last executing test programs: 2m36.646491815s ago: executing program 2 (id=92): syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) write$dsp(0xffffffffffffffff, 0x0, 0x0) 2m32.98345145s ago: executing program 2 (id=111): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 2m32.772384503s ago: executing program 2 (id=112): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) 2m32.657351169s ago: executing program 2 (id=113): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) 2m32.519904908s ago: executing program 2 (id=114): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) 2m32.30467667s ago: executing program 2 (id=116): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0xfffffffffffffff4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f0000000300)=0x30) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x2d, 0x0, 0x8}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) getpriority(0x2, 0x80000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) gettimeofday(0x0, 0x0) 2m17.213501068s ago: executing program 32 (id=116): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0xfffffffffffffff4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f0000000300)=0x30) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x2d, 0x0, 0x8}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) getpriority(0x2, 0x80000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) gettimeofday(0x0, 0x0) 5.666001646s ago: executing program 4 (id=1059): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000002000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000013000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380)="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", 0x22f}, 0x68) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 4.649982636s ago: executing program 4 (id=1067): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) lsetxattr$security_capability(&(0x7f0000004180)='./file0\x00', &(0x7f0000008380), &(0x7f00000083c0)=@v2={0x2000000, [{0x9, 0x81}, {0x0, 0xd3}]}, 0x14, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket(0x2a, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x493b, 0x4) 3.669937284s ago: executing program 3 (id=1077): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0x460}], 0x2) 3.38728432s ago: executing program 3 (id=1079): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f00000002c0)={'syz_tun\x00', @random='D\x00\x00\x00(E'}) 3.329409894s ago: executing program 1 (id=1080): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xa, 0x1, 0x3}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)}}], 0x2, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f00000000c0)=0x58, 0xa) 3.150713514s ago: executing program 3 (id=1082): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x5, 0x9, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x100008, 0x7, 0x7fffffff, 0x400, 0x71c5, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x8000, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x457, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0xb, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x40004, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0x3, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x8001, 0x0, 0x200, 0x10000007, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x1003, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x2, 0xa, 0x2, 0x7b, 0xfffffeff, 0x6, 0x7, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302000002", 0x6}], 0x1}, 0x5) 2.752397738s ago: executing program 0 (id=1084): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@newtaction={0x1590, 0x30, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x157c, 0x1, [@m_simple={0x168, 0x8, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9, 0x4, 0xd0, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x130fe393, 0x7, 0xf, 0x489c}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa4, 0xfffffffe, 0x20000000, 0xffff, 0x1}}]}, {0xf1, 0x6, "b800972c0b92058a8da272fbdb63acb76a632d240b2b117e2d17fea569c03d17df7f7d27e30f59fc51da7287c3bfed7d2ae7a07921ca10e65590231885a5f95b30b7c99a5b4cfd8b07f64123ee8a43672147fa0df4b7dc8c923bd4761745cb9c2b376453783f8a36e0970f279d4ace65d00941ac8951e33a9c3646641898b61f28f4fe8bd3b38736875776e2b761601f1b84af547e1f9c97fbdec88b8f187d54da93fc95c55ea3329ed3c960e2cb521e93bd6fb18606cd9bd333b4626dab2832052c73dff288cbb70841beaf43e510978673af28714634f27fcfd5e188eb6eb15e50c2f7f359d25373937a5b36"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0xe4, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x10000005, 0x5cab5997, 0x9}, 0x62}}]}, {0x99, 0x6, "0a332bb87cd64978d1145f0e70841a0cc7a770e7c3a10c380a100b2ccc80b7dd97c2e50a2e2755bc3ad0b15e2c2e0aa8dd70e27bc38929d8b3ded0e50a4c85cb010cf6a4036d113b570c2d84f8ea05cf21deca195bf720d576cc39592e83134a5698c162cb2677ef824144274cdae31d070e23abca3d39e79af75919e5c29babfcef116cc3e8147b17ad7c977d2f97203b0392e222"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x68, 0x5, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x18d6}, @TCA_IPT_TARG={0x2a, 0x6, {0xff, 'mangle\x00', 0x6, 0x3}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x134, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x1, 0x7, 0x3d8, 0x4}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xbe, 0x6, "b41d683c66a0a618bd7b6aa9406b4829dcc7c8ccedb0ee12924ce41508fa3add80efc5d431490d395d6ffc4c2b0ba886d79fb930b1cb19fdc34a2b3b0f29d513e2b862b0329da295463b03014278dd7d6da5466e44ed43175da7dbd75e020efb1b53ac84332527f2b253b1945f4b8c91609e1506f9cfb2e5adc49fb7c5738b03a9ba7713c56d39ec77a1a296fe36164054558fddc52252bd85682b358122234ec6a22a2b2104de68a3ec58547890adb8ba4033f1890e42a3d374"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe4, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0xb9, 0x6, "e5c25b4b5c5610f286c12a0d66de983200faef3c8e9e881c687bb8fa440c9698b0262ac213cbd82775e9b2b470e09f56030b49fa955ab05f05990840bfdd6967340c2ec4af6d4bfd182cc58b42ba820c8280a668b9e98b1d1b2e2c9f9ae014c23787d04988be11b5070503d2c3352c72535b53da01987cb37d9394153677bbcb00118235347d53966c05201ff4cd3b758dfd5fdf283bea420c27f04ce3fbf7c0292989d72ddb967585f2f6fc23e66fbd5afb9dbea6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x10c, 0x13, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}]}, {0x9d, 0x6, "0ab30aa4db86d28ff6be505436653e0326801bc06ec308e325c3fd75ca0a30eeb7722318338079ef41049f9ea31df6b01b973c6c752f28827134a070240bdf183cd619ce9814e1457ec0e25acf01dbf13e51a5884e3a318ac09b837feff47da5745933628993afa96adf5d9e053b18fd416cf9ddee4ed7255f5f9f5775d5a80d774845cb2246b8a01319c5f885affb6532372424a248314f8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x44, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8863}]}, {0xd, 0x6, "7f43c595124430b634"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xc4, 0xd, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x5, 0x1, 0x1, 0x5}, 0x4}}]}, {0x71, 0x6, "812627324e1945f7d5091ac888516fe307dc4bd688fc20fdd4ea56af78fd445699c3f969a2a9ee8514af376ed28e44031a3f62370e7bd8daabd32dea1d138792ab5cb8843b60ebc7fa55c84cc9af72899e37e127b14e954647f95bac7292b90da0061f693f56d31195600256cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_pedit={0xe98, 0x8, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x0, 0x1, 0xce0691ad9d85df0, 0x6, 0x7f}, 0x2, 0x7, [{0x1, 0x20, 0x6, 0xfffffff8, 0x62df, 0x80000000}, {0xf, 0x0, 0x3, 0x2, 0xbd, 0x10001}, {0x80, 0x1, 0x7, 0xa7a, 0x40, 0x89de}]}, [{0xfffffffd, 0x2, 0xfffffff9, 0xfff, 0xf, 0x5}, {0x7fffffff, 0xd, 0xffffffff, 0x7, 0x10000, 0x5}, {0x5, 0x0, 0x2, 0x1, 0x10001, 0x7}, {0x18236f4, 0x5, 0xb, 0x2, 0x7, 0xffff}, {0x46, 0xbe8, 0x2, 0xe, 0x0, 0xfffffffe}, {0x7b5, 0x80000001, 0x421d, 0x5, 0x929f, 0x6}, {0x7, 0x80, 0x80000001, 0x5, 0x2306, 0x80}, {0x6, 0x7, 0xbd6b, 0x200, 0x8001, 0x400}, {0x2a8, 0x7fffffff, 0x1, 0x3, 0x0, 0x6f34}, {0x5, 0x7fffffff, 0x81, 0x5, 0x9, 0x7f}, {0x835, 0x4, 0x7, 0x7fff, 0x7fff, 0xb}, {0x6, 0x8, 0x6, 0x2, 0x3, 0x9}, {0x2, 0x1800000, 0x7, 0xacd, 0x101, 0x3}, {0x2, 0x401, 0xb, 0xe0000000, 0x8, 0x5}, {0x1ff, 0x9, 0x1, 0xd2, 0x1, 0x7f}, {0x1, 0x17ee, 0x8, 0x0, 0x6}, {0x6b1, 0x6, 0x3d, 0x7, 0x10, 0x1b1}, {0x7, 0x9, 0x10000, 0x1, 0x3, 0x101}, {0x9, 0xfffffffc, 0x7, 0x9, 0x40, 0x10}, {0x9, 0xbf, 0x5, 0x2, 0x8001, 0x7}, {0x3, 0x300000, 0x8, 0xb, 0xf, 0x5}, {0x7, 0x7f, 0x64, 0x8acb, 0x10001, 0x5}, {0x6, 0x7, 0x40, 0x4, 0x81, 0x1}, {0x2, 0x6, 0x800, 0x6, 0x1, 0xffffff8f}, {0x6, 0x3, 0x7fffffff, 0x1, 0x36, 0x2}, {0x80000001, 0x8, 0x1, 0xa3a, 0x1, 0x3}, {0x5, 0x7, 0x4, 0x3, 0x2, 0x401}, {0x6, 0x200, 0x5, 0xdad, 0x8001, 0x5}, {0x6, 0x8, 0x0, 0x8, 0x0, 0x8}, {0x800, 0x7, 0x3, 0x100, 0x1, 0x9}, {0x80000001, 0xb8bc, 0x2, 0x80000000, 0x2, 0x8f}, {0xc04b, 0x6, 0x82, 0x7, 0x8}, {0x5, 0x6, 0xd, 0xb89, 0x2, 0x10}, {0x0, 0x313, 0x2, 0x5, 0x0, 0x1}, {0xfffffffe, 0xee, 0x80000001, 0x2, 0x100}, {0xfe2, 0x7f, 0x5, 0x5, 0x6}, {0x1ca, 0x5f84, 0x2, 0xe2, 0x4, 0xd0d}, {0x2, 0xc1fa, 0x6, 0x5, 0x8, 0x1000}, {0x9, 0xfffffffe, 0xc5ab, 0x7f, 0x3ff, 0x15}, {0x1, 0xae, 0x7, 0x3, 0x7380, 0x2}, {0x0, 0x7fff, 0x81, 0xe3, 0x7ff, 0x3}, {0x38000000, 0xe7d, 0x9, 0x7, 0xffffffff, 0x47}, {0x2dbe, 0x9, 0x3, 0x80, 0xfff, 0xd8d6}, {0x8, 0x4af, 0x4, 0x9, 0x1000, 0xb}, {0x3ff, 0x81, 0x4, 0xf, 0x8, 0x9d2c}, {0x3, 0x3, 0x9, 0x8001, 0x2, 0x1}, {0xcf, 0x946, 0x9, 0x3, 0xffffffff}, {0x6, 0x7ff, 0xc97, 0x40, 0x9, 0x8}, {0x4, 0xffffffff, 0x10000, 0x8, 0x7, 0xfffffff8}, {0xfff, 0x7f, 0x7, 0xffff0235, 0xff, 0x6}, {0x6, 0x183, 0x1, 0x7, 0x800}, {0x1, 0xfffffffb, 0x9e, 0xa4, 0x7ff}, {0x9, 0x7f, 0x9, 0x8, 0x7f, 0x4}, {0x4, 0x8, 0xf, 0x0, 0xb, 0xb}, {0x2, 0x6, 0x2b2, 0x6c, 0x0, 0x3}, {0x6, 0x80000000, 0x4939, 0xb2, 0x3, 0x200}, {0x1, 0x5, 0xb, 0xffffff81, 0x0, 0x8000}, {0x1, 0xc89b, 0xff36, 0x8, 0x9}, {0xe5, 0x7, 0x7, 0x6, 0xfffffff9, 0x9}, {0x80000001, 0x7, 0x5, 0x6, 0x1, 0xfffffc00}, {0x1ff, 0x806, 0xf, 0x8, 0x80, 0x1c}, {0x1, 0x5, 0x4, 0xde9a, 0xfffffffa, 0x81}, {0x803, 0x6, 0x5, 0xa, 0x1000, 0x8}, {0x6, 0x7, 0x7, 0x4, 0x1ff, 0x8}, {0xb005, 0x6, 0x80, 0xfffffffd, 0x40, 0xb}, {0x543, 0x4, 0x1000, 0x1, 0x6, 0x7}, {0x54e7, 0x2, 0x1, 0x9, 0x9, 0x7ff}, {0x1, 0x408000, 0x2f4, 0x800, 0x0, 0x8}, {0x7, 0x70e, 0x10002, 0x3, 0x80000000, 0x1}, {0xafbe, 0x5, 0x7, 0xa, 0x7f}, {0x7, 0x33f, 0x5, 0x10, 0x2c, 0xd}, {0x9, 0x2, 0x6, 0x6, 0x7, 0x8000}, {0x75, 0x4, 0x1bd, 0x0, 0x1, 0x2}, {0x40, 0xfffffff9, 0x7, 0x426, 0x2, 0x5}, {0x200, 0x6, 0x8, 0x2, 0xfffffffa, 0x7ff}, {0x6, 0x65c, 0x3, 0x8, 0x81, 0x6}, {0x1, 0x1, 0x4, 0x9, 0x98e4, 0x5}, {0x76c3, 0x1, 0xfd1, 0x10001, 0x7fffffff}, {0x8, 0xffffffff, 0x400000, 0x5, 0x4, 0x94}, {0x7ff, 0x2e8, 0x5032, 0x10, 0x1, 0x6000}, {0xffffff46, 0x5, 0xd51, 0x9, 0x80000000, 0x1}, {0x7fffffff, 0x1, 0x9, 0xb, 0x7, 0x8}, {0xb, 0x5, 0x1000, 0x9, 0xc2a, 0x7}, {0xfffffff7, 0x7, 0x3, 0x7fff, 0x9, 0x8}, {0x1a, 0x6, 0x0, 0x0, 0x3, 0x1}, {0x8, 0x4, 0x2, 0x8, 0x9}, {0x1, 0x200, 0x5, 0x3, 0x80000001, 0xe0}, {0x4, 0x1c000, 0x8, 0xd, 0x80000000}, {0xeb9, 0x6, 0x0, 0xaa3, 0x2, 0x5}, {0xce85e41, 0x8, 0x200, 0xada0, 0xffffffff, 0x1ff}, {0x3, 0x1, 0xa3f, 0x1ff, 0x1, 0xd36}, {0xa05, 0x4, 0x6, 0x0, 0x7fffffff, 0x664}, {0x8, 0x4, 0x9, 0x9, 0x6, 0x8}, {0x80000000, 0x0, 0x1, 0x1301, 0x10000, 0xbd4}, {0x40, 0x4, 0x0, 0xffff, 0x3, 0x7}, {0x6, 0xabb, 0x7, 0xffffffff, 0xffffffff, 0x7}, {0x41a89c79, 0x7ff, 0x629, 0xf, 0x200, 0xa8fe}, {0x1, 0x7, 0x18dd, 0x3, 0x6, 0xb6}, {0x1d2e, 0x7ff, 0xb7, 0x20000, 0x2, 0x4}, {0x10001, 0xffffffff, 0x1ff, 0x0, 0x9, 0x941}, {0x3, 0x7ff, 0x8, 0x7, 0x400, 0x2}, {0xfffffff8, 0x4fc6e61f, 0xaa, 0xffffffc5, 0x9, 0x6}, {0x3, 0x0, 0xfffffff8, 0x6, 0x9, 0xfff}, {0x80000000, 0x5159, 0xd935, 0x0, 0x100, 0x8}, {0xfffffd36, 0x1, 0x3, 0x2, 0x2, 0x2}, {0x3, 0x3, 0xb7, 0xfffffff6, 0x7, 0xda5f}, {0x7, 0x401, 0x6, 0x9, 0x0, 0x35}, {0x3, 0x3, 0x2, 0x6, 0x9, 0xaeec00}, {0xf442, 0x5, 0x5, 0x3, 0x4c4b, 0xfff}, {0x30e, 0x1, 0x6, 0xfffffffe, 0xb618, 0x9}, {0x4, 0xd, 0xffff, 0x80000000, 0xfffffffc, 0x3}, {0x7, 0xffffd83f, 0x3, 0x2, 0x204, 0x81}, {0x94d, 0x3, 0xc, 0x3, 0x5, 0x1}, {0x0, 0xfffffff9, 0x9, 0x0, 0x9, 0x400}, {0x7, 0x33, 0x0, 0x401, 0xf0, 0x1}, {0x8000, 0x49b6d0ac, 0x1, 0x400, 0x7, 0x7}, {0x8, 0x4, 0x1000, 0x3, 0xfffffffa, 0x3}, {0xfff, 0x3eb, 0x3ff, 0x7, 0x0, 0x2}, {0xf9, 0x0, 0x6, 0x74, 0x5, 0x1}, {0x9, 0x100, 0x1, 0x1, 0x80000001, 0x7f}, {0x8f, 0x6, 0x3, 0x9, 0x7, 0x9}, {0x2, 0x24f, 0xffff, 0x400, 0x7, 0x4}, {0x0, 0x100, 0xc, 0x0, 0x400, 0x3}, {0x7, 0x4e49, 0x1, 0xfffffffd, 0xd, 0x736}, {0x4, 0x3, 0x6, 0xffffffff, 0x9, 0x3b}, {0x6, 0x6, 0x5, 0x6, 0x9, 0x2}, {0x6ee, 0x6, 0x10000, 0x3, 0x8022, 0x2}, {0x8, 0x0, 0x5, 0xc1, 0xc66605a, 0xffff}], [{0x4, 0x1}, {0x8f3c505bfc298fc0}, {0x5, 0x1}, {0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0xdb44b1a973b113d1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x1}, {0x4}, {0x1}, {0x2}, {}, {0x3, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x6fa2e32336c43e5f}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x4}, {0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1590}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) io_uring_enter(r0, 0x528, 0x7724, 0x16, 0x0, 0x0) 2.725720709s ago: executing program 3 (id=1085): sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000740)}, 0xc041) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x24000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.417445297s ago: executing program 0 (id=1086): syz_emit_ethernet(0x3e, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fallocate(r0, 0x20, 0x2000, 0xfeffffff000) sendfile(0xffffffffffffffff, r0, 0x0, 0xcb9f) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) sendto$inet(r2, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x46) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc00000000", 0x39, 0x0, 0x0, 0x0) 2.189317941s ago: executing program 3 (id=1087): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0xfffffffa) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x19a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)=""/130, 0x82}, {&(0x7f0000000100)=""/114, 0x72}], 0x2}, 0xa1}], 0x1, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000060000009500"/24], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) 2.03885462s ago: executing program 0 (id=1088): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="fbffffff7fffffff5126990d2800", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xfd}, 0x50) 1.773540735s ago: executing program 0 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000b8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) 1.599874655s ago: executing program 0 (id=1090): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000002c0)={'syz_tun\x00', @random='D\x00\x00\x00(E'}) 1.505481211s ago: executing program 0 (id=1091): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x22) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.099659345s ago: executing program 1 (id=1092): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x100000, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.02053428s ago: executing program 4 (id=1093): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x5, 0x9, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x100008, 0x7, 0x7fffffff, 0x400, 0x71c5, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x8000, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x457, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0xb, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x40004, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0x3, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x8001, 0x0, 0x200, 0x10000007, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x1003, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x2, 0xa, 0x2, 0x7b, 0xfffffeff, 0x6, 0x7, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302000002", 0x6}], 0x1}, 0x5) 853.501219ms ago: executing program 1 (id=1094): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x84) shutdown(r0, 0x1) 728.998427ms ago: executing program 1 (id=1095): sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000740)}, 0xc041) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x24000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 437.372384ms ago: executing program 4 (id=1096): syz_emit_ethernet(0x3e, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fallocate(r0, 0x20, 0x2000, 