: type=1326 audit(1777234751.266:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 233.560683][ T27] audit: type=1326 audit(1777234751.266:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 233.591099][ T23] usb 3-1: USB disconnect, device number 9 [ 233.634263][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 234.078547][ T7172] loop3: detected capacity change from 0 to 32768 [ 234.087815][ T7172] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 234.121048][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 234.808674][ T27] audit: type=1326 audit(1777234756.226:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 234.868507][ T6806] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.012452][ T27] audit: type=1326 audit(1777234756.226:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 235.060185][ T27] audit: type=1326 audit(1777234756.226:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 235.265899][ T7180] loop1: detected capacity change from 0 to 32768 [ 235.286442][ T7180] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.336 (7180) [ 235.299392][ T27] audit: type=1326 audit(1777234756.226:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 235.332744][ T7180] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 235.342973][ T7180] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 235.351710][ T7180] BTRFS info (device loop1): force clearing of disk cache [ 235.358939][ T7180] BTRFS info (device loop1): turning off barriers [ 235.365376][ T7180] BTRFS info (device loop1): use no compression [ 235.371714][ T7180] BTRFS info (device loop1): disabling free space tree [ 235.378684][ T7180] BTRFS info (device loop1): enabling ssd optimizations [ 235.385641][ T7180] BTRFS info (device loop1): using spread ssd allocation scheme [ 235.393376][ T7180] BTRFS info (device loop1): not using ssd optimizations [ 235.400456][ T7180] BTRFS info (device loop1): not using spread ssd allocation scheme [ 235.406657][ T27] audit: type=1326 audit(1777234756.226:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 235.567264][ T27] audit: type=1326 audit(1777234756.236:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 235.758114][ T7180] BTRFS info (device loop1): rebuilding free space tree [ 235.783245][ T7180] BTRFS info (device loop1): disabling free space tree [ 235.790327][ T7180] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 235.799998][ T7180] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.814579][ T7180] BTRFS info (device loop1): checking UUID tree [ 235.909131][ T27] audit: type=1326 audit(1777234756.236:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 236.446681][ T27] audit: type=1326 audit(1777234756.236:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 236.473800][ T5764] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.551719][ T27] audit: type=1326 audit(1777234756.236:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 236.648084][ T27] audit: type=1326 audit(1777234756.246:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7175 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 236.752581][ T7212] fuse: Bad value for 'fd' [ 236.828632][ T5804] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.068532][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 237.148699][ T5804] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 237.265401][ T5804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 237.319301][ T786] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 237.376481][ T5804] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 237.516460][ T5804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 237.598220][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 237.657346][ T5804] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.680267][ T786] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 237.712007][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.740953][ T5804] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.784544][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 237.798002][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.894130][ T786] usb 1-1: config 0 descriptor?? [ 237.903183][ T5804] usbtmc: probe of 3-1:16.0 failed with error -22 [ 238.791044][ T786] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 238.959400][ T7229] loop1: detected capacity change from 0 to 32768 [ 238.977537][ T7229] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.347 (7229) [ 238.993584][ T7229] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.003869][ T7229] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 239.013098][ T7229] BTRFS info (device loop1): turning on async discard [ 239.019961][ T7229] BTRFS info (device loop1): metadata ratio 0 [ 239.026024][ T7229] BTRFS info (device loop1): setting nodatasum [ 239.032222][ T7229] BTRFS info (device loop1): using free space tree [ 239.044091][ T786] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 239.052627][ T786] dib0700: firmware download failed at 7 with -22 [ 239.161296][ T7236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.344'. [ 239.182379][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 242.803722][ T7229] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 242.805635][ T7229] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 242.815600][ T7229] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 242.825181][ T7229] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 242.835240][ T7229] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 242.845671][ T7229] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 242.855960][ T7229] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 242.893270][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 242.922679][ T5804] usb 1-1: USB disconnect, device number 13 [ 242.948771][ T7229] BTRFS error (device loop1): open_ctree failed: -12 [ 242.965220][ T5828] usb 3-1: USB disconnect, device number 10 [ 243.063796][ T6806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (6806) [ 243.881165][ T7260] loop3: detected capacity change from 0 to 32768 [ 243.952587][ T7260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.352 (7260) [ 244.075953][ T7260] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.086356][ T7260] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 244.095151][ T7260] BTRFS info (device loop3): force clearing of disk cache [ 244.102370][ T7260] BTRFS info (device loop3): turning off barriers [ 244.108985][ T7260] BTRFS info (device loop3): use no compression [ 244.115256][ T7260] BTRFS info (device loop3): disabling free space tree [ 244.122267][ T7260] BTRFS info (device loop3): enabling ssd optimizations [ 244.129317][ T7260] BTRFS info (device loop3): using spread ssd allocation scheme [ 244.137650][ T7260] BTRFS info (device loop3): not using ssd optimizations [ 244.144799][ T7260] BTRFS info (device loop3): not using spread ssd allocation scheme [ 244.366382][ T7260] BTRFS info (device loop3): rebuilding free space tree [ 244.367633][ T7276] fuse: Bad value for 'fd' [ 244.397435][ T7260] BTRFS info (device loop3): disabling free space tree [ 244.404550][ T7260] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 244.414432][ T7260] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 244.427642][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 244.427681][ T27] audit: type=1326 audit(1777234766.436:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 244.456930][ T27] audit: type=1326 audit(1777234766.436:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 244.480304][ T7260] BTRFS info (device loop3): checking UUID tree [ 244.640700][ T27] audit: type=1326 audit(1777234766.436:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 244.663687][ T27] audit: type=1326 audit(1777234766.436:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 244.686363][ T27] audit: type=1326 audit(1777234766.436:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 244.713114][ T27] audit: type=1326 audit(1777234766.436:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 244.817381][ T27] audit: type=1326 audit(1777234766.436:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 244.977292][ T5772] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.011116][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 245.564852][ T27] audit: type=1326 audit(1777234766.436:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 245.614327][ T27] audit: type=1326 audit(1777234767.616:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 245.662903][ T27] audit: type=1326 audit(1777234767.616:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 246.032511][ T7301] loop2: detected capacity change from 0 to 32768 [ 246.038090][ T5808] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 246.057224][ T7301] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.067482][ T7301] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 246.076817][ T7301] BTRFS info (device loop2): turning on async discard [ 246.083948][ T7301] BTRFS info (device loop2): metadata ratio 0 [ 246.090094][ T7301] BTRFS info (device loop2): setting nodatasum [ 246.096278][ T7301] BTRFS info (device loop2): using free space tree [ 246.151976][ T7301] BTRFS info (device loop2): enabling ssd optimizations [ 246.188482][ T5828] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 246.258805][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 246.342142][ T5763] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.366996][ T5808] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 246.376887][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.388126][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 246.401193][ T5808] usb 2-1: config 0 descriptor?? [ 246.413496][ T5828] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 246.448178][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 