last executing test programs: 19m31.683400934s ago: executing program 2 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000006}, 0x5) close(0x3) 19m31.506015059s ago: executing program 2 (id=44): fanotify_init(0x200, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f0000000440)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e\xadk\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91\xe6\x85\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\x01\x00\x00\x00\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xbaL\xd3#\x87|J\xb9\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\x00\x00\x00\x00\x018\x1c\x95%o\x05x\x1a\x90\xf5\x03\xe7\xe9\xa9Z\xd9G\xb6K[\x94\xfd^\xdd\x04\xa1\x83U\x900}!\x8b\x0e,M\xc0D\x15\x02\xde\xda\x86\xb3\xffs\x88tk\xe3\x80+\xf3,\x14\xa2z\xe9\x9a(\x17\xfcv\x90\xb0\x92\r\x17b\x19\xb3Ke\xa79YS\x85J\'V\xce\xe4id\x1exxF\x99\xf0\xc5\xef4\xde\x8b\xe0\xdaK\"\xe2GOw\x1c\x97\xc7tP\x06\x7f\xdc}0\xc7\x8dP\xa1\x886VQ@\x0f\xf4\x1b.\xf4Y\x1c\xc6\xe5\xc0\xa8\x96\x12a\x8f\x11\x1f\xacBJIKw\xe1\x0e\x8d=\xde\xc3\x89\xabo\xcc\xa3K\x97\xeb\x15\xa4\x82\x12\xce\xcd\x90#K\x16\xd7\x80\x8f@..\xf0S\xafw\xe5\xce\x8c\b\xf7\xe4\x1a&\"\x83\xc5\xe4k&\xc4\xa7\xf7\xfa&\a\xb7&y_1<\vCu\x8e\xca\xedU\nfHyTJ3\x1e`\xcb4\xef]gD.\xbf\xbf\x91@\xa3[_\x9b\xe7C>@\x9d4\xce$aq\x88)\xd0\x1d\x8fn^\xb2\b+\xc3=\xfd\xc7\x12u\t\x11\xf7\x179\t\xa0/\rEx\xb0\xb9\xcc\xbd\xcd|\xb6x\x87\xa0\xb3\x1fY\xba\x1ci\n\xdf\xf7g[[\xb17e\xf5\xcfi\xcd\xf8\x96\x93\xd2&\xaf\x95_r\x14xI\xdb\xa7\xbe\\\xfd\xaf\x85\x1b=\x9e\x84r\x0et\x18*4\x19\xa4\xd7\x9ehfTl\x04\xeazq\xdf\xe7\xf2\x98\f\x0fm1&\xcc\xd7(\xd5\x99', 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m30.781125079s ago: executing program 2 (id=46): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 19m27.189669795s ago: executing program 2 (id=67): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000f00), 0x6000) 19m26.24837802s ago: executing program 2 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./file1\x00', 0x2000c98, &(0x7f00000003c0), 0x2, 0x55ae, &(0x7f0000005600)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 19m26.057690476s ago: executing program 3 (id=72): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 19m25.820623342s ago: executing program 3 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 19m24.546014247s ago: executing program 2 (id=75): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 19m24.227506265s ago: executing program 32 (id=75): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 19m24.213662815s ago: executing program 3 (id=78): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16], 0x44}}, 0x8000) 19m24.062753999s ago: executing program 3 (id=79): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x6000) 19m23.287377581s ago: executing program 3 (id=81): socket(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r1) 19m22.369842785s ago: executing program 3 (id=86): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16], 0x44}}, 0x8000) 19m22.050663754s ago: executing program 33 (id=86): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16], 0x44}}, 0x8000) 11m53.210861244s ago: executing program 4 (id=1267): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0x41, 0x5c8, &(0x7f00000006c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) ioctl$TIOCSETD(r0, 0x5423, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) setsockopt$sock_int(r5, 0x1, 0x52, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f0000000180)) 11m51.594211367s ago: executing program 4 (id=1271): unshare(0x6020400) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) r5 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 11m50.497039887s ago: executing program 4 (id=1274): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x45, 0x0, &(0x7f0000000100), &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000006000)}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fb"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 11m49.234841611s ago: executing program 4 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) 11m49.078043245s ago: executing program 4 (id=1279): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0x41, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x42040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) ioctl$TIOCSETD(r0, 0x5423, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) setsockopt$sock_int(r5, 0x1, 0x52, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f0000000180)) 11m48.729963865s ago: executing program 4 (id=1282): unshare(0x6020400) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) r5 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 11m48.218564088s ago: executing program 34 (id=1282): unshare(0x6020400) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) r5 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 11m0.575335683s ago: executing program 6 (id=1395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000c40)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x35, 0x0, 0x4000, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x6, @broadcast, 0x4}, @sack_perm={0x4, 0x2}]}}, {'U'}}}}}}, 0x0) 11m0.500808186s ago: executing program 6 (id=1397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x4040080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}}, 0x8040) 11m0.290065791s ago: executing program 6 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x0, 0x0, 0x0) 10m59.207036401s ago: executing program 6 (id=1400): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {0x0}], 0x3) 10m58.334975595s ago: executing program 6 (id=1403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10m56.01857954s ago: executing program 6 (id=1405): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd698b0f0000180600fe8000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 10m40.729087625s ago: executing program 35 (id=1405): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd698b0f0000180600fe8000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 1m36.195032373s ago: executing program 1 (id=2757): socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r3, 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) 1m33.658008913s ago: executing program 1 (id=2761): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1m31.207004972s ago: executing program 1 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x86c7e, 0x100000002, 0x81, 0x4}) 1m27.394152498s ago: executing program 1 (id=2767): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x1, 0x3ed4, 0x1, r0}) mprotect(&(0x7f0000d5e000/0x6000)=nil, 0x6000, 0x1000006) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0x1760, 0xb553}}], 0x18}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x7, 0x4, 0xb, 0xfffffff8, 0x200, 0x2}, {0xb, 0x1, 0x5, 0x101, 0x6, 0x2, 0x8001}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) shutdown(r3, 0x0) 1m19.77591216s ago: executing program 1 (id=2775): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x2040) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x2000, 0x9, 0x7, 0x8, 0x0, [{0x10, 0x5, 0x3, '\x00', 0xf}, {0xe, 0x4, 0x6, '\x00', 0x6}, {0xd, 0x6, 0x1, '\x00', 0x6}, {0x7, 0x36, 0x0, '\x00', 0xd}, {0xb, 0x6, 0x4, '\x00', 0x4}, {0x84, 0xf1, 0x6}, {0x7, 0x8, 0x7f, '\x00', 0x5}, {0x7, 0x7, 0x4e, '\x00', 0x9}, {0x0, 0x2, 0x7, '\x00', 0x7}, {0xd, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x8, 0xd, '\x00', 0x5}, {0x9, 0x4, 0xff, '\x00', 0x1}, {0x4, 0x5, 0x9, '\x00', 0x4}, {0x8, 0x8, 0xfb, '\x00', 0x1}, {0x3, 0x71, 0x8, '\x00', 0x1}, {0x8a, 0x0, 0x1, '\x00', 0x7f}, {0x6, 0x1, 0x3, '\x00', 0x4}, {0x9, 0x6, 0x8, '\x00', 0x3}, {0xc, 0xe, 0xfc, '\x00', 0xc0}, {0x2, 0x7, 0x4, '\x00', 0xd}, {0x7, 0x5, 0x3, '\x00', 0x7}, {0x2e, 0xf9, 0x1, '\x00', 0xc8}, {0x8, 0x25, 0x4, '\x00', 0x6}, {0xf, 0x8, 0x1, '\x00', 0xfd}]}}) recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/199, 0xc7}, 0x2}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000c80)=""/222, 0xde}, 0x8f4edc0f}, {{0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001180)=""/229, 0xe5}, 0x6}], 0x3, 0x40010102, &(0x7f0000001380)={0x77359400}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r6, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) sched_setaffinity(0x0, 0x0, 0x0) 1m16.703773925s ago: executing program 1 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x86c7e, 0x100000002, 0x81, 0x4}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r5, 0x8, 0x0, 0x8800000) 1m0.913107315s ago: executing program 36 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x86c7e, 0x100000002, 0x81, 0x4}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r5, 0x8, 0x0, 0x8800000) 16.312378377s ago: executing program 5 (id=2879): syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x375}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) setns(0xffffffffffffffff, 0x0) 13.399085027s ago: executing program 5 (id=2884): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x1, 0x3ed4, 0x1, r0}) mprotect(&(0x7f0000d5e000/0x6000)=nil, 0x6000, 0x1000006) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x7, 0x4, 0xb, 0xfffffff8, 0x200, 0x2}, {0xb, 0x1, 0x5, 0x101, 0x6, 0x2, 0x8001}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 11.131014881s ago: executing program 8 (id=2886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002400)='net/wireless\x00') mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c070051000004", @ANYRESHEX=r5, @ANYBLOB=',']) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) 10.416884381s ago: executing program 5 (id=2887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50) 9.287574532s ago: executing program 8 (id=2888): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8894}, 0x8040) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, 0x0, 0x20040891) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) mount_setattr(r5, &(0x7f0000000080)='./file0/../file0\x00', 0x8800, &(0x7f0000000240)={0x70, 0x0, 0x40000}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 8.676050969s ago: executing program 0 (id=2889): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500000070000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.622716718s ago: executing program 5 (id=2891): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000004300)={0x2020}, 0x2020) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) fsopen(&(0x7f0000001340)='pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21c004, 0x0) 7.530030541s ago: executing program 7 (id=2892): syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x375}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) setns(0xffffffffffffffff, 0x0) 7.293821207s ago: executing program 0 (id=2893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0x9d75, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x80000004, 0x5, 0x2], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.103398363s ago: executing program 5 (id=2894): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000300)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@compress_force}, {@compress_force}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x3, 0x3, {0xffffffffffffffff}, {0xee01}, 0x401, 