0xfeffffff000) sendfile(0xffffffffffffffff, r0, 0x0, 0xcb9f) r1 = socket$inet6(0x10, 0x2, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) sendto$inet(r2, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x46) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc00000000", 0x39, 0x0, 0x0, 0x0) 269.928104ms ago: executing program 1 (id=1097): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="fbffffff7fffffff5126990d2800", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xfd}, 0x50) 242.898445ms ago: executing program 4 (id=1098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000b8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) 105.523384ms ago: executing program 3 (id=1099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 94.392944ms ago: executing program 1 (id=1100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) 0s ago: executing program 4 (id=1101): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x84) kernel console output (not intermixed with test programs): th an up link [ 76.644321][ T5773] team0: Port device team_slave_0 added [ 76.651812][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.659612][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.685979][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.699777][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.706948][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.733053][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.755503][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.769261][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.780348][ T5773] team0: Port device team_slave_1 added [ 76.805581][ T5772] team0: Port device team_slave_0 added [ 76.816526][ T5772] team0: Port device team_slave_1 added [ 76.851307][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.858467][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.884761][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.930494][ T5770] team0: Port device team_slave_0 added [ 76.939428][ T5770] team0: Port device team_slave_1 added [ 76.947195][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.954140][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.980145][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.991969][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.001738][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.028031][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.076567][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.083572][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.109606][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.139486][ T5771] hsr_slave_0: entered promiscuous mode [ 77.145805][ T5771] hsr_slave_1: entered promiscuous mode [ 77.154057][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.163743][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.193287][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.213935][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.220971][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.249755][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.271978][ T5780] Bluetooth: hci2: command tx timeout [ 77.308662][ T5773] hsr_slave_0: entered promiscuous mode [ 77.314954][ T5773] hsr_slave_1: entered promiscuous mode [ 77.321733][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.330108][ T5773] Cannot create hsr debugfs directory [ 77.351267][ T5780] Bluetooth: hci1: command tx timeout [ 77.353384][ T5770] hsr_slave_0: entered promiscuous mode [ 77.363895][ T5770] hsr_slave_1: entered promiscuous mode [ 77.373200][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.381148][ T5770] Cannot create hsr debugfs directory [ 77.426415][ T5776] Bluetooth: hci0: command tx timeout [ 77.432205][ T5780] Bluetooth: hci3: command tx timeout [ 77.442142][ T5772] hsr_slave_0: entered promiscuous mode [ 77.449348][ T5772] hsr_slave_1: entered promiscuous mode [ 77.455462][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.463260][ T5772] Cannot create hsr debugfs directory [ 77.894257][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.907338][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.923521][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.935000][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.004486][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.014281][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.025253][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.041527][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.130483][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.148985][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.161864][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.172142][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.269973][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.294020][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.317494][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.342862][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.384004][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.400303][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.463406][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.480059][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.510894][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.518280][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.575455][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.591812][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.598961][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.611339][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.618485][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.633574][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.640706][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.690571][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.738466][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.745752][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.763648][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.781340][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.788576][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.850989][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.935560][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.942722][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.961833][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.969142][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.242268][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.347864][ T5780] Bluetooth: hci2: command tx timeout [ 79.368825][ T5771] veth0_vlan: entered promiscuous mode [ 79.389807][ T5771] veth1_vlan: entered promiscuous mode [ 79.448561][ T5780] Bluetooth: hci1: command tx timeout [ 79.458786][ T5771] veth0_macvtap: entered promiscuous mode [ 79.502357][ T5771] veth1_macvtap: entered promiscuous mode [ 79.516491][ T5780] Bluetooth: hci3: command tx timeout [ 79.521967][ T5780] Bluetooth: hci0: command tx timeout [ 79.591874][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.618973][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.632340][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.645449][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.654852][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.664984][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.674320][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.740534][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.805403][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.843717][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.861403][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.917652][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.925631][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.935775][ T5773] veth0_vlan: entered promiscuous mode [ 79.954613][ T5773] veth1_vlan: entered promiscuous mode [ 80.017836][ T5770] veth0_vlan: entered promiscuous mode [ 80.044006][ T5772] veth0_vlan: entered promiscuous mode [ 80.064242][ T5770] veth1_vlan: entered promiscuous mode [ 80.082059][ T5772] veth1_vlan: entered promiscuous mode [ 80.111959][ T5773] veth0_macvtap: entered promiscuous mode [ 80.143988][ T5773] veth1_macvtap: entered promiscuous mode [ 80.194671][ T5770] veth0_macvtap: entered promiscuous mode [ 80.238485][ T5857] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 80.242952][ T5770] veth1_macvtap: entered promiscuous mode [ 80.255542][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.269770][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.281347][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.288915][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.402676][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.413580][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.428628][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.442796][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.452203][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.462781][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.472269][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.484141][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.497467][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.507572][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.518492][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.529997][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.542003][ T5772] veth0_macvtap: entered promiscuous mode [ 80.554610][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.570538][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.581538][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.594048][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.605506][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.641008][ T5772] veth1_macvtap: entered promiscuous mode [ 80.653406][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.663415][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.673476][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.683187][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.754652][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.767709][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.778583][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.790268][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.802146][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.813088][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.825682][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.879629][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.890878][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.901408][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.912300][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.922228][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.932998][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.944402][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.965895][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.977916][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.989565][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.000338][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.010547][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.019609][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.132728][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.150263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.174354][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.184015][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.244547][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.267041][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.315369][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.352302][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.405169][ T208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.423915][ T208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.431907][ T5780] Bluetooth: hci2: command tx timeout [ 81.506388][ T5780] Bluetooth: hci1: command tx timeout [ 81.577830][ T5865] syz.3.5[5865]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.587542][ T5780] Bluetooth: hci0: command tx timeout [ 81.593751][ T5780] Bluetooth: hci3: command tx timeout [ 81.617552][ T5865] loop3: detected capacity change from 0 to 1024 [ 81.674059][ T5868] loop0: detected capacity change from 0 to 1024 [ 81.776939][ T5865] hfsplus: unable to load nls mapping "maccýÿÿÿid=0x0000000000000000" [ 81.786946][ T5865] hfsplus: unable to parse mount options [ 81.804727][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.841455][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.849666][ T5865] process 'syz.3.5' launched './file1' with NULL argv: empty string added [ 81.905718][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.969328][ T5868] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.008538][ T5868] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.008637][ T5868] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.008637][ T5868] [ 82.008655][ T5868] EXT4-fs (loop0): Total free blocks count 0 [ 82.008671][ T5868] EXT4-fs (loop0): Free/Dirty block details [ 82.008717][ T5868] EXT4-fs (loop0): free_blocks=68451041280 [ 82.008801][ T5868] EXT4-fs (loop0): dirty_blocks=80 [ 82.008825][ T5868] EXT4-fs (loop0): Block reservation details [ 82.008838][ T5868] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 82.014214][ T5879] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.136853][ T5878] overlay: Unknown parameter '/' [ 82.304632][ T5884] loop1: detected capacity change from 0 to 1024 [ 82.377088][ T5886] comedi comedi3: comedi_test: 38 microvolt, 2047 microsecond waveform attached [ 82.621630][ T5865] tty tty26: ldisc open failed (-12), clearing slot 25 [ 82.832718][ T5890] loop0: detected capacity change from 0 to 32768 [ 83.454049][ T5897] loop2: detected capacity change from 0 to 32768 [ 83.497242][ T5897] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.12 (5897) [ 83.516456][ T5780] Bluetooth: hci2: command tx timeout [ 83.551465][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 83.586323][ T5780] Bluetooth: hci1: command tx timeout [ 83.597056][ T5897] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.616063][ T5897] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 83.631186][ T5897] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 83.647338][ T5897] BTRFS info (device loop2): trying to use backup root at mount time [ 83.661887][ T5897] BTRFS info (device loop2): force clearing of disk cache [ 83.670818][ T5897] BTRFS info (device loop2): enabling ssd optimizations [ 83.676279][ T5780] Bluetooth: hci3: command tx timeout [ 83.677874][ T5897] BTRFS info (device loop2): using spread ssd allocation scheme [ 83.683837][ T5776] Bluetooth: hci0: command tx timeout [ 83.691038][ T5897] BTRFS info (device loop2): turning on flush-on-commit [ 83.691289][ T5897] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 83.713666][ T5897] BTRFS info (device loop2): use lzo compression, level 0 [ 83.724043][ T5897] BTRFS info (device loop2): turning off flush-on-commit [ 83.731376][ T5897] BTRFS info (device loop2): allowing degraded mounts [ 83.738329][ T5897] BTRFS info (device loop2): using free space tree [ 84.076142][ T5905] loop1: detected capacity change from 0 to 512 [ 84.121768][ T5905] ======================================================= [ 84.121768][ T5905] WARNING: The mand mount option has been deprecated and [ 84.121768][ T5905] and is ignored by this kernel. Remove the mand [ 84.121768][ T5905] option from the mount to silence this warning. [ 84.121768][ T5905] ======================================================= [ 84.166255][ T5905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.356961][ T5905] EXT4-fs: Mount option(s) incompatible with ext2 [ 84.377037][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 84.488422][ T5897] BTRFS info (device loop2): auto enabling async discard [ 84.499602][ T5897] BTRFS info (device loop2): rebuilding free space tree [ 84.554022][ T5897] BTRFS info (device loop2): checking UUID tree [ 84.691572][ T5897] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 84.860694][ T5926] loop0: detected capacity change from 0 to 256 [ 84.909129][ T5897] overlayfs: failed to clone upperpath [ 85.286124][ T5928] syz.1.16 (5928) used greatest stack depth: 20688 bytes left [ 85.600858][ T5931] loop3: detected capacity change from 0 to 32768 [ 85.733763][ T5931] JBD2: Ignoring recovery information on journal [ 85.812510][ T5931] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 86.858501][ T5945] loop1: detected capacity change from 0 to 65536 [ 86.893783][ T5945] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 86.955130][ T5945] XFS (loop1): Ending clean mount [ 86.968690][ T5945] XFS (loop1): Quotacheck needed: Please wait. [ 87.011631][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 87.041067][ T23] cfg80211: failed to load regulatory.db [ 87.053364][ T5945] XFS (loop1): Quotacheck: Done. [ 87.321360][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 87.657707][ T5933] loop2: detected capacity change from 0 to 65536 [ 87.665352][ T5933] XFS: attr2 mount option is deprecated. [ 87.678988][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 87.735315][ T5966] loop0: detected capacity change from 0 to 2048 [ 87.764955][ T5933] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 87.768575][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.976490][ T5933] XFS (loop2): Ending clean mount [ 88.004243][ T5933] XFS (loop2): Quotacheck needed: Please wait. [ 88.061747][ T5980] loop3: detected capacity change from 0 to 64 [ 88.108520][ T5933] XFS (loop2): Quotacheck: Done. [ 88.194512][ T5933] overlayfs: missing 'lowerdir' [ 88.381815][ T5771] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 88.515313][ T28] audit: type=1800 audit(1769938885.484:2): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.29" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 88.626938][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.853208][ T5993] loop3: detected capacity change from 0 to 512 [ 88.914734][ T5993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.169380][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 89.190279][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.179416][ T6001] loop3: detected capacity change from 0 to 32768 [ 90.202366][ T6001] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.39 (6001) [ 90.221964][ T6018] veth1_to_hsr: entered promiscuous mode [ 90.232398][ T6018] macvlan2: entered promiscuous mode [ 90.255884][ T6001] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.278711][ T6001] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 90.303658][ T6001] BTRFS info (device loop3): turning on sync discard [ 90.328728][ T6001] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 90.340258][ T6001] BTRFS info (device loop3): use zstd compression, level 3 [ 90.348758][ T6001] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 90.382451][ T6001] BTRFS info (device loop3): trying to use backup root at mount time [ 90.415017][ T6001] BTRFS info (device loop3): enabling auto defrag [ 90.423232][ T6001] BTRFS info (device loop3): using free space tree [ 90.491824][ T2970] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 90.527833][ T6001] BTRFS error (device loop3): failed to load root extent [ 90.560331][ T6001] BTRFS warning (device loop3): try to load backup roots slot 1 [ 90.592752][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 90.629824][ T6001] BTRFS warning (device loop3): couldn't read tree root [ 90.649489][ T6001] BTRFS warning (device loop3): try to load backup roots slot 2 [ 90.663525][ T11] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 90.690808][ T6001] BTRFS warning (device loop3): couldn't read tree root [ 90.701005][ T6001] BTRFS warning (device loop3): try to load backup roots slot 3 [ 90.736656][ T6001] BTRFS info (device loop3): enabling ssd optimizations [ 90.753364][ T6001] BTRFS info (device loop3): rebuilding free space tree [ 90.794196][ T6001] BTRFS info (device loop3): checking UUID tree [ 90.890770][ T6041] loop1: detected capacity change from 0 to 512 [ 91.012279][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 91.016432][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.131891][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.191896][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.927659][ T6054] loop2: detected capacity change from 0 to 32768 [ 92.041850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 92.106431][ T5858] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.331919][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.376770][ T5858] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 92.416905][ T23] libceph: connect (1)[c::]:6789 error -101 [ 92.424236][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.451115][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 92.489058][ T5858] usb 4-1: config 0 descriptor?? [ 92.511193][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 92.696423][ T6061] ceph: No mds server is up or the cluster is laggy [ 92.763326][ T27] libceph: connect (1)[c::]:6789 error -101 [ 92.771332][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 92.922084][ T5858] pwc: recv_control_msg error -32 req 02 val 2b00 [ 92.942233][ T5858] pwc: recv_control_msg error -32 req 02 val 2700 [ 92.962320][ T5858] pwc: recv_control_msg error -32 req 02 val 2c00 [ 92.976067][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.986227][ T5858] pwc: recv_control_msg error -32 req 04 val 1000 [ 93.005999][ T5858] pwc: recv_control_msg error -32 req 04 val 1300 [ 93.024565][ T5858] pwc: recv_control_msg error -32 req 04 val 1400 [ 93.035294][ T5858] pwc: recv_control_msg error -32 req 02 val 2000 [ 93.060995][ T5858] pwc: recv_control_msg error -32 req 02 val 2100 [ 93.079785][ T5858] pwc: recv_control_msg error -32 req 04 val 1500 [ 93.099923][ T5858] pwc: recv_control_msg error -32 req 02 val 2500 [ 93.116540][ T5858] pwc: recv_control_msg error -32 req 02 val 2400 [ 93.180592][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.198583][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.215863][ T23] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 93.239002][ T23] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 93.248663][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.266659][ T23] usb 2-1: Product: syz [ 93.276004][ T23] usb 2-1: Manufacturer: syz [ 93.285945][ T23] usb 2-1: SerialNumber: syz [ 93.331541][ T5858] pwc: recv_control_msg error -71 req 02 val 2900 [ 93.352145][ T5858] pwc: recv_control_msg error -71 req 02 val 2800 [ 93.369165][ T5858] pwc: recv_control_msg error -71 req 04 val 1100 [ 93.386928][ T5858] pwc: recv_control_msg error -71 req 04 val 1200 [ 93.407610][ T5858] pwc: Registered as video103. [ 93.436736][ T5858] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 93.523995][ T27] usb 2-1: USB disconnect, device number 2 [ 93.546208][ T5858] usb 4-1: USB disconnect, device number 2 [ 93.761956][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 94.666518][ T6101] loop3: detected capacity change from 0 to 1024 [ 94.723579][ T6101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.968877][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 94.985425][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.200757][ T6110] nbd0: detected capacity change from 0 to 127 [ 95.254481][ T6112] loop3: detected capacity change from 0 to 4096 [ 95.263769][ T6114] netlink: 64 bytes leftover after parsing attributes in process `syz.2.75'. [ 95.285540][ T6112] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 95.296590][ T5780] block nbd0: Receive control failed (result -104) [ 95.304508][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 95.312952][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 95.556587][ T6115] ceph: No mds server is up or the cluster is laggy [ 95.915616][ T6120] loop2: detected capacity change from 0 to 32768 [ 95.924916][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 95.931607][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 96.040613][ T6120] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.180057][ T6120] XFS (loop2): Ending clean mount [ 96.190270][ T6120] XFS (loop2): Quotacheck needed: Please wait. [ 96.296231][ T6120] XFS (loop2): Quotacheck: Done. [ 96.410461][ T6132] loop1: detected capacity change from 0 to 32768 [ 96.445380][ T6132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.78 (6132) [ 96.476810][ T6132] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.485322][ T5771] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.487222][ T6132] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 96.487265][ T6132] BTRFS info (device loop1): turning on sync discard [ 96.487286][ T6132] BTRFS info (device loop1): turning on async discard [ 96.487305][ T6132] BTRFS info (device loop1): turning off barriers [ 96.487327][ T6132] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 96.487347][ T6132] BTRFS info (device loop1): trying to use backup root at mount time [ 96.487370][ T6132] BTRFS info (device loop1): enabling auto defrag [ 96.487431][ T6132] BTRFS info (device loop1): max_inline at 0 [ 96.557186][ T6132] BTRFS info (device loop1): using free space tree [ 96.614435][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 96.693487][ T6132] BTRFS error (device loop1): failed to load root extent [ 96.703241][ T6132] BTRFS warning (device loop1): try to load backup roots slot 1 [ 96.712658][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 96.786025][ T6132] BTRFS warning (device loop1): couldn't read tree root [ 96.793156][ T6132] BTRFS warning (device loop1): try to load backup roots slot 2 [ 96.801369][ T11] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 96.844680][ T6132] BTRFS warning (device loop1): couldn't read tree root [ 96.852448][ T6132] BTRFS warning (device loop1): try to load backup roots slot 3 [ 96.906070][ T6132] BTRFS info (device loop1): enabling ssd optimizations [ 96.923240][ T6132] BTRFS info (device loop1): rebuilding free space tree [ 96.959120][ T6132] BTRFS info (device loop1): checking UUID tree [ 97.208977][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.530474][ T6160] loop1: detected capacity change from 0 to 1024 [ 97.620419][ T6160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.740576][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.783091][ T6165] loop0: detected capacity change from 0 to 2048 [ 97.824516][ T6165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.028574][ T6170] nbd1: detected capacity change from 0 to 127 [ 98.048709][ T6170] netlink: 64 bytes leftover after parsing attributes in process `syz.1.85'. [ 98.079733][ T6170] block nbd0: reconnected socket [ 98.107243][ T5776] block nbd0: Receive control failed (result -32) [ 98.114972][ T5780] block nbd1: Receive control failed (result -104) [ 98.540382][ T6172] loop3: detected capacity change from 0 to 32768 [ 98.626928][ T28] audit: type=1800 audit(1769938895.564:3): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 98.795115][ T6176] loop1: detected capacity change from 0 to 32768 [ 98.819507][ T28] audit: type=1800 audit(1769938895.574:4): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.86" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 98.937021][ T6177] block nbd2: Device being setup by another task [ 98.965698][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.992970][ T6178] block nbd2: shutting down sockets [ 99.056222][ T6179] block nbd2: NBD_DISCONNECT [ 99.061015][ T6179] block nbd2: Send disconnect failed -32 [ 99.485385][ T6187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 100.011598][ T6197] nbd2: detected capacity change from 0 to 127 [ 100.026541][ T6198] netlink: 64 bytes leftover after parsing attributes in process `syz.0.96'. [ 100.038673][ T6198] block nbd0: reconnected socket [ 100.045437][ T5780] block nbd2: Receive control failed (result -104) [ 100.048580][ T5776] block nbd0: Receive control failed (result -32) [ 100.199411][ T6200] loop0: detected capacity change from 0 to 2048 [ 100.265413][ T6200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.457285][ T23] libceph: connect (1)[c::]:6789 error -101 [ 100.463417][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 100.685958][ T6206] ceph: No mds server is up or the cluster is laggy [ 100.736563][ T23] libceph: connect (1)[c::]:6789 error -101 [ 100.757463][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 101.045022][ T28] audit: type=1800 audit(1769938898.014:5): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.97" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 101.075236][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.100'. [ 101.132784][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.384807][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 101.658835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.764464][ T6232] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 102.069423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.078380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.170639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.179442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.273210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.282068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.306337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.786757][ T6238] loop3: detected capacity change from 0 to 2048 [ 102.835489][ T6238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.154338][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.111'. [ 103.625592][ T28] audit: type=1800 audit(1769938900.594:6): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.110" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 103.692347][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 103.735733][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.257893][ T6237] loop1: detected capacity change from 0 to 65536 [ 104.277781][ T6237] XFS: attr2 mount option is deprecated. [ 104.455120][ T6237] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 104.526549][ T6266] loop3: detected capacity change from 0 to 32768 [ 104.536132][ T6266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.120 (6266) [ 104.552213][ T6266] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.562612][ T6266] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 104.571630][ T6266] BTRFS info (device loop3): turning on sync discard [ 104.578507][ T6266] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.587969][ T6266] BTRFS info (device loop3): use zstd compression, level 3 [ 104.595226][ T6266] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 104.605970][ T6266] BTRFS info (device loop3): trying to use backup root at mount time [ 104.614110][ T6266] BTRFS info (device loop3): enabling auto defrag [ 104.620776][ T6266] BTRFS info (device loop3): using free space tree [ 104.709777][ T6237] XFS (loop1): Ending clean mount [ 104.733788][ T6237] XFS (loop1): Quotacheck needed: Please wait. [ 104.869978][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 104.895734][ T6237] XFS (loop1): Quotacheck: Done. [ 104.952104][ T6266] BTRFS error (device loop3): failed to load root extent [ 104.959332][ T6266] BTRFS warning (device loop3): try to load backup roots slot 1 [ 104.968620][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 104.983066][ T6277] loop0: detected capacity change from 0 to 32768 [ 104.991632][ T6237] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 105.033409][ T6237] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.046864][ T6277] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.055358][ T6277] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.067989][ T6266] BTRFS warning (device loop3): couldn't read tree root [ 105.075066][ T6266] BTRFS warning (device loop3): try to load backup roots slot 2 [ 105.083690][ T2970] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 105.117282][ T6277] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 105.117282][ T6277] inode = 1 19 [ 105.117282][ T6277] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 105.136157][ T6277] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:6 [ 105.145936][ T6277] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:6277 [syz.0.122] init_journal+0x1802/0x2330 [ 105.156400][ T6277] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:33554432 p:0 [ 105.164952][ T6277] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 105.165914][ T6266] BTRFS warning (device loop3): couldn't read tree root [ 105.172454][ T6277] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 105.179251][ T6266] BTRFS warning (device loop3): try to load backup roots slot 3 [ 105.188195][ T6277] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 105.203981][ T6277] gfs2: fsid=syz:syz.s: File system withdrawn [ 105.210244][ T6277] CPU: 1 PID: 6277 Comm: syz.0.122 Not tainted syzkaller #0 [ 105.217577][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.227670][ T6277] Call Trace: [ 105.230992][ T6277] [ 105.233979][ T6277] dump_stack_lvl+0x18c/0x250 [ 105.238692][ T6277] ? kobject_uevent_env+0x363/0x8b0 [ 105.243909][ T6277] ? show_regs_print_info+0x20/0x20 [ 105.249129][ T6277] ? load_image+0x400/0x400 [ 105.253650][ T6277] ? kobject_uevent_env+0x363/0x8b0 [ 105.258872][ T6277] gfs2_withdraw+0xb24/0x13d0 [ 105.263579][ T6277] ? gfs2_lm+0x240/0x240 [ 105.267852][ T6277] ? gfs2_consist_inode_i+0xf5/0x110 [ 105.273186][ T6277] gfs2_jdesc_check+0x13b/0x2a0 [ 105.278079][ T6277] check_journal_clean+0x18e/0x360 [ 105.283231][ T6277] ? gfs2_trans_remove_revoke+0x370/0x370 [ 105.288983][ T6277] ? init_journal+0x1802/0x2330 [ 105.293860][ T6277] ? __rwlock_init+0x150/0x150 [ 105.298654][ T6277] ? do_raw_spin_unlock+0x121/0x230 [ 105.304323][ T6277] ? _raw_spin_unlock+0x28/0x40 [ 105.309188][ T6277] ? gfs2_jdesc_find+0xab/0xc0 [ 105.313982][ T6277] init_journal+0x1802/0x2330 [ 105.318696][ T6277] ? init_inodes+0xdb/0x320 [ 105.323310][ T6277] ? _compound_head+0x120/0x120 [ 105.328182][ T6277] ? vsnprintf+0x1ac7/0x1ba0 [ 105.332862][ T6277] ? snprintf+0xe9/0x140 [ 105.337244][ T6277] ? init_inodes+0xdb/0x320 [ 105.341778][ T6277] ? vscnprintf+0x80/0x80 [ 105.346150][ T6277] ? gfs2_glock_nq_num+0x183/0x1c0 [ 105.351305][ T6277] init_inodes+0xdb/0x320 [ 105.355667][ T6277] gfs2_fill_super+0x17bc/0x1f30 [ 105.360637][ T6277] ? __might_sleep+0xe0/0xe0 [ 105.365532][ T6277] ? gfs2_reconfigure+0xb10/0xb10 [ 105.370586][ T6277] ? init_locking+0xb8/0x200 [ 105.375202][ T6277] ? setup_bdev_super+0x56b/0x660 [ 105.380244][ T6277] get_tree_bdev+0x3f3/0x520 [ 105.384844][ T6277] ? end_current_label_crit_section+0x170/0x170 [ 105.391109][ T6277] ? gfs2_reconfigure+0xb10/0xb10 [ 105.396162][ T6277] ? setup_bdev_super+0x660/0x660 [ 105.401229][ T6277] gfs2_get_tree+0x51/0x1e0 [ 105.405796][ T6277] vfs_get_tree+0x8c/0x280 [ 105.410261][ T6277] do_new_mount+0x24b/0xa40 [ 105.414880][ T6277] __se_sys_mount+0x2e7/0x3d0 [ 105.419587][ T6277] ? __x64_sys_mount+0xc0/0xc0 [ 105.424364][ T6277] ? lockdep_hardirqs_on+0x98/0x150 [ 105.429583][ T6277] ? __x64_sys_mount+0x20/0xc0 [ 105.434363][ T6277] do_syscall_64+0x55/0xa0 [ 105.438809][ T6277] ? clear_bhb_loop+0x40/0x90 [ 105.443523][ T6277] ? clear_bhb_loop+0x40/0x90 [ 105.448227][ T6277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.454140][ T6277] RIP: 0033:0x7f3dd559c14a [ 105.458569][ T6277] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.478451][ T6277] RSP: 002b:00007f3dd64d8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.486883][ T6277] RAX: ffffffffffffffda RBX: 00007f3dd64d8ee0 RCX: 00007f3dd559c14a [ 105.494867][ T6277] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f3dd64d8ea0 [ 105.502852][ T6277] RBP: 0000200000000400 R08: 00007f3dd64d8ee0 R09: 0000000000210401 [ 105.511622][ T6277] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 105.519605][ T6277] R13: 00007f3dd64d8ea0 R14: 00000000000125d8 R15: 00002000000000c0 [ 105.527602][ T6277] [ 105.531679][ T6277] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 105.589471][ T6266] BTRFS info (device loop3): enabling ssd optimizations [ 105.598622][ T6266] BTRFS info (device loop3): rebuilding free space tree [ 105.640439][ T6266] BTRFS info (device loop3): checking UUID tree [ 105.712447][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 105.911608][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.443924][ T6299] loop0: detected capacity change from 0 to 65536 [ 106.558837][ T6299] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 106.646308][ T6299] XFS (loop0): Ending clean mount [ 106.654248][ T6299] XFS (loop0): Quotacheck needed: Please wait. [ 106.780474][ T6299] XFS (loop0): Quotacheck: Done. [ 106.844122][ T6311] loop3: detected capacity change from 0 to 2048 [ 106.861177][ T5770] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 106.925495][ T6311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.062638][ T6311] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 107.257759][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.653736][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 107.876655][ T6320] loop3: detected capacity change from 0 to 32768 [ 108.708502][ T5779] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.983219][ T6335] loop1: detected capacity change from 0 to 32768 [ 109.014833][ T6335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.133 (6335) [ 109.436237][ T6337] loop3: detected capacity change from 0 to 65536 [ 109.449102][ T6335] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.462842][ T6335] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.474020][ T6335] BTRFS info (device loop1): turning on sync discard [ 109.480804][ T6335] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.490320][ T6335] BTRFS info (device loop1): use zstd compression, level 3 [ 109.497634][ T6335] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.508343][ T6335] BTRFS info (device loop1): trying to use backup root at mount time [ 109.516512][ T6335] BTRFS info (device loop1): enabling auto defrag [ 109.522972][ T6335] BTRFS info (device loop1): using free space tree [ 109.541335][ T5779] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.572574][ T5779] usb 1-1: config 0 has no interfaces? [ 109.579467][ T6337] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.598801][ T5779] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 109.608654][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.622453][ T11] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 109.630585][ T5779] usb 1-1: config 0 descriptor?? [ 109.673404][ T6335] BTRFS error (device loop1): failed to load root extent [ 109.680690][ T6335] BTRFS warning (device loop1): try to load backup roots slot 1 [ 109.691207][ T2982] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 109.691351][ T6337] XFS (loop3): Ending clean mount [ 109.727021][ T6335] BTRFS warning (device loop1): couldn't read tree root [ 109.734283][ T6335] BTRFS warning (device loop1): try to load backup roots slot 2 [ 109.743316][ T6337] XFS (loop3): Quotacheck needed: Please wait. [ 109.745202][ T12] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 109.800239][ T6337] XFS (loop3): Quotacheck: Done. [ 109.802347][ T6335] BTRFS warning (device loop1): couldn't read tree root [ 109.814245][ T6335] BTRFS warning (device loop1): try to load backup roots slot 3 [ 109.879751][ T6335] BTRFS info (device loop1): enabling ssd optimizations [ 109.891330][ T6335] BTRFS info (device loop1): rebuilding free space tree [ 109.912589][ T6335] BTRFS info (device loop1): checking UUID tree [ 109.979597][ T5773] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.986195][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.449962][ T6366] loop1: detected capacity change from 0 to 2048 [ 110.534170][ T6366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.573542][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 110.585258][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.602814][ T6366] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 110.650449][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.727524][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.886056][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 111.317141][ T6385] loop1: detected capacity change from 0 to 32768 [ 111.326728][ T6385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.143 (6385) [ 111.350508][ T6385] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.360966][ T6385] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 111.369786][ T6385] BTRFS info (device loop1): turning on sync discard [ 111.376683][ T6385] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.387423][ T6385] BTRFS info (device loop1): use zstd compression, level 3 [ 111.394689][ T6385] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 111.405488][ T6385] BTRFS info (device loop1): trying to use backup root at mount time [ 111.413694][ T6385] BTRFS info (device loop1): enabling auto defrag [ 111.420378][ T6385] BTRFS info (device loop1): using free space tree [ 111.450246][ T992] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 111.469206][ T6385] BTRFS error (device loop1): failed to load root extent [ 111.476412][ T6385] BTRFS warning (device loop1): try to load backup roots slot 1 [ 111.484483][ T208] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 111.508430][ T6385] BTRFS warning (device loop1): couldn't read tree root [ 111.515461][ T6385] BTRFS warning (device loop1): try to load backup roots slot 2 [ 111.524912][ T992] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 111.540805][ T6385] BTRFS warning (device loop1): couldn't read tree root [ 111.547975][ T6385] BTRFS warning (device loop1): try to load backup roots slot 3 [ 111.576150][ T6385] BTRFS info (device loop1): enabling ssd optimizations [ 111.583919][ T6385] BTRFS info (device loop1): rebuilding free space tree [ 111.605730][ T6385] BTRFS info (device loop1): checking UUID tree [ 111.699546][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.750044][ T5820] usb 1-1: USB disconnect, device number 2 [ 111.890877][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 112.386826][ T6414] loop3: detected capacity change from 0 to 2048 [ 112.477120][ T6414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.593052][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 112.623020][ T6414] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 112.811194][ T6413] loop1: detected capacity change from 0 to 65536 [ 112.838174][ T6413] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 112.855209][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.893150][ T6413] XFS (loop1): Ending clean mount [ 112.900344][ T6413] XFS (loop1): Quotacheck needed: Please wait. [ 112.944368][ T6413] XFS (loop1): Quotacheck: Done. [ 113.052915][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 113.206292][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.392300][ T6437] autofs4:pid:6437:autofs_fill_super: called with bogus options [ 113.593870][ T6435] loop1: detected capacity change from 0 to 32768 [ 113.610262][ T6435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.153 (6435) [ 113.625919][ T6435] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.636211][ T6435] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 113.645690][ T6435] BTRFS info (device loop1): turning on sync discard [ 113.652703][ T6435] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.662386][ T6435] BTRFS info (device loop1): use zstd compression, level 3 [ 113.669879][ T6435] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 113.680620][ T6435] BTRFS info (device loop1): trying to use backup root at mount time [ 113.688850][ T6435] BTRFS info (device loop1): enabling auto defrag [ 113.695319][ T6435] BTRFS info (device loop1): using free space tree [ 113.698754][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 113.733394][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 113.737432][ T5858] usb 1-1: config 0 has an invalid interface number: 127 but max is 1 [ 113.755647][ T6435] BTRFS error (device loop1): failed to load root extent [ 113.762921][ T6435] BTRFS warning (device loop1): try to load backup roots slot 1 [ 113.778552][ T992] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 113.785851][ T5858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.830967][ T5858] usb 1-1: config 0 has no interface number 1 [ 113.837717][ T6435] BTRFS warning (device loop1): couldn't read tree root [ 113.845529][ T6435] BTRFS warning (device loop1): try to load backup roots slot 2 [ 113.855058][ T992] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 113.875947][ T5858] usb 1-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.889778][ T6435] BTRFS warning (device loop1): couldn't read tree root [ 113.897017][ T6435] BTRFS warning (device loop1): try to load backup roots slot 3 [ 113.922284][ T5858] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 113.949489][ T6435] BTRFS info (device loop1): enabling ssd optimizations [ 113.958426][ T6435] BTRFS info (device loop1): rebuilding free space tree [ 113.978872][ T6435] BTRFS info (device loop1): checking UUID tree [ 113.992707][ T5858] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 114.002129][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.010769][ T5858] usb 1-1: Product: syz [ 114.015247][ T5858] usb 1-1: Manufacturer: syz [ 114.020476][ T5858] usb 1-1: SerialNumber: syz [ 114.055776][ T5858] usb 1-1: config 0 descriptor?? [ 114.068971][ T5858] usb-storage 1-1:0.127: USB Mass Storage device detected [ 114.098232][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.103393][ T5858] usb-storage 1-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 114.207153][ T5858] usb-storage 1-1:0.0: USB Mass Storage device detected [ 114.257260][ T5858] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 114.315270][ T6309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (6309) [ 114.375767][ T5858] usb 1-1: USB disconnect, device number 3 [ 114.701576][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 115.246024][ T6482] autofs4:pid:6482:autofs_fill_super: called with bogus options [ 115.341440][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 115.717315][ T6479] loop0: detected capacity change from 0 to 65536 [ 115.924866][ T6487] loop1: detected capacity change from 0 to 32768 [ 115.930476][ T6479] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 116.013675][ T6487] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.040022][ T6479] XFS (loop0): Ending clean mount [ 116.054369][ T6479] XFS (loop0): Quotacheck needed: Please wait. [ 116.128380][ T6479] XFS (loop0): Quotacheck: Done. [ 116.208523][ T6487] XFS (loop1): Ending clean mount [ 116.219021][ T6487] XFS (loop1): Quotacheck needed: Please wait. [ 116.280598][ T6487] XFS (loop1): Quotacheck: Done. [ 116.323848][ T5770] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 116.342962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.595001][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.992049][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 117.362400][ T6520] autofs4:pid:6520:autofs_fill_super: called with bogus options [ 118.268449][ T6527] loop3: detected capacity change from 0 to 65536 [ 118.270129][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 118.334165][ T6527] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 118.401172][ T6527] XFS (loop3): Ending clean mount [ 118.430708][ T6527] XFS (loop3): Quotacheck needed: Please wait. [ 118.496848][ T6527] XFS (loop3): Quotacheck: Done. [ 118.547976][ T5773] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 119.106226][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.303680][ T5858] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 119.312250][ T5858] usb 2-1: config 0 has no interface number 1 [ 119.325907][ T5858] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.359841][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 119.390931][ T5858] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 