last executing test programs: 13.092396857s ago: executing program 2 (id=818): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 12.560950209s ago: executing program 3 (id=819): syz_open_dev$video4linux(0x0, 0x83, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x1, 0x2845}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x1000001, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x24, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='cgroup2\x00', 0x208000, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000002080)=""/4115) 11.015841032s ago: executing program 2 (id=821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000800), 0x41, 0x0) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000980)={0x28, 0x0, 0x0, 0x96, &(0x7f00000008c0)=""/150}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x5e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000040), 0x4) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r8 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) mmap(&(0x7f0000608000/0x4000)=nil, 0x4000, 0x1000001, 0x1010, r6, 0x945d000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223, 0x0, 0x0, 0x1], [0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32], [0x2]], '\x00', [{}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x3}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 10.951550008s ago: executing program 3 (id=822): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r1, 0x0, r1) r2 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) 9.970428945s ago: executing program 0 (id=823): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_usb_disconnect(r1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e1406020000", 0x1e}], 0x1}, 0x0) 9.754990966s ago: executing program 2 (id=824): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) syz_open_dev$video(0x0, 0x20000000005, 0x8100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1800, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x7, {0xa, 0x4e23, 0xe34, @local, 0x9}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) 9.147970626s ago: executing program 3 (id=825): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x21e0800, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 8.728398648s ago: executing program 3 (id=826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8.285714961s ago: executing program 1 (id=827): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 7.226442096s ago: executing program 1 (id=828): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r0, 0x0) ftruncate(r0, 0x80796c) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x84, @remote, 0x4e24, 0x3, 'lc\x00', 0x0, 0xfffffff7, 0x2}, 0x2c) 7.014183107s ago: executing program 1 (id=829): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 5.375579288s ago: executing program 3 (id=830): syz_open_dev$video4linux(0x0, 0x83, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x1, 0x2845}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x1000001, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioprio_get$uid(0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x24, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='cgroup2\x00', 0x208000, 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000002080)=""/4115) 5.320452114s ago: executing program 2 (id=831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f00000001c0)="b700001806005abeef4ba0d59844627328", 0x11}, {&(0x7f0000000400)="8c4ee6d330f182d6d488c29e48439bc3ad18bc500062f01e9c5b3f88bf690cd573628409b07aad5443", 0x29}], 0x3) 5.100301026s ago: executing program 1 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x38dc68d3d6e0aeb0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, &(0x7f0000003780)) timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={&(0x7f0000000080)="86d6a9f135832f72517903001729aa125aa5cee17480a102b9426b30f58c659b9a5103", 0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f"], 0x0) 4.313529444s ago: executing program 2 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x0, 0x2}) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}], 0x1}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 3.172459896s ago: executing program 0 (id=834): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60041411000a7403004714000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 3.007249433s ago: executing program 3 (id=835): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000880)={[{@barrier}, {@enospc_debug}, {@ssd}, {@discard_sync}, {@discard_sync}, {@discard}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xffffffffffffffff, @usage=0x80, 0x0, 0x5, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x0, @usage=0x7, 0x4000, 0x5, [0x0, 0x8, 0x9c]}, {0xfffffffffffffffe, @usage=0x9, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x8, 0x58a, @struct={0x2, 0xffffffff}, 0x3, 0xe944, [0x400004, 0x7, 0x2, 0xfffffffffffffffc, 0xffffffffffffff35, 0xc]}, {0x6, @usage=0x4, 0x0, 0x7, 0x6b, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4a, @struct={0x1, 0x3}, 0x73f, 0x4, [0x80000000, 0x800801, 0x4, 0x20003ff, 0x80, 0x1]}, {0x2}}) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, 0x0) 2.749021858s ago: executing program 0 (id=836): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.537905568s ago: executing program 0 (id=837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) mmap(&(0x7f0000608000/0x4000)=nil, 0x4000, 0x1000001, 0x1010, r4, 0x945d000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223, 0x0, 0x0, 0x1], [0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32], [0x2]], '\x00', [{}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x3}]}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x5000, 0x995, 0xb, 0xfffffffe, 0x0, [{0x5, 0x6, 0x89, '\x00', 0x2}, {0x2, 0xa, 0x8, '\x00', 0xfe}, {0x4, 0x2, 0x6, '\x00', 0x6}, {0x8, 0x7, 0x3, '\x00', 0x4a}, {0x3, 0x5, 0xee, '\x00', 0x80}, {0x8, 0x5, 0x2, '\x00', 0x8}, {0x4, 0x8, 0x5, '\x00', 0xf0}, {0x8, 0xce, 0xc}, {0x4, 0x80, 0xe7, '\x00', 0xc5}, {0x2, 0xa, 0x8, '\x00', 0x81}, {0xb, 0x5, 0xf8, '\x00', 0xbf}, {0x3, 0x2, 0xb, '\x00', 0xa}, {0xfe, 0xca, 0xa, '\x00', 0x1}, {0x5, 0x6, 0x3, '\x00', 0x5}, {0x7, 0x5, 0x5, '\x00', 0x10}, {0x7, 0x3, 0x2, '\x00', 0x8}, {0xc, 0x8, 0x5, '\x00', 0x9}, {0x7, 0x22, 0x9, '\x00', 0x6}, {0x5, 0xf6, 0xd, '\x00', 0x15}, {0x1, 0x9, 0x5, '\x00', 0x6}, {0xbe, 0x2, 0x4}, {0x8, 0xba, 0x80, '\x00', 0x2}, {0x7, 0xc, 0xb, '\x00', 0x5}, {0x9, 0x4, 0x7, '\x00', 0x5}]}}) 1.340300767s ago: executing program 1 (id=838): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) syz_open_dev$loop(0x0, 0x8000000000000000, 0xa8d02) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.095076281s ago: executing program 1 (id=839): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) syz_open_dev$video(0x0, 0x20000000005, 0x8100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1800, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x7, {0xa, 0x4e23, 0xe34, @local, 0x9}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) 1.094367041s ago: executing program 2 (id=840): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/68, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 336.724966ms ago: executing program 0 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f00000001c0)="b700001806005abeef4ba0d59844627328", 0x11}, {&(0x7f0000000400)="8c4ee6d330f182d6d488c29e48439bc3ad18bc500062f01e9c5b3f88bf690cd573628409b07aad5443", 0x29}], 0x3) 0s ago: executing program 0 (id=842): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_usb_disconnect(r1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e1406020000", 0x1e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0458:0138.0002: unknown main item tag 0x0 [ 152.415675][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.423395][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.435457][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.442742][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.449722][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.456704][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.463970][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.471176][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.478401][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.485460][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.492541][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.499614][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.506642][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.513692][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.522047][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.535792][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.548438][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.564233][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.573624][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.582807][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.593081][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.600102][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.607432][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.614405][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.621448][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.629035][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.636160][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.643922][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.651213][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.660971][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.668254][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.675412][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.682540][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.689671][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.696660][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.703794][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.711178][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.718538][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.726444][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.733408][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.740715][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.747938][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.754928][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.762099][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.769693][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.777134][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.786267][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.793317][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.800254][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.812771][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.821489][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.831049][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.839183][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.846964][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.853980][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.860996][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.868097][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.875200][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.882335][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.889521][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.896515][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.903541][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.910668][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.917940][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.924938][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.935761][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.942868][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.950300][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.957449][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.964407][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.971530][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.978552][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.985588][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 152.999759][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.006675][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.014043][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.021099][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.028819][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.036320][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.043458][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.050530][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.057506][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.064527][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.072288][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.079454][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.091994][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.104699][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.112825][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.119912][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.127108][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.134989][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.142418][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.149591][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.156817][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.164031][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.171041][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.177937][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.185073][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.192123][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.199091][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.206107][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.213119][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.219995][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.229077][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.236052][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.244046][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.259212][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.269515][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.280343][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.288844][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.295737][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.306588][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.315978][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.326901][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.334178][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.383613][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.414319][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.438702][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.480501][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.497842][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.560688][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.584156][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.654678][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.676811][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.730742][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.752104][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.795273][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.920680][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 