0x7f}) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xed7) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f000000b6c0)={&(0x7f000000b5c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000b600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000b640), 0x0, 0x9, 0x7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl(r1, 0x10000, &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 6.790005522s ago: executing program 0 (id=2895): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x2000}, 0x2}, 0x80) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d0001010000090904"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 6.419583002s ago: executing program 8 (id=2896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000002400)='net/wireless\x00') mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c070051000004", @ANYRESHEX=r5, @ANYBLOB=',']) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) 5.105619678s ago: executing program 8 (id=2897): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.407907688s ago: executing program 7 (id=2898): socket$inet6(0xa, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x19) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x4001, 0xffffffffffffffff}) 3.267966159s ago: executing program 7 (id=2899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0xb0000009}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x81, 0xb, "0062ba7d82070000000000efffffffff086304"}) syz_open_pts(r3, 0x80) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) 3.22889937s ago: executing program 0 (id=2900): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) 3.108121314s ago: executing program 8 (id=2901): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500000070000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.132235569s ago: executing program 0 (id=2902): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80000001, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}]}}}]}, 0x60}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 1.08248677s ago: executing program 7 (id=2903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x1000) 905.173295ms ago: executing program 5 (id=2904): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x0, 0x32, 0x7f, 0x7}, {0x7, 0x9, 0x9, 0x6}, {0xfff, 0x7, 0xff, 0x9b}]}, 0x10) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x6000) userfaultfd(0x80001) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x16) 746.19433ms ago: executing program 0 (id=2905): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0x9d75, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x80000004, 0x5, 0x2], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 686.021651ms ago: executing program 8 (id=2906): syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x375}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) setns(0xffffffffffffffff, 0x0) 685.420781ms ago: executing program 7 (id=2907): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44944}, 0x20004040) syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0x9d75, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x80000004, 0x5, 0x2], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=2908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002400)='net/wireless\x00') mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c070051000004", @ANYRESHEX=r4, @ANYBLOB=',']) read$FUSE(r3, &(0x7f0000003f80)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): d0, logical block 3, async page read [ 698.085223][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 698.094565][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 698.102583][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 698.116420][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.126971][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 698.136503][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 698.241021][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.250300][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.259586][ T24] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.268903][ T24] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.278873][T10990] ldm_validate_partition_table(): Disk read failed. [ 698.296601][T10990] Dev nbd0: unable to read RDB block 0 [ 698.307484][T10990] nbd0: unable to read partition table [ 698.379192][T10990] ldm_validate_partition_table(): Disk read failed. [ 698.437294][T10990] Dev nbd0: unable to read RDB block 0 [ 698.457887][T10990] nbd0: unable to read partition table [ 699.469972][T12649] binder: 12644:12649 ioctl c0306201 0 returned -14 [ 699.957150][T12657] nbd1: detected capacity change from 0 to 63 [ 699.970472][ T51] block nbd1: Receive control failed (result -104) [ 701.440363][T12687] binder: 12683:12687 ioctl c0306201 0 returned -14 [ 702.669029][T12699] nbd2: detected capacity change from 0 to 63 [ 702.710107][T12704] block nbd0: NBD_DISCONNECT [ 702.796722][T12704] block nbd0: Send disconnect failed -32 [ 702.840498][ T51] block nbd2: Receive control failed (result -104) [ 703.745627][T12721] loop5: detected capacity change from 0 to 4096 [ 704.307051][T12736] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 704.347039][T12736] loop1: detected capacity change from 0 to 512 [ 704.358255][T12736] ext4: Unknown parameter 'appraise_type' [ 706.090779][T12740] binder: 12731:12740 ioctl c0306201 0 returned -14 [ 706.754584][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1674'. [ 707.491454][T12761] loop1: detected capacity change from 0 to 8 [ 707.736669][T12761] SQUASHFS error: lzo decompression failed, data probably corrupt [ 707.745124][T12761] SQUASHFS error: Failed to read block 0x82: -5 [ 707.752062][T12761] SQUASHFS error: Unable to read metadata cache entry [80] [ 707.759525][T12761] SQUASHFS error: Unable to read inode 0x11f [ 708.910194][T12777] loop0: detected capacity change from 0 to 4096 [ 710.323859][T12795] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 710.382663][T12795] loop1: detected capacity change from 0 to 512 [ 710.392331][T12795] ext4: Unknown parameter 'appraise_type' [ 711.267461][T12805] syz.1.1688 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 712.045890][ T788] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 712.287122][ T788] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 712.384527][ T788] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 712.514866][ T788] usb 6-1: Product: syz [ 712.553193][ T788] usb 6-1: SerialNumber: syz [ 712.682236][ T788] usb 6-1: config 0 descriptor?? [ 713.356672][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 715.456308][ T788] usb 6-1: USB disconnect, device number 15 [ 725.276495][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 729.517622][T13117] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1778'. [ 729.919035][T13129] loop5: detected capacity change from 0 to 8 [ 730.036870][T13129] SQUASHFS error: lzo decompression failed, data probably corrupt [ 730.044880][T13129] SQUASHFS error: Failed to read block 0x82: -5 [ 730.051260][T13129] SQUASHFS error: Unable to read metadata cache entry [80] [ 730.058561][T13129] SQUASHFS error: Unable to read inode 0x11f [ 730.526439][ T24] block nbd1: Possible stuck request ffff8880222cd400: control (read@0,4096B). Runtime 30 seconds [ 730.556043][T10990] blk_print_req_error: 77 callbacks suppressed [ 730.556059][T10990] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 733.415791][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 30 seconds [ 734.439722][T13184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1799'. [ 734.890149][T13200] loop5: detected capacity change from 0 to 8 [ 735.025590][T13200] SQUASHFS error: lzo decompression failed, data probably corrupt [ 735.034073][T13200] SQUASHFS error: Failed to read block 0x82: -5 [ 735.040535][T13200] SQUASHFS error: Unable to read metadata cache entry [80] [ 735.047889][T13200] SQUASHFS error: Unable to read inode 0x11f [ 737.215979][T13235] loop5: detected capacity change from 0 to 128 [ 737.244852][T13235] vfat filesystem being mounted at /454/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 737.343345][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1817'. [ 738.516280][ T27] libceph: connect (1)[c::]:6789 error -101 [ 738.529201][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 738.798356][ T27] libceph: connect (1)[c::]:6789 error -101 [ 738.811406][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 739.004639][T13244] ceph: No mds server is up or the cluster is laggy [ 739.237363][T13273] capability: warning: `syz.7.1828' uses 32-bit capabilities (legacy support in use) [ 740.647562][T13286] block device autoloading is deprecated and will be removed. [ 741.824304][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 741.856255][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 742.700730][ T27] libceph: connect (1)[c::]:6789 error -101 [ 742.707065][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 742.782064][T13323] loop5: detected capacity change from 0 to 128 [ 742.820141][T13323] vfat filesystem being mounted at /461/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 742.875143][T13325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'. [ 743.201258][T13300] ceph: No mds server is up or the cluster is laggy [ 743.216226][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 743.222323][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 745.854291][T13358] loop1: detected capacity change from 0 to 256 [ 745.961309][T13358] msdos filesystem being mounted at /488/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 746.299918][T13335] loop5: detected capacity change from 0 to 32768 [ 746.381963][T13335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1847 (13335) [ 746.570540][T13335] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 746.632248][T13335] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 746.685857][T13335] BTRFS info (device loop5): turning on sync discard [ 746.692735][T13335] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 746.746853][T13335] BTRFS info (device loop5): use zstd compression, level 3 [ 746.785034][T13335] BTRFS info (device loop5): turning on async discard [ 746.822259][T13335] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 746.875448][T13335] BTRFS info (device loop5): trying to use backup root at mount time [ 746.904973][T13335] BTRFS info (device loop5): force zlib compression, level 3 [ 747.037681][T13335] BTRFS info (device loop5): using free space tree [ 747.286616][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.292981][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.346295][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 747.347170][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 747.493669][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 747.519081][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 747.560562][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 747.573411][ T27] libceph: connect (1)[c::]:6789 error -101 [ 747.585604][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 747.589714][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 