119.405548][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.421406][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.431702][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.440083][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.447752][ T5858] usb 2-1: Product: syz [ 119.452309][ T5858] usb 2-1: Manufacturer: syz [ 119.457719][ T5858] usb 2-1: SerialNumber: syz [ 119.463928][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.473308][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 119.494219][ T5858] usb 2-1: config 0 descriptor?? [ 119.499417][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.511087][ T5858] usb-storage 2-1:0.127: USB Mass Storage device detected [ 119.532356][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.546935][ T5858] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 119.638027][ T5858] usb-storage 2-1:0.0: USB Mass Storage device detected [ 119.666830][ T5858] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 119.725945][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 119.741222][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 119.751401][ T5858] usb 2-1: USB disconnect, device number 3 [ 119.759952][ T9] usb 1-1: config 0 has no interface number 0 [ 119.780330][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 119.805716][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 119.820341][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.854363][ T9] usb 1-1: Product: syz [ 119.861569][ T9] usb 1-1: Manufacturer: syz [ 119.872982][ T9] usb 1-1: SerialNumber: syz [ 119.878483][ T6564] chnl_net:caif_netlink_parms(): no params data found [ 119.896684][ T9] usb 1-1: config 0 descriptor?? [ 119.902722][ T6563] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.009112][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.016732][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.024975][ T6564] bridge_slave_0: entered allmulticast mode [ 120.033290][ T6564] bridge_slave_0: entered promiscuous mode [ 120.044211][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.051939][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.059686][ T6564] bridge_slave_1: entered allmulticast mode [ 120.068088][ T6564] bridge_slave_1: entered promiscuous mode [ 120.119696][ T6564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.135540][ T6564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.145620][ T6563] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.187904][ T6564] team0: Port device team_slave_0 added [ 120.204670][ T6564] team0: Port device team_slave_1 added [ 120.250083][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.257363][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.283574][ T6564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.353966][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.373897][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.428449][ T6564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.434513][ T6561] loop3: detected capacity change from 0 to 65536 [ 120.453676][ T6561] XFS: attr2 mount option is deprecated. [ 120.533805][ T6561] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.573254][ T6564] hsr_slave_0: entered promiscuous mode [ 120.608576][ T6564] hsr_slave_1: entered promiscuous mode [ 120.622425][ T6561] XFS (loop3): Ending clean mount [ 120.630650][ T6564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.633197][ T6561] XFS (loop3): Quotacheck needed: Please wait. [ 120.665914][ T6564] Cannot create hsr debugfs directory [ 120.715276][ T6587] loop1: detected capacity change from 0 to 1024 [ 120.730763][ T6561] XFS (loop3): Quotacheck: Done. [ 120.770464][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 120.789456][ T6587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.822291][ T6561] overlayfs: missing 'workdir' [ 120.911528][ T5773] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 120.960681][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.175321][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 121.237416][ T9] asix: probe of 1-1:0.188 failed with error -32 [ 121.317685][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 121.443608][ T6564] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.486461][ T6564] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.499014][ T6564] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.534457][ T6564] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.586241][ T5776] Bluetooth: hci4: command tx timeout [ 121.815138][ T6564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.843919][ T6564] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.857622][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.864816][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.880605][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.887755][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.130568][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.283920][ T27] usb 1-1: USB disconnect, device number 4 [ 122.941196][ T6564] veth0_vlan: entered promiscuous mode [ 122.989856][ T6564] veth1_vlan: entered promiscuous mode [ 123.081258][ T6564] veth0_macvtap: entered promiscuous mode [ 123.092655][ T6564] veth1_macvtap: entered promiscuous mode [ 123.130465][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.165994][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.176624][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.188503][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.198491][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.209094][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.222746][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.235670][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.251250][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.278862][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.288449][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.292761][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.312613][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.324505][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.340532][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.353653][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.371116][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.382912][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.400414][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.414519][ T6564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.423517][ T6564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.465980][ T6564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.485934][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 123.489176][ T6564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.494218][ T27] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 123.537228][ T27] usb 2-1: config 0 has no interface number 0 [ 123.566332][ T27] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 123.611763][ T27] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 123.642147][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.653318][ T27] usb 2-1: Product: syz [ 123.658106][ T27] usb 2-1: Manufacturer: syz [ 123.662752][ T27] usb 2-1: SerialNumber: syz [ 123.676203][ T5776] Bluetooth: hci4: command tx timeout [ 123.698487][ T6647] loop3: detected capacity change from 0 to 1024 [ 123.700023][ T27] usb 2-1: config 0 descriptor?? [ 123.718726][ T6645] loop0: detected capacity change from 0 to 32768 [ 123.727758][ T6645] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 123.743844][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.753105][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.760292][ T6641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.799199][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.906094][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.947761][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.998945][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.035019][ T6641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.651458][ T6656] loop0: detected capacity change from 0 to 32768 [ 124.707646][ T6656] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.830827][ T6656] XFS (loop0): Ending clean mount [ 124.840212][ T6656] XFS (loop0): Quotacheck needed: Please wait. [ 124.886218][ T27] asix 2-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 124.908371][ T6656] XFS (loop0): Quotacheck: Done. [ 125.284014][ T27] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 125.360779][ T27] asix: probe of 2-1:0.188 failed with error -32 [ 125.452544][ T24] block nbd0: Possible stuck request ffff888022170000: control (read@0,1024B). Runtime 30 seconds [ 125.469834][ T24] block nbd0: Possible stuck request ffff888022170200: control (read@1024,3072B). Runtime 30 seconds [ 125.484545][ T24] block nbd0: Dead connection, failed to find a fallback [ 125.493165][ T24] block nbd0: shutting down sockets [ 125.503987][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 125.513957][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 125.523388][ T24] Buffer I/O error on dev nbd0, logical block 2, async page read [ 125.531989][ T24] Buffer I/O error on dev nbd0, logical block 3, async page read [ 125.540341][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.549693][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.569230][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.579515][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.589738][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 125.599124][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 125.607281][ T24] Buffer I/O error on dev nbd0, logical block 2, async page read [ 125.615228][ T24] Buffer I/O error on dev nbd0, logical block 3, async page read [ 125.626861][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.637401][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.646275][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 125.655503][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 125.666176][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.681375][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.692361][ T24] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 125.702419][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.746570][ T5776] Bluetooth: hci4: command tx timeout [ 125.779389][ T5786] ldm_validate_partition_table(): Disk read failed. [ 125.788634][ T5786] Dev nbd0: unable to read RDB block 0 [ 125.798940][ T5786] nbd0: unable to read partition table [ 125.818589][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.819453][ T5786] ldm_validate_partition_table(): Disk read failed. [ 125.837448][ T5786] Dev nbd0: unable to read RDB block 0 [ 125.845099][ T5786] nbd0: unable to read partition table [ 126.345741][ T5779] usb 2-1: USB disconnect, device number 4 [ 126.538753][ T6687] loop1: detected capacity change from 0 to 1024 [ 126.609007][ T6687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.939694][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.651053][ T6693] loop0: detected capacity change from 0 to 32768 [ 127.676370][ T6693] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 127.826045][ T5776] Bluetooth: hci4: command tx timeout [ 127.901377][ T5786] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 128.106042][ T5779] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.308412][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 128.335258][ T6717] loop1: detected capacity change from 0 to 1024 [ 128.337585][ T5779] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 128.368001][ T5779] usb 1-1: config 0 has no interface number 0 [ 128.384493][ T5779] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 128.428966][ T5779] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 128.431684][ T6717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.448824][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.481900][ T5779] usb 1-1: Product: syz [ 128.492022][ T5779] usb 1-1: Manufacturer: syz [ 128.502129][ T5779] usb 1-1: SerialNumber: syz [ 128.518699][ T5779] usb 1-1: config 0 descriptor?? [ 128.535193][ T6709] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.639357][ T24] block nbd1: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 30 seconds [ 128.650306][ T24] block nbd1: Possible stuck request ffff8880221a0200: control (read@1024,1024B). Runtime 30 seconds [ 128.662554][ T24] block nbd1: Possible stuck request ffff8880221a0400: control (read@2048,1024B). Runtime 30 seconds [ 128.675205][ T24] block nbd1: Possible stuck request ffff8880221a0600: control (read@3072,1024B). Runtime 30 seconds [ 128.688300][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.809650][ T6709] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.749272][ T6730] loop1: detected capacity change from 0 to 32768 [ 130.055607][ T6732] ceph: No mds server is up or the cluster is laggy [ 130.063171][ T27] libceph: connect (1)[c::]:6789 error -101 [ 130.115299][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 130.370412][ T6730] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.382219][ T6730] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 130.391092][ T6730] BTRFS info (device loop1): turning on sync discard [ 130.397917][ T6730] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 130.407436][ T6730] BTRFS info (device loop1): use zstd compression, level 3 [ 130.414735][ T6730] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 130.425682][ T6730] BTRFS info (device loop1): trying to use backup root at mount time [ 130.435470][ T6730] BTRFS info (device loop1): enabling auto defrag [ 130.442002][ T6730] BTRFS info (device loop1): using free space tree [ 130.449094][ T5779] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 130.463261][ T5779] asix: probe of 1-1:0.188 failed with error -32 [ 130.546127][ T96] block nbd2: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 30 seconds [ 130.576460][ T208] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 130.602607][ T6730] BTRFS error (device loop1): failed to load root extent [ 130.609920][ T6730] BTRFS warning (device loop1): try to load backup roots slot 1 [ 130.620515][ T2970] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 130.663109][ T6730] BTRFS warning (device loop1): couldn't read tree root [ 130.671837][ T6730] BTRFS warning (device loop1): try to load backup roots slot 2 [ 130.680145][ T2982] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 130.715287][ T6730] BTRFS warning (device loop1): couldn't read tree root [ 130.722373][ T6730] BTRFS warning (device loop1): try to load backup roots slot 3 [ 130.775927][ T6730] BTRFS info (device loop1): enabling ssd optimizations [ 130.785399][ T6730] BTRFS info (device loop1): rebuilding free space tree [ 130.806720][ T6730] BTRFS info (device loop1): checking UUID tree [ 130.945610][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.569399][ T6764] loop4: detected capacity change from 0 to 1024 [ 131.634133][ T6764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.744759][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 131.762039][ T6564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.825720][ T27] usb 1-1: USB disconnect, device number 5 [ 132.300575][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.246'. [ 133.096396][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 133.116901][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.123831][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.892857][ T28] audit: type=1326 audit(1769938930.864:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67da79aeb9 code=0x0 [ 134.035388][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.258'. [ 134.658209][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 134.829333][ T6829] Zero length message leads to an empty skb [ 135.315220][ T6834] loop4: detected capacity change from 0 to 32768 [ 135.358161][ T6834] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.520032][ T6834] XFS (loop4): Ending clean mount [ 135.528483][ T6834] XFS (loop4): Quotacheck needed: Please wait. [ 135.567580][ T6834] XFS (loop4): Quotacheck: Done. [ 136.399787][ T6564] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.902870][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 136.929401][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 137.189675][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 137.206108][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 137.285417][ T6853] ceph: No mds server is up or the cluster is laggy [ 137.635617][ T6836] loop1: detected capacity change from 0 to 65536 [ 137.647161][ T6836] XFS: attr2 mount option is deprecated. [ 137.778843][ T6836] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 137.884027][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 138.048217][ T6836] XFS (loop1): Ending clean mount [ 138.082623][ T6836] XFS (loop1): Quotacheck needed: Please wait. [ 138.164498][ T6873] loop0: detected capacity change from 0 to 1024 [ 138.175960][ T6836] XFS (loop1): Quotacheck: Done. [ 138.303945][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 138.921757][ T6879] loop3: detected capacity change from 0 to 1024 [ 138.999593][ T6879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.222064][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.555053][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 139.679242][ T6898] loop1: detected capacity change from 0 to 1024 [ 140.479070][ T6909] loop0: detected capacity change from 0 to 1024 [ 140.525706][ T6909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.738669][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.755041][ T6900] loop1: detected capacity change from 0 to 32768 [ 140.993934][ T6895] loop4: detected capacity change from 0 to 65536 [ 141.004747][ T6895] XFS: attr2 mount option is deprecated. [ 141.117176][ T6895] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 141.273669][ T6895] XFS (loop4): Ending clean mount [ 141.304880][ T6928] loop3: detected capacity change from 0 to 1024 [ 141.313789][ T6895] XFS (loop4): Quotacheck needed: Please wait. [ 141.422617][ T6895] XFS (loop4): Quotacheck: Done. [ 142.391226][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 142.578487][ T6564] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 143.190597][ T6955] loop3: detected capacity change from 0 to 1024 [ 143.314889][ T6955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.456223][ T6955] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 143.542326][ T6955] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 143.607851][ T6955] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.607851][ T6955] [ 143.645873][ T6955] EXT4-fs (loop3): Total free blocks count 0 [ 143.666911][ T6955] EXT4-fs (loop3): Free/Dirty block details [ 143.672988][ T6955] EXT4-fs (loop3): free_blocks=68451041280 [ 143.715936][ T6955] EXT4-fs (loop3): dirty_blocks=80 [ 143.729473][ T6955] EXT4-fs (loop3): Block reservation details [ 143.755877][ T6955] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 143.777995][ T6961] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 143.818769][ T6948] loop0: detected capacity change from 0 to 32768 [ 145.496494][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 146.100470][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.276190][ T27] usb 4-1: device descriptor read/64, error -71 [ 146.282044][ T6959] loop1: detected capacity change from 0 to 65536 [ 146.580216][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.756183][ T27] usb 4-1: device descriptor read/64, error -71 [ 146.795058][ T6988] loop1: detected capacity change from 0 to 1024 [ 146.868271][ T6988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.896497][ T27] usb usb4-port1: attempt power cycle [ 147.034051][ T6988] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 147.083271][ T6988] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 147.116289][ T6988] EXT4-fs (loop1): This should not happen!! Data will be lost [ 147.116289][ T6988] [ 147.151048][ T6988] EXT4-fs (loop1): Total free blocks count 0 [ 147.166959][ T6988] EXT4-fs (loop1): Free/Dirty block details [ 147.173035][ T6988] EXT4-fs (loop1): free_blocks=68451041280 [ 147.187763][ T6988] EXT4-fs (loop1): dirty_blocks=80 [ 147.201727][ T6988] EXT4-fs (loop1): Block reservation details [ 147.228528][ T6988] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 147.256138][ T6994] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 147.305915][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.367872][ T27] usb 4-1: device descriptor read/8, error -71 [ 147.656381][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.707213][ T27] usb 4-1: device descriptor read/8, error -71 [ 147.847417][ T27] usb usb4-port1: unable to enumerate USB device [ 148.357891][ T6993] loop4: detected capacity change from 0 to 32768 [ 150.328434][ T7021] loop3: detected capacity change from 0 to 1024 [ 150.384991][ T7021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.414802][ T7021] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 150.432006][ T7021] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 150.445381][ T7021] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.445381][ T7021] [ 150.455921][ T7021] EXT4-fs (loop3): Total free blocks count 0 [ 150.462008][ T7021] EXT4-fs (loop3): Free/Dirty block details [ 150.469980][ T7021] EXT4-fs (loop3): free_blocks=68451041280 [ 150.476099][ T7021] EXT4-fs (loop3): dirty_blocks=80 [ 150.493084][ T7021] EXT4-fs (loop3): Block reservation details [ 150.527409][ T7021] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 150.540981][ T7026] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 150.830999][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 150.939567][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.327'. [ 151.092731][ T7006] loop1: detected capacity change from 0 to 65536 [ 151.107260][ T7006] XFS: attr2 mount option is deprecated. [ 151.166100][ T7006] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.237127][ T7006] XFS (loop1): Ending clean mount [ 151.280618][ T7006] XFS (loop1): Quotacheck needed: Please wait. [ 151.360930][ T7006] XFS (loop1): Quotacheck: Done. [ 151.555919][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 152.251208][ T28] audit: type=1326 audit(1769938949.224:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.4.334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe9db9aeb9 code=0x0 [ 152.566160][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 152.572232][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 152.821675][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 152.843843][ T27] libceph: connect (1)[c::]:6789 error -101 [ 152.850127][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 153.222400][ T7063] ceph: No mds server is up or the cluster is laggy [ 153.575764][ T7090] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 153.575764][ T7090] The task syz.0.342 (7090) triggered the difference, watch for misbehavior. [ 153.850911][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 154.305355][ T7108] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 154.375259][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 154.384402][ T7104] kvm: user requested TSC rate below hardware speed [ 154.454922][ T7112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.681193][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.355'. [ 155.414220][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.367'. [ 155.666197][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.878745][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.891239][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 155.902689][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.920693][ T23] usb 1-1: config 0 descriptor?? [ 155.943057][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 156.156934][ T23] pwc: send_video_command error -71 [ 156.176755][ T23] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 156.190522][ T23] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 156.208907][ T23] usb 1-1: USB disconnect, device number 6 [ 156.544141][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 156.564054][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 156.771001][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 156.877419][ T5779] libceph: connect (1)[c::]:6789 error -101 [ 156.898007][ T5779] libceph: mon0 (1)[c::]:6789 connect error [ 157.063831][ T7171] ceph: No mds server is up or the cluster is laggy [ 157.966784][ T7215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 158.106071][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.308434][ T23] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 158.318099][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.339050][ T23] usb 1-1: config 0 descriptor?? [ 158.567929][ T23] hackrf 1-1:0.0: usb_control_msg() failed -32 request 0e [ 158.580411][ T23] hackrf 1-1:0.0: Could not detect board [ 158.588767][ T23] hackrf: probe of 1-1:0.0 failed with error -32 [ 158.717893][ T24] block nbd1: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 60 seconds [ 158.731052][ T24] block nbd1: Possible stuck request ffff8880221a0200: control (read@1024,1024B). Runtime 60 seconds [ 158.742498][ T24] block nbd1: Possible stuck request ffff8880221a0400: control (read@2048,1024B). Runtime 60 seconds [ 158.753671][ T24] block nbd1: Possible stuck request ffff8880221a0600: control (read@3072,1024B). Runtime 60 seconds [ 158.930459][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.950230][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.130101][ T7237] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 159.395357][ T7239] kvm: user requested TSC rate below hardware speed [ 159.596323][ T7248] netlink: 64 bytes leftover after parsing attributes in process `syz.4.399'. [ 159.616046][ T7248] block nbd0: reconnected socket [ 159.647602][ T5776] block nbd0: Receive control failed (result -32) [ 160.218769][ T7254] loop3: detected capacity change from 0 to 32768 [ 160.300548][ T7254] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.469483][ T7254] XFS (loop3): Ending clean mount [ 160.510064][ T7254] XFS (loop3): Quotacheck needed: Please wait. [ 160.609545][ T7254] XFS (loop3): Quotacheck: Done. [ 160.626961][ T96] block nbd2: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 60 seconds [ 160.893475][ T5860] usb 1-1: USB disconnect, device number 7 [ 162.663315][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.652404][ T7335] loop0: detected capacity change from 0 to 32768 [ 164.688487][ T7335] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.863131][ T28] audit: type=1326 audit(1769938961.834:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.4.446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe9db9aeb9 code=0x0 [ 164.949726][ T7335] XFS (loop0): Ending clean mount [ 164.993464][ T7335] XFS (loop0): Quotacheck needed: Please wait. [ 165.097512][ T7335] XFS (loop0): Quotacheck: Done. [ 165.586063][ T5858] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.791395][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.804807][ T5858] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.814584][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.853661][ T5858] usb 2-1: config 0 descriptor?? [ 165.881676][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 166.092006][ T5858] pwc: send_video_command error -71 [ 166.111804][ T5858] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 166.133720][ T5858] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 166.183163][ T5858] usb 2-1: USB disconnect, device number 5 [ 166.688807][ T5858] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.789375][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.922585][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.947385][ T5858] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.974428][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.005347][ T5858] usb 2-1: config 0 descriptor?? [ 167.030834][ T5858] pwc: Askey VC010 type 2 USB webcam detected. [ 167.418201][ T5858] pwc: recv_control_msg error -32 req 02 val 2b00 [ 167.434781][ T5858] pwc: recv_control_msg error -32 req 02 val 2700 [ 167.447549][ T5858] pwc: recv_control_msg error -32 req 02 val 2c00 [ 167.465541][ T28] audit: type=1326 audit(1769938964.434:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3dd559aeb9 code=0x0 [ 167.469774][ T5858] pwc: recv_control_msg error -32 req 04 val 1000 [ 167.513380][ T5858] pwc: recv_control_msg error -32 req 04 val 1300 [ 167.524857][ T5858] pwc: recv_control_msg error -32 req 04 val 1400 [ 167.547616][ T5858] pwc: recv_control_msg error -32 req 02 val 2000 [ 167.560848][ T5858] pwc: recv_control_msg error -71 req 02 val 2100 [ 167.577054][ T5858] pwc: recv_control_msg error -71 req 04 val 1500 [ 167.596420][ T5858] pwc: recv_control_msg error -71 req 02 val 2500 [ 167.612621][ T5858] pwc: recv_control_msg error -71 req 02 val 2400 [ 167.635236][ T5858] pwc: recv_control_msg error -71 req 02 val 2600 [ 167.644608][ T5858] pwc: recv_control_msg error -71 req 02 val 2900 [ 167.659688][ T5858] pwc: recv_control_msg error -71 req 02 val 2800 [ 167.675277][ T5858] pwc: recv_control_msg error -71 req 04 val 1100 [ 167.688642][ T5858] pwc: recv_control_msg error -71 req 04 val 1200 [ 167.711504][ T5858] pwc: Registered as video103. [ 167.727726][ T5858] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 167.771502][ T5858] usb 2-1: USB disconnect, device number 6 [ 168.344836][ T7429] loop4: detected capacity change from 0 to 32768 [ 169.570649][ T7462] loop4: detected capacity change from 0 to 32768 [ 169.851144][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 169.873058][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 170.157313][ T23] libceph: connect (1)[c::]:6789 error -101 [ 170.180511][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 170.400151][ T7473] ceph: No mds server is up or the cluster is laggy [ 171.276960][ T5860] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.475991][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 171.492278][ T5860] usb 1-1: no configurations [ 171.504107][ T5860] usb 1-1: can't read configurations, error -22 [ 171.691775][ T5860] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 171.913912][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 171.926869][ T5860] usb 1-1: no configurations [ 171.931537][ T5860] usb 1-1: can't read configurations, error -22 [ 171.983240][ T5860] usb usb1-port1: attempt power cycle [ 172.285897][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.414209][ T5860] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.469719][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 172.476102][ T5860] usb 1-1: no configurations [ 172.480748][ T5860] usb 1-1: can't read configurations, error -22 [ 172.498099][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.515876][ T9] usb 4-1: config 0 has no interfaces? [ 172.532239][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.542152][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.559671][ T9] usb 4-1: config 0 descriptor?? [ 172.636002][ T5860] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.686792][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 172.696088][ T5860] usb 1-1: no configurations [ 172.700739][ T5860] usb 1-1: can't read configurations, error -22 [ 172.723786][ T5860] usb usb1-port1: unable to enumerate USB device [ 175.113678][ T5858] usb 4-1: USB disconnect, device number 7 [ 175.856117][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 176.061129][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 176.072124][ T5858] usb 5-1: no configurations [ 176.091507][ T5858] usb 5-1: can't read configurations, error -22 [ 176.256144][ T5858] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.486027][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 176.501506][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 176.518109][ T5858] usb 5-1: no configurations [ 176.531063][ T5858] usb 5-1: can't read configurations, error -22 [ 176.548691][ T5858] usb usb5-port1: attempt power cycle [ 176.704452][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.725883][ T23] usb 1-1: config 0 has no interfaces? [ 