246.468727][ T5828] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 246.616279][ T7321] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 246.742936][ T6806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (6806) [ 246.769836][ T5808] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 246.866557][ T5808] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 247.342146][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 247.352759][ T5828] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.358073][ T5808] dib0700: firmware download failed at 7 with -22 [ 247.366441][ T5828] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.381853][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.399374][ T5828] usbtmc: probe of 4-1:16.0 failed with error -22 [ 247.457829][ T7323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.357'. [ 247.477407][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 249.665208][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 250.671525][ T5828] usb 2-1: USB disconnect, device number 14 [ 250.790851][ T23] usb 4-1: USB disconnect, device number 11 [ 250.896128][ T7335] fuse: Invalid rootmode [ 250.982409][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 250.982424][ T27] audit: type=1326 audit(1777234772.996:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 251.039678][ T27] audit: type=1326 audit(1777234772.996:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 251.223197][ T7340] loop3: detected capacity change from 0 to 32768 [ 251.291040][ T7340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.366 (7340) [ 251.310803][ T7340] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.321155][ T7340] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 251.329825][ T7340] BTRFS info (device loop3): force clearing of disk cache [ 251.336935][ T7340] BTRFS info (device loop3): turning off barriers [ 251.343479][ T7340] BTRFS info (device loop3): use no compression [ 251.349768][ T7340] BTRFS info (device loop3): disabling free space tree [ 251.356608][ T7340] BTRFS info (device loop3): enabling ssd optimizations [ 251.363585][ T7340] BTRFS info (device loop3): using spread ssd allocation scheme [ 251.371768][ T7340] BTRFS info (device loop3): not using ssd optimizations [ 251.379036][ T7340] BTRFS info (device loop3): not using spread ssd allocation scheme [ 251.506322][ T27] audit: type=1326 audit(1777234773.026:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 251.974067][ T27] audit: type=1326 audit(1777234773.026:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 252.013113][ T7340] BTRFS info (device loop3): rebuilding free space tree [ 252.049828][ T7340] BTRFS info (device loop3): disabling free space tree [ 252.056807][ T7340] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 252.066589][ T7340] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 252.080650][ T7340] BTRFS info (device loop3): checking UUID tree [ 252.160803][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 252.174833][ T27] audit: type=1326 audit(1777234773.026:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 252.486312][ T27] audit: type=1326 audit(1777234773.026:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 252.713279][ T5772] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.845053][ T27] audit: type=1326 audit(1777234773.026:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 252.871861][ T27] audit: type=1326 audit(1777234773.026:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7337 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 253.362868][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 254.073257][ T786] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.140464][ T27] audit: type=1326 audit(1777234776.136:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 254.214527][ T27] audit: type=1326 audit(1777234776.136:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 254.296257][ T7384] fuse: Invalid rootmode [ 254.399118][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 254.406448][ T786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 254.419875][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.430974][ T786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 254.441635][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 254.452033][ T786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.465631][ T786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.476181][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.495395][ T786] usbtmc: probe of 1-1:16.0 failed with error -22 [ 254.648430][ T5804] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 254.868307][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 254.903114][ T5804] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 254.940134][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.965587][ T5804] usb 2-1: config 0 descriptor?? [ 255.190537][ T5804] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 255.204391][ T5804] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 255.214567][ T5804] dib0700: firmware download failed at 7 with -22 [ 255.539289][ T7396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'. [ 255.578492][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 256.552477][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.878961][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.502488][ T5804] usb 1-1: USB disconnect, device number 14 [ 259.525352][ T5828] usb 2-1: USB disconnect, device number 15 [ 259.736738][ T7401] loop2: detected capacity change from 0 to 16 [ 259.820369][ T7401] erofs: (device loop2): mounted with root inode @ nid 36. [ 260.849360][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 260.894585][ T7414] fuse: Invalid rootmode [ 261.221279][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 262.034779][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 262.034795][ T27] audit: type=1326 audit(1777234784.046:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 262.213999][ T27] audit: type=1326 audit(1777234784.046:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 262.273781][ T27] audit: type=1326 audit(1777234784.046:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 262.296201][ T27] audit: type=1326 audit(1777234784.046:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 262.318777][ T27] audit: type=1326 audit(1777234784.046:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 262.344683][ T27] audit: type=1326 audit(1777234784.046:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7425 comm="syz.2.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 262.443608][ T27] audit: type=1326 audit(1777234784.076:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 262.689509][ T27] audit: type=1326 audit(1777234784.076:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 262.988213][ T1196] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 263.152996][ T27] audit: type=1326 audit(1777234784.076:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 263.178440][ T27] audit: type=1326 audit(1777234784.086:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 263.364630][ T7436] loop3: detected capacity change from 0 to 16 [ 263.377407][ T7436] erofs: (device loop3): mounted with root inode @ nid 36. [ 263.386368][ T1196] usb 3-1: Using ep0 maxpacket: 8 [ 263.916892][ T1196] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 263.950370][ T1196] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 263.960875][ T1196] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.976474][ T1196] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.991953][ T1196] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.001960][ T1196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.197443][ T7443] fuse: Bad value for 'rootmode' [ 264.222212][ T1196] usb 3-1: usb_control_msg returned -32 [ 264.237842][ T1196] usbtmc 3-1:16.0: can't read capabilities [ 264.276157][ T1196] usb 3-1: USB disconnect, device number 11 [ 264.361083][ T42] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 264.400718][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 264.573994][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 264.622698][ T42] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 264.685656][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.844582][ T42] usb 2-1: config 0 descriptor?? [ 265.252247][ T42] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 265.309659][ T42] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 265.317764][ T42] dib0700: firmware download failed at 7 with -22 [ 265.427599][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 265.592238][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.395'. [ 265.610542][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 269.218524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 269.389050][ T5808] usb 2-1: USB disconnect, device number 16 [ 269.602085][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 269.602100][ T27] audit: type=1326 audit(1777234791.446:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 269.774682][ T27] audit: type=1326 audit(1777234791.446:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 269.927686][ T27] audit: type=1326 audit(1777234791.446:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 269.961681][ T27] audit: type=1326 audit(1777234791.446:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 269.986450][ T27] audit: type=1326 audit(1777234791.446:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 270.074768][ T27] audit: type=1326 audit(1777234791.446:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 270.225603][ T7472] fuse: Bad value for 'rootmode' [ 270.255430][ T7470] loop3: detected capacity change from 0 to 16 [ 270.264365][ T7470] erofs: (device loop3): mounted with root inode @ nid 36. [ 270.318612][ T27] audit: type=1326 audit(1777234791.446:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 270.341051][ T27] audit: type=1326 audit(1777234791.446:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 270.365400][ T27] audit: type=1326 audit(1777234791.446:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 270.415100][ T27] audit: type=1326 audit(1777234791.446:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 270.450591][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 270.548165][ T5836] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 270.971287][ T7476] loop2: detected capacity change from 0 to 32768 [ 271.348227][ T7476] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.408544][ T7476] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 271.417255][ T7476] BTRFS info (device loop2): turning on async discard [ 271.424426][ T7476] BTRFS info (device loop2): metadata ratio 0 [ 271.431131][ T7476] BTRFS info (device loop2): setting nodatasum [ 271.437325][ T7476] BTRFS info (device loop2): using free space tree [ 271.512856][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 271.542712][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 271.560647][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 271.588162][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.611205][ T7476] BTRFS info (device loop2): enabling ssd optimizations [ 271.618334][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.631774][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.641781][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.952961][ T5836] usb 1-1: usb_control_msg returned -32 [ 271.972965][ T5808] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 272.021931][ T5836] usbtmc 1-1:16.0: can't read capabilities [ 272.192304][ T5836] usb 1-1: USB disconnect, device number 15 [ 272.268342][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 272.335969][ T5808] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 272.436741][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.555531][ T5808] usb 4-1: config 0 descriptor?? [ 272.839159][ T5808] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 272.874055][ T5808] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 272.892397][ T5808] dib0700: firmware download failed at 7 with -22 [ 273.773852][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.414'. [ 273.794400][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 273.856507][ T5836] usb 4-1: USB disconnect, device number 12 [ 273.895964][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 274.896229][ T7517] fuse: Bad value for 'rootmode' [ 275.057026][ T5763] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.261733][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 275.261748][ T27] audit: type=1326 audit(1777234797.276:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 275.275572][ T7515] loop0: detected capacity change from 0 to 32768 [ 275.327485][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 275.331841][ T27] audit: type=1326 audit(1777234797.276:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 275.377150][ T7515] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.420 (7515) [ 275.384184][ T27] audit: type=1326 audit(1777234797.276:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 275.523181][ T7515] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 275.542931][ T27] audit: type=1326 audit(1777234797.276:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 275.606091][ T7515] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 275.647860][ T7515] BTRFS info (device loop0): force clearing of disk cache [ 275.676233][ T27] audit: type=1326 audit(1777234797.276:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 275.705302][ T7515] BTRFS info (device loop0): turning off barriers [ 275.744247][ T7515] BTRFS info (device loop0): use no compression [ 275.778444][ T7515] BTRFS info (device loop0): disabling free space tree [ 275.828984][ T7515] BTRFS info (device loop0): enabling ssd optimizations [ 275.843624][ T27] audit: type=1326 audit(1777234797.276:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 275.903581][ T7515] BTRFS info (device loop0): using spread ssd allocation scheme [ 276.080673][ T7515] BTRFS info (device loop0): not using ssd optimizations [ 276.108089][ T7515] BTRFS info (device loop0): not using spread ssd allocation scheme [ 276.118603][ T27] audit: type=1326 audit(1777234797.276:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 276.197371][ T27] audit: type=1326 audit(1777234797.276:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 276.219991][ T27] audit: type=1326 audit(1777234797.306:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 276.242352][ T27] audit: type=1326 audit(1777234797.306:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 276.397321][ T7515] BTRFS info (device loop0): rebuilding free space tree [ 276.628182][ T5836] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 277.249173][ T7515] BTRFS info (device loop0): disabling free space tree [ 277.257137][ T7515] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 277.266901][ T7515] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 277.300028][ T7515] BTRFS info (device loop0): checking UUID tree [ 277.418209][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 277.438384][ T5836] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 277.465443][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 277.483630][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.494511][ T5836] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.517149][ T5836] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.526584][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.583618][ T7557] fuse: Unknown parameter 'use00000000000000000000' [ 277.806744][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 277.838067][ T5836] usb 3-1: usb_control_msg returned -32 [ 277.843713][ T5836] usbtmc 3-1:16.0: can't read capabilities [ 277.894025][ T5836] usb 3-1: USB disconnect, device number 12 [ 278.857065][ T5761] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 278.940482][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 279.078036][ T1196] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 279.456266][ T7559] loop3: detected capacity change from 0 to 32768 [ 279.485170][ T7559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.430 (7559) [ 280.091466][ T7559] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.102793][ T7559] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 280.117441][ T7559] BTRFS info (device loop3): turning on async discard [ 280.127272][ T7559] BTRFS info (device loop3): metadata ratio 0 [ 280.134721][ T7559] BTRFS info (device loop3): setting nodatasum [ 280.144517][ T7559] BTRFS info (device loop3): using free space tree [ 280.216977][ T7559] BTRFS info (device loop3): enabling ssd optimizations [ 280.248077][ T1196] usb 3-1: Using ep0 maxpacket: 32 [ 280.258221][ T1196] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 280.295157][ T1196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.327123][ T1196] usb 3-1: config 0 descriptor?? [ 281.207652][ T1196] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 281.219243][ T1196] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 281.227306][ T1196] dib0700: firmware download failed at 7 with -22 [ 281.248715][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.432'. [ 281.268708][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 281.293933][ T1196] usb 3-1: USB disconnect, device number 13 [ 281.724956][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.739663][ T7602] fuse: Unknown parameter 'use00000000000000000000' [ 282.297766][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 282.590459][ T1196] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 283.272397][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 283.378372][ T1196] usb 1-1: Using ep0 maxpacket: 8 [ 284.158585][ T1196] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 284.187997][ T1196] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.205149][ T1196] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.216087][ T1196] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.229393][ T1196] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.247740][ T1196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.473535][ T1196] usb 1-1: usb_control_msg returned -32 [ 284.488050][ T1196] usbtmc 1-1:16.0: can't read capabilities [ 284.536115][ T1196] usb 1-1: USB disconnect, device number 16 [ 284.828127][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 284.828144][ T27] audit: type=1326 audit(1777234806.696:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.217708][ T27] audit: type=1326 audit(1777234806.696:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.424528][ T27] audit: type=1326 audit(1777234806.696:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.446988][ T27] audit: type=1326 audit(1777234806.696:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.469390][ T27] audit: type=1326 audit(1777234806.696:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.491731][ T27] audit: type=1326 audit(1777234806.696:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.519190][ T27] audit: type=1326 audit(1777234806.696:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.541522][ T27] audit: type=1326 audit(1777234806.696:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.568086][ T27] audit: type=1326 audit(1777234806.696:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.591242][ T7612] loop2: detected capacity change from 0 to 32768 [ 285.629557][ T27] audit: type=1326 audit(1777234806.696:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 285.652009][ T7612] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.443 (7612) [ 285.718624][ T7612] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 285.748163][ T7612] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 285.756866][ T7612] BTRFS info (device loop2): force clearing of disk cache [ 285.811103][ T7612] BTRFS info (device loop2): turning off barriers [ 285.855914][ T7612] BTRFS info (device loop2): use no compression [ 285.902911][ T7612] BTRFS info (device loop2): disabling free space tree [ 285.983239][ T7633] fuse: Unknown parameter 'use00000000000000000000' [ 286.006272][ T7612] BTRFS info (device loop2): enabling ssd optimizations [ 286.094904][ T7612] BTRFS info (device loop2): using spread ssd allocation scheme [ 286.168830][ T7612] BTRFS info (device loop2): not using ssd optimizations [ 286.248699][ T7612] BTRFS info (device loop2): not using spread ssd allocation scheme [ 286.381818][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 286.410093][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 286.534921][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 286.604574][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 286.615205][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 286.624730][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 286.634719][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 286.645384][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 286.654908][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 286.665032][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 286.675602][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 286.686091][ T7612] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 286.714634][ T7612] BTRFS error (device loop2): open_ctree failed: -12 [ 286.949157][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 287.068091][ T1196] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 287.073914][ T7626] loop1: detected capacity change from 0 to 32768 [ 287.102010][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 287.198665][ T7626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.448 (7626) [ 287.705211][ T1196] usb 1-1: Using ep0 maxpacket: 32 [ 287.804912][ T1196] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 287.814146][ T1196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.823512][ T1196] usb 1-1: config 0 descriptor?? [ 288.031069][ T7626] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 288.155644][ T7626] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 288.166215][ T7626] BTRFS info (device loop1): turning on async discard [ 288.168478][ T1196] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 288.173078][ T7626] BTRFS info (device loop1): metadata ratio 0 [ 288.188930][ T7626] BTRFS info (device loop1): setting nodatasum [ 288.195116][ T7626] BTRFS info (device loop1): using free space tree [ 288.249949][ T1196] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 288.262158][ T1196] dib0700: firmware download failed at 7 with -22 [ 288.382597][ T7626] BTRFS info (device loop1): enabling ssd optimizations [ 288.517024][ T7680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.452'. [ 288.537438][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 288.729887][ T5836] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 289.013606][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.337277][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 289.411464][ T5836] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 289.487184][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 289.553785][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.550311][ T5836] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.605258][ T5836] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.678087][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.796263][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 291.796307][ T27] audit: type=1326 audit(1777234812.266:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 291.944960][ T27] audit: type=1326 audit(1777234812.266:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.065019][ T27] audit: type=1326 audit(1777234812.266:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.172422][ T27] audit: type=1326 audit(1777234812.266:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.222175][ T5804] usb 1-1: USB disconnect, device number 17 [ 292.239190][ T27] audit: type=1326 audit(1777234812.266:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.266256][ T27] audit: type=1326 audit(1777234812.266:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.290080][ T27] audit: type=1326 audit(1777234812.266:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.315285][ T27] audit: type=1326 audit(1777234812.266:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.338571][ T27] audit: type=1326 audit(1777234812.276:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.387114][ T7688] fuse: Unknown parameter 'user_i00000000000000000000' [ 292.419567][ T5836] usb 3-1: can't set config #16, error -71 [ 292.432018][ T27] audit: type=1326 audit(1777234812.276:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4cd9cdd9 code=0x7ffc0000 [ 292.449253][ T5836] usb 3-1: USB disconnect, device number 14 [ 292.535357][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 294.636322][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 295.908183][ T1196] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 296.075706][ T7703] loop0: detected capacity change from 0 to 32768 [ 296.090653][ T7703] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.463 (7703) [ 296.113168][ T1196] usb 4-1: Using ep0 maxpacket: 8 [ 296.160464][ T1196] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 296.202203][ T7703] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 296.222399][ T7711] loop2: detected capacity change from 0 to 32768 [ 296.223393][ T1196] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.258229][ T7703] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 296.276574][ T7711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.466 (7711) [ 296.291732][ T7703] BTRFS info (device loop0): force clearing of disk cache [ 296.300502][ T1196] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.308496][ T7703] BTRFS info (device loop0): turning off barriers [ 296.327391][ T1196] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.329742][ T7703] BTRFS info (device loop0): use no compression [ 296.346381][ T1196] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.358541][ T7711] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.380770][ T7703] BTRFS info (device loop0): disabling free space tree [ 296.390775][ T7703] BTRFS info (device loop0): enabling ssd optimizations [ 296.403704][ T1196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.409534][ T7711] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 296.425253][ T7703] BTRFS info (device loop0): using spread ssd allocation scheme [ 296.475335][ T7703] BTRFS info (device loop0): not using ssd optimizations [ 296.485182][ T7711] BTRFS info (device loop2): turning on async discard [ 296.501542][ T7726] fuse: Unknown parameter 'user_i00000000000000000000' [ 296.505438][ T7703] BTRFS info (device loop0): not using spread ssd allocation scheme [ 296.516696][ T7711] BTRFS info (device loop2): metadata ratio 0 [ 296.536991][ T7711] BTRFS info (device loop2): setting nodatasum [ 296.543828][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 296.544440][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 296.554620][ T7711] BTRFS info (device loop2): using free space tree [ 296.580156][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 296.580724][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 296.604231][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 296.627433][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 296.641728][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 296.658697][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 296.661752][ T1196] usb 4-1: usb_control_msg returned -32 [ 296.671332][ T7703] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 296.689664][ T1196] usbtmc 4-1:16.0: can't read capabilities [ 296.711993][ T7703] BTRFS error (device loop0): open_ctree failed: -12 [ 296.757793][ T1196] usb 4-1: USB disconnect, device number 13 [ 296.855292][ T7711] BTRFS info (device loop2): enabling ssd optimizations [ 296.955908][ T6806] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (6806) [ 297.035599][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 297.035611][ T27] audit: type=1800 audit(1777234819.046:798): pid=7711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.466" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 298.238475][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 298.488067][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 298.590461][ T23] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 298.681121][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.737215][ T23] usb 2-1: config 0 descriptor?? [ 298.872698][ T5763] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.982585][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 298.997742][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 299.050177][ T23] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 299.069255][ T23] dib0700: firmware download failed at 7 with -22 [ 299.474225][ T27] audit: type=1326 audit(1777234821.426:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 299.632914][ T7765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.475'. [ 299.859733][ T27] audit: type=1326 audit(1777234821.426:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 299.882002][ T27] audit: type=1326 audit(1777234821.426:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 299.904512][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 299.913695][ T27] audit: type=1326 audit(1777234821.426:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 299.936516][ T27] audit: type=1326 audit(1777234821.426:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 299.959366][ T27] audit: type=1326 audit(1777234821.426:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 300.023740][ T5828] usb 2-1: USB disconnect, device number 17 [ 300.047264][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 300.071635][ T27] audit: type=1326 audit(1777234821.426:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 300.120817][ T7782] fuse: Unknown parameter 'user_i00000000000000000000' [ 300.160816][ T27] audit: type=1326 audit(1777234821.426:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 300.401065][ T27] audit: type=1326 audit(1777234821.426:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.0.