747.607099][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 747.608511][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 747.620583][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 747.630881][T13335] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 747.680491][T13335] BTRFS error (device loop5): open_ctree failed: -12 [ 747.814573][T13394] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 747.829812][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 747.916354][ T27] libceph: connect (1)[c::]:6789 error -101 [ 747.922450][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 748.185226][T13368] ceph: No mds server is up or the cluster is laggy [ 748.456204][ T27] libceph: connect (1)[c::]:6789 error -101 [ 748.462321][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 749.811231][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1876'. [ 750.311122][T13414] loop0: detected capacity change from 0 to 32768 [ 750.339410][T13414] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1871 (13414) [ 750.472059][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 750.556040][T13414] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 750.607117][T13414] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 750.666703][T13414] BTRFS info (device loop0): turning on sync discard [ 750.718717][T13414] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 750.777480][T13414] BTRFS info (device loop0): use zstd compression, level 3 [ 750.826493][T13414] BTRFS info (device loop0): turning on async discard [ 750.833336][T13414] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 750.908293][ T789] libceph: connect (1)[c::]:6789 error -101 [ 750.914471][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 750.955858][T13414] BTRFS info (device loop0): trying to use backup root at mount time [ 750.973576][T13414] BTRFS info (device loop0): force zlib compression, level 3 [ 751.008861][T13414] BTRFS info (device loop0): using free space tree [ 751.122755][ T6976] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 751.173756][T13414] BTRFS error (device loop0): failed to load root extent [ 751.186326][T13414] BTRFS warning (device loop0): try to load backup roots slot 1 [ 751.214352][ T4391] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 751.256099][T13414] BTRFS warning (device loop0): couldn't read tree root [ 751.263568][ T789] libceph: connect (1)[c::]:6789 error -101 [ 751.274144][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 751.280921][T13414] BTRFS warning (device loop0): try to load backup roots slot 2 [ 751.313999][ T6976] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 751.335116][T13414] BTRFS warning (device loop0): couldn't read tree root [ 751.345265][T13414] BTRFS warning (device loop0): try to load backup roots slot 3 [ 751.378286][T13414] BTRFS info (device loop0): enabling ssd optimizations [ 751.391836][T13424] loop5: detected capacity change from 0 to 32768 [ 751.404615][T13414] BTRFS info (device loop0): rebuilding free space tree [ 751.433263][T13424] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1875 (13424) [ 751.466266][T13414] BTRFS info (device loop0): checking UUID tree [ 751.504496][T13424] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 751.541869][T13424] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 751.554311][T13424] BTRFS info (device loop5): using free space tree [ 751.561668][T13432] ceph: No mds server is up or the cluster is laggy [ 751.878639][T13424] BTRFS info (device loop5): enabling ssd optimizations [ 754.075837][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 755.359242][T13424] BTRFS info (device loop5): auto enabling async discard [ 756.076101][ T27] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 756.206266][ T6110] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 756.278129][ T27] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 756.299182][ T27] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 756.312199][ T27] usb 2-1: Product: syz [ 756.317321][ T27] usb 2-1: SerialNumber: syz [ 756.359989][ T27] usb 2-1: config 0 descriptor?? [ 756.590730][ T27] usb 2-1: USB disconnect, device number 25 [ 756.714319][T10988] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop5 scanned by udevd (10988) [ 758.233559][ T27] libceph: connect (1)[c::]:6789 error -101 [ 758.256793][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 758.460755][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 758.585816][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 758.595855][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 758.716913][T13514] ceph: No mds server is up or the cluster is laggy [ 759.720872][ T9969] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 760.052723][ T9969] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 760.174973][ T9969] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 760.358858][ T9969] usb 8-1: Product: syz [ 760.435268][ T9969] usb 8-1: SerialNumber: syz [ 760.668076][ T9969] usb 8-1: config 0 descriptor?? [ 761.196194][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 761.924906][ T24] block nbd1: Possible stuck request ffff8880222cd400: control (read@0,4096B). Runtime 60 seconds [ 762.634973][ T9969] usb 8-1: USB disconnect, device number 2 [ 764.034364][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 60 seconds [ 764.417187][T13571] nbd5: detected capacity change from 0 to 63 [ 764.424493][T13573] nbd: must specify an index to disconnect [ 764.432980][ T5785] block nbd5: Receive control failed (result -104) [ 765.470087][T13569] loop7: detected capacity change from 0 to 32768 [ 765.506616][T13569] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 765.742196][T13557] ceph: No mds server is up or the cluster is laggy [ 766.387746][T10988] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 766.498396][T13588] vivid-007: disconnect [ 766.676606][T13568] vivid-007: reconnect [ 768.237128][T11578] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 768.612177][T11578] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 768.710279][T11578] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 768.820875][T11578] usb 1-1: Product: syz [ 768.872830][T11578] usb 1-1: SerialNumber: syz [ 769.916457][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 769.924628][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 770.270834][T11578] usb 1-1: config 0 descriptor?? [ 770.329235][T13599] nbd: nbd5 already in use [ 770.334410][T13599] nbd: must specify an index to disconnect [ 770.562913][T11578] usb 1-1: can't set config #0, error -71 [ 770.570286][T11578] usb 1-1: USB disconnect, device number 20 [ 772.374098][ T9969] libceph: connect (1)[c::]:6789 error -101 [ 772.472343][ T9969] libceph: mon0 (1)[c::]:6789 connect error [ 772.966964][ T9969] libceph: connect (1)[c::]:6789 error -101 [ 772.973956][ T9969] libceph: mon0 (1)[c::]:6789 connect error [ 773.372791][T13633] loop0: detected capacity change from 0 to 32768 [ 773.549885][T13633] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 773.763846][ T9969] libceph: connect (1)[c::]:6789 error -101 [ 773.770920][ T9969] libceph: mon0 (1)[c::]:6789 connect error [ 773.897614][T13644] vivid-007: disconnect [ 773.962733][T13624] ceph: No mds server is up or the cluster is laggy [ 774.249707][T13632] vivid-007: reconnect [ 774.347869][T10988] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 774.446255][T11578] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 775.377173][T11578] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 775.553114][T11578] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 775.699919][T11578] usb 2-1: Product: syz [ 775.796726][T11578] usb 2-1: SerialNumber: syz [ 776.027208][T11578] usb 2-1: config 0 descriptor?? [ 776.081337][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 777.287602][T11578] usb 2-1: USB disconnect, device number 26 [ 777.340143][T13650] nbd0: detected capacity change from 0 to 63 [ 777.482568][T13652] block nbd0: NBD_DISCONNECT [ 777.635649][T13652] block nbd0: Disconnected due to user request. [ 777.721399][T13652] block nbd0: shutting down sockets [ 777.735954][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.745102][ C0] buffer_io_error: 138 callbacks suppressed [ 777.745115][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 777.759094][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.768228][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 777.776031][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.785099][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 777.792928][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.802036][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 777.834880][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 777.845036][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 777.852940][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 777.860847][ T24] Buffer I/O error on dev nbd0, logical block 2, async page read [ 777.870501][ T24] Buffer I/O error on dev nbd0, logical block 3, async page read [ 777.878826][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 777.889001][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 777.897871][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 777.907034][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 777.916607][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.926039][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 777.935324][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 777.945961][ T5764] ldm_validate_partition_table(): Disk read failed. [ 777.954286][ T5764] Dev nbd0: unable to read RDB block 0 [ 777.961703][ T5764] nbd0: unable to read partition table [ 777.974125][ T5764] ldm_validate_partition_table(): Disk read failed. [ 777.982821][ T5764] Dev nbd0: unable to read RDB block 0 [ 777.991806][ T5764] nbd0: unable to read partition table [ 780.717662][T13672] loop0: detected capacity change from 0 to 4096 [ 780.887633][T13672] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 781.827400][T13687] nbd: nbd1 already in use [ 781.832571][T13687] block nbd1: NBD_DISCONNECT [ 781.838189][T13687] block nbd1: Send disconnect failed -32 [ 781.844495][T13687] block nbd1: shutting down sockets [ 781.887786][ T5762] ldm_validate_partition_table(): Disk read failed. [ 781.936703][ T5762] Dev nbd1: unable to read RDB block 0 [ 781.944252][ T5762] nbd1: unable to read partition table [ 781.968564][ T5762] ldm_validate_partition_table(): Disk read failed. [ 782.027797][ T5762] Dev nbd1: unable to read RDB block 0 [ 782.054494][ T5762] nbd1: unable to read partition table [ 782.279750][ T788] libceph: connect (1)[c::]:6789 error -101 [ 782.287875][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 782.562461][ T788] libceph: connect (1)[c::]:6789 error -101 [ 782.588412][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 782.772691][T13677] loop7: detected capacity change from 0 to 32768 [ 782.802983][T13677] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 782.974403][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1948'. [ 783.107161][ T5762] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 783.109082][T13703] vivid-007: disconnect [ 783.123970][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 783.280272][T13676] vivid-007: reconnect [ 783.313748][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 783.370931][T13678] ceph: No mds server is up or the cluster is laggy [ 785.309973][T13721] loop7: detected capacity change from 0 to 8 [ 786.826707][T13721] SQUASHFS error: lzo decompression failed, data probably corrupt [ 786.834783][T13721] SQUASHFS error: Failed to read block 0x82: -5 [ 786.841144][T13721] SQUASHFS error: Unable to read metadata cache entry [80] [ 786.848900][T13721] SQUASHFS error: Unable to read inode 0x11f [ 788.249976][T13737] loop1: detected capacity change from 0 to 4096 [ 790.717739][T13742] loop7: detected capacity change from 0 to 32768 [ 790.740693][T13742] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 791.141411][T13761] vivid-007: disconnect [ 791.308672][T13741] vivid-007: reconnect [ 791.845366][ T5762] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 792.862813][T13772] ceph: No mds server is up or the cluster is laggy [ 794.657485][T10771] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 90 seconds [ 794.668586][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 30 seconds [ 798.089421][T11578] libceph: connect (1)[c::]:6789 error -101 [ 798.095591][T11578] libceph: mon0 (1)[c::]:6789 connect error [ 798.234385][T13807] loop1: detected capacity change from 0 to 32768 [ 798.256236][T13807] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 798.369189][T13828] ceph: No mds server is up or the cluster is laggy [ 798.376825][T11578] libceph: connect (1)[c::]:6789 error -101 [ 798.382881][T11578] libceph: mon0 (1)[c::]:6789 connect error [ 798.496380][T13835] vivid-007: disconnect [ 798.862879][ T5762] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 798.890171][T13806] vivid-007: reconnect [ 803.343940][T13872] ceph: No mds server is up or the cluster is laggy [ 804.897473][T13879] loop1: detected capacity change from 0 to 32768 [ 804.927250][T13879] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 806.387456][ T9969] libceph: connect (1)[c::]:6789 error -101 [ 806.406461][ T9969] libceph: mon0 (1)[c::]:6789 connect error [ 806.687747][T12822] libceph: connect (1)[c::]:6789 error -101 [ 806.694783][T12822] libceph: mon0 (1)[c::]:6789 connect error [ 807.472113][T13915] ceph: No mds server is up or the cluster is laggy [ 807.626073][T12822] libceph: connect (1)[c::]:6789 error -101 [ 807.632165][T12822] libceph: mon0 (1)[c::]:6789 connect error [ 808.734614][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.761414][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.256238][T13940] loop5: detected capacity change from 0 to 32768 [ 811.288238][T13940] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2008 (13940) [ 811.395650][T13940] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 811.474670][T13940] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 811.542939][T13940] BTRFS info (device loop5): turning on sync discard [ 811.597321][T13940] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 811.645149][T13940] BTRFS info (device loop5): use zstd compression, level 3 [ 811.696727][T13940] BTRFS info (device loop5): turning on async discard [ 811.734385][T13940] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 811.779633][T13940] BTRFS info (device loop5): trying to use backup root at mount time [ 811.806898][T13940] BTRFS info (device loop5): force zlib compression, level 3 [ 811.854217][T13940] BTRFS info (device loop5): using free space tree [ 811.959698][ T34] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 811.989200][T13940] BTRFS error (device loop5): failed to load root extent [ 811.998963][T13940] BTRFS warning (device loop5): try to load backup roots slot 1 [ 812.009358][ T4391] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 812.023019][T13940] BTRFS warning (device loop5): couldn't read tree root [ 812.030413][T13940] BTRFS warning (device loop5): try to load backup roots slot 2 [ 812.039305][ T4391] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 812.050302][T13940] BTRFS warning (device loop5): couldn't read tree root [ 812.061410][T13940] BTRFS warning (device loop5): try to load backup roots slot 3 [ 812.087470][T13940] BTRFS info (device loop5): enabling ssd optimizations [ 812.112752][T13940] BTRFS info (device loop5): rebuilding free space tree [ 812.163839][T13940] BTRFS info (device loop5): checking UUID tree [ 812.650011][T13969] ceph: No mds server is up or the cluster is laggy [ 814.913194][ T6110] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 817.235795][T11578] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 817.415824][T11578] usb 1-1: Using ep0 maxpacket: 16 [ 817.428385][T11578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.442398][T11578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.464507][T11578] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 817.495152][T11578] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 817.519000][T11578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.547714][T11578] usb 1-1: config 0 descriptor?? [ 818.759931][T11578] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 819.656422][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.663725][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.671925][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.679323][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.686691][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.693957][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.701736][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.709068][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.716757][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.724030][T11578] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 819.736594][T11578] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 819.774718][T11578] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 819.865915][T11578] microsoft 0003:045E:07DA.0008: no inputs found [ 819.872353][T11578] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 819.943914][T11578] usb 1-1: USB disconnect, device number 21 [ 820.058543][T14057] fido_id[14057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 821.318874][T14053] loop5: detected capacity change from 0 to 32768 [ 821.349585][T14053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2034 (14053) [ 821.432877][T14053] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 821.462669][T14053] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 821.481879][T14053] BTRFS info (device loop5): turning on sync discard [ 821.507934][T14053] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 821.539078][T14053] BTRFS info (device loop5): use zstd compression, level 3 [ 821.559323][T14053] BTRFS info (device loop5): turning on async discard [ 821.579576][T14053] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 821.613590][T14053] BTRFS info (device loop5): trying to use backup root at mount time [ 821.635477][T14053] BTRFS info (device loop5): force zlib compression, level 3 [ 821.658661][T14053] BTRFS info (device loop5): using free space tree [ 821.750997][ T49] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 821.777453][T14053] BTRFS error (device loop5): failed to load root extent [ 821.795401][T14053] BTRFS warning (device loop5): try to load backup roots slot 1 [ 821.814127][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 821.897932][T14053] BTRFS warning (device loop5): couldn't read tree root [ 821.927243][T14053] BTRFS warning (device loop5): try to load backup roots slot 2 [ 821.936005][ T12] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 821.986089][T14053] BTRFS warning (device loop5): couldn't read tree root [ 821.993115][T14053] BTRFS warning (device loop5): try to load backup roots slot 3 [ 822.337778][T14053] BTRFS error (device loop5): open_ctree failed: -4 [ 823.247248][ T28] audit: type=1326 audit(3726560512.030:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 823.703450][ T28] audit: type=1326 audit(3726560512.040:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.108098][ T28] audit: type=1326 audit(3726560512.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.203921][ T28] audit: type=1326 audit(3726560512.040:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.258101][ T28] audit: type=1326 audit(3726560512.070:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.315810][ T28] audit: type=1326 audit(3726560512.070:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.365842][ T28] audit: type=1326 audit(3726560512.070:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.425747][ T28] audit: type=1326 audit(3726560512.080:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.495869][ T28] audit: type=1326 audit(3726560512.080:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.545725][ T28] audit: type=1326 audit(3726560512.090:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2040" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 824.723317][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 60 seconds [ 824.735157][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 120 seconds [ 827.183229][T14127] loop1: detected capacity change from 0 to 32768 [ 827.233317][T14127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2049 (14127) [ 827.286891][T14127] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.320229][T14127] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 827.345804][T14127] BTRFS info (device loop1): turning on sync discard [ 827.367415][T14127] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 827.399843][T14127] BTRFS info (device loop1): use zstd compression, level 3 [ 827.415748][T14127] BTRFS info (device loop1): turning on async discard [ 827.429456][T14127] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 827.454129][T14127] BTRFS info (device loop1): trying to use backup root at mount time [ 827.485748][T14127] BTRFS info (device loop1): force zlib compression, level 3 [ 827.507504][T14127] BTRFS info (device loop1): using free space tree [ 827.725115][ T4391] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 827.762376][T14127] BTRFS error (device loop1): failed to load root extent [ 827.775841][T14127] BTRFS warning (device loop1): try to load backup roots slot 1 [ 827.818371][T13602] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 827.878029][T14127] BTRFS warning (device loop1): couldn't read tree root [ 827.885083][T14127] BTRFS warning (device loop1): try to load backup roots slot 2 [ 827.927324][ T12] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 827.949728][T14127] BTRFS warning (device loop1): couldn't read tree root [ 828.005932][T14127] BTRFS warning (device loop1): try to load backup roots slot 3 [ 828.069110][T14127] BTRFS info (device loop1): enabling ssd optimizations [ 828.107587][T14127] BTRFS info (device loop1): rebuilding free space tree [ 828.173945][T14127] BTRFS info (device loop1): checking UUID tree [ 