176.731454][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 176.762567][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.780825][ T23] usb 1-1: config 0 descriptor?? [ 176.975965][ T5858] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 177.016933][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 177.023028][ T5858] usb 5-1: no configurations [ 177.033825][ T5858] usb 5-1: can't read configurations, error -22 [ 177.196166][ T5858] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.238114][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 177.245129][ T5858] usb 5-1: no configurations [ 177.250297][ T5858] usb 5-1: can't read configurations, error -22 [ 177.258301][ T5858] usb usb5-port1: unable to enumerate USB device [ 178.000725][ T7650] nbd3: detected capacity change from 0 to 127 [ 178.010318][ T5776] block nbd3: Receive control failed (result -104) [ 178.835078][ T7671] nbd4: detected capacity change from 0 to 127 [ 178.856381][ T5776] block nbd4: Receive control failed (result -32) [ 178.899470][ T24] block nbd4: Dead connection, failed to find a fallback [ 178.907168][ T24] block nbd4: shutting down sockets [ 178.912905][ T24] blk_print_req_error: 126 callbacks suppressed [ 178.912919][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.928467][ T24] buffer_io_error: 138 callbacks suppressed [ 178.928482][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 178.942673][ T24] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.952404][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 178.986241][ T24] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 178.995598][ T24] Buffer I/O error on dev nbd4, logical block 2, async page read [ 179.003811][ T24] Buffer I/O error on dev nbd4, logical block 3, async page read [ 179.012614][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 179.021808][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 179.030124][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 179.038129][ T24] Buffer I/O error on dev nbd4, logical block 2, async page read [ 179.046071][ T24] Buffer I/O error on dev nbd4, logical block 3, async page read [ 179.054181][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 179.063812][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 179.071641][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 179.080656][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 179.090159][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 179.099909][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 179.110210][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 179.120151][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.129586][ T6685] ldm_validate_partition_table(): Disk read failed. [ 179.157042][ T6685] Dev nbd4: unable to read RDB block 0 [ 179.173545][ T6685] nbd4: unable to read partition table [ 179.222296][ T6685] ldm_validate_partition_table(): Disk read failed. [ 179.232203][ T6685] Dev nbd4: unable to read RDB block 0 [ 179.244601][ T6685] nbd4: unable to read partition table [ 179.374401][ T23] usb 1-1: USB disconnect, device number 12 [ 180.139818][ T7709] nbd5: detected capacity change from 0 to 127 [ 180.159587][ T5776] block nbd5: Receive control failed (result -32) [ 180.167387][ T96] block nbd5: Send control failed (result -32) [ 180.174894][ T96] block nbd5: Request send failed, requeueing [ 180.184616][ T6230] block nbd5: Dead connection, failed to find a fallback [ 180.191771][ T6230] block nbd5: shutting down sockets [ 180.207214][ T6685] ldm_validate_partition_table(): Disk read failed. [ 180.225285][ T6685] Dev nbd5: unable to read RDB block 0 [ 180.236823][ T6685] nbd5: unable to read partition table [ 180.258204][ T6685] ldm_validate_partition_table(): Disk read failed. [ 180.351568][ T6685] Dev nbd5: unable to read RDB block 0 [ 180.378508][ T6685] nbd5: unable to read partition table [ 181.675205][ T7735] netlink: 88 bytes leftover after parsing attributes in process `syz.1.580'. [ 181.967380][ T7744] nbd6: detected capacity change from 0 to 127 [ 181.987296][ T5776] block nbd6: Receive control failed (result -32) [ 182.007262][ T24] block nbd6: Dead connection, failed to find a fallback [ 182.014469][ T24] block nbd6: shutting down sockets [ 182.022493][ T6685] ldm_validate_partition_table(): Disk read failed. [ 182.035210][ T6685] Dev nbd6: unable to read RDB block 0 [ 182.043859][ T6685] nbd6: unable to read partition table [ 182.069675][ T6685] ldm_validate_partition_table(): Disk read failed. [ 182.078829][ T6685] Dev nbd6: unable to read RDB block 0 [ 182.086866][ T6685] nbd6: unable to read partition table [ 183.691385][ T7779] nbd7: detected capacity change from 0 to 127 [ 183.707780][ T5776] block nbd7: Receive control failed (result -32) [ 183.744044][ T6230] block nbd7: Dead connection, failed to find a fallback [ 183.753726][ T6230] block nbd7: shutting down sockets [ 183.761765][ T28] audit: type=1326 audit(1769938980.734:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.1.595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0259aeb9 code=0x0 [ 183.769856][ T6685] ldm_validate_partition_table(): Disk read failed. [ 183.798564][ T6685] Dev nbd7: unable to read RDB block 0 [ 183.806445][ T6685] nbd7: unable to read partition table [ 183.820842][ T6685] ldm_validate_partition_table(): Disk read failed. [ 183.829534][ T6685] Dev nbd7: unable to read RDB block 0 [ 183.837500][ T6685] nbd7: unable to read partition table [ 185.688859][ T7814] nbd8: detected capacity change from 0 to 127 [ 185.696848][ T5776] block nbd8: Receive control failed (result -32) [ 185.712490][ T6230] block nbd8: Dead connection, failed to find a fallback [ 185.719843][ T6230] block nbd8: shutting down sockets [ 185.725082][ T6230] blk_print_req_error: 458 callbacks suppressed [ 185.725095][ T6230] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 185.742577][ T6230] buffer_io_error: 582 callbacks suppressed [ 185.742592][ T6230] Buffer I/O error on dev nbd8, logical block 0, async page read [ 185.757667][ T6230] Buffer I/O error on dev nbd8, logical block 1, async page read [ 185.765485][ T6230] Buffer I/O error on dev nbd8, logical block 2, async page read [ 185.774138][ T6230] Buffer I/O error on dev nbd8, logical block 3, async page read [ 185.782527][ T6230] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.792009][ T6230] Buffer I/O error on dev nbd8, logical block 0, async page read [ 185.799910][ T6230] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 185.809427][ T6230] Buffer I/O error on dev nbd8, logical block 1, async page read [ 185.817318][ T6230] Buffer I/O error on dev nbd8, logical block 2, async page read [ 185.825211][ T6230] Buffer I/O error on dev nbd8, logical block 3, async page read [ 185.834789][ T6230] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.843927][ T6230] Buffer I/O error on dev nbd8, logical block 0, async page read [ 185.852071][ T6230] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 185.861252][ T5779] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.869245][ T6230] Buffer I/O error on dev nbd8, logical block 1, async page read [ 185.877721][ T6230] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 185.887132][ T6230] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.896622][ T6230] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 185.906045][ T6230] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.915303][ T6230] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.925675][ T6685] ldm_validate_partition_table(): Disk read failed. [ 185.936742][ T6685] Dev nbd8: unable to read RDB block 0 [ 185.944326][ T6685] nbd8: unable to read partition table [ 185.956853][ T6685] ldm_validate_partition_table(): Disk read failed. [ 185.967662][ T6685] Dev nbd8: unable to read RDB block 0 [ 185.978502][ T6685] nbd8: unable to read partition table [ 186.107976][ T5779] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 186.131509][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.152064][ T5779] usb 2-1: config 0 descriptor?? [ 186.722716][ T7824] loop4: detected capacity change from 0 to 32768 [ 187.004912][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.024616][ T5779] hackrf 2-1:0.0: usb_control_msg() failed -32 request 0f [ 187.032971][ T5779] hackrf 2-1:0.0: Could not detect board [ 187.038859][ T5779] hackrf: probe of 2-1:0.0 failed with error -32 [ 187.057617][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.458567][ T5858] usb 2-1: USB disconnect, device number 7 [ 187.629097][ T7836] nbd9: detected capacity change from 0 to 127 [ 187.664595][ T6230] block nbd9: Send control failed (result -32) [ 187.666001][ T5776] block nbd9: Receive control failed (result -104) [ 187.672778][ T6230] block nbd9: Request send failed, requeueing [ 187.686491][ T6230] block nbd9: Dead connection, failed to find a fallback [ 187.693779][ T6230] block nbd9: shutting down sockets [ 189.273874][ T24] block nbd1: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 90 seconds [ 189.285205][ T24] block nbd1: Possible stuck request ffff8880221a0200: control (read@1024,1024B). Runtime 90 seconds [ 189.299217][ T24] block nbd1: Possible stuck request ffff8880221a0400: control (read@2048,1024B). Runtime 90 seconds [ 189.310378][ T24] block nbd1: Possible stuck request ffff8880221a0600: control (read@3072,1024B). Runtime 90 seconds [ 189.400843][ T7865] nbd10: detected capacity change from 0 to 127 [ 189.431777][ T5776] block nbd10: Receive control failed (result -32) [ 189.486693][ T6230] block nbd10: Dead connection, failed to find a fallback [ 189.493969][ T6230] block nbd10: shutting down sockets [ 189.510478][ T6685] ldm_validate_partition_table(): Disk read failed. [ 189.551448][ T6685] Dev nbd10: unable to read RDB block 0 [ 189.586790][ T6685] nbd10: unable to read partition table [ 189.635987][ T5779] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.638632][ T6685] ldm_validate_partition_table(): Disk read failed. [ 189.664943][ T6685] Dev nbd10: unable to read RDB block 0 [ 189.676488][ T6685] nbd10: unable to read partition table [ 189.868169][ T5779] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.886990][ T5779] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.896591][ T5779] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 189.913602][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.957431][ T5779] usb 4-1: config 0 descriptor?? [ 191.243966][ T6230] block nbd2: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 90 seconds [ 191.293530][ T7900] nbd11: detected capacity change from 0 to 127 [ 191.328243][ T5776] block nbd11: Receive control failed (result -32) [ 191.390089][ T6230] block nbd11: Dead connection, failed to find a fallback [ 191.397342][ T6230] block nbd11: shutting down sockets [ 191.403078][ T6230] blk_print_req_error: 228 callbacks suppressed [ 191.403092][ T6230] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 191.419474][ T6230] buffer_io_error: 289 callbacks suppressed [ 191.419488][ T6230] Buffer I/O error on dev nbd11, logical block 0, async page read [ 191.433562][ T6230] Buffer I/O error on dev nbd11, logical block 1, async page read [ 191.442959][ T6230] Buffer I/O error on dev nbd11, logical block 2, async page read [ 191.451091][ T6230] Buffer I/O error on dev nbd11, logical block 3, async page read [ 191.459495][ T6230] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 191.470249][ T6230] Buffer I/O error on dev nbd11, logical block 0, async page read [ 191.478954][ T6230] Buffer I/O error on dev nbd11, logical block 1, async page read [ 191.492680][ T6230] Buffer I/O error on dev nbd11, logical block 2, async page read [ 191.500761][ T6230] Buffer I/O error on dev nbd11, logical block 3, async page read [ 191.510236][ T6230] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 191.519474][ T6230] Buffer I/O error on dev nbd11, logical block 0, async page read [ 191.527413][ T6230] Buffer I/O error on dev nbd11, logical block 1, async page read [ 191.535580][ T6230] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 191.545647][ T6230] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.563152][ T6230] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.574049][ T6230] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 191.583709][ T6230] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 191.593324][ T6230] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 191.602874][ T6230] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 191.612609][ T6685] ldm_validate_partition_table(): Disk read failed. [ 191.621963][ T6685] Dev nbd11: unable to read RDB block 0 [ 191.631403][ T6685] nbd11: unable to read partition table [ 191.644204][ T6685] ldm_validate_partition_table(): Disk read failed. [ 191.707590][ T6685] Dev nbd11: unable to read RDB block 0 [ 191.743217][ T6685] nbd11: unable to read partition table [ 192.390366][ T5779] usb 4-1: USB disconnect, device number 8 [ 193.116868][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 193.269007][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 193.433377][ T7930] ceph: No mds server is up or the cluster is laggy [ 194.554818][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570350][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.848391][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 195.189804][ T7967] ceph: No mds server is up or the cluster is laggy [ 195.215922][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 195.689518][ T7978] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 196.231280][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.670'. [ 196.942796][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.681'. [ 197.608686][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.693'. [ 198.288221][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.703'. [ 201.750383][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 201.756647][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.756679][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 201.763868][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.847410][ T8235] loop3: detected capacity change from 0 to 32768 [ 206.898161][ T8235] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.995366][ T8235] XFS (loop3): Ending clean mount [ 207.023824][ T8235] XFS (loop3): Quotacheck needed: Please wait. [ 207.081970][ T8235] XFS (loop3): Quotacheck: Done. [ 207.819484][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.637257][ T24] block nbd3: Possible stuck request ffff8880222c0000: control (read@0,1024B). Runtime 30 seconds [ 208.648420][ T24] block nbd3: Possible stuck request ffff8880222c0200: control (read@1024,1024B). Runtime 30 seconds [ 208.660356][ T24] block nbd3: Possible stuck request ffff8880222c0400: control (read@2048,1024B). Runtime 30 seconds [ 208.672078][ T24] block nbd3: Possible stuck request ffff8880222c0600: control (read@3072,1024B). Runtime 30 seconds [ 211.651592][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 212.355978][ T8361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 212.826038][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 213.016274][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 213.040071][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.080698][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.130924][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 213.167242][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.204509][ T23] usb 1-1: Product: syz [ 213.225993][ T23] usb 1-1: Manufacturer: syz [ 213.250035][ T23] usb 1-1: SerialNumber: syz [ 213.284371][ T23] usb 1-1: config 0 descriptor?? [ 215.674084][ T5820] usb 1-1: USB disconnect, device number 13 [ 217.376208][ T5860] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 217.589182][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 217.610706][ T5860] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 217.636255][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.667260][ T5860] usb 5-1: config 0 has no interface number 0 [ 217.687161][ T5860] usb 5-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 217.718472][ T5860] usb 