153.973672][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 154.161234][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 154.196333][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 154.254460][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 154.335889][ T6493] Cannot find add_set index 0 as target [ 155.041800][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.072357][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.154409][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.237507][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.328125][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.397330][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.431288][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.478233][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.548683][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.599739][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.636178][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.662266][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.670408][ T6498] syz.2.188[6498]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 155.683526][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.693713][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.711479][ T6498] loop7: detected capacity change from 0 to 16384 [ 155.723361][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.734010][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.750022][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.758482][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.778462][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.785469][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.838487][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.872727][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.886125][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.900671][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.911035][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.921787][ T6501] loop7: detected capacity change from 16384 to 16297 [ 155.931115][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.954615][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.972693][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 155.994916][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.036015][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.091058][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.111765][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.132705][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.155319][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.185340][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.213379][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.246802][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.283273][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.316995][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.350568][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.377669][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.397040][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.397480][ T2130] IPVS: starting estimator thread 0... [ 156.403797][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.403830][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.403854][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.488526][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.503311][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.516030][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.537245][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.547579][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.557218][ T6514] IPVS: using max 16 ests per chain, 38400 per kthread [ 156.610077][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.627339][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.634239][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.644359][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.656953][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.663762][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.683140][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.693740][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.708556][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.725435][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.774147][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.887412][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.971570][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.982007][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.989068][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 156.995821][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 157.088808][ T6519] 9pnet_fd: Insufficient options for proto=fd [ 157.396973][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.390595][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.567145][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.576981][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.583762][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.615727][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.653380][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.684397][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.717166][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.735329][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.803423][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.837113][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.866953][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.935967][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.966769][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 158.992927][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.013537][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.049231][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.056024][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.099717][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.167745][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.252536][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.262251][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.269611][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.277213][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.286206][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.293605][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.300864][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.308396][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.315284][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.322841][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.330133][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.338088][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.345161][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.352801][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.360198][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.368346][ T5838] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.373346][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.399346][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.412155][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.426110][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.444117][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.460071][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.473373][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.488267][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.503315][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.541907][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.581962][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.607864][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 159.619121][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.645729][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.655909][ T5838] usb 2-1: config 0 has no interfaces? [ 159.671906][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.698332][ T5838] usb 2-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 159.711420][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.720436][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.890188][ T5838] usb 2-1: Product: syz [ 159.896580][ T5838] usb 2-1: Manufacturer: syz [ 159.901918][ T5838] usb 2-1: SerialNumber: syz [ 159.927889][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 159.930459][ T5838] usb 2-1: config 0 descriptor?? [ 159.934936][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.730186][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.737374][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.744198][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.752583][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.765408][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.798002][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.821992][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.861928][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.874562][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.884497][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.905231][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 160.915572][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 161.067680][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 161.158493][ T6550] netlink: 'syz.1.199': attribute type 4 has an invalid length. [ 161.167132][ T6550] netlink: 17 bytes leftover after parsing attributes in process `syz.1.199'. [ 162.127590][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.131270][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.556940][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.564039][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.667053][ T8] usb 2-1: USB disconnect, device number 3 [ 163.677640][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.685347][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.697328][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.707510][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.717553][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.724439][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.737116][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.755604][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.787314][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.830329][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.865261][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.885991][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.927013][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.962655][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.981476][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 163.990605][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.002240][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.024362][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.035312][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.056518][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.071468][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.078862][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.085714][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.103851][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.135194][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.155469][ T5914] IPVS: starting estimator thread 0... [ 164.170805][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.207297][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.224833][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.248646][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.287051][ T6562] IPVS: using max 25 ests per chain, 60000 per kthread [ 164.311359][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.318813][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.325749][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.332644][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.339532][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.346403][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.353410][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.372872][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.388961][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.430379][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.448068][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.464009][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.478112][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.506755][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.539834][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.563455][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.579019][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.598831][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.617983][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.633375][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.654111][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.670480][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.685964][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.714323][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.748743][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.786225][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.806774][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.816958][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.824586][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.835224][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.854412][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.876058][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.893464][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.901656][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.919625][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.927825][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.937385][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.944529][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.951943][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.959429][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.966193][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 164.988392][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 165.004038][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 165.021347][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 165.041639][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 165.054035][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 165.300224][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 165.308266][ T786] kye 0003:0458:0138.0002: unknown main item tag 0x0 [ 165.315682][ T786] kye 0003:0458:0138.0002: collection stack underflow [ 165.323737][ T786] kye 0003:0458:0138.0002: item 0 0 0 12 parsing failed [ 165.332359][ T786] kye 0003:0458:0138.0002: parse failed [ 165.338781][ T786] kye: probe of 0003:0458:0138.0002 failed with error -22 [ 166.059174][ T786] usb 1-1: USB disconnect, device number 5 [ 166.735199][ T27] IPVS: starting estimator thread 0... [ 166.867021][ T6589] IPVS: using max 18 ests per chain, 43200 per kthread [ 167.200190][ T6599] fuse: Unknown parameter '01777777777777777777777' [ 170.302080][ T6631] Cannot find add_set index 0 as target [ 171.772979][ T6639] xt_nat: multiple ranges no longer supported [ 172.533723][ T6640] fuse: Unknown parameter '01777777777777777777777' [ 173.396695][ T5914] IPVS: starting estimator thread 0... [ 173.498481][ T6656] IPVS: using max 18 ests per chain, 43200 per kthread [ 175.270191][ T6678] Cannot find add_set index 0 as target [ 177.430536][ T6692] fuse: Unknown parameter '01777777777777777777777' [ 180.067068][ T786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 180.297309][ T6718] fuse: Unknown parameter '01777777777777777777777' [ 180.792641][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 180.801386][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.835194][ T786] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 180.851230][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.860051][ T786] usb 2-1: Product: syz [ 180.864473][ T786] usb 2-1: Manufacturer: syz [ 180.872700][ T786] usb 2-1: SerialNumber: syz [ 181.166050][ T6721] Cannot find add_set index 0 as target [ 182.174244][ T786] usb 2-1: config 0 descriptor?? [ 182.198101][ T786] usb 2-1: bad CDC descriptors [ 182.203861][ T786] usb 2-1: unsupported MDLM descriptors [ 182.210407][ T786] cdc_acm 2-1:0.0: Zero length descriptor references [ 182.218012][ T786] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 182.410208][ T5914] usb 2-1: USB disconnect, device number 4 [ 183.628835][ T6734] loop1: detected capacity change from 0 to 1024 [ 187.447114][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.637436][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 187.688582][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.729246][ T27] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 187.740499][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.752072][ T27] usb 1-1: Product: syz [ 187.756550][ T27] usb 1-1: Manufacturer: syz [ 187.763425][ T27] usb 1-1: SerialNumber: syz [ 187.811715][ T27] usb 1-1: config 0 descriptor?? [ 187.871066][ T27] usb 1-1: bad CDC descriptors [ 187.889740][ T27] usb 1-1: unsupported MDLM descriptors [ 187.929199][ T27] cdc_acm 1-1:0.0: Zero length descriptor references [ 187.936585][ T27] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 188.048718][ T27] usb 1-1: USB disconnect, device number 6 [ 189.112901][ T6787] loop0: detected capacity change from 0 to 16 [ 189.193602][ T6787] erofs: (device loop0): mounted with root inode @ nid 36. [ 189.340284][ T6787] syz.0.282: attempt to access beyond end of device [ 189.340284][ T6787] loop0: rw=524288, sector=1342177272, nr_sectors = 8 limit=16 [ 189.362902][ T6787] syz.0.282: attempt to access beyond end of device [ 189.362902][ T6787] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 189.364324][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 189.364338][ T28] audit: type=1800 audit(1760785313.141:40): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.282" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 190.978061][ T6793] loop3: detected capacity change from 0 to 32768 [ 191.032043][ T6793] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 191.040949][ T6793] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 191.069843][ T6793] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 191.069843][ T6793] bh = 4149 (magic number) [ 191.069843][ T6793] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 503 [ 191.089524][ T6793] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 191.097331][ T6793] gfs2: fsid=syz:syz.0: File system withdrawn [ 191.103562][ T6793] CPU: 1 PID: 6793 Comm: syz.3.284 Not tainted syzkaller #0 [ 191.110985][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.121556][ T6793] Call Trace: [ 191.124890][ T6793] [ 191.127980][ T6793] dump_stack_lvl+0x16c/0x230 [ 191.132830][ T6793] ? kobject_uevent_env+0x363/0x8c0 [ 191.138189][ T6793] ? show_regs_print_info+0x20/0x20 [ 191.143558][ T6793] ? load_image+0x3b0/0x3b0 [ 191.148126][ T6793] ? kobject_uevent_env+0x363/0x8c0 [ 191.153429][ T6793] gfs2_withdraw+0xe50/0x13b0 [ 191.158212][ T6793] ? __might_sleep+0xe0/0xe0 [ 191.162878][ T6793] ? gfs2_lm+0x220/0x220 [ 191.167260][ T6793] ? gfs2_freeze_unlock+0x60/0x60 [ 191.172352][ T6793] ? gfs2_meta_read+0x83f/0x980 [ 191.177280][ T6793] ? gfs2_meta_new+0x160/0x160 [ 191.182197][ T6793] gfs2_meta_check_ii+0x72/0x90 [ 191.187376][ T6793] gfs2_meta_buffer+0x236/0x310 [ 191.192398][ T6793] gfs2_inode_refresh+0xbb/0xff0 [ 191.197668][ T6793] ? __lock_acquire+0x7c80/0x7c80 [ 191.202744][ T6793] ? gfs2_inode_metasync+0xf0/0xf0 [ 191.207915][ T6793] ? do_raw_spin_unlock+0x121/0x230 [ 191.213167][ T6793] gfs2_instantiate+0x162/0x220 [ 191.218083][ T6793] gfs2_inode_lookup+0x64a/0xae0 [ 191.223092][ T6793] ? set_meta_super+0x10/0x10 [ 191.228013][ T6793] ? gfs2_dirent_search+0x386/0x7e0 [ 191.233362][ T6793] ? inode_owner_or_capable+0x1c0/0x1c0 [ 191.238970][ T6793] ? gfs2_dir_search+0x169/0x220 [ 191.243968][ T6793] ? gfs2_dir_search+0x220/0x220 [ 191.249059][ T6793] ? gfs2_glock_nq+0xd4f/0x1420 [ 191.254329][ T6793] ? do_raw_spin_lock+0x121/0x2c0 [ 191.259431][ T6793] gfs2_dir_search+0x169/0x220 [ 191.264689][ T6793] gfs2_lookupi+0x3d9/0x5a0 [ 191.269354][ T6793] ? gfs2_lookup_meta+0x170/0x170 [ 191.274623][ T6793] ? gfs2_lookup_meta+0xa8/0x170 [ 191.279612][ T6793] ? crc32_le_base+0x759/0xcf0 [ 191.284454][ T6793] gfs2_lookup_meta+0xa8/0x170 [ 191.289450][ T6793] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 191.294684][ T6793] init_journal+0x1a0/0x2260 [ 191.299336][ T6793] ? pointer+0x1110/0x1110 [ 191.303816][ T6793] ? _compound_head+0x120/0x120 [ 191.308813][ T6793] ? vsnprintf+0x1957/0x1a40 [ 191.313565][ T6793] ? snprintf+0xdb/0x120 [ 191.317876][ T6793] ? vscnprintf+0x80/0x80 [ 191.322423][ T6793] ? gfs2_glock_nq_num+0x183/0x1c0 [ 191.327677][ T6793] init_inodes+0xdb/0x320 [ 191.332056][ T6793] gfs2_fill_super+0x1815/0x1f80 [ 191.337175][ T6793] ? gfs2_reconfigure+0xb10/0xb10 [ 191.342442][ T6793] ? init_locking+0xb8/0x200 [ 191.347874][ T6793] ? setup_bdev_super+0x56b/0x660 [ 191.352954][ T6793] get_tree_bdev+0x3e4/0x510 [ 191.357789][ T6793] ? end_current_label_crit_section+0x170/0x170 [ 191.364264][ T6793] ? gfs2_reconfigure+0xb10/0xb10 [ 191.369354][ T6793] ? setup_bdev_super+0x660/0x660 [ 191.374434][ T6793] gfs2_get_tree+0x51/0x1e0 [ 191.378995][ T6793] vfs_get_tree+0x8c/0x280 [ 191.383668][ T6793] do_new_mount+0x24b/0xa40 [ 191.388322][ T6793] __se_sys_mount+0x2da/0x3c0 [ 191.393042][ T6793] ? __x64_sys_mount+0xc0/0xc0 [ 191.397878][ T6793] ? lockdep_hardirqs_on+0x98/0x150 [ 191.403225][ T6793] ? __x64_sys_mount+0x20/0xc0 [ 191.408206][ T6793] do_syscall_64+0x55/0xb0 [ 191.412677][ T6793] ? clear_bhb_loop+0x40/0x90 [ 191.417403][ T6793] ? clear_bhb_loop+0x40/0x90 [ 191.422383][ T6793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.428324][ T6793] RIP: 0033:0x7fe7ceb9076a [ 191.432942][ T6793] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.452691][ T6793] RSP: 002b:00007fe7cf9ade68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.461430][ T6793] RAX: ffffffffffffffda RBX: 00007fe7cf9adef0 RCX: 00007fe7ceb9076a [ 191.469719][ T6793] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007fe7cf9adeb0 [ 191.477911][ T6793] RBP: 000020000001f680 R08: 00007fe7cf9adef0 R09: 0000000000000000 [ 191.486376][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 191.494481][ T6793] R13: 00007fe7cf9adeb0 R14: 000000000001f846 R15: 0000200000000380 [ 191.502948][ T6793] [ 191.509835][ T6793] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 193.188111][ T786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 193.378595][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 193.500907][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.728191][ T786] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 193.728225][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.728246][ T786] usb 4-1: Product: syz [ 193.728309][ T786] usb 4-1: Manufacturer: syz [ 193.728326][ T786] usb 4-1: SerialNumber: syz [ 194.070682][ T786] usb 4-1: config 0 descriptor?? [ 194.088947][ T786] usb 4-1: bad CDC descriptors [ 194.095684][ T786] usb 4-1: unsupported MDLM descriptors [ 194.307020][ T5775] usb 4-1: USB disconnect, device number 8 [ 194.423944][ T6826] xt_nat: multiple ranges no longer supported [ 195.244603][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.251846][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.957558][ T6832] loop2: detected capacity change from 0 to 1024 [ 196.127707][ T6832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.166538][ T6832] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.177935][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.636074][ T6844] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 197.318029][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.339225][ T5914] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 197.354272][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.368403][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.392883][ T5914] usb 2-1: config 0 descriptor?? [ 197.424570][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 197.459459][ T6847] virtio-fs: tag not found [ 197.845138][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 197.887622][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 197.904427][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 197.919887][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 197.941596][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 197.962127][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 198.188367][ T5914] pwc: recv_control_msg error -71 req 02 val 2100 [ 198.207484][ T5914] pwc: recv_control_msg error -71 req 04 val 1500 [ 198.232342][ T5914] pwc: recv_control_msg error -71 req 02 val 2500 [ 198.257036][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 198.277771][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 198.297729][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 198.322403][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 198.342433][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 198.377627][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 198.406169][ T5914] pwc: Registered as video103. [ 198.429111][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 198.487022][ T5914] usb 2-1: USB disconnect, device number 5 [ 198.955569][ T6862] loop1: detected capacity change from 0 to 1024 [ 199.397435][ T6868] binder: 6863:6868 ioctl c0306201 0 returned -14 [ 199.412606][ T6868] No source specified [ 200.699539][ T6867] loop3: detected capacity change from 0 to 4096 [ 200.769687][ T6867] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 201.001199][ T6860] syz.2.302 (6860) used greatest stack depth: 17160 bytes left [ 201.044303][ T6862] overlayfs: missing 'lowerdir' [ 201.900178][ T6875] loop2: detected capacity change from 0 to 32768 [ 201.913754][ T6875] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.308 (6875) [ 201.993568][ T6875] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.024582][ T6875] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 202.071964][ T6875] BTRFS info (device loop2): setting nodatacow, compression disabled [ 202.097671][ T6875] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 202.108620][ T6875] BTRFS info (device loop2): use zstd compression, level 3 [ 202.116194][ T6875] BTRFS info (device loop2): force clearing of disk cache [ 202.123901][ T6875] BTRFS info (device loop2): enabling ssd optimizations [ 202.131235][ T6875] BTRFS info (device loop2): using spread ssd allocation scheme [ 202.139432][ T6875] BTRFS info (device loop2): setting nodatasum [ 202.145799][ T6875] BTRFS info (device loop2): using free space tree [ 202.237112][ T5775] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.362783][ T6875] BTRFS info (device loop2): rebuilding free space tree [ 202.495881][ T5775] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.561353][ T5775] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.677826][ T5775] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.722367][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.863548][ T6890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.880574][ T5775] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 202.886346][ T5784] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 203.259889][ T5786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (5786) [ 204.657020][ T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.936968][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 204.945095][ T6919] xt_nat: multiple ranges no longer supported [ 205.747487][ T786] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.755749][ T786] usb 1-1: config 0 has no interface number 0 [ 205.774409][ T786] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.804432][ T786] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.815948][ T786] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 205.825535][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.838865][ T786] usb 1-1: config 0 descriptor?? [ 206.540397][ T786] uclogic 0003:28BD:0094.0003: failed retrieving string descriptor #100: -71 [ 206.577170][ T786] uclogic 0003:28BD:0094.0003: failed retrieving pen parameters: -71 [ 206.621525][ T786] uclogic 0003:28BD:0094.0003: pen probing failed: -71 [ 206.652045][ T786] uclogic 0003:28BD:0094.0003: failed probing parameters: -71 [ 206.688424][ T786] uclogic: probe of 0003:28BD:0094.0003 failed with error -71 [ 206.743108][ T786] usb 1-1: USB disconnect, device number 7 [ 206.787905][ T5775] usb 2-1: USB disconnect, device number 6 [ 207.678894][ T5775] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.227172][ T5775] usb 2-1: Using ep0 maxpacket: 32 [ 208.237771][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.279379][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.312328][ T5775] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 208.344324][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.508114][ T5775] usb 2-1: config 0 descriptor?? [ 208.943837][ T5775] smartjoyplus 0003:0925:8866.0004: ignoring exceeding usage max [ 209.068389][ T5775] smartjoyplus 0003:0925:8866.0004: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 209.093738][ T5775] smartjoyplus 0003:0925:8866.0004: no output reports found [ 209.190997][ T5775] usb 2-1: USB disconnect, device number 7 [ 209.335147][ T6945] fido_id[6945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 210.682308][ T6954] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 211.307103][ T5825] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.678951][ T5825] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.725534][ T5825] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.766279][ T5825] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.796686][ T6965] loop2: detected capacity change from 0 to 512 [ 211.807678][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.116297][ T6963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.169216][ T5825] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 212.288420][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 212.296383][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 212.302651][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 212.308883][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 212.349106][ T6965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.458504][ T6965] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.778900][ T28] audit: type=1800 audit(1760785336.511:41): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.328" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 213.030093][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.151855][ T5914] usb 2-1: USB disconnect, device number 8 [ 216.197789][ T7006] virtio-fs: tag not found [ 216.737153][ T7008] fuse: Unknown parameter '01777777777777777777777' [ 217.957510][ T7012] loop3: detected capacity change from 0 to 256 [ 218.559034][ T7019] loop1: detected capacity change from 0 to 16 [ 218.591119][ T7019] erofs: (device loop1): mounted with root inode @ nid 36. [ 220.822519][ T7037] loop2: detected capacity change from 0 to 4096 [ 224.505626][ T7058] loop2: detected capacity change from 0 to 512 [ 225.494042][ T7058] EXT4-fs (loop2): Test dummy encryption mode enabled [ 225.511647][ T7058] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 225.526957][ T7058] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.725735][ T7058] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.349: bad orphan inode 131083 [ 225.771929][ T7058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.807049][ T7070] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 225.977876][ T7082] virtio-fs: tag not found [ 226.017706][ T7058] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 226.134529][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.843037][ T7087] loop2: detected capacity change from 0 to 1024 [ 227.125603][ T7087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 227.149159][ T7087] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.437782][ T7093] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 227.932946][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.234184][ T7101] fuse: Unknown parameter '01777777777777777777777' [ 228.997034][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 229.097106][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 229.207032][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 229.214111][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.222723][ T8] usb 1-1: config 0 has no interface number 0 [ 229.229040][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.240690][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.250798][ T8] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 229.262861][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.304940][ T5914] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 229.315986][ T8] usb 1-1: config 0 descriptor?? [ 229.322393][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.341006][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.381697][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.438388][ T5914] usb 3-1: Product: syz [ 229.442648][ T5914] usb 3-1: Manufacturer: syz [ 230.941812][ T7113] loop1: detected capacity change from 0 to 1024 [ 231.175259][ T8] usbhid 1-1:0.1: can't add hid device: -71 [ 231.176358][ T8] usbhid: probe of 1-1:0.1 failed with error -71 [ 231.222711][ T5914] usb 3-1: SerialNumber: syz [ 231.233583][ T5914] usb 3-1: config 0 descriptor?? [ 231.247328][ T8] usb 1-1: USB disconnect, device number 8 [ 231.860935][ T5914] usb 3-1: can't set config #0, error -71 [ 231.907219][ T5914] usb 3-1: USB disconnect, device number 6 [ 232.899509][ T7126] loop1: detected capacity change from 0 to 16 [ 233.854655][ T7135] fuse: Unknown parameter '01777777777777777777777' [ 234.330460][ T7136] virtio-fs: tag not found [ 234.545457][ T7142] loop1: detected capacity change from 0 to 256 [ 234.566172][ T7141] loop0: detected capacity change from 0 to 512 [ 234.596496][ T7141] EXT4-fs (loop0): Test dummy encryption mode enabled [ 234.629242][ T7141] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.667339][ T7142] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 234.798557][ T7142] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 7) [ 234.907957][ T7141] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.370: bad orphan inode 131083 [ 235.519145][ T7141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.713809][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.808572][ T7159] loop0: detected capacity change from 0 to 1024 [ 240.834408][ T7201] loop2: detected capacity change from 0 to 512 [ 240.884836][ T7201] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.385: casefold flag without casefold feature [ 240.946766][ T7201] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.385: couldn't read orphan inode 15 (err -117) [ 241.020495][ T7201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.639915][ T28] audit: type=1804 audit(1760785367.421:42): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.385" name="/newroot/90/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 243.738595][ T28] audit: type=1800 audit(1760785367.421:43): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.385" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 243.889402][ T7228] Invalid ELF header magic: != ELF [ 243.988020][ T5837] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 244.208790][ T5837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.237614][ T5837] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.271393][ T5837] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.292730][ T7234] loop1: detected capacity change from 0 to 1024 [ 244.301987][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.340861][ T7230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.402235][ T5837] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 244.478529][ T7234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.556591][ T28] audit: type=1800 audit(1760785368.331:44): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.393" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 244.804644][ T7237] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 244.825691][ T7237] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 244.841499][ T7237] EXT4-fs (loop1): This should not happen!! Data will be lost [ 244.841499][ T7237] [ 244.863951][ T7237] EXT4-fs (loop1): Total free blocks count 0 [ 244.875511][ T7237] EXT4-fs (loop1): Free/Dirty block details [ 244.888511][ T7237] EXT4-fs (loop1): free_blocks=68451041280 [ 244.897355][ T7237] EXT4-fs (loop1): dirty_blocks=16 [ 244.902736][ T7237] EXT4-fs (loop1): Block reservation details [ 244.909670][ T7237] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 245.453760][ T7232] loop0: detected capacity change from 0 to 32768 [ 245.611797][ T7232] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 245.712597][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.881446][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.923592][ T7232] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 246.060133][ T7232] XFS (loop0): Starting recovery (logdev: internal) [ 246.269958][ T7232] XFS (loop0): Ending recovery (logdev: internal) [ 247.030260][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 247.412061][ T5775] usb 4-1: USB disconnect, device number 9 [ 247.765524][ T7276] loop3: detected capacity change from 0 to 1024 [ 248.578545][ T7276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.628492][ T7276] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.008253][ T7297] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 249.435474][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 251.767066][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 252.755644][ T7118] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 252.787043][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 252.842090][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 252.909465][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 252.915674][ T7332] loop1: detected capacity change from 0 to 1024 [ 252.923104][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 252.947212][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.974596][ T9] usb 4-1: config 0 descriptor?? [ 253.008068][ T7118] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.028485][ T7118] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 253.045680][ T7332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 253.087244][ T7118] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.097808][ T7332] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.173312][ T7118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.413691][ T7323] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 253.447787][ T7118] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 253.507119][ T7339] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 253.716097][ T9] thrustmaster 0003:044F:B300.0005: item fetching failed at offset 0/3 [ 253.813664][ T9] thrustmaster 0003:044F:B300.0005: parse failed [ 253.884147][ T9] thrustmaster: probe of 0003:044F:B300.0005 failed with error -22 [ 253.934501][ T7341] loop2: detected capacity change from 0 to 2048 [ 253.963092][ T9] usb 4-1: USB disconnect, device number 10 [ 254.080976][ T7341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.287792][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.294611][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.482462][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.147621][ T9] usb 1-1: USB disconnect, device number 9 [ 258.401943][ T7372] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.428'. [ 261.447351][ T7400] binder: 7395:7400 ioctl c0306201 0 returned -14 [ 261.467097][ T7400] No source specified [ 262.487169][ T5838] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 262.678893][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.706939][ T5838] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.746618][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.787468][ T5838] usb 4-1: config 0 descriptor?? [ 262.819203][ T5838] pwc: Askey VC010 type 2 USB webcam detected. [ 263.262848][ T5838] pwc: recv_control_msg error -32 req 02 val 2b00 [ 263.271400][ T5838] pwc: recv_control_msg error -32 req 02 val 2700 [ 263.283711][ T5838] pwc: recv_control_msg error -32 req 02 val 2c00 [ 263.312868][ T5838] pwc: recv_control_msg error -32 req 04 val 1000 [ 263.328229][ T5838] pwc: recv_control_msg error -32 req 04 val 1300 [ 263.329152][ T7419] syz.0.443[7419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.367409][ T7419] syz.0.443[7419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.562196][ T5838] pwc: recv_control_msg error -71 req 02 val 2000 [ 263.624808][ T5838] pwc: recv_control_msg error -71 req 02 val 2100 [ 263.654034][ T5838] pwc: recv_control_msg error -71 req 04 val 1500 [ 263.699315][ T5838] pwc: recv_control_msg error -71 req 02 val 2500 [ 263.714560][ T5838] pwc: recv_control_msg error -71 req 02 val 2400 [ 263.772603][ T5838] pwc: recv_control_msg error -71 req 02 val 2600 [ 263.780746][ T5838] pwc: recv_control_msg error -71 req 02 val 2900 [ 263.787991][ T5838] pwc: recv_control_msg error -71 req 02 val 2800 [ 263.798286][ T5838] pwc: recv_control_msg error -71 req 04 val 1100 [ 263.808708][ T5838] pwc: recv_control_msg error -71 req 04 val 1200 [ 263.888485][ T5838] pwc: Registered as video103. [ 263.926282][ T5838] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 264.007513][ T5838] usb 4-1: USB disconnect, device number 11 [ 264.507275][ T7429] ubi0: attaching mtd0 [ 264.567373][ T7429] ubi0: scanning is finished [ 264.582365][ T7429] ubi0: empty MTD device detected [ 264.923286][ T7429] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 264.961217][ T7429] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 265.031639][ T7438] binder: 7434:7438 ioctl c0306201 0 returned -14 [ 265.071969][ T7429] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 265.737384][ T7429] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 265.759395][ T7429] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 265.794449][ T7429] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 265.836732][ T7429] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 764638729 [ 265.891908][ T7429] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 265.946535][ T7436] ubi0: background thread "ubi_bgt0d" started, PID 7436 [ 265.992872][ T7432] ubi0: detaching mtd0 [ 266.068541][ T7432] ubi0: mtd0 is detached [ 266.101026][ T7448] netlink: 'syz.3.451': attribute type 12 has an invalid length. [ 266.109885][ T7448] netlink: 'syz.3.451': attribute type 29 has an invalid length. [ 266.131811][ T7448] netlink: 148 bytes leftover after parsing attributes in process `syz.3.451'. [ 266.143219][ T7448] netlink: 51 bytes leftover after parsing attributes in process `syz.3.451'. [ 267.221864][ T5838] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 267.518066][ T5838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.525049][ T5838] usb 2-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=a9.d7 [ 267.534910][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.557503][ T5838] usb 2-1: config 0 descriptor?? [ 267.565640][ T5838] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 267.994207][ T7459] loop0: detected capacity change from 0 to 1764 [ 268.091542][ T7462] binder: 7457:7462 ioctl c0306201 0 returned -14 [ 268.747569][ T5837] usb 2-1: USB disconnect, device number 9 [ 268.766943][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 268.832690][ T5786] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.383381][ T7477] loop2: detected capacity change from 0 to 128 [ 270.402649][ T7477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 270.492650][ T7477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.117299][ T5837] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 271.161012][ T5837] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.450713][ T7486] loop2: detected capacity change from 0 to 32768 [ 272.579039][ T7486] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 272.630473][ T7486] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 272.658124][ T7486] BTRFS info (device loop2): using free space tree [ 272.894315][ T7486] BTRFS info (device loop2): enabling ssd optimizations [ 272.941801][ T7486] BTRFS info (device loop2): auto enabling async discard [ 273.102422][ T28] audit: type=1800 audit(1760785396.861:45): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.462" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 275.445068][ T7519] loop0: detected capacity change from 0 to 1024 [ 276.102594][ T5784] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 276.305021][ T7519] hfsplus: request for non-existent node 262144 in B*Tree [ 276.317310][ T7519] hfsplus: request for non-existent node 262144 in B*Tree [ 276.389239][ T5786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (5786) [ 278.155297][ T7537] loop0: detected capacity change from 0 to 1024 [ 278.174807][ T7535] loop1: detected capacity change from 0 to 4096 [ 278.747180][ T7535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.029700][ T28] audit: type=1800 audit(1760785402.811:46): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 279.192206][ T5825] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 279.747071][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.793048][ T5825] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 279.881094][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.920997][ T5825] usb 4-1: config 0 descriptor?? [ 279.969783][ T5825] pwc: Askey VC010 type 2 USB webcam detected. [ 280.372675][ T5825] pwc: recv_control_msg error -32 req 02 val 2b00 [ 280.387995][ T5825] pwc: recv_control_msg error -32 req 02 val 2700 [ 280.395785][ T5825] pwc: recv_control_msg error -32 req 02 val 2c00 [ 280.403372][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.407366][ T7550] ubi0: attaching mtd0 [ 280.417982][ T5825] pwc: recv_control_msg error -32 req 04 val 1000 [ 280.426975][ T5825] pwc: recv_control_msg error -32 req 04 val 1300 [ 280.438251][ T7550] ubi0: scanning is finished [ 280.475451][ T7552] loop0: detected capacity change from 0 to 1024 [ 280.535054][ T7550] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 280.558273][ T7550] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 280.569073][ T7552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.587207][ T7550] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 280.594449][ T7550] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 280.603661][ T7550] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 280.610722][ T7550] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 280.618886][ T7550] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 764638729 [ 280.629453][ T7550] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 280.641282][ T5825] pwc: recv_control_msg error -71 req 02 val 2000 [ 280.650853][ T5825] pwc: recv_control_msg error -71 req 02 val 2100 [ 280.652389][ T7553] ubi0: background thread "ubi_bgt0d" started, PID 7553 [ 280.657931][ T5825] pwc: recv_control_msg error -71 req 04 val 1500 [ 280.689333][ T5825] pwc: recv_control_msg error -71 req 02 val 2500 [ 280.696376][ T5825] pwc: recv_control_msg error -71 req 02 val 2400 [ 280.705909][ T5825] pwc: recv_control_msg error -71 req 02 val 2600 [ 280.714007][ T5825] pwc: recv_control_msg error -71 req 02 val 2900 [ 280.720918][ T28] audit: type=1800 audit(1760785404.501:47): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.477" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 280.747384][ T5825] pwc: recv_control_msg error -71 req 02 val 2800 [ 280.772786][ T5825] pwc: recv_control_msg error -71 req 04 val 1100 [ 280.787137][ T5825] pwc: recv_control_msg error -71 req 04 val 1200 [ 280.805005][ T5825] pwc: Registered as video103. [ 280.916291][ T7541] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 281.035758][ T5825] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 281.036396][ T7558] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 281.101576][ T5825] usb 4-1: USB disconnect, device number 12 [ 281.131767][ T7562] loop2: detected capacity change from 0 to 1024 [ 281.160001][ T7558] EXT4-fs (loop0): This should not happen!! Data will be lost [ 281.160001][ T7558] [ 281.388037][ T7558] EXT4-fs (loop0): Total free blocks count 0 [ 281.415760][ T7558] EXT4-fs (loop0): Free/Dirty block details [ 281.426445][ T7558] EXT4-fs (loop0): free_blocks=68451041280 [ 281.445281][ T7558] EXT4-fs (loop0): dirty_blocks=16 [ 281.452688][ T7558] EXT4-fs (loop0): Block reservation details [ 281.459413][ T7558] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 281.549779][ T7562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.700070][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.969209][ T7570] loop1: detected capacity change from 0 to 16 [ 282.077055][ T5797] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.731123][ T7579] loop1: detected capacity change from 0 to 1024 [ 283.756887][ T7579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.407365][ T7589] ubi: mtd0 is already attached to ubi0 [ 284.437086][ T7118] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 284.489578][ T7591] xt_nat: multiple ranges no longer supported [ 284.509281][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 284.516879][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 285.573191][ T7118] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.600567][ T7118] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.635168][ T7118] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.662817][ T7118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.726732][ T7583] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 285.736244][ T7600] loop1: detected capacity change from 0 to 16 [ 285.910790][ T5775] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 285.935407][ T7118] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 286.861009][ T5775] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.903975][ T5775] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.097829][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.117036][ T5775] usb 3-1: config 0 descriptor?? [ 287.128719][ T5775] pwc: Askey VC010 type 2 USB webcam detected. [ 287.509374][ T7610] 9pnet_fd: Insufficient options for proto=fd [ 287.532998][ T5775] pwc: recv_control_msg error -32 req 02 val 2b00 [ 287.561016][ T7611] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 287.586924][ T5775] pwc: recv_control_msg error -32 req 02 val 2700 [ 287.605329][ T5775] pwc: recv_control_msg error -32 req 02 val 2c00 [ 287.613113][ T5775] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.734026][ T5775] pwc: recv_control_msg error -32 req 04 val 1300 [ 287.951227][ T5775] pwc: recv_control_msg error -71 req 02 val 2000 [ 287.985063][ T5775] pwc: recv_control_msg error -71 req 02 val 2100 [ 288.007169][ T5775] pwc: recv_control_msg error -71 req 04 val 1500 [ 288.039588][ T5775] pwc: recv_control_msg error -71 req 02 val 2500 [ 288.067446][ T5775] pwc: recv_control_msg error -71 req 02 val 2400 [ 288.083362][ T5775] pwc: recv_control_msg error -71 req 02 val 2600 [ 288.130804][ T5775] pwc: recv_control_msg error -71 req 02 val 2900 [ 288.160523][ T5775] pwc: recv_control_msg error -71 req 02 val 2800 [ 288.177619][ T5775] pwc: recv_control_msg error -71 req 04 val 1100 [ 288.220534][ T5775] pwc: recv_control_msg error -71 req 04 val 1200 [ 288.238937][ T5775] pwc: Registered as video103. [ 288.245681][ T5775] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 288.317093][ T5914] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 288.328596][ T5775] usb 3-1: USB disconnect, device number 7 [ 289.362169][ T5914] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 289.373324][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.392923][ T5914] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 289.404854][ T5914] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 289.418835][ T5914] usb 2-1: Manufacturer: syz [ 289.439586][ T5914] usb 2-1: config 0 descriptor?? [ 289.518914][ T5775] usb 1-1: USB disconnect, device number 10 [ 289.597288][ T7626] xt_nat: multiple ranges no longer supported [ 290.416877][ T5914] rc_core: IR keymap rc-hauppauge not found [ 290.421851][ T7631] ubi: mtd0 is already attached to ubi0 [ 290.425091][ T5914] Registered IR keymap rc-empty [ 290.454103][ T5914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 290.479895][ T5914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 290.545566][ T5914] usb 2-1: USB disconnect, device number 10 [ 291.328221][ T7639] syz.1.504[7639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.343630][ T7639] syz.1.504[7639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.072513][ T7666] xt_nat: multiple ranges no longer supported [ 293.266892][ T5838] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 294.160055][ T7671] overlayfs: failed to verify origin (newroot/125, ino=683, err=-116) [ 294.347236][ T7671] overlayfs: failed to verify upper root origin [ 295.558430][ T7681] syz.1.518[7681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.558696][ T7681] syz.1.518[7681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.787330][ T5775] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 298.406384][ T7702] xt_nat: multiple ranges no longer supported [ 298.779207][ T5838] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 298.788919][ T5838] usb 4-1: can't read configurations, error -71 [ 298.839016][ T5775] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 298.856922][ T5775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 298.884916][ T5775] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 298.897351][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 298.907389][ T5775] usb 1-1: Product: syz [ 298.911682][ T5775] usb 1-1: Manufacturer: syz [ 298.928134][ T5775] usb 1-1: SerialNumber: syz [ 298.985781][ T5775] usb 1-1: config 0 descriptor?? [ 299.083957][ T5775] usb 1-1: selecting invalid altsetting 0 [ 299.090640][ T2130] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 299.318653][ T2130] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.379656][ T2130] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.390019][ T2130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.462676][ T2130] usb 2-1: config 0 descriptor?? [ 299.502500][ T2130] pwc: Askey VC010 type 2 USB webcam detected. [ 299.652982][ T5775] usb 1-1: USB disconnect, device number 11 [ 299.899172][ T2130] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.914333][ T2130] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.925560][ T2130] pwc: recv_control_msg error -32 req 02 val 2c00 [ 299.933193][ T2130] pwc: recv_control_msg error -32 req 04 val 1000 [ 299.944700][ T2130] pwc: recv_control_msg error -32 req 04 val 1300 [ 300.028087][ T7718] process 'syz.3.528' launched './file0' with NULL argv: empty string added [ 300.315153][ T2130] pwc: recv_control_msg error -71 req 02 val 2000 [ 300.353296][ T2130] pwc: recv_control_msg error -71 req 02 val 2100 [ 301.104618][ T2130] pwc: recv_control_msg error -71 req 04 val 1500 [ 301.155241][ T2130] pwc: recv_control_msg error -71 req 02 val 2500 [ 301.186924][ T2130] pwc: recv_control_msg error -71 req 02 val 2400 [ 301.204337][ T2130] pwc: recv_control_msg error -71 req 02 val 2600 [ 301.208958][ T7718] batman_adv: batadv0: Adding interface: gretap1 [ 301.234798][ T7718] batman_adv: batadv0: Interface activated: gretap1 [ 301.237722][ T2130] pwc: recv_control_msg error -71 req 02 val 2900 [ 301.279028][ T2130] pwc: recv_control_msg error -71 req 02 val 2800 [ 301.285383][ T7726] syz.2.530[7726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.295849][ T2130] pwc: recv_control_msg error -71 req 04 val 1100 [ 301.297221][ T7726] syz.2.530[7726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.346974][ T2130] pwc: recv_control_msg error -71 req 04 val 1200 [ 301.404456][ T2130] pwc: Registered as video103. [ 301.518501][ T2130] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 301.564132][ T2130] usb 2-1: USB disconnect, device number 11 [ 302.064891][ T7735] loop2: detected capacity change from 0 to 4096 [ 302.080966][ T2130] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 302.171960][ T7735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.286966][ T2130] usb 2-1: Using ep0 maxpacket: 8 [ 302.296902][ T2130] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 302.306611][ T2130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.326710][ T2130] usb 2-1: Product: syz [ 302.332457][ T2130] usb 2-1: Manufacturer: syz [ 302.374597][ T2130] usb 2-1: SerialNumber: syz [ 302.404257][ T2130] usb 2-1: config 0 descriptor?? [ 302.426035][ T28] audit: type=1800 audit(1760785426.201:48): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.533" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 302.440270][ T2130] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 302.999764][ T2130] gspca_sonixj: reg_w1 err -110 [ 303.006390][ T2130] sonixj: probe of 2-1:0.0 failed with error -110 [ 304.390957][ T7746] xt_nat: multiple ranges no longer supported [ 305.201956][ T2130] usb 2-1: USB disconnect, device number 12 [ 305.505866][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.147689][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 306.786889][ T5775] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 306.845121][ T5775] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.157774][ T7759] fido_id[7759]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 307.161313][ T7760] syz.0.540[7760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.183935][ T7760] syz.0.540[7760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.397279][ T5825] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 307.620315][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.688472][ T5825] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 307.757035][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.838760][ T5825] usb 3-1: config 0 descriptor?? [ 308.032575][ T5825] pwc: Askey VC010 type 2 USB webcam detected. [ 308.515903][ T7777] ubi: mtd0 is already attached to ubi0 [ 308.696397][ T5825] pwc: recv_control_msg error -32 req 02 val 2b00 [ 308.718260][ T5825] pwc: recv_control_msg error -32 req 02 val 2700 [ 308.727454][ T5825] pwc: recv_control_msg error -32 req 02 val 2c00 [ 308.744256][ T5825] pwc: recv_control_msg error -32 req 04 val 1000 [ 308.759275][ T5825] pwc: recv_control_msg error -32 req 04 val 1300 [ 308.790150][ T7779] xt_nat: multiple ranges no longer supported [ 308.973171][ T5825] pwc: recv_control_msg error -71 req 02 val 2000 [ 308.986690][ T5825] pwc: recv_control_msg error -71 req 02 val 2100 [ 309.132901][ T5825] pwc: recv_control_msg error -71 req 04 val 1500 [ 309.180121][ T5825] pwc: recv_control_msg error -71 req 02 val 2500 [ 310.168489][ T5825] pwc: recv_control_msg error -71 req 02 val 2400 [ 310.518437][ T5825] pwc: recv_control_msg error -71 req 02 val 2600 [ 310.541904][ T5825] pwc: recv_control_msg error -71 req 02 val 2900 [ 310.579166][ T5825] pwc: recv_control_msg error -71 req 02 val 2800 [ 310.607547][ T5825] pwc: recv_control_msg error -71 req 04 val 1100 [ 310.644411][ T5825] pwc: recv_control_msg error -71 req 04 val 1200 [ 310.701129][ T5825] pwc: Registered as video103. [ 310.724657][ T7790] syz.1.550[7790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.724909][ T7790] syz.1.550[7790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.736704][ T5825] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 310.774787][ T5825] usb 3-1: USB disconnect, device number 8 [ 311.004668][ T5914] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 311.046127][ T5914] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 311.234821][ T7804] ubi: mtd0 is already attached to ubi0 [ 311.257597][ T7804] ubi0: detaching mtd0 [ 311.330994][ T7804] ubi0: mtd0 is detached [ 311.658839][ T7807] loop3: detected capacity change