831.461978][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 833.565751][T12822] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 833.648740][T14193] loop5: detected capacity change from 0 to 32768 [ 833.674487][T14193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2067 (14193) [ 833.730190][T14193] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 833.740722][T14193] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 833.749732][T14193] BTRFS info (device loop5): turning on sync discard [ 833.756737][T14193] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 833.766346][T12822] usb 8-1: Using ep0 maxpacket: 32 [ 833.772350][T14193] BTRFS info (device loop5): use zstd compression, level 3 [ 833.787980][T12822] usb 8-1: config 0 has no interfaces? [ 833.796609][T14193] BTRFS info (device loop5): turning on async discard [ 833.809883][T12822] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 833.831720][T14193] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 833.838581][T12822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.863654][T14193] BTRFS info (device loop5): trying to use backup root at mount time [ 833.875467][T12822] usb 8-1: config 0 descriptor?? [ 833.894026][T14193] BTRFS info (device loop5): force zlib compression, level 3 [ 833.920297][T14193] BTRFS info (device loop5): using free space tree [ 834.026149][T13602] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 834.058578][T14193] BTRFS error (device loop5): failed to load root extent [ 834.085925][T14193] BTRFS warning (device loop5): try to load backup roots slot 1 [ 834.125274][T13602] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 834.160068][T14193] BTRFS warning (device loop5): couldn't read tree root [ 834.170873][ T789] usb 8-1: USB disconnect, device number 3 [ 834.175806][T14193] BTRFS warning (device loop5): try to load backup roots slot 2 [ 834.204086][T13602] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 834.248527][T14193] BTRFS warning (device loop5): couldn't read tree root [ 834.255547][T14193] BTRFS warning (device loop5): try to load backup roots slot 3 [ 834.350998][T14193] BTRFS info (device loop5): enabling ssd optimizations [ 834.369758][T14193] BTRFS info (device loop5): rebuilding free space tree [ 834.408976][T14193] BTRFS info (device loop5): checking UUID tree [ 836.060554][T14240] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 836.070900][T14240] binder: 14239:14240 ioctl 400c620e 0 returned -14 [ 836.094918][T14240] loop7: detected capacity change from 0 to 512 [ 836.102022][T14240] ext4: Unknown parameter 'appraise_type' [ 836.148768][ T5762] blk_print_req_error: 210 callbacks suppressed [ 836.148782][ T5762] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 836.596555][ T6110] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 839.329305][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 839.329320][ T28] audit: type=1326 audit(3726560528.100:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 839.505210][ T28] audit: type=1326 audit(3726560528.100:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 839.633193][ T28] audit: type=1326 audit(3726560528.100:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 839.658544][ T28] audit: type=1326 audit(3726560528.100:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 839.726914][T14274] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 839.735370][T14274] binder: 14273:14274 ioctl 400c620e 0 returned -14 [ 839.780281][T14274] loop7: detected capacity change from 0 to 512 [ 839.787345][T14274] ext4: Unknown parameter 'appraise_type' [ 839.803614][ T28] audit: type=1326 audit(3726560528.100:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 839.828718][ T28] audit: type=1326 audit(3726560528.100:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 839.854244][ T28] audit: type=1326 audit(3726560528.100:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 839.891157][ T5762] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 839.963476][ T28] audit: type=1326 audit(3726560528.100:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 840.040204][ T28] audit: type=1326 audit(3726560528.100:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 840.083973][ T28] audit: type=1326 audit(3726560528.100:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14268 comm="syz.0.2083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 842.360889][T14308] binder: 14306:14308 ioctl 400c620e 0 returned -14 [ 842.413408][T14308] loop1: detected capacity change from 0 to 512 [ 842.423165][T14308] ext4: Unknown parameter 'appraise_type' [ 849.685744][T12822] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 850.607621][T12822] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 850.618850][T12822] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 850.636556][T12822] usb 6-1: config 1 interface 0 has no altsetting 0 [ 850.647484][T12822] usb 6-1: string descriptor 0 read error: -22 [ 850.653856][T12822] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 850.663775][T12822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.859598][T12822] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 851.888928][T12822] keytouch 0003:0926:3333.0009: usb_submit_urb(out) failed: -90 [ 851.916207][T12822] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:0926:3333.0009/input/input18 [ 852.238142][T14386] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 852.585617][T12822] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 854.928197][ T5896] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 150 seconds [ 854.939418][ T24] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 90 seconds [ 855.024962][T14435] loop0: detected capacity change from 0 to 8 [ 855.138843][T14435] SQUASHFS error: lzo decompression failed, data probably corrupt [ 855.147207][T14435] SQUASHFS error: Failed to read block 0x82: -5 [ 855.153565][T14435] SQUASHFS error: Unable to read metadata cache entry [80] [ 855.160916][T14435] SQUASHFS error: Unable to read inode 0x11f [ 855.527735][T12822] usb 6-1: USB disconnect, device number 16 [ 858.736622][T14476] loop1: detected capacity change from 0 to 8 [ 858.762297][T14476] SQUASHFS error: lzo decompression failed, data probably corrupt [ 858.770408][T14476] SQUASHFS error: Failed to read block 0x82: -5 [ 858.776951][T14476] SQUASHFS error: Unable to read metadata cache entry [80] [ 858.784291][T14476] SQUASHFS error: Unable to read inode 0x11f [ 858.883121][T10988] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 864.491563][T14555] loop5: detected capacity change from 0 to 32768 [ 864.517897][T14555] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2174 (14555) [ 864.762322][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 864.762567][ T28] audit: type=1326 audit(3726560553.390:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 865.355923][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 865.412929][ T28] audit: type=1326 audit(3726560553.400:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 865.448316][T14555] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 865.458675][T14555] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 865.467412][T14555] BTRFS info (device loop5): using free space tree [ 865.566689][ T28] audit: type=1326 audit(3726560553.400:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 865.618185][ T28] audit: type=1326 audit(3726560553.400:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 865.683521][T14555] BTRFS info (device loop5): enabling ssd optimizations [ 865.690670][T14555] BTRFS info (device loop5): auto enabling async discard [ 865.727789][ T28] audit: type=1326 audit(3726560553.400:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 865.923104][T14587] vivid-007: disconnect [ 866.060691][T14554] vivid-007: reconnect [ 866.067582][ T28] audit: type=1326 audit(3726560553.410:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 866.091893][ T28] audit: type=1326 audit(3726560553.410:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 866.266780][ T28] audit: type=1326 audit(3726560553.410:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 866.321243][ T28] audit: type=1326 audit(3726560553.410:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 866.413483][ T6110] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 866.423919][ T28] audit: type=1326 audit(3726560553.420:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14552 comm="syz.0.2173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 866.756047][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2181'. [ 867.070991][T14594] loop0: detected capacity change from 0 to 8 [ 867.090205][T14594] SQUASHFS error: lzo decompression failed, data probably corrupt [ 867.098133][T14594] SQUASHFS error: Failed to read block 0x82: -5 [ 867.104421][T14594] SQUASHFS error: Unable to read metadata cache entry [80] [ 867.111729][T14594] SQUASHFS error: Unable to read inode 0x11f [ 868.815751][ T5833] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 869.127772][ T5833] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 869.153477][ T5833] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 869.169548][ T5833] usb 1-1: config 1 interface 0 has no altsetting 0 [ 869.184559][ T5833] usb 1-1: string descriptor 0 read error: -22 [ 869.191076][ T5833] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 869.200259][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.823923][ T5833] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 869.858723][ T5833] keytouch 0003:0926:3333.000A: usb_submit_urb(out) failed: -90 [ 870.161248][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.169049][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.744124][ T5833] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.000A/input/input19 [ 870.864793][ T5833] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 870.882568][ T5833] usb 1-1: USB disconnect, device number 22 [ 871.183497][T14641] fido_id[14641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 873.299880][T12822] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 873.524059][T12822] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 873.545697][T12822] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 873.570315][T12822] usb 1-1: config 1 interface 0 has no altsetting 0 [ 873.583929][T12822] usb 1-1: string descriptor 0 read error: -22 [ 873.605818][T12822] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 873.614943][T12822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.112490][T12822] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 874.183360][T12822] keytouch 0003:0926:3333.000B: usb_submit_urb(out) failed: -90 [ 874.228741][T12822] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.000B/input/input20 [ 875.277592][T12822] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 875.493211][T12822] usb 1-1: USB disconnect, device number 23 [ 876.371312][T14699] fido_id[14699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 877.456033][T14713] loop1: detected capacity change from 0 to 32768 [ 877.483194][T14713] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2221 (14713) [ 877.573775][T14713] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 877.584302][T14713] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 877.593292][T14713] BTRFS info (device loop1): using free space tree [ 877.824137][T14713] BTRFS info (device loop1): enabling ssd optimizations [ 877.833774][T14713] BTRFS info (device loop1): auto enabling async discard [ 877.892450][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 877.892465][ T28] audit: type=1800 audit(3726560566.680:98): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2221" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 878.138576][T14740] vivid-007: disconnect [ 878.175387][T14710] vivid-007: reconnect [ 878.221688][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2226'. [ 878.495593][ T5777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 878.617486][T14746] loop0: detected capacity change from 0 to 8 [ 878.787693][T14746] SQUASHFS error: lzo decompression failed, data probably corrupt [ 878.795754][T14746] SQUASHFS error: Failed to read block 0x82: -5 [ 878.802074][T14746] SQUASHFS error: Unable to read metadata cache entry [80] [ 878.809461][T14746] SQUASHFS error: Unable to read inode 0x11f [ 881.227380][T14771] loop5: detected capacity change from 0 to 32768 [ 881.284988][T14771] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2235 (14771) [ 881.561930][T14771] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 881.572344][T14771] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 881.581109][T14771] BTRFS info (device loop5): using free space tree [ 881.709526][T14771] BTRFS info (device loop5): enabling ssd optimizations [ 881.716847][T14771] BTRFS info (device loop5): auto enabling async discard [ 881.882298][ T28] audit: type=1800 audit(3726560570.660:99): pid=14771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2235" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 883.696379][T14802] vivid-007: disconnect [ 883.796443][T14799] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 883.914467][T14770] vivid-007: reconnect [ 884.141598][ T6110] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 885.671675][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 120 seconds [ 885.682792][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 180 seconds [ 887.225720][ T27] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 887.917672][ T27] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 887.947190][ T27] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 887.981960][ T27] usb 2-1: config 1 interface 0 has no altsetting 0 [ 887.995982][ T27] usb 2-1: string descriptor 0 read error: -22 [ 888.005894][ T27] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 888.035908][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.493562][ T27] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 888.539199][ T27] keytouch 0003:0926:3333.000C: usb_submit_urb(out) failed: -90 [ 888.572932][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.000C/input/input23 [ 888.748155][ T27] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 888.806027][ T27] usb 2-1: USB disconnect, device number 27 [ 888.944875][T14870] fido_id[14870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 889.161095][T14849] ceph: No mds server is up or the cluster is laggy [ 890.235791][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 891.769835][T14901] input: syz1 as /devices/virtual/input/input25 [ 891.788953][T14901] input: failed to attach handler leds to device input25, error: -6 [ 892.323533][ T28] audit: type=1326 audit(3726560581.100:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 892.459858][ T28] audit: type=1326 audit(3726560581.220:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 892.760635][ T28] audit: type=1326 audit(3726560581.230:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 892.867495][ T28] audit: type=1326 audit(3726560581.240:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 892.892975][ T28] audit: type=1326 audit(3726560581.240:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 892.917422][ T28] audit: type=1326 audit(3726560581.300:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 892.941656][ T28] audit: type=1326 audit(3726560581.340:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 892.965887][ T28] audit: type=1326 audit(3726560581.360:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 892.991369][ T28] audit: type=1326 audit(3726560581.380:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 893.015527][ T28] audit: type=1326 audit(3726560581.410:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14893 comm="syz.0.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c6d9cdd9 code=0x7ffc0000 [ 893.655107][ T788] libceph: connect (1)[c::]:6789 error -101 [ 893.789085][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 894.258841][ T9969] libceph: connect (1)[c::]:6789 error -101 [ 894.298823][ T9969] libceph: mon0 (1)[c::]:6789 connect error [ 894.565152][T14920] ceph: No mds server is up or the cluster is laggy [ 895.869554][ T789] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 896.103250][ T789] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 896.121409][ T789] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 896.132040][ T789] usb 2-1: config 1 interface 0 has no altsetting 0 [ 896.159424][ T789] usb 2-1: string descriptor 0 read error: -22 [ 896.172320][ T789] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 896.203782][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.669329][ T789] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 896.691270][ T789] keytouch 0003:0926:3333.000D: usb_submit_urb(out) failed: -90 [ 896.706841][ T27] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 896.727000][ T789] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.000D/input/input26 [ 896.861345][ T789] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 896.938301][ T27] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 896.960076][ T27] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 896.973201][ T789] usb 2-1: USB disconnect, device number 28 [ 897.015159][ T27] usb 1-1: config 1 interface 0 has no altsetting 0 [ 897.022189][T14963] fido_id[14963]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.000D/report_descriptor': No such device [ 897.063412][ T27] usb 1-1: string descriptor 0 read error: -22 [ 897.073291][ T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 897.122414][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.528023][ T27] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 898.591058][ T27] keytouch 0003:0926:3333.000E: usb_submit_urb(out) failed: -90 [ 898.604129][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.000E/input/input28 [ 898.835910][ T789] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 899.629150][ T27] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 899.647736][ T27] usb 1-1: USB disconnect, device number 24 [ 899.829046][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.839982][ T789] usb 2-1: config 0 has no interfaces? [ 899.845534][ T789] usb 2-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 899.935316][T14985] fido_id[14985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 900.769667][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.793519][ T789] usb 2-1: config 0 descriptor?? [ 901.792076][T14999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2296'. [ 902.223694][T15002] loop7: detected capacity change from 0 to 32768 [ 902.235298][T15005] loop0: detected capacity change from 0 to 8 [ 902.265267][T15002] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2297 (15002) [ 902.286002][T15005] SQUASHFS error: lzo decompression failed, data probably corrupt [ 902.294087][T15005] SQUASHFS error: Failed to read block 0x82: -5 [ 902.300495][T15005] SQUASHFS error: Unable to read metadata cache entry [80] [ 902.308286][T15005] SQUASHFS error: Unable to read inode 0x11f [ 902.738650][ T789] usb 2-1: USB disconnect, device number 29 [ 902.927727][T15002] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 902.938125][T15002] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 902.946847][T15002] BTRFS info (device loop7): using free space tree [ 902.955776][T14995] Bluetooth: hci4: command 0x0406 tx timeout [ 903.099679][T15002] BTRFS info (device loop7): enabling ssd optimizations [ 903.106778][T15002] BTRFS info (device loop7): auto enabling async discard [ 903.933052][T15023] binder: 15022:15023 ioctl c0306201 0 returned -14 [ 903.940044][T15023] binder: 15022:15023 ioctl c0306201 200000000680 returned -14 [ 904.037767][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 904.037782][ T28] audit: type=1800 audit(3726560592.830:117): pid=15002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2297" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 904.165745][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 904.261814][T15034] vivid-007: disconnect [ 904.402194][T15001] vivid-007: reconnect [ 904.653941][T11752] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 905.894615][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2306'. [ 907.275853][T15054] loop0: detected capacity change from 0 to 8 [ 907.316994][T15054] SQUASHFS error: lzo decompression failed, data probably corrupt [ 907.325716][T15054] SQUASHFS error: Failed to read block 0x82: -5 [ 907.334528][T15054] SQUASHFS error: Unable to read metadata cache entry [80] [ 907.342099][T15054] SQUASHFS error: Unable to read inode 0x11f [ 907.436967][T15059] binder: 15056:15059 ioctl c0306201 0 returned -14 [ 907.444372][T15059] binder: 15056:15059 ioctl c0306201 200000000680 returned -14 [ 907.916252][ T27] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 908.165101][ T27] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 908.625723][ T27] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 908.636011][ T27] usb 8-1: config 1 interface 0 has no altsetting 0 [ 908.650420][ T27] usb 8-1: string descriptor 0 read error: -22 [ 908.657950][ T27] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 908.667374][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.106958][T15076] loop5: detected capacity change from 0 to 4096 [ 909.321084][ T27] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 910.203132][ T27] keytouch 0003:0926:3333.000F: usb_submit_urb(out) failed: -90 [ 910.215281][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0926:3333.000F/input/input29 [ 910.340738][ T27] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 911.194401][ T27] usb 8-1: USB disconnect, device number 4 [ 911.313463][T15089] fido_id[15089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 912.231486][T15098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2319'. [ 912.584774][T15103] loop1: detected capacity change from 0 to 8 [ 912.604607][T15103] SQUASHFS error: lzo decompression failed, data probably corrupt [ 912.612793][T15103] SQUASHFS error: Failed to read block 0x82: -5 [ 912.619308][T15103] SQUASHFS error: Unable to read metadata cache entry [80] [ 912.626672][T15103] SQUASHFS error: Unable to read inode 0x11f [ 913.544011][T15104] binder: 15095:15104 ioctl c0306201 0 returned -14 [ 913.553472][T15104] binder: 15095:15104 ioctl c0306201 200000000680 returned -14 [ 914.534511][T15114] loop7: detected capacity change from 0 to 4096 [ 916.289467][ T5896] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 210 seconds [ 916.303611][ T24] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 150 seconds [ 916.915525][ T28] audit: type=1326 audit(3726560605.650:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.086048][ T27] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 917.264743][ T28] audit: type=1326 audit(3726560605.650:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.546395][ T28] audit: type=1326 audit(3726560605.660:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.605765][ T28] audit: type=1326 audit(3726560605.660:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.736749][ T27] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 917.749610][ T27] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 917.760048][ T27] usb 8-1: config 1 interface 0 has no altsetting 0 [ 917.767196][ T28] audit: type=1326 audit(3726560605.670:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.792955][ T28] audit: type=1326 audit(3726560605.670:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.818428][ T28] audit: type=1326 audit(3726560605.670:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.843827][ T27] usb 8-1: string descriptor 0 read error: -22 [ 917.850406][ T27] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 917.869229][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.898463][ T28] audit: type=1326 audit(3726560605.670:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.959680][ T28] audit: type=1326 audit(3726560605.680:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 917.995056][ T28] audit: type=1326 audit(3726560605.680:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2327" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746fd9cdd9 code=0x7ffc0000 [ 918.358548][ T27] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 918.377212][ T27] keytouch 0003:0926:3333.0010: usb_submit_urb(out) failed: -90 [ 918.398148][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0926:3333.0010/input/input30 [ 918.518055][ T27] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 918.571178][ T789] usb 8-1: USB disconnect, device number 5 [ 918.642271][T15145] fido_id[15145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 919.147864][T15151] binder: 15149:15151 ioctl c0306201 0 returned -14 [ 920.423294][T14995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 920.446252][T14995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 920.455551][T14995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 920.465366][T14995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 920.473466][T14995] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 920.550673][T14995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 920.715338][T15159] lo speed is unknown, defaulting to 1000 [ 920.730534][T15162] loop5: detected capacity change from 0 to 4096 [ 921.080888][ T6039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.268145][ T6039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.974359][ T6039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.123941][T15183] binder: 15180:15183 ioctl c0306201 0 returned -14 [ 922.226730][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 922.498825][ T6039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.636807][T14995] Bluetooth: hci2: command tx timeout [ 923.930030][ T8] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 924.034750][ T8] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 924.055759][ T8] usb 6-1: config 1 interface 0 has no altsetting 0 [ 924.099143][ T8] usb 6-1: string descriptor 0 read error: -22 [ 924.105527][ T8] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 924.152510][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.307264][T15159] chnl_net:caif_netlink_parms(): no params data found [ 924.613148][ T8] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 924.646135][ T8] keytouch 0003:0926:3333.0011: usb_submit_urb(out) failed: -90 [ 924.678132][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:0926:3333.0011/input/input31 [ 924.721798][T14995] Bluetooth: hci2: command tx timeout [ 924.826060][ T8] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 925.608129][ T8] usb 6-1: USB disconnect, device number 17 [ 925.824405][T15207] fido_id[15207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 926.795787][T14995] Bluetooth: hci2: command tx timeout [ 927.029459][T15226] binder: 15225:15226 ioctl c0306201 0 returned -14 [ 927.926985][T15159] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.934277][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.715904][T15159] bridge_slave_0: entered allmulticast mode [ 928.764765][T15159] bridge_slave_0: entered promiscuous mode [ 928.798665][T15159] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.822685][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.846045][T15159] bridge_slave_1: entered allmulticast mode [ 928.870216][T15159] bridge_slave_1: entered promiscuous mode [ 928.889972][T14995] Bluetooth: hci2: command tx timeout [ 929.157733][T15159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.258916][T15159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.811454][ T9969] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 929.873624][T15159] team0: Port device team_slave_0 added [ 930.017320][ T9969] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 930.045375][ T9969] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 930.074530][ T9969] usb 6-1: config 1 interface 0 has no altsetting 0 [ 930.096693][ T9969] usb 6-1: string descriptor 0 read error: -22 [ 930.115477][ T9969] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 930.126916][T15159] team0: Port device team_slave_1 added [ 930.138723][ T9969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.531657][T15159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.580654][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.744536][T15159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.799529][ T9969] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 930.822766][ T9969] keytouch 0003:0926:3333.0012: usb_submit_urb(out) failed: -90 [ 930.838176][T15159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.900709][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.970356][ T9969] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:0926:3333.0012/input/input32 [ 931.003259][T15159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.177946][ T6039] hsr_slave_0: left promiscuous mode [ 931.193592][ T9969] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 931.220111][ T6039] hsr_slave_1: left promiscuous mode [ 931.238338][ T9969] usb 6-1: USB disconnect, device number 18 [ 931.442311][T15274] fido_id[15274]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 931.463030][ T6039] veth1_macvtap: left promiscuous mode [ 931.483387][ T6039] veth0_macvtap: left promiscuous mode [ 931.499932][ T6039] veth1_vlan: left promiscuous mode [ 931.505446][ T6039] veth0_vlan: left promiscuous mode [ 931.531153][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2360'. [ 931.640486][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.649967][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.905810][T15283] loop7: detected capacity change from 0 to 8 [ 932.186372][T15283] SQUASHFS error: lzo decompression failed, data probably corrupt [ 932.194478][T15283] SQUASHFS error: Failed to read block 0x82: -5 [ 932.201004][T15283] SQUASHFS error: Unable to read metadata cache entry [80] [ 932.209040][T15283] SQUASHFS error: Unable to read inode 0x11f [ 932.497109][T15287] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2361'. [ 934.390685][ T6039] bond0 (unregistering): Released all slaves [ 934.630674][T15159] hsr_slave_0: entered promiscuous mode [ 934.645051][T15159] hsr_slave_1: entered promiscuous mode [ 934.653597][T15159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 934.690556][T15159] Cannot create hsr debugfs directory [ 936.677966][ T6039] IPVS: stop unused estimator thread 0... [ 937.003574][T15327] loop7: detected capacity change from 0 to 32768 [ 937.016618][T15327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2371 (15327) [ 937.060433][T15327] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 937.070734][T15327] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 937.079472][T15327] BTRFS info (device loop7): using free space tree [ 937.215983][T15327] BTRFS info (device loop7): enabling ssd optimizations [ 937.223078][T15327] BTRFS info (device loop7): auto enabling async discard [ 937.285668][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 937.285684][ T28] audit: type=1800 audit(3726560626.050:138): pid=15327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2371" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 937.530766][T15354] vivid-007: disconnect [ 938.448593][T15326] vivid-007: reconnect [ 938.679983][T11752] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 940.143495][T15159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 940.214032][T15159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 940.382980][T15159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 940.499840][T15159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 941.331352][T11578] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 941.552845][T15159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.562856][T11578] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 941.592061][T11578] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 941.614057][T15159] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.622179][T11578] usb 8-1: config 1 interface 0 has no altsetting 0 [ 941.639986][T11578] usb 8-1: string descriptor 0 read error: -22 [ 941.647611][T11578] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 941.659421][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.666598][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.675240][T11578] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.718222][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.725471][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.117044][T11578] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 942.143200][T11578] keytouch 0003:0926:3333.0013: usb_submit_urb(out) failed: -90 [ 942.192257][T11578] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0926:3333.0013/input/input33 [ 942.248058][T15383] loop5: detected capacity change from 0 to 40427 [ 942.286913][T15383] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 942.293324][T15383] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 942.382292][T15383] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2381'. [ 942.397047][T11578] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 942.429168][T15383] overlayfs: failed to resolve './file2': -2 [ 942.496246][T11578] usb 8-1: USB disconnect, device number 6 [ 