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 301.116837][ T7784] loop3: detected capacity change from 0 to 32768 [ 301.408061][ T5804] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 301.916378][ T7784] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 301.974598][ T7784] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 302.044750][ T7784] BTRFS info (device loop3): force clearing of disk cache [ 302.069344][ T5804] usb 1-1: Using ep0 maxpacket: 8 [ 302.097542][ T5804] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 302.125901][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 302.146545][ T7784] BTRFS info (device loop3): turning off barriers [ 302.168066][ T5804] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.188068][ T7784] BTRFS info (device loop3): use no compression [ 302.205608][ T5804] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.219138][ T7784] BTRFS info (device loop3): disabling free space tree [ 302.226030][ T7784] BTRFS info (device loop3): enabling ssd optimizations [ 302.247814][ T5804] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.260549][ T7784] BTRFS info (device loop3): using spread ssd allocation scheme [ 302.268791][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.277026][ T7784] BTRFS info (device loop3): not using ssd optimizations [ 302.328127][ T7784] BTRFS info (device loop3): not using spread ssd allocation scheme [ 302.625955][ T7784] BTRFS info (device loop3): rebuilding free space tree [ 302.757234][ T7784] BTRFS info (device loop3): disabling free space tree [ 302.812291][ T7784] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 302.873865][ T7784] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 303.027084][ T7784] BTRFS info (device loop3): checking UUID tree [ 303.180493][ T7793] loop1: detected capacity change from 0 to 32768 [ 303.237369][ T7793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.485 (7793) [ 303.265097][ T7793] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.294201][ T7793] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 303.325169][ T7793] BTRFS info (device loop1): turning on async discard [ 303.332222][ T5804] usb 1-1: GET_CAPABILITIES returned 0 [ 303.337753][ T5804] usbtmc 1-1:16.0: can't read capabilities [ 303.367278][ T7793] BTRFS info (device loop1): metadata ratio 0 [ 303.389861][ T7793] BTRFS info (device loop1): setting nodatasum [ 303.396085][ T7793] BTRFS info (device loop1): using free space tree [ 303.589851][ T7790] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 303.597575][ T7793] BTRFS info (device loop1): enabling ssd optimizations [ 303.659545][ T23] usb 1-1: USB disconnect, device number 18 [ 303.711968][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 304.821124][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 304.821138][ T27] audit: type=1326 audit(1777234826.836:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 304.931732][ T7848] fuse: Unknown parameter 'user_id00000000000000000000' [ 304.988196][ T27] audit: type=1326 audit(1777234826.836:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 305.026848][ T5772] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 305.087186][ T27] audit: type=1326 audit(1777234826.836:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 305.183625][ T27] audit: type=1326 audit(1777234826.836:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 305.280478][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.324701][ T27] audit: type=1326 audit(1777234826.836:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 305.439504][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 305.942204][ T27] audit: type=1326 audit(1777234826.866:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 305.964418][ T27] audit: type=1326 audit(1777234826.866:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 305.988287][ T27] audit: type=1326 audit(1777234826.866:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 306.010691][ T27] audit: type=1326 audit(1777234826.866:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 306.078361][ T27] audit: type=1326 audit(1777234826.866:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc159cdd9 code=0x7ffc0000 [ 306.862390][ T5804] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 307.098418][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 307.153621][ T5804] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 307.281949][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.476530][ T5804] usb 4-1: config 0 descriptor?? [ 307.640590][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 307.835563][ T5804] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 308.480840][ T7875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.494'. [ 308.496535][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'. [ 308.695594][ T5804] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 308.786119][ T5804] dib0700: firmware download failed at 7 with -22 [ 310.686258][ T1196] usb 4-1: USB disconnect, device number 14 [ 310.780237][ T7881] fuse: Unknown parameter 'user_id00000000000000000000' [ 310.894240][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 310.894254][ T27] audit: type=1326 audit(1777234832.906:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.131686][ T27] audit: type=1326 audit(1777234832.906:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.439696][ T27] audit: type=1326 audit(1777234832.906:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.599007][ T27] audit: type=1326 audit(1777234832.906:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.621913][ T27] audit: type=1326 audit(1777234832.906:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.644929][ T27] audit: type=1326 audit(1777234832.936:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.667077][ T27] audit: type=1326 audit(1777234832.936:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.697104][ T27] audit: type=1326 audit(1777234832.936:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.704885][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 311.719944][ T27] audit: type=1326 audit(1777234832.936:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 311.719987][ T27] audit: type=1326 audit(1777234832.936:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 312.505712][ T7884] loop2: detected capacity change from 0 to 32768 [ 312.521999][ T7884] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.506 (7884) [ 312.564867][ T7884] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.588045][ T7884] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 312.596828][ T7884] BTRFS info (device loop2): turning on async discard [ 312.675376][ T7884] BTRFS info (device loop2): metadata ratio 0 [ 312.707151][ T7884] BTRFS info (device loop2): setting nodatasum [ 312.763239][ T7884] BTRFS info (device loop2): using free space tree [ 313.285016][ T7884] BTRFS info (device loop2): enabling ssd optimizations [ 313.368719][ T7887] loop0: detected capacity change from 0 to 32768 [ 313.423474][ T7887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.504 (7887) [ 313.540213][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 313.551993][ T7887] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.670819][ T7887] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 313.809667][ T7887] BTRFS info (device loop0): force clearing of disk cache [ 313.917351][ T7887] BTRFS info (device loop0): turning off barriers [ 314.005068][ T7887] BTRFS info (device loop0): use no compression [ 314.090975][ T7887] BTRFS info (device loop0): disabling free space tree [ 314.184210][ T7887] BTRFS info (device loop0): enabling ssd optimizations [ 314.283825][ T7887] BTRFS info (device loop0): using spread ssd allocation scheme [ 314.383822][ T7887] BTRFS info (device loop0): not using ssd optimizations [ 314.391007][ T7887] BTRFS info (device loop0): not using spread ssd allocation scheme [ 314.411275][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 314.443573][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 314.535282][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 315.062374][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 315.072665][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 315.082277][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 315.094093][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 315.112709][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 315.122929][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 315.132558][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 315.142844][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 315.157589][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 315.168213][ T7887] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 315.184734][ T7887] BTRFS error (device loop0): open_ctree failed: -12 [ 315.239887][ T7938] fuse: Unknown parameter 'user_id00000000000000000000' [ 315.273370][ T5763] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.436446][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 315.528222][ T5804] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 315.778356][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 315.875737][ T5804] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 315.929314][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.007405][ T5804] usb 4-1: config 0 descriptor?? [ 316.055901][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 316.055914][ T27] audit: type=1326 audit(1777234838.066:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 316.314713][ T5804] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 316.443119][ T27] audit: type=1326 audit(1777234838.066:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 316.491089][ T5804] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 316.902461][ T27] audit: type=1326 audit(1777234838.116:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 316.930286][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.515'. [ 316.941904][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 316.951471][ T5804] dib0700: firmware download failed at 7 with -22 [ 316.952140][ T27] audit: type=1326 audit(1777234838.116:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 316.991249][ T27] audit: type=1326 audit(1777234838.116:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 316.994285][ T23] usb 4-1: USB disconnect, device number 15 [ 317.013958][ T27] audit: type=1326 audit(1777234838.126:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 317.043583][ T27] audit: type=1326 audit(1777234838.126:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 317.084994][ T27] audit: type=1326 audit(1777234838.126:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 317.363747][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.417813][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.014048][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 319.788533][ T7967] fuse: Bad value for 'fd' [ 319.867247][ T27] audit: type=1326 audit(1777234841.856:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 319.995559][ T27] audit: type=1326 audit(1777234841.856:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7970 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4539d9cdd9 code=0x7ffc0000 [ 320.143129][ T7958] loop2: detected capacity change from 0 to 32768 [ 320.164240][ T7958] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.524 (7958) [ 320.905374][ T7983] loop3: detected capacity change from 0 to 64 [ 322.793949][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 322.874995][ T7973] loop0: detected capacity change from 0 to 32768 [ 322.958051][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 323.706292][ T8000] fuse: Bad value for 'fd' [ 323.862629][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 323.883971][ T23] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 323.902366][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 323.902380][ T27] audit: type=1326 audit(1777234845.916:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 323.910772][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.942777][ T6813] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (6813) [ 324.023267][ T23] usb 2-1: config 0 descriptor?? [ 324.047809][ T27] audit: type=1326 audit(1777234845.916:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 324.126817][ T27] audit: type=1326 audit(1777234845.916:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 324.382699][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 325.122558][ T23] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 325.132383][ T7993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.536'. [ 325.141435][ T23] dib0700: firmware download failed at 7 with -22 [ 325.148752][ T27] audit: type=1326 audit(1777234845.916:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 325.261703][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 325.305647][ T5808] usb 2-1: USB disconnect, device number 18 [ 325.317883][ T27] audit: type=1326 audit(1777234845.916:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 325.737857][ T27] audit: type=1326 audit(1777234845.946:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 326.078170][ T27] audit: type=1326 audit(1777234845.946:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 326.100522][ T27] audit: type=1326 audit(1777234845.946:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 326.123409][ T27] audit: type=1326 audit(1777234845.956:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 326.145893][ T27] audit: type=1326 audit(1777234845.956:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 327.281358][ T8028] loop3: detected capacity change from 0 to 32768 [ 327.314141][ T8028] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 327.324410][ T8028] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 327.333712][ T8028] BTRFS info (device loop3): force clearing of disk cache [ 327.340951][ T8028] BTRFS info (device loop3): turning off barriers [ 327.347392][ T8028] BTRFS info (device loop3): use no compression [ 327.353760][ T8028] BTRFS info (device loop3): disabling free space tree [ 327.358912][ T8030] fuse: Bad value for 'fd' [ 327.360839][ T8028] BTRFS info (device loop3): enabling ssd optimizations [ 327.372082][ T8028] BTRFS info (device loop3): using spread ssd allocation scheme [ 327.379838][ T8028] BTRFS info (device loop3): not using ssd optimizations [ 327.388061][ T8028] BTRFS info (device loop3): not using spread ssd allocation scheme [ 327.545903][ T8028] BTRFS info (device loop3): rebuilding free space tree [ 327.561655][ T8028] BTRFS info (device loop3): disabling free space tree [ 327.568791][ T8028] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.578692][ T8028] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.611533][ T8028] BTRFS info (device loop3): checking UUID tree [ 329.735784][ T5772] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 330.120170][ T5804] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 330.678398][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 330.985977][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 331.009048][ T5804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.027765][ T6806] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (6806) [ 331.027997][ T5804] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 331.049618][ T5804] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 331.058110][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 331.059369][ T5804] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 331.076054][ T23] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 331.086580][ T5804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.095806][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 331.103966][ T5804] usb 3-1: SerialNumber: syz [ 331.120255][ T8065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 331.127868][ T8065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 331.136795][ T8079] fuse: Unknown parameter '0x0000000000000004' [ 331.166921][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.190190][ T5804] hub 3-1:1.0: bad descriptor, ignoring hub [ 331.196152][ T5804] hub: probe of 3-1:1.0 failed with error -5 [ 331.209331][ T23] usb 4-1: config 0 descriptor?? [ 331.409428][ T8065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 331.428342][ T8065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 331.609886][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 331.620868][ T23] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 331.630505][ T23] dib0700: firmware download failed at 7 with -22 [ 331.763293][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 331.763328][ T27] audit: type=1326 audit(1777234853.756:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 332.195219][ T5804] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 332.311327][ T8065] loop2: detected capacity change from 0 to 128 [ 332.338687][ T27] audit: type=1326 audit(1777234853.756:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 332.389398][ T8073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.554'. [ 332.400001][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 332.431033][ T8065] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 332.468197][ T8065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.487021][ T1196] usb 4-1: USB disconnect, device number 16 [ 332.506101][ T27] audit: type=1326 audit(1777234853.756:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 332.588435][ T27] audit: type=1326 audit(1777234853.766:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 332.615809][ T8082] loop1: detected capacity change from 0 to 32768 [ 332.644963][ T27] audit: type=1326 audit(1777234853.766:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 332.671133][ T27] audit: type=1326 audit(1777234853.766:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 332.697787][ T27] audit: type=1326 audit(1777234853.766:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 332.722215][ T8082] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.722311][ T8082] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 332.722370][ T8082] BTRFS info (device loop1): turning on async discard [ 332.722391][ T8082] BTRFS info (device loop1): metadata ratio 0 [ 332.722409][ T8082] BTRFS info (device loop1): setting nodatasum [ 332.722423][ T8082] BTRFS info (device loop1): using free space tree [ 332.959829][ T5804] usb 3-1: USB disconnect, device number 15 [ 332.978807][ T27] audit: type=1326 audit(1777234853.766:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 333.798603][ T5804] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 333.844998][ T8082] BTRFS info (device loop1): enabling ssd optimizations [ 333.858015][ T27] audit: type=1326 audit(1777234853.766:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 334.058108][ T27] audit: type=1326 audit(1777234853.766:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 335.095990][ T8125] loop3: detected capacity change from 0 to 64 [ 336.132102][ T8136] fuse: Unknown parameter '0x0000000000000004' [ 336.220479][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 336.384799][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 336.548067][ T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 337.438213][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 338.473290][ T23] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 338.504443][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.523134][ T23] usb 4-1: config 0 descriptor?? [ 338.561848][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 338.933158][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 339.495633][ T23] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 339.504195][ T23] dib0700: firmware download failed at 7 with -22 [ 339.549974][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.572'. [ 339.559978][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 339.590758][ T5804] usb 4-1: USB disconnect, device number 17 [ 339.715876][ T8171] fuse: Unknown parameter '0x0000000000000004' [ 339.946762][ T8179] loop1: detected capacity change from 0 to 4096 [ 340.020791][ T8182] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.471675][ T8165] loop2: detected capacity change from 0 to 32768 [ 340.573108][ T8165] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.658075][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 341.323933][ T8165] XFS (loop2): Ending clean mount [ 341.563009][ T8176] loop0: detected capacity change from 0 to 32768 [ 341.577908][ T8176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.581 (8176) [ 341.623000][ T8176] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.636392][ T8176] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 341.645588][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 341.652021][ T8176] BTRFS info (device loop0): turning on async discard [ 341.663118][ T8176] BTRFS info (device loop0): metadata ratio 0 [ 341.670323][ T8176] BTRFS info (device loop0): setting nodatasum [ 341.676839][ T8176] BTRFS info (device loop0): using free space tree [ 341.676992][ T23] usb 4-1: config 0 has no interfaces? [ 341.697754][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 341.707210][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.718523][ T23] usb 4-1: config 0 descriptor?? [ 341.766643][ T5763] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 341.804626][ T8176] BTRFS info (device loop0): enabling ssd optimizations [ 342.046136][ T5804] usb 4-1: USB disconnect, device number 18 [ 343.308861][ T8229] fuse: Unknown parameter '0x0000000000000004' [ 343.388390][ T5761] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 343.708027][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 343.898173][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 343.915547][ T23] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 343.925465][ T8239] loop3: detected capacity change from 0 to 2048 [ 343.927827][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.950839][ T23] usb 3-1: config 0 descriptor?? [ 344.237558][ T8239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.640882][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 344.655495][ T23] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 344.657522][ T8245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.592'. [ 344.663677][ T23] dib0700: firmware download failed at 7 with -22 [ 344.696763][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 344.719788][ T786] usb 3-1: USB disconnect, device number 16 [ 344.777304][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.877290][ T8257] fuse: Unknown parameter '0x0000000000000004' [ 347.072887][ T8268] loop1: detected capacity change from 0 to 2048 [ 347.133023][ T8268] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 347.152053][ T8268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.303258][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 347.303273][ T27] audit: type=1800 audit(1777234869.316:1030): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.602" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 348.063742][ T8285] loop2: detected capacity change from 0 to 64 [ 348.317054][ T1196] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 348.689945][ T1196] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 348.700621][ T1196] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.713365][ T1196] usb 2-1: config 0 has no interface number 0 [ 348.749370][ T1196] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 348.780333][ T27] audit: type=1326 audit(1777234870.796:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 348.805174][ T1196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.837362][ T1196] usb 2-1: Product: syz [ 348.854424][ T1196] usb 2-1: Manufacturer: syz [ 348.873137][ T1196] usb 2-1: SerialNumber: syz [ 348.887854][ T27] audit: type=1326 audit(1777234870.816:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 348.924569][ T1196] usb 2-1: config 0 descriptor?? [ 348.947288][ T1196] ims_pcu 2-1:0.41: Missing CDC union descriptor [ 348.968717][ T27] audit: type=1326 audit(1777234870.836:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 348.988432][ T1196] ims_pcu: probe of 2-1:0.41 failed with error -22 [ 349.042658][ T27] audit: type=1326 audit(1777234870.836:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 349.098187][ T27] audit: type=1326 audit(1777234870.836:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 349.121230][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.128393][ T27] audit: type=1326 audit(1777234870.836:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 349.174735][ T27] audit: type=1326 audit(1777234870.846:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 349.279138][ T27] audit: type=1326 audit(1777234870.846:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 349.304370][ T786] usb 2-1: USB disconnect, device number 19 [ 349.368343][ T27] audit: type=1326 audit(1777234870.846:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 349.731149][ T8294] fuse: Unknown parameter '0x0000000000000004' [ 350.760066][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.066071][ T5828] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 352.858178][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 353.141671][ T8319] loop1: detected capacity change from 0 to 32768 [ 353.152254][ T5828] usb 3-1: device descriptor read/all, error -71 [ 353.237266][ T8319] [ 353.237266][ T8319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.237266][ T8319] [ 353.701065][ T8324] loop2: detected capacity change from 0 to 64 [ 353.728514][ T5764] [ 353.728514][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.728514][ T5764] [ 353.740756][ T5764] [ 353.740756][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 353.740756][ T5764] [ 353.827732][ T8328] loop3: detected capacity change from 0 to 512 [ 353.883901][ T8328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.952884][ T8328] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.064210][ T8336] fuse: Unknown parameter 'fd0x0000000000000004' [ 354.212370][ T8328] EXT4-fs (loop3): shut down requested (1) [ 354.276100][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.718982][ T8343] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 354.726154][ T8343] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 354.732756][ T8343] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 354.739230][ T8343] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 354.745644][ T8343] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 354.752925][ T8343] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 354.759498][ T8343] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 354.766133][ T8343] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 354.772676][ T8343] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 354.779152][ T8343] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 354.785632][ T8343] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 354.792238][ T8343] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 354.798803][ T8343] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 356.498213][ T786] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 356.509296][ T8341] loop1: detected capacity change from 0 to 32768 [ 356.689410][ T8341] OCFS2: ERROR (device loop1): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 21 has bad extent record (0, 1, 0) [ 356.728199][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 356.739589][ T786] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 356.760969][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.780414][ T786] usb 4-1: config 0 descriptor?? [ 356.805605][ T8341] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 356.828904][ T8341] OCFS2: File system is now read-only. [ 356.834441][ T8341] (syz.1.622,8341,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 356.877108][ T8341] (syz.1.622,8341,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 356.889824][ T8341] (syz.1.622,8341,1):ocfs2_map_slot_buffers:378 ERROR: status = -30 [ 356.898795][ T8341] (syz.1.622,8341,1):ocfs2_init_slot_info:426 ERROR: status = -30 [ 356.907314][ T8341] (syz.1.622,8341,1):ocfs2_initialize_super:2278 ERROR: status = -30 [ 356.916581][ T8341] (syz.1.622,8341,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 357.042523][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 357.042556][ T27] audit: type=1326 audit(1777234879.036:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 