from 0 to 16 [ 312.918770][ T7815] xt_nat: multiple ranges no longer supported [ 314.507694][ T7833] netlink: 10712 bytes leftover after parsing attributes in process `syz.1.563'. [ 314.768603][ T7840] ubi0: attaching mtd0 [ 314.826346][ T7840] ubi0: scanning is finished [ 314.939118][ T7840] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 314.982936][ T7840] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 315.032948][ T7840] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 315.241396][ T7840] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 315.408041][ T7840] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 315.555229][ T7840] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 315.670023][ T7840] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 764638729 [ 315.721187][ T7840] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 315.772465][ T7843] ubi0: detaching mtd0 [ 315.848492][ T7843] ubi0: mtd0 is detached [ 316.948964][ T7853] xt_nat: multiple ranges no longer supported [ 316.999892][ T7837] loop3: detected capacity change from 0 to 32768 [ 317.027861][ T7837] ======================================================= [ 317.027861][ T7837] WARNING: The mand mount option has been deprecated and [ 317.027861][ T7837] and is ignored by this kernel. Remove the mand [ 317.027861][ T7837] option from the mount to silence this warning. [ 317.027861][ T7837] ======================================================= [ 317.297524][ T7837] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 317.387532][ T5914] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 317.630583][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 317.712119][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.718879][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.894480][ T5914] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 317.914080][ T5914] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 317.932024][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 317.943252][ T5914] usb 2-1: config 1 has no interface number 0 [ 317.967080][ T5914] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.978905][ T5914] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 317.993784][ T5914] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 318.004212][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.027211][ T5914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 318.234542][ T5914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 318.845609][ T5914] usb 2-1: USB disconnect, device number 13 [ 318.855834][ T5914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 319.321778][ T7872] loop2: detected capacity change from 0 to 4096 [ 319.370433][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 319.415755][ T7872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.615107][ T28] audit: type=1800 audit(1760785444.381:49): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.574" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 321.027200][ T7118] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 321.084552][ T7118] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.426899][ T5775] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 321.635256][ T5775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.660099][ T5775] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 321.753095][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.779103][ T5775] usb 2-1: config 0 descriptor?? [ 321.803746][ T5775] pwc: Askey VC010 type 2 USB webcam detected. [ 322.232822][ T5775] pwc: recv_control_msg error -32 req 02 val 2b00 [ 322.265560][ T5775] pwc: recv_control_msg error -32 req 02 val 2700 [ 322.285204][ T5775] pwc: recv_control_msg error -32 req 02 val 2c00 [ 322.314097][ T5775] pwc: recv_control_msg error -32 req 04 val 1000 [ 322.334887][ T5775] pwc: recv_control_msg error -32 req 04 val 1300 [ 322.513621][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.595217][ T5775] pwc: recv_control_msg error -71 req 02 val 2000 [ 322.627937][ T5775] pwc: recv_control_msg error -71 req 02 val 2100 [ 322.650454][ T5775] pwc: recv_control_msg error -71 req 04 val 1500 [ 322.662198][ T5775] pwc: recv_control_msg error -71 req 02 val 2500 [ 322.689181][ T5775] pwc: recv_control_msg error -71 req 02 val 2400 [ 322.718240][ T5775] pwc: recv_control_msg error -71 req 02 val 2600 [ 322.747091][ T5775] pwc: recv_control_msg error -71 req 02 val 2900 [ 322.765541][ T5775] pwc: recv_control_msg error -71 req 02 val 2800 [ 322.807261][ T5775] pwc: recv_control_msg error -71 req 04 val 1100 [ 322.852232][ T5775] pwc: recv_control_msg error -71 req 04 val 1200 [ 323.123797][ T5775] pwc: Registered as video103. [ 323.171076][ T5775] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 323.255194][ T5775] usb 2-1: USB disconnect, device number 14 [ 323.524052][ T7904] loop0: detected capacity change from 0 to 512 [ 323.750626][ T7904] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.584: casefold flag without casefold feature [ 323.800054][ T7904] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.584: couldn't read orphan inode 15 (err -117) [ 323.828806][ T7904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.903758][ T28] audit: type=1804 audit(1760785448.671:50): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.584" name="/newroot/148/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 325.463361][ T7920] Invalid ELF header magic: != ELF [ 325.487543][ T28] audit: type=1800 audit(1760785448.671:51): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.584" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 325.917947][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.738457][ T7925] loop0: detected capacity change from 0 to 4096 [ 327.568037][ T7925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.795383][ T28] audit: type=1800 audit(1760785451.571:52): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.589" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 328.540571][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.517240][ T7947] loop3: detected capacity change from 0 to 1024 [ 330.555423][ T7952] loop0: detected capacity change from 0 to 1024 [ 330.666686][ T7947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 330.836137][ T7947] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.134508][ T7958] loop1: detected capacity change from 0 to 4096 [ 331.383141][ T7964] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 331.934464][ T7958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.963321][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 332.156855][ T28] audit: type=1800 audit(1760785455.931:53): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.597" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 332.389673][ T7972] loop0: detected capacity change from 0 to 16 [ 332.602220][ T5786] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 333.580487][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.621301][ T7998] loop1: detected capacity change from 0 to 1024 [ 336.724462][ T7998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.921788][ T28] audit: type=1800 audit(1760785460.561:54): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.609" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 336.982257][ T8005] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 336.999279][ T8005] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 337.013789][ T8005] EXT4-fs (loop1): This should not happen!! Data will be lost [ 337.013789][ T8005] [ 337.024929][ T8005] EXT4-fs (loop1): Total free blocks count 0 [ 337.031980][ T8005] EXT4-fs (loop1): Free/Dirty block details [ 337.038530][ T8005] EXT4-fs (loop1): free_blocks=68451041280 [ 337.045411][ T8005] EXT4-fs (loop1): dirty_blocks=16 [ 337.052144][ T8005] EXT4-fs (loop1): Block reservation details [ 337.058839][ T8005] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 337.555169][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.770049][ T8009] loop2: detected capacity change from 0 to 16 [ 340.544981][ T8028] loop0: detected capacity change from 0 to 512 [ 340.552780][ T8028] EXT4-fs: Ignoring removed orlov option [ 340.573328][ T8028] EXT4-fs: Invalid want_extra_isize 7 [ 340.650525][ T5786] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.019315][ T8044] loop1: detected capacity change from 0 to 128 [ 342.214613][ T8048] loop3: detected capacity change from 0 to 512 [ 342.259192][ T8048] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 342.344853][ T8048] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 342.458784][ T8048] EXT4-fs (loop3): 1 truncate cleaned up [ 342.466110][ T8048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.866890][ T5775] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 342.946511][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.185054][ T5775] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.537208][ T5775] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.592413][ T5775] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.610390][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.638672][ T8058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 343.683865][ T5775] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 343.710821][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 346.480845][ T2130] usb 1-1: USB disconnect, device number 12 [ 346.739918][ T8085] loop3: detected capacity change from 0 to 4096 [ 347.194023][ T8085] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 349.969336][ T8110] virtio-fs: tag not found [ 351.309213][ T8127] loop2: detected capacity change from 0 to 40427 [ 351.417954][ T8127] F2FS-fs (loop2): invalid crc value [ 351.444915][ T8130] loop3: detected capacity change from 0 to 1024 [ 351.466099][ T8127] F2FS-fs (loop2): Found nat_bits in checkpoint [ 351.533098][ T8127] F2FS-fs (loop2): Start checkpoint disabled! [ 351.565196][ T8127] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 351.591215][ T8130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.117448][ T28] audit: type=1800 audit(1760785475.741:55): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.644" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 352.660143][ T1095] kworker/u4:7: attempt to access beyond end of device [ 352.660143][ T1095] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 352.706635][ T1095] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 352.724199][ T1095] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 353.123461][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.946883][ T2130] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 358.880620][ T2130] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 358.960929][ T2130] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 358.996719][ T2130] usb 4-1: config 8 has no interface number 0 [ 359.026554][ T2130] usb 4-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.055324][ T2130] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 359.071685][ T2130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.088050][ T8183] loop0: detected capacity change from 0 to 1024 [ 359.102235][ T2130] usb 4-1: Product: syz [ 359.125650][ T2130] usb 4-1: Manufacturer: syz [ 359.137328][ T2130] usb 4-1: SerialNumber: syz [ 359.867447][ T2130] usb 4-1: USB disconnect, device number 15 [ 360.182579][ T8190] loop2: detected capacity change from 0 to 1024 [ 360.283322][ T8190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 360.297288][ T8190] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.847448][ T8201] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 361.319054][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 361.350806][ T8197] loop0: detected capacity change from 0 to 1024 [ 361.368183][ T8197] EXT4-fs: Ignoring removed bh option [ 361.475483][ T8197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 363.827201][ T8228] loop2: detected capacity change from 0 to 128 [ 363.976980][ T8228] affs: No valid root block on device loop2 [ 364.000748][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 364.169659][ T8233] loop1: detected capacity change from 0 to 16 [ 364.396968][ T5797] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 365.187300][ T8228] vlan2: entered allmulticast mode [ 365.201072][ T8228] macsec0: entered allmulticast mode [ 365.213548][ T8228] veth1_macvtap: entered allmulticast mode [ 367.207111][ T5825] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 367.447416][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 367.476509][ T5825] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.516965][ T5825] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.555349][ T5825] usb 1-1: config 0 has no interface number 0 [ 367.576265][ T5825] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.610399][ T5825] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 367.622408][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.632833][ T8258] loop2: detected capacity change from 0 to 16 [ 367.670954][ T5825] usb 1-1: config 0 descriptor?? [ 367.715396][ T5825] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 367.741118][ T8258] erofs: (device loop2): mounted with root inode @ nid 36. [ 367.872218][ T8262] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 367.886696][ T8262] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 367.902191][ T8262] erofs: (device loop2): z_erofs_read_folio: read error -95 @ 0 of nid 36 [ 367.912508][ T8262] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 368.348031][ T8260] loop1: detected capacity change from 0 to 4096 [ 368.433066][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 368.621164][ T8260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.862517][ T28] audit: type=1800 audit(1760785492.641:56): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.676" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 369.544317][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.593167][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 369.855312][ T8277] loop1: detected capacity change from 0 to 1024 [ 369.860887][ T8276] loop2: detected capacity change from 0 to 1024 [ 369.939383][ T8277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 370.122161][ T8277] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.165317][ T5838] usb 1-1: USB disconnect, device number 13 [ 370.644313][ T8277] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 372.051622][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 372.567038][ T5838] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 372.912322][ T5838] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 372.930978][ T5838] usb 3-1: config 0 interface 0 has no altsetting 0 [ 373.043503][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 373.052978][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 373.061436][ T5838] usb 3-1: Product: syz [ 373.065978][ T5838] usb 3-1: Manufacturer: syz [ 373.076034][ T5838] usb 3-1: SerialNumber: syz [ 373.083453][ T5838] usb 3-1: config 0 descriptor?? [ 373.093849][ T5838] usb 3-1: selecting invalid altsetting 0 [ 373.758648][ T786] usb 3-1: USB disconnect, device number 9 [ 374.349430][ T8314] loop1: detected capacity change from 0 to 256 [ 374.384307][ T8314] FAT-fs (loop1): Directory bread(block 64) failed [ 374.404200][ T8314] FAT-fs (loop1): Directory bread(block 65) failed [ 374.421387][ T8314] FAT-fs (loop1): Directory bread(block 66) failed [ 374.443172][ T8314] FAT-fs (loop1): Directory bread(block 67) failed [ 374.460362][ T8314] FAT-fs (loop1): Directory bread(block 68) failed [ 374.478233][ T8314] FAT-fs (loop1): Directory bread(block 69) failed [ 374.496186][ T8314] FAT-fs (loop1): Directory bread(block 70) failed [ 374.513779][ T8314] FAT-fs (loop1): Directory bread(block 71) failed [ 374.533833][ T8314] FAT-fs (loop1): Directory bread(block 72) failed [ 374.543101][ T8314] FAT-fs (loop1): Directory bread(block 73) failed [ 374.619934][ T5775] Process accounting resumed [ 374.705740][ T8315] Process accounting resumed [ 375.082622][ T8323] loop0: detected capacity change from 0 to 1024 [ 376.099059][ T8323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 376.139332][ T8323] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.499364][ T8336] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 376.963328][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 377.249975][ T8339] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 377.778670][ T8345] fuse: Unknown parameter '01777777777777777777777' [ 378.259730][ T8354] loop0: detected capacity change from 0 to 4096 [ 378.395287][ T8354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.453418][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 378.564648][ T28] audit: type=1800 audit(1760785502.341:57): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.698" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 379.084240][ T8372] loop3: detected capacity change from 0 to 1024 [ 379.155653][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.164921][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.174403][ T8372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 379.227113][ T8372] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.640367][ T8380] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 380.150218][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 380.169293][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.821881][ T8393] syz.0.706[8393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.822038][ T8393] syz.0.706[8393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.954205][ T8394] loop0: detected capacity change from 0 to 4096 [ 383.769389][ T8394] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 383.807624][ T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 383.834847][ T8394] ntfs3: loop0: Failed to load $Extend (-22). [ 383.842242][ T8394] ntfs3: loop0: Failed to initialize $Extend. [ 384.333050][ T8405] loop2: detected capacity change from 0 to 16 [ 384.476571][ T8405] erofs: (device loop2): mounted with root inode @ nid 36. [ 385.756930][ T27] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 385.835459][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 385.951291][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 386.031062][ T27] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 386.134022][ T27] usb 2-1: Product: syz [ 386.222190][ T27] usb 2-1: Manufacturer: syz [ 386.287769][ T27] usb 2-1: SerialNumber: syz [ 386.355441][ T27] usb 2-1: config 0 descriptor?? [ 386.790386][ T27] usb 2-1: can't set config #0, error -71 [ 386.815162][ T27] usb 2-1: USB disconnect, device number 15 [ 387.629665][ T8420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.711'. [ 388.323907][ T8424] loop3: detected capacity change from 0 to 4096 [ 388.452354][ T8424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.872602][ T8429] fuse: Unknown parameter '01777777777777777777777' [ 389.036907][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 389.228473][ T28] audit: type=1800 audit(1760785512.951:58): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.715" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 389.277996][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.366932][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 389.386195][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 389.412544][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.419957][ T8438] loop0: detected capacity change from 0 to 1024 [ 389.433134][ T8426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.624589][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 391.025966][ T8447] loop1: detected capacity change from 0 to 1024 [ 391.047103][ T5825] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 391.098193][ T8447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.128845][ T28] audit: type=1800 audit(1760785514.911:59): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.721" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 391.259380][ T5825] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 391.269751][ T5825] usb 1-1: config 0 interface 0 has no altsetting 0 [ 391.279217][ T5825] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.289758][ T8451] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 391.307180][ T8451] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 391.320848][ T8451] EXT4-fs (loop1): This should not happen!! Data will be lost [ 391.320848][ T8451] [ 391.330769][ T8451] EXT4-fs (loop1): Total free blocks count 0 [ 391.336873][ T8451] EXT4-fs (loop1): Free/Dirty block details [ 391.342906][ T8451] EXT4-fs (loop1): free_blocks=68451041280 [ 391.348923][ T8451] EXT4-fs (loop1): dirty_blocks=16 [ 391.354163][ T8451] EXT4-fs (loop1): Block reservation details [ 391.360374][ T8451] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 391.376940][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.430304][ T5825] usb 1-1: Product: syz [ 391.438638][ T5825] usb 1-1: Manufacturer: syz [ 391.464979][ T5825] usb 1-1: SerialNumber: syz [ 391.488257][ T5825] usb 1-1: config 0 descriptor?? [ 391.528509][ T5825] usb 1-1: selecting invalid altsetting 0 [ 391.797245][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.830994][ T5775] usb 1-1: USB disconnect, device number 14 [ 392.281005][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.078689][ T8471] fuse: Unknown parameter '01777777777777777777777' [ 397.584412][ T8480] loop3: detected capacity change from 0 to 512 [ 397.629533][ T5837] usb 3-1: USB disconnect, device number 10 [ 397.662558][ T8480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 397.818345][ T8480] EXT4-fs (loop3): 1 truncate cleaned up [ 397.857490][ T8482] loop1: detected capacity change from 0 to 1024 [ 397.878991][ T8480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.989012][ T8482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.347720][ T28] audit: type=1800 audit(1760785522.121:60): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.730" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 398.368217][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.364433][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.000325][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.883009][ T8507] fuse: Unknown parameter '01777777777777777777777' [ 401.399874][ T8513] loop0: detected capacity change from 0 to 1024 [ 401.574223][ T8513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 401.589459][ T8513] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.768876][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 402.957144][ T5775] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 403.156551][ T5775] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 403.168547][ T5775] usb 3-1: config 0 interface 0 has no altsetting 0 [ 403.179038][ T5775] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 403.193001][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 403.230586][ T5775] usb 3-1: Product: syz [ 403.254978][ T5775] usb 3-1: Manufacturer: syz [ 403.269430][ T5775] usb 3-1: SerialNumber: syz [ 403.307386][ T5775] usb 3-1: config 0 descriptor?? [ 403.387282][ T5775] usb 3-1: selecting invalid altsetting 0 [ 403.628898][ T8538] loop0: detected capacity change from 0 to 4096 [ 403.708594][ T8538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.447718][ T786] usb 3-1: USB disconnect, device number 11 [ 404.458190][ T28] audit: type=1800 audit(1760785528.241:61): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.742" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 405.072558][ T8555] fuse: Unknown parameter '01777777777777777777777' [ 407.149592][ T8565] loop3: detected capacity change from 0 to 1024 [ 407.232421][ T8565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 407.277143][ T8565] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.477552][ T8558] loop1: detected capacity change from 0 to 40427 [ 407.609854][ T8558] F2FS-fs (loop1): Found nat_bits in checkpoint [ 408.024368][ T8558] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 408.150089][ T8558] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 408.285742][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 409.576634][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.889381][ T8589] fuse: Unknown parameter '01777777777777777777777' [ 410.757041][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 411.319794][ T8603] loop2: detected capacity change from 0 to 1024 [ 411.460817][ T8603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.733437][ T28] audit: type=1800 audit(1760785535.511:62): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.759" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 411.768803][ T8613] loop3: detected capacity change from 0 to 1024 [ 411.995604][ T8615] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 412.028394][ T8615] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 412.041496][ T8615] EXT4-fs (loop2): This should not happen!! Data will be lost [ 412.041496][ T8615] [ 412.212905][ T8616] binder: 8610:8616 ioctl c0306201 0 returned -14 [ 412.308809][ T8616] No source specified [ 412.869951][ T8615] EXT4-fs (loop2): Total free blocks count 0 [ 412.876613][ T8615] EXT4-fs (loop2): Free/Dirty block details [ 412.883095][ T8615] EXT4-fs (loop2): free_blocks=68451041280 [ 412.890871][ T8615] EXT4-fs (loop2): dirty_blocks=16 [ 412.897546][ T8615] EXT4-fs (loop2): Block reservation details [ 412.905353][ T8615] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 413.291046][ T8613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 413.345388][ T8613] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.174005][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 414.335636][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.615046][ T8631] loop1: detected capacity change from 0 to 4096 [ 414.714705][ T8631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.138418][ T28] audit: type=1800 audit(1760785538.911:63): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.764" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 415.212961][ T8641] syz.2.767[8641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.213132][ T8641] syz.2.767[8641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.342419][ T8642] loop2: detected capacity change from 0 to 4096 [ 417.776582][ T8642] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 417.882929][ T8642] ntfs3: loop2: Failed to read $UpCase (-4). [ 421.158539][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.431025][ T8663] binder: 8659:8663 ioctl c0306201 0 returned -14 [ 421.444217][ T8663] No source specified [ 423.138918][ T8669] syzkaller0: entered promiscuous mode [ 423.145864][ T8669] syzkaller0: entered allmulticast mode [ 423.625332][ T8678] loop0: detected capacity change from 0 to 1024 [ 423.985142][ T5794] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 424.030787][ T5794] Bluetooth: hci2: Injecting HCI hardware error event [ 424.159957][ T5794] Bluetooth: hci2: hardware error 0x00 [ 424.181479][ T8678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.354014][ T8687] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 424.356943][ T28] audit: type=1800 audit(1760785547.991:64): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.777" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 424.380070][ T8687] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 424.407041][ T8687] EXT4-fs (loop0): This should not happen!! Data will be lost [ 424.407041][ T8687] [ 424.426521][ T8687] EXT4-fs (loop0): Total free blocks count 0 [ 424.435319][ T8687] EXT4-fs (loop0): Free/Dirty block details [ 424.457301][ T8687] EXT4-fs (loop0): free_blocks=68451041280 [ 424.463880][ T8687] EXT4-fs (loop0): dirty_blocks=16 [ 424.469436][ T8687] EXT4-fs (loop0): Block reservation details [ 424.480462][ T8687] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 425.068032][ T8696] xt_nat: multiple ranges no longer supported [ 426.073084][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.196896][ T5794] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 426.868416][ T8708] loop3: detected capacity change from 0 to 4096 [ 427.209237][ T8714] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.337565][ T8708] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 428.630274][ T8721] loop2: detected capacity change from 0 to 2048 [ 428.703788][ T8721] loop2: p1 < > p3 [ 428.753298][ T8721] loop2: p3 size 54016 extends beyond EOD, truncated [ 428.827093][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 429.056375][ T8729] xt_nat: multiple ranges no longer supported [ 429.111170][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 429.145437][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.175612][ T9] usb 1-1: Product: syz [ 429.180232][ T9] usb 1-1: Manufacturer: syz [ 429.189185][ T9] usb 1-1: SerialNumber: syz [ 429.225254][ T9] usb 1-1: config 0 descriptor?? [ 429.547433][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 429.572386][ T5801] udevd[5801]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 429.583745][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 430.568135][ T8733] loop1: detected capacity change from 0 to 1024 [ 430.639485][ T8733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.707012][ T28] audit: type=1800 audit(1760785554.471:65): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 430.984784][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.048502][ T8744] syz.2.793[8744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.048647][ T8744] syz.2.793[8744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.178513][ T8745] loop2: detected capacity change from 0 to 4096 [ 431.264863][ T8745] ntfs3: loop2: failed to replay log file. Can't mount rw! [ 431.368724][ T9] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 431.405855][ T9] usb 1-1: USB disconnect, device number 15 [ 433.934174][ T8771] loop2: detected capacity change from 0 to 512 [ 433.971208][ T8770] xt_nat: multiple ranges no longer supported [ 433.996505][ T8771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 434.057882][ T8771] EXT4-fs (loop2): 1 truncate cleaned up [ 434.079950][ T8771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.980488][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.038409][ T8784] ubi0: attaching mtd0 [ 435.123220][ T8784] ubi0: scanning is finished [ 435.211363][ T8784] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 436.081913][ T8784] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 436.090631][ T8784] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 436.098289][ T8784] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 436.106093][ T8784] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 436.114655][ T8784] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 436.123519][ T8784] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 764638729 [ 436.135271][ T8784] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 436.146521][ T8789] ubi0: background thread "ubi_bgt0d" started, PID 8789 [ 438.562070][ T8815] loop3: detected capacity change from 0 to 512 [ 438.650769][ T8815] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 438.723391][ T8815] EXT4-fs (loop3): 1 truncate cleaned up [ 438.732533][ T8815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.877031][ T5876] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 439.281944][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.334627][ T5876] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.357194][ T5876] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 439.369039][ T5876] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.380884][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.934721][ T8816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 439.990492][ T5876] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 440.257074][ T8830] loop3: detected capacity change from 0 to 1024 [ 440.385717][ T8832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.814'. [ 440.423747][ T8830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 440.516623][ T8830] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.607918][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.614993][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.959748][ T8839] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 441.414821][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 441.701656][ T8832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 441.789421][ T8832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 441.817311][ T8832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 442.024943][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 442.360722][ T8781] usb 2-1: USB disconnect, device number 16 [ 443.841039][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 443.866875][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 443.873310][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 446.697150][ T5914] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 446.879087][ T5914] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 446.889315][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 446.911203][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.940493][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.952241][ T5914] usb 1-1: Product: syz [ 446.956488][ T5914] usb 1-1: Manufacturer: syz [ 446.973578][ T5914] usb 1-1: SerialNumber: syz [ 447.020744][ T5914] usb 1-1: config 0 descriptor?? [ 447.049215][ T5914] usb 1-1: selecting invalid altsetting 0 [ 447.647222][ T5838] usb 1-1: USB disconnect, device number 16 [ 451.671579][ T8913] Cannot find add_set index 0 as target [ 452.814480][ T8919] loop0: detected capacity change from 0 to 512 [ 452.826600][ T8919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 452.921749][ T8919] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.834: bad orphan inode 131083 [ 452.959756][ T8919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.155582][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.378529][ T8924] loop3: detected capacity change from 0 to 32768 [ 454.510269][ T8924] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.835 (8924) [ 454.809669][ T8924] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 454.846903][ T8924] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 454.918959][ T8924] BTRFS info (device loop3): enabling ssd optimizations [ 455.055294][ T8924] BTRFS info (device loop3): turning on sync discard [ 455.216204][ T8924] BTRFS info (device loop3): using free space tree [ 455.945163][ T8924] BTRFS info (device loop3): balance: start -susage=4,drange=7..107,limit=1..3 [ 456.003859][ T8924] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 456.048870][ T8924] BTRFS info (device loop3): space_info SYSTEM has 0 free, is not full [ 456.058524][ T8924] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 456.072814][ T8924] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792 [ 456.082955][ T8924] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 456.091143][ T8924] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 456.099048][ T8924] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 456.107246][ T8924] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 456.229328][ T8924] BTRFS error (device loop3): allocation failed flags 12, wanted 4096 tree-log 0, relocation: 0 [ 456.280206][ T8924] BTRFS info (device loop3): space_info DATA+METADATA has 1769472 free, is full [ 456.290237][ T8924] BTRFS info (device loop3): space_info total=3276800, used=61440, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 456.304109][ T8924] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792 [ 456.313824][ T8924] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 456.321779][ T8924] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 456.329638][ T8924] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 456.337778][ T8924] BTRFS info (device loop3): delayed_refs_rsv: size 393216 reserved 0 [ 456.356946][ T5825] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 456.357744][ T8924] BTRFS info (device loop3): block group 5242880 has 1638400 bytes, 49152 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1589248 bytes available) [ 456.510145][ T8924] BTRFS critical (device loop3): entry offset 5242880, bytes 12288, bitmap no [ 456.520201][ T8924] BTRFS critical (device loop3): entry offset 5259264, bytes 8192, bitmap no [ 456.529299][ T8924] BTRFS critical (device loop3): entry offset 5271552, bytes 16384, bitmap no [ 456.538455][ T8924] BTRFS critical (device loop3): entry offset 5316608, bytes 28672, bitmap no [ 456.548151][ T8924] BTRFS critical (device loop3): entry offset 5357568, bytes 1523712, bitmap no [ 456.592787][ T5825] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 456.643095][ T5825] usb 1-1: config 0 interface 0 has no altsetting 0 [ 456.704083][ T5825] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 456.724095][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 456.733017][ T8924] BTRFS info (device loop3): block group has cluster?: no [ 456.767750][ T8924] BTRFS info (device loop3): 5 free space entries at or bigger than 4096 bytes [ 456.788700][ T5825] usb 1-1: Product: syz [ 456.803920][ T5825] usb 1-1: Manufacturer: syz [ 456.821439][ T5825] usb 1-1: SerialNumber: syz [ 456.854998][ T5825] usb 1-1: config 0 descriptor?? [ 456.894876][ T5825] usb 1-1: selecting invalid altsetting 0 [ 456.907163][ T8924] BTRFS info (device loop3): block group 6881280 has 1638400 bytes, 12288 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1626112 bytes available) [ 456.950143][ T8924] BTRFS critical (device loop3): entry offset 6893568, bytes 1626112, bitmap no [ 457.044487][ T8924] BTRFS info (device loop3): block group has cluster?: no [ 457.091533][ T8924] BTRFS info (device loop3): 1 free space entries at or bigger than 4096 bytes [ 457.187647][ T8924] BTRFS info (device loop3): 3215360 bytes available across all block groups [ 457.330022][ T8924] ------------[ cut here ]------------ [ 457.336116][ T8924] BTRFS: Transaction aborted (error -28) [ 457.412840][ T8924] WARNING: CPU: 1 PID: 8924 at fs/btrfs/block-group.c:2776 btrfs_create_pending_block_groups+0xe10/0xf20 [ 457.424465][ T8924] Modules linked in: [ 457.428576][ T8924] CPU: 1 PID: 8924 Comm: syz.3.835 Not tainted syzkaller #0 [ 457.435925][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 457.446379][ T8924] RIP: 0010:btrfs_create_pending_block_groups+0xe10/0xf20 [ 457.453932][ T8924] Code: 7a c1 6b 8c ba df 0a 00 00 44 89 e1 e8 a9 85 cd 06 e9 19 f6 ff ff e8 1f c4 ed fd 48 c7 c7 20 f2 ee 8a 44 89 e6 e8 30 45 b8 fd <0f> 0b e9 79 fe ff ff e8 04 c4 ed fd 48 c7 c7 20 f2 ee 8a 44 89 ee [ 457.474487][ T8924] RSP: 0018:ffffc9001a5bf740 EFLAGS: 00010246 [ 457.480861][ T8924] RAX: 7a517e289f6b0200 RBX: 0000000000000000 RCX: 0000000000080000 [ 457.489223][ T8924] RDX: ffffc9000d35c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 457.497484][ T8924] RBP: ffffc9001a5bf988 R08: ffffc9001a5bf347 R09: 1ffff920034b7e68 [ 457.505537][ T8924] R10: dffffc0000000000 R11: fffff520034b7e69 R12: 00000000ffffffe4 [ 457.514250][ T8924] R13: ffff88807a8b9050 R14: ffff88807a8b9058 R15: ffff8880798d4001 [ 457.522535][ T8924] FS: 00007fe7cf9ae6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 457.531663][ T8924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.538611][ T8924] CR2: 0000200000021030 CR3: 000000005f901000 CR4: 00000000003506e0 [ 457.546789][ T8924] Call Trace: [ 457.550139][ T8924] [ 457.553090][ T8924] ? _raw_spin_unlock+0x28/0x40 [ 457.558138][ T8924] ? fill_dummy_bgs+0x290/0x290 [ 457.563120][ T8924] ? __lock_acquire+0x7c80/0x7c80 [ 457.568291][ T8924] ? btrfs_block_rsv_add+0xb4/0xd0 [ 457.573991][ T8924] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 457.579885][ T8924] ? mutex_unlock+0x10/0x10 [ 457.584412][ T8924] ? do_raw_spin_unlock+0x121/0x230 [ 457.589866][ T8924] ? btrfs_trans_release_metadata+0x147/0x1b0 [ 457.596064][ T8924] __btrfs_end_transaction+0x140/0x630 [ 457.601653][ T8924] btrfs_inc_block_group_ro+0x596/0x630 [ 457.607579][ T8924] btrfs_relocate_block_group+0x452/0xd70 [ 457.613435][ T8924] btrfs_relocate_chunk+0x12a/0x3b0 [ 457.618729][ T8924] __btrfs_balance+0x187b/0x21c0 [ 457.623736][ T8924] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 457.629781][ T8924] ? describe_balance_start_or_resume+0x4b0/0x4b0 [ 457.636253][ T8924] ? __wait_for_common+0x690/0x6d0 [ 457.641568][ T8924] ? __rwlock_init+0xd0/0x150 [ 457.646286][ T8924] ? do_raw_spin_unlock+0x121/0x230 [ 457.651553][ T8924] btrfs_balance+0xcb1/0x11c0 [ 457.656367][ T8924] btrfs_ioctl_balance+0x4a2/0x730 [ 457.661693][ T8924] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 457.668188][ T8924] __se_sys_ioctl+0xfd/0x170 [ 457.673411][ T8924] do_syscall_64+0x55/0xb0 [ 457.678493][ T8924] ? clear_bhb_loop+0x40/0x90 [ 457.683227][ T8924] ? clear_bhb_loop+0x40/0x90 [ 457.688142][ T8924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.694056][ T8924] RIP: 0033:0x7fe7ceb8efc9 [ 457.698634][ T8924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.718728][ T8924] RSP: 002b:00007fe7cf9ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.727235][ T8924] RAX: ffffffffffffffda RBX: 00007fe7cede5fa0 RCX: 00007fe7ceb8efc9 [ 457.735242][ T8924] RDX: 0000200000000440 RSI: 00000000c4009420 RDI: 0000000000000003 [ 457.743540][ T8924] RBP: 00007fe7cec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.751587][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.759803][ T8924] R13: 00007fe7cede6038 R14: 00007fe7cede5fa0 R15: 00007ffee13bccc8 [ 457.767956][ T8924] [ 457.771200][ T8924] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.778509][ T8924] CPU: 1 PID: 8924 Comm: syz.3.835 Not tainted syzkaller #0 [ 457.785822][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 457.795990][ T8924] Call Trace: [ 457.799321][ T8924] [ 457.802271][ T8924] dump_stack_lvl+0x16c/0x230 [ 457.807078][ T8924] ? show_regs_print_info+0x20/0x20 [ 457.812342][ T8924] ? load_image+0x3b0/0x3b0 [ 457.816912][ T8924] panic+0x2c0/0x710 [ 457.820857][ T8924] ? bpf_jit_dump+0xd0/0xd0 [ 457.825574][ T8924] __warn+0x2e0/0x470 [ 457.829572][ T8924] ? btrfs_create_pending_block_groups+0xe10/0xf20 [ 457.836199][ T8924] ? btrfs_create_pending_block_groups+0xe10/0xf20 [ 457.842746][ T8924] report_bug+0x2be/0x4f0 [ 457.847125][ T8924] ? btrfs_create_pending_block_groups+0xe10/0xf20 [ 457.853673][ T8924] ? btrfs_create_pending_block_groups+0xe10/0xf20 [ 457.860239][ T8924] ? btrfs_create_pending_block_groups+0xe12/0xf20 [ 457.866815][ T8924] handle_bug+0xcf/0x120 [ 457.871296][ T8924] exc_invalid_op+0x1a/0x50 [ 457.875833][ T8924] asm_exc_invalid_op+0x1a/0x20 [ 457.881049][ T8924] RIP: 0010:btrfs_create_pending_block_groups+0xe10/0xf20 [ 457.888192][ T8924] Code: 7a c1 6b 8c ba df 0a 00 00 44 89 e1 e8 a9 85 cd 06 e9 19 f6 ff ff e8 1f c4 ed fd 48 c7 c7 20 f2 ee 8a 44 89 e6 e8 30 45 b8 fd <0f> 0b e9 79 fe ff ff e8 04 c4 ed fd 48 c7 c7 20 f2 ee 8a 44 89 ee [ 457.908374][ T8924] RSP: 0018:ffffc9001a5bf740 EFLAGS: 00010246 [ 457.915179][ T8924] RAX: 7a517e289f6b0200 RBX: 0000000000000000 RCX: 0000000000080000 [ 457.923451][ T8924] RDX: ffffc9000d35c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 457.931442][ T8924] RBP: ffffc9001a5bf988 R08: ffffc9001a5bf347 R09: 1ffff920034b7e68 [ 457.939450][ T8924] R10: dffffc0000000000 R11: fffff520034b7e69 R12: 00000000ffffffe4 [ 457.947641][ T8924] R13: ffff88807a8b9050 R14: ffff88807a8b9058 R15: ffff8880798d4001 [ 457.955753][ T8924] ? _raw_spin_unlock+0x28/0x40 [ 457.960660][ T8924] ? fill_dummy_bgs+0x290/0x290 [ 457.965898][ T8924] ? __lock_acquire+0x7c80/0x7c80 [ 457.971045][ T8924] ? btrfs_block_rsv_add+0xb4/0xd0 [ 457.976210][ T8924] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 457.981914][ T8924] ? mutex_unlock+0x10/0x10 [ 457.986542][ T8924] ? do_raw_spin_unlock+0x121/0x230 [ 457.991798][ T8924] ? btrfs_trans_release_metadata+0x147/0x1b0 [ 457.997986][ T8924] __btrfs_end_transaction+0x140/0x630 [ 458.003585][ T8924] btrfs_inc_block_group_ro+0x596/0x630 [ 458.009174][ T8924] btrfs_relocate_block_group+0x452/0xd70 [ 458.015017][ T8924] btrfs_relocate_chunk+0x12a/0x3b0 [ 458.020242][ T8924] __btrfs_balance+0x187b/0x21c0 [ 458.025248][ T8924] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 458.030915][ T8924] ? describe_balance_start_or_resume+0x4b0/0x4b0 [ 458.037354][ T8924] ? __wait_for_common+0x690/0x6d0 [ 458.042518][ T8924] ? __rwlock_init+0xd0/0x150 [ 458.047548][ T8924] ? do_raw_spin_unlock+0x121/0x230 [ 458.052814][ T8924] btrfs_balance+0xcb1/0x11c0 [ 458.057661][ T8924] btrfs_ioctl_balance+0x4a2/0x730 [ 458.062886][ T8924] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 458.069355][ T8924] __se_sys_ioctl+0xfd/0x170 [ 458.073996][ T8924] do_syscall_64+0x55/0xb0 [ 458.078532][ T8924] ? clear_bhb_loop+0x40/0x90 [ 458.083237][ T8924] ? clear_bhb_loop+0x40/0x90 [ 458.087949][ T8924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.093970][ T8924] RIP: 0033:0x7fe7ceb8efc9 [ 458.098442][ T8924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.119026][ T8924] RSP: 002b:00007fe7cf9ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.128085][ T8924] RAX: ffffffffffffffda RBX: 00007fe7cede5fa0 RCX: 00007fe7ceb8efc9 [ 458.136126][ T8924] RDX: 0000200000000440 RSI: 00000000c4009420 RDI: 0000000000000003 [ 458.144453][ T8924] RBP: 00007fe7cec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.152645][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.160736][ T8924] R13: 00007fe7cede6038 R14: 00007fe7cede5fa0 R15: 00007ffee13bccc8 [ 458.168849][ T8924] [ 458.172266][ T8924] Kernel Offset: disabled [ 458.176815][ T8924] Rebooting in 86400 seconds..