5-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.761495][ T5860] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 217.776019][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.793829][ T5860] usb 5-1: Product: syz [ 217.803630][ T5860] usb 5-1: Manufacturer: syz [ 217.815497][ T5860] usb 5-1: SerialNumber: syz [ 217.863539][ T5860] usb 5-1: config 0 descriptor?? [ 217.888194][ T5860] asix: probe of 5-1:0.188 failed with error -22 [ 218.229450][ T6230] block nbd9: Possible stuck request ffff888022570000: control (read@0,1024B). Runtime 30 seconds [ 219.291743][ T8493] mmap: syz.3.862 (8493) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.532805][ T24] block nbd1: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 120 seconds [ 219.546148][ T24] block nbd1: Possible stuck request ffff8880221a0200: control (read@1024,1024B). Runtime 120 seconds [ 219.557346][ T24] block nbd1: Possible stuck request ffff8880221a0400: control (read@2048,1024B). Runtime 120 seconds [ 219.568666][ T24] block nbd1: Possible stuck request ffff8880221a0600: control (read@3072,1024B). Runtime 120 seconds [ 220.127442][ T5839] usb 5-1: USB disconnect, device number 6 [ 221.430823][ T6230] block nbd2: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 120 seconds [ 225.866043][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 225.902331][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.900'. [ 226.242821][ T8618] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 226.424068][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 229.948562][ T8688] syzkaller0: entered promiscuous mode [ 229.963370][ T8688] syzkaller0: entered allmulticast mode [ 238.714924][ T24] block nbd3: Possible stuck request ffff8880222c0000: control (read@0,1024B). Runtime 60 seconds [ 238.725883][ T24] block nbd3: Possible stuck request ffff8880222c0200: control (read@1024,1024B). Runtime 60 seconds [ 238.737167][ T24] block nbd3: Possible stuck request ffff8880222c0400: control (read@2048,1024B). Runtime 60 seconds [ 238.748325][ T24] block nbd3: Possible stuck request ffff8880222c0600: control (read@3072,1024B). Runtime 60 seconds [ 239.892195][ T5820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 240.120021][ T5820] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 240.140925][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.166378][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.202875][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.230881][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.245908][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.277819][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.312370][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.334435][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.362535][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.390805][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.431839][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.484633][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.503652][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.524296][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.555598][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.584429][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.604076][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.648469][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.707123][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.739590][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.795810][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.827573][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.867951][ T5820] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.888898][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 240.904080][ T5820] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 240.917289][ T5820] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 240.939777][ T5820] usb 4-1: Product: syz [ 240.944888][ T5820] usb 4-1: Manufacturer: syz [ 240.976229][ T5820] usb 4-1: SerialNumber: syz [ 240.994529][ T5820] usb 4-1: config 0 descriptor?? [ 241.049060][ T5820] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 241.336902][ T8889] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1005'. [ 241.900969][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.913797][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.077392][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.108920][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.124456][ T5860] usb 4-1: USB disconnect, device number 9 [ 242.607484][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 242.709590][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 243.338587][ T5860] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 244.293238][ T8937] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 244.519353][ T8940] bond1: (slave gretap1): making interface the new active one [ 244.530669][ T8940] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 244.558002][ T8946] Invalid option length (578) for dns_resolver key [ 244.722591][ T8937] macvlan2: entered promiscuous mode [ 244.753607][ T8937] macvlan2: entered allmulticast mode [ 244.806687][ T8937] bond1: entered promiscuous mode [ 244.812030][ T8937] gretap1: entered promiscuous mode [ 244.845480][ T8937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.855256][ T8937] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 244.880830][ T8937] bond1: left promiscuous mode [ 244.885649][ T8937] gretap1: left promiscuous mode [ 244.976138][ T5839] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 245.075010][ T8940] syz.0.1017 (8940) used greatest stack depth: 19920 bytes left [ 245.196467][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 245.205120][ T5839] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 245.217404][ T5839] usb 4-1: config 0 has no interface number 0 [ 245.237232][ T5839] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 245.255968][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.266122][ T5839] usb 4-1: Product: syz [ 245.294648][ T5839] usb 4-1: Manufacturer: syz [ 245.300320][ T5839] usb 4-1: SerialNumber: syz [ 245.327836][ T5839] usb 4-1: config 0 descriptor?? [ 245.349026][ T5839] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 245.578243][ T5839] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 245.598786][ T5839] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 246.152960][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 246.161502][ T5839] usb 4-1: USB disconnect, device number 10 [ 246.192574][ T5839] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 246.237645][ T5839] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 246.271272][ T5839] quatech2 4-1:0.51: device disconnected [ 247.833845][ T9009] program syz.3.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.310864][ T6230] block nbd9: Possible stuck request ffff888022570000: control (read@0,1024B). Runtime 60 seconds [ 249.148588][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 249.593101][ T24] block nbd1: Possible stuck request ffff8880221a0000: control (read@0,1024B). Runtime 150 seconds [ 249.604169][ T24] block nbd1: Possible stuck request ffff8880221a0200: control (read@1024,1024B). Runtime 150 seconds [ 249.615205][ T24] block nbd1: Possible stuck request ffff8880221a0400: control (read@2048,1024B). Runtime 150 seconds [ 249.626833][ T24] block nbd1: Possible stuck request ffff8880221a0600: control (read@3072,1024B). Runtime 150 seconds [ 251.506146][ T6230] block nbd2: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 150 seconds [ 251.752019][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'. [ 255.986784][ T29] INFO: task syz.2.116:6254 blocked for more than 143 seconds. [ 255.994780][ T29] Not tainted syzkaller #0 [ 255.999963][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.006349][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.008816][ T29] task:syz.2.116 state:D stack:27208 pid:6254 ppid:5771 flags:0x00004004 [ 256.024760][ T29] Call Trace: [ 256.024791][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.028137][ T29] [ 256.037469][ T29] __schedule+0x1553/0x45a0 [ 256.042124][ T29] ? asan.module_dtor+0x20/0x20 [ 256.064338][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 256.073936][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 256.103729][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 256.125579][ T29] schedule+0xbd/0x170 [ 256.144211][ T29] schedule_preempt_disabled+0x13/0x20 [ 256.164212][ T29] __mutex_lock+0x6a9/0xcc0 [ 256.178885][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 256.202310][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 256.218302][ T29] ? mutex_lock_nested+0x20/0x20 [ 256.237102][ T29] ? iput+0x343/0x920 [ 256.245187][ T29] ? ilookup+0x1c4/0x200 [ 256.255027][ T29] ? disk_block_events+0xa7/0x120 [ 256.275246][ T29] ? blkdev_get_by_dev+0xf7/0x600 [ 256.300409][ T29] blkdev_get_by_dev+0x121/0x600 [ 256.316069][ T29] blkdev_open+0x152/0x360 [ 256.324840][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 256.333233][ T29] do_dentry_open+0x8c6/0x1500 [ 256.346779][ T29] path_openat+0x27f1/0x3230 [ 256.362085][ T29] ? do_sys_openat2+0xda/0x1d0 [ 256.373763][ T29] ? verify_lock_unused+0x140/0x140 [ 256.384252][ T29] ? do_filp_open+0x430/0x430 [ 256.394149][ T29] ? __virt_addr_valid+0x18c/0x540 [ 256.401843][ T29] do_filp_open+0x1f5/0x430 [ 256.410179][ T29] ? vfs_tmpfile+0x490/0x490 [ 256.423916][ T29] ? _raw_spin_unlock+0x28/0x40 [ 256.434630][ T29] ? alloc_fd+0x58f/0x630 [ 256.441015][ T29] do_sys_openat2+0x134/0x1d0 [ 256.451957][ T29] ? do_sys_open+0xe0/0xe0 [ 256.459174][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 256.477119][ T29] ? lock_chain_count+0x20/0x20 [ 256.486537][ T29] ? lock_chain_count+0x20/0x20 [ 256.500699][ T29] __x64_sys_openat+0x139/0x160 [ 256.508164][ T29] do_syscall_64+0x55/0xa0 [ 256.512857][ T29] ? clear_bhb_loop+0x40/0x90 [ 256.518429][ T29] ? clear_bhb_loop+0x40/0x90 [ 256.523443][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.530608][ T29] RIP: 0033:0x7f3289b5b78e [ 256.535392][ T29] RSP: 002b:00007f328aad6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.544468][ T29] RAX: ffffffffffffffda RBX: 00007f328aad76c0 RCX: 00007f3289b5b78e [ 256.568053][ T29] RDX: 0000000000105201 RSI: 00007f328aad6c00 RDI: ffffffffffffff9c [ 256.576667][ T29] RBP: 00007f328aad6c00 R08: 0000000000000000 R09: 0000000000000000 [ 256.585595][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 256.595628][ T29] R13: 00007f3289e16038 R14: 00007f3289e15fa0 R15: 00007fffebabe678 [ 256.608783][ T29] [ 256.613304][ T29] [ 256.613304][ T29] Showing all locks held in the system: [ 256.623515][ T29] 1 lock held by khungtaskd/29: [ 256.655829][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 256.673836][ T29] 2 locks held by getty/5530: [ 256.683023][ T29] #0: ffff88814da980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 256.705122][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 256.726845][ T29] 1 lock held by udevd/5786: [ 256.733826][ T29] #0: ffff8880221fd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 256.745652][ T29] 1 lock held by udevd/5787: [ 256.754791][ T29] #0: ffff8880221f84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 256.773575][ T29] 1 lock held by udevd/5789: [ 256.781023][ T29] #0: ffff8880220f34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 256.791511][ T29] 1 lock held by syz.2.116/6254: [ 256.797719][ T29] #0: ffff8880221f84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 256.808118][ T29] 1 lock held by udevd/6309: [ 256.815032][ T29] #0: ffff88802242c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 256.835360][ T29] 1 lock held by syz.0.1091/9156: [ 256.840581][ T29] 1 lock held by syz.3.1099/9177: [ 256.845715][ T29] #0: ffffffff8d137880 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 256.856163][ T29] [ 256.858524][ T29] ============================================= [ 256.858524][ T29] [ 256.867575][ T29] NMI backtrace for cpu 1 [ 256.871944][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 256.879187][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.889272][ T29] Call Trace: [ 256.892585][ T29] [ 256.895546][ T29] dump_stack_lvl+0x18c/0x250 [ 256.900281][ T29] ? show_regs_print_info+0x20/0x20 [ 256.905523][ T29] ? load_image+0x400/0x400 [ 256.910085][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 256.915070][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 256.921352][ T29] ? _printk+0xde/0x130 [ 256.925538][ T29] ? load_image+0x400/0x400 [ 256.930082][ T29] ? load_image+0x400/0x400 [ 256.934628][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 256.940832][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 256.946861][ T29] watchdog+0xf3d/0xf80 [ 256.951060][ T29] ? watchdog+0x1e1/0xf80 [ 256.955440][ T29] kthread+0x2fa/0x390 [ 256.959539][ T29] ? hungtask_pm_notify+0x90/0x90 [ 256.964604][ T29] ? kthread_blkcg+0xd0/0xd0 [ 256.969228][ T29] ret_from_fork+0x48/0x80 [ 256.973685][ T29] ? kthread_blkcg+0xd0/0xd0 [ 256.978402][ T29] ret_from_fork_asm+0x11/0x20 [ 256.983314][ T29] [ 256.987073][ T29] Sending NMI from CPU 1 to CPUs 0: [ 256.992353][ C0] NMI backtrace for cpu 0 [ 256.992364][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 256.992385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.992394][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 256.992417][ C0] Code: f8 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 33 02 44 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 256.992429][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 256.992443][ C0] RAX: 68715f93e1cf2400 RBX: ffffffff8162a490 RCX: 68715f93e1cf2400 [ 256.992455][ C0] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 256.992466][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 256.992477][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19d2688 [ 256.992487][ C0] R13: 1ffffffff19c0fbc R14: 0000000000000000 R15: dffffc0000000000 [ 256.992498][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 256.992512][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.992523][ C0] CR2: 0000200000333030 CR3: 0000000053a90000 CR4: 00000000003526f0 [ 256.992538][ C0] Call Trace: [ 256.992545][ C0] [ 256.992550][ C0] default_idle+0x13/0x20 [ 256.992566][ C0] default_idle_call+0x6c/0xa0 [ 256.992583][ C0] do_idle+0x1f0/0x4e0 [ 256.992601][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.992620][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 256.992642][ C0] ? do_idle+0x5/0x4e0 [ 256.992658][ C0] cpu_startup_entry+0x43/0x60 [ 256.992674][ C0] rest_init+0x2e2/0x300 [ 256.992689][ C0] ? time_init+0x40/0x40 [ 256.992705][ C0] arch_call_rest_init+0xe/0x10 [ 256.992724][ C0] start_kernel+0x459/0x4e0 [ 256.992743][ C0] x86_64_start_reservations+0x2a/0x30 [ 256.992759][ C0] x86_64_start_kernel+0x60/0x60 [ 256.992773][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 256.992799][ C0] [ 257.005595][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 257.005610][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 257.005629][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.005639][ T29] Call Trace: [ 257.005647][ T29] [ 257.005654][ T29] dump_stack_lvl+0x18c/0x250 [ 257.005687][ T29] ? show_regs_print_info+0x20/0x20 [ 257.005719][ T29] ? load_image+0x400/0x400 [ 257.005757][ T29] panic+0x2dc/0x730 [ 257.005775][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 257.005801][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 257.005819][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 257.005844][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 257.005875][ T29] watchdog+0xf7c/0xf80 [ 257.005898][ T29] ? watchdog+0x1e1/0xf80 [ 257.005925][ T29] kthread+0x2fa/0x390 [ 257.005941][ T29] ? hungtask_pm_notify+0x90/0x90 [ 257.005963][ T29] ? kthread_blkcg+0xd0/0xd0 [ 257.005980][ T29] ret_from_fork+0x48/0x80 [ 257.005999][ T29] ? kthread_blkcg+0xd0/0xd0 [ 257.006017][ T29] ret_from_fork_asm+0x11/0x20 [ 257.006052][ T29] [ 257.007577][ T29] Kernel Offset: disabled [ 257.304000][ T29] Rebooting in 86400 seconds..