357.504636][ T786] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 357.617355][ T27] audit: type=1326 audit(1777234879.036:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 357.648501][ T27] audit: type=1326 audit(1777234879.036:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 357.697643][ T786] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 357.706468][ T786] dib0700: firmware download failed at 7 with -22 [ 357.714218][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.625'. [ 357.741012][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 357.772079][ T786] usb 4-1: USB disconnect, device number 19 [ 357.798172][ T27] audit: type=1326 audit(1777234879.036:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 357.931510][ T27] audit: type=1326 audit(1777234879.036:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 358.446820][ T8364] loop2: detected capacity change from 0 to 32768 [ 358.488460][ T27] audit: type=1326 audit(1777234879.036:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 358.620484][ T8364] [ 358.620484][ T8364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 358.620484][ T8364] [ 358.701195][ T27] audit: type=1326 audit(1777234879.046:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 358.759268][ T27] audit: type=1326 audit(1777234879.046:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 358.764496][ T8366] fuse: Unknown parameter 'fd0x0000000000000004' [ 358.825559][ T27] audit: type=1326 audit(1777234879.046:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 358.850764][ T27] audit: type=1326 audit(1777234879.046:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971859cdd9 code=0x7ffc0000 [ 358.885538][ T5763] [ 358.885538][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 358.885538][ T5763] [ 358.972840][ T5763] [ 358.972840][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 358.972840][ T5763] [ 359.192786][ T8371] loop0: detected capacity change from 0 to 128 [ 359.981673][ T8374] loop3: detected capacity change from 0 to 32768 [ 360.208195][ T8374] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 360.218515][ T8374] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 360.227217][ T8374] BTRFS info (device loop3): force clearing of disk cache [ 360.234483][ T8374] BTRFS info (device loop3): turning off barriers [ 360.241167][ T8374] BTRFS info (device loop3): use no compression [ 360.247433][ T8374] BTRFS info (device loop3): disabling free space tree [ 360.257423][ T8374] BTRFS info (device loop3): enabling ssd optimizations [ 360.264661][ T8374] BTRFS info (device loop3): using spread ssd allocation scheme [ 360.272751][ T8374] BTRFS info (device loop3): not using ssd optimizations [ 360.280182][ T8374] BTRFS info (device loop3): not using spread ssd allocation scheme [ 361.342799][ T8374] BTRFS info (device loop3): rebuilding free space tree [ 361.365561][ T8374] BTRFS info (device loop3): disabling free space tree [ 361.372571][ T8374] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.382870][ T8374] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.405471][ T8374] BTRFS info (device loop3): checking UUID tree [ 361.842196][ T8401] netlink: 336 bytes leftover after parsing attributes in process `syz.1.635'. [ 362.058878][ T5772] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 362.598940][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 362.651534][ T8410] fuse: Unknown parameter 'fd0x0000000000000004' [ 362.798175][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 362.880880][ T8] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 363.046181][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.266890][ T8] usb 1-1: config 0 descriptor?? [ 363.645545][ T8416] loop3: detected capacity change from 0 to 1156 [ 363.859702][ T8414] loop2: detected capacity change from 0 to 32768 [ 363.868211][ T8] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 363.871474][ T8403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.637'. [ 363.890528][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 363.900124][ T8] dib0700: firmware download failed at 7 with -22 [ 364.035351][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 364.048070][ T42] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 364.064142][ T8414] [ 364.064142][ T8414] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.064142][ T8414] [ 364.082579][ T8414] [ 364.082579][ T8414] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.082579][ T8414] [ 364.093292][ T8414] [ 364.093292][ T8414] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.093292][ T8414] [ 364.103779][ T8414] [ 364.103779][ T8414] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.103779][ T8414] [ 364.114304][ T8414] [ 364.114304][ T8414] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.114304][ T8414] [ 364.126672][ T112] [ 364.126672][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.126672][ T112] [ 364.904045][ T8] usb 1-1: USB disconnect, device number 19 [ 364.917268][ T6308] [ 364.917268][ T6308] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.917268][ T6308] [ 364.933556][ T6308] [ 364.933556][ T6308] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.933556][ T6308] [ 364.959132][ T5763] [ 364.959132][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.959132][ T5763] [ 364.982823][ T5763] [ 364.982823][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.982823][ T5763] [ 365.140330][ T8424] loop3: detected capacity change from 0 to 32768 [ 365.152719][ T8424] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.644 (8424) [ 365.156490][ T112] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 365.176523][ T112] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 365.184941][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 365.192128][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.202186][ T112] RIP: 0010:lmLogSync+0x112/0x9f0 [ 365.207218][ T112] Code: f8 80 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 1c 30 d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 00 30 d9 fe 49 8b 3f e8 e8 dd ae fe [ 365.226820][ T112] RSP: 0018:ffffc90002d17c40 EFLAGS: 00010202 [ 365.232879][ T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 365.240839][ T112] RDX: ffff888019343c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 365.248796][ T112] RBP: ffffc90002d17d48 R08: 0000000000000003 R09: 0000000000000000 [ 365.256751][ T112] R10: ffffc90002d17ca0 R11: fffff520005a2f98 R12: ffff88801a7b9000 [ 365.264718][ T112] R13: ffffc90002d17ca0 R14: ffff88802d449838 R15: 0000000000000040 [ 365.272687][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 365.281610][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.288185][ T112] CR2: 00007f622b13f000 CR3: 00000000617a5000 CR4: 00000000003506f0 [ 365.296149][ T112] Call Trace: [ 365.299441][ T112] [ 365.302405][ T112] ? jfs_syncpt+0x25/0x90 [ 365.306728][ T112] ? lmWriteRecord+0x1ac0/0x1ac0 [ 365.311655][ T112] ? __rwlock_init+0x150/0x150 [ 365.316411][ T112] jfs_syncpt+0x7b/0x90 [ 365.320599][ T112] txEnd+0x2e5/0x520 [ 365.324519][ T112] jfs_lazycommit+0x5a4/0xa70 [ 365.329185][ T112] ? txFreelock+0x5a0/0x5a0 [ 365.333675][ T112] ? do_task_dead+0xd0/0xd0 [ 365.338167][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 365.343095][ T112] kthread+0x2fa/0x390 [ 365.347149][ T112] ? txFreelock+0x5a0/0x5a0 [ 365.351642][ T112] ? kthread_blkcg+0xd0/0xd0 [ 365.356216][ T112] ret_from_fork+0x48/0x80 [ 365.360622][ T112] ? kthread_blkcg+0xd0/0xd0 [ 365.365198][ T112] ret_from_fork_asm+0x11/0x20 [ 365.369957][ T112] [ 365.372962][ T112] Modules linked in: [ 365.380548][ T112] ---[ end trace 0000000000000000 ]--- [ 365.386106][ T112] RIP: 0010:lmLogSync+0x112/0x9f0 [ 365.392846][ T112] Code: f8 80 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 1c 30 d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 00 30 d9 fe 49 8b 3f e8 e8 dd ae fe [ 365.413587][ T8424] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 365.423765][ T112] RSP: 0018:ffffc90002d17c40 EFLAGS: 00010202 [ 365.423812][ T8424] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 365.438733][ T8424] BTRFS info (device loop3): force clearing of disk cache [ 365.445872][ T8424] BTRFS info (device loop3): turning off barriers [ 365.452359][ T8424] BTRFS info (device loop3): use no compression [ 365.458650][ T8424] BTRFS info (device loop3): disabling free space tree [ 365.465516][ T8424] BTRFS info (device loop3): enabling ssd optimizations [ 365.472535][ T8424] BTRFS info (device loop3): using spread ssd allocation scheme [ 365.480544][ T8424] BTRFS info (device loop3): not using ssd optimizations [ 365.487579][ T8424] BTRFS info (device loop3): not using spread ssd allocation scheme [ 365.496904][ T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 365.523757][ T112] RDX: ffff888019343c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 365.524211][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.532202][ T112] RBP: ffffc90002d17d48 R08: 0000000000000003 R09: 0000000000000000 [ 365.550325][ T112] R10: ffffc90002d17ca0 R11: fffff520005a2f98 R12: ffff88801a7b9000 [ 365.559537][ T112] R13: ffffc90002d17ca0 R14: ffff88802d449838 R15: 0000000000000040 [ 365.567685][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 365.575164][ T42] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 365.580273][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.594363][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.594846][ T112] CR2: 00007f622b13f000 CR3: 00000000610b7000 CR4: 00000000003506f0 [ 365.610647][ T42] usb 2-1: Product: syz [ 365.615815][ T42] usb 2-1: Manufacturer: syz [ 365.621954][ T42] usb 2-1: SerialNumber: syz [ 365.632735][ T112] Kernel panic - not syncing: Fatal exception [ 365.639163][ T112] Kernel Offset: disabled [ 365.643488][ T112] Rebooting in 86400 seconds..