942.544087][T15159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.776804][T15159] veth0_vlan: entered promiscuous mode [ 942.804747][T15404] fido_id[15404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 942.835009][T15159] veth1_vlan: entered promiscuous mode [ 942.941437][T15159] veth0_macvtap: entered promiscuous mode [ 943.034754][T15159] veth1_macvtap: entered promiscuous mode [ 943.065719][ T5833] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 943.113307][T15159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.160037][T15159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.209144][T15159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.241175][T15159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.274074][T15159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.301650][ T5833] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 943.325981][T15159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.346190][ T5833] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 943.387940][ T5833] usb 6-1: config 1 interface 0 has no altsetting 0 [ 943.425009][ T5833] usb 6-1: string descriptor 0 read error: -22 [ 943.440880][ T5833] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 943.475774][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.638087][ T6977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.673320][ T6977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.873220][T11335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.915873][T11335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.974261][ T5833] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 944.004052][ T5833] keytouch 0003:0926:3333.0014: usb_submit_urb(out) failed: -90 [ 944.043176][ T5833] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:0926:3333.0014/input/input34 [ 944.236000][ T8] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 945.094407][ T5833] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 945.142059][ T5833] usb 6-1: USB disconnect, device number 19 [ 945.163500][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.222846][ T8] usb 1-1: config 0 has no interfaces? [ 945.306468][ T8] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 945.343971][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.408742][ T8] usb 1-1: config 0 descriptor?? [ 945.550880][T15446] fido_id[15446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 945.911730][T12822] usb 1-1: USB disconnect, device number 25 [ 946.476668][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 180 seconds [ 946.488278][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 240 seconds [ 948.019024][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.069459][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.082375][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.100296][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.110603][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 948.120035][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.135937][ T789] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 948.278917][T15473] lo speed is unknown, defaulting to 1000 [ 948.359822][ T789] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 948.399636][ T789] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 948.429107][ T789] usb 8-1: config 1 interface 0 has no altsetting 0 [ 948.454151][ T789] usb 8-1: string descriptor 0 read error: -22 [ 948.462986][ T789] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 948.482599][ T789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.988801][ T789] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 949.044019][T15473] chnl_net:caif_netlink_parms(): no params data found [ 949.137671][T15473] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.145546][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.154425][T15473] bridge_slave_0: entered allmulticast mode [ 949.162451][T15473] bridge_slave_0: entered promiscuous mode [ 949.180719][T15473] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.203677][ T789] keytouch 0003:0926:3333.0015: usb_submit_urb(out) failed: -90 [ 949.236296][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.255921][ T789] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0926:3333.0015/input/input35 [ 949.277938][T15473] bridge_slave_1: entered allmulticast mode [ 949.289700][T15473] bridge_slave_1: entered promiscuous mode [ 949.357066][T15473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.399407][ T789] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 949.434546][T15473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.463959][ T789] usb 8-1: USB disconnect, device number 7 [ 949.537626][T15473] team0: Port device team_slave_0 added [ 949.596442][T15473] team0: Port device team_slave_1 added [ 949.697626][T15473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.704640][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.751045][T15507] fido_id[15507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 949.791380][T15473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.814109][T15473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.825538][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.905123][T15473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.039760][T15473] hsr_slave_0: entered promiscuous mode [ 950.057678][T15473] hsr_slave_1: entered promiscuous mode [ 950.064013][T15473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 950.095949][T15473] Cannot create hsr debugfs directory [ 950.158558][ T5785] Bluetooth: hci1: command tx timeout [ 950.598344][T15473] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.753070][T15536] fuse: Bad value for 'fd' [ 950.810887][T15473] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.099323][T15473] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.687911][T15473] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.711327][ T5833] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 951.921399][ T5833] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 951.946479][ T5833] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 951.959245][T15563] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2413'. [ 951.977112][ T5833] usb 1-1: config 1 interface 0 has no altsetting 0 [ 952.008834][ T5833] usb 1-1: string descriptor 0 read error: -22 [ 952.015186][ T5833] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 952.045668][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.139356][T15473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 952.222213][T15473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 952.235981][ T5785] Bluetooth: hci1: command tx timeout [ 952.252081][T15473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 952.315692][T15566] loop7: detected capacity change from 0 to 8 [ 952.350021][T15566] SQUASHFS error: lzo decompression failed, data probably corrupt [ 952.358090][T15566] SQUASHFS error: Failed to read block 0x82: -5 [ 952.364397][T15566] SQUASHFS error: Unable to read metadata cache entry [80] [ 952.371729][T15566] SQUASHFS error: Unable to read inode 0x11f [ 952.431704][T15473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 953.054233][ T5833] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 953.068122][ T5833] keytouch 0003:0926:3333.0016: usb_submit_urb(out) failed: -90 [ 953.081315][ T5833] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.0016/input/input36 [ 953.184933][T15473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.252598][ T5833] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 953.268007][T15473] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.320051][ T5833] usb 1-1: USB disconnect, device number 26 [ 953.329890][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.337091][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.442287][T15574] binder: 15571:15574 ioctl c0306201 0 returned -14 [ 953.450990][T15574] binder: 15571:15574 ioctl c0306201 200000000680 returned -14 [ 953.471123][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.478428][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.262518][T15573] fido_id[15573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 954.300016][T15473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 954.315871][ T5785] Bluetooth: hci1: command tx timeout [ 954.618526][T15473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.817558][T15473] veth0_vlan: entered promiscuous mode [ 955.884695][T15473] veth1_vlan: entered promiscuous mode [ 955.994748][T15473] veth0_macvtap: entered promiscuous mode [ 956.005699][T15473] veth1_macvtap: entered promiscuous mode [ 956.024903][T15473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.035635][T15473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.052325][T15473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.396017][ T5785] Bluetooth: hci1: command tx timeout [ 956.682929][T15473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.774573][T15473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.823420][T15616] binder_alloc: 15613: binder_alloc_buf, no vma [ 956.833359][T15616] binder: 15613:15616 ioctl c0306201 0 returned -14 [ 956.916842][T15473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.047265][T15473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.127391][T15473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.162613][T15473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.171614][T15473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.842037][T15630] fuse: Bad value for 'fd' [ 957.857323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.865200][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.987883][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.023640][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.678945][T15652] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2437'. [ 959.691764][T15653] binder: 15649:15653 ioctl c0306201 0 returned -14 [ 960.014624][T15652] loop5: detected capacity change from 0 to 8 [ 960.057018][T15652] SQUASHFS error: lzo decompression failed, data probably corrupt [ 960.065220][T15652] SQUASHFS error: Failed to read block 0x82: -5 [ 960.071655][T15652] SQUASHFS error: Unable to read metadata cache entry [80] [ 960.079200][T15652] SQUASHFS error: Unable to read inode 0x11f [ 960.100460][ T8] IPVS: starting estimator thread 0... [ 960.277187][T15656] IPVS: using max 19 ests per chain, 45600 per kthread [ 960.953800][T15665] loop7: detected capacity change from 0 to 32768 [ 961.045353][T15665] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2440 (15665) [ 961.126969][T15665] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 961.137612][T15665] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 961.146361][T15665] BTRFS info (device loop7): using free space tree [ 961.634771][T15665] BTRFS info (device loop7): enabling ssd optimizations [ 961.641944][T15665] BTRFS info (device loop7): auto enabling async discard [ 961.693197][ T28] audit: type=1800 audit(3726560650.480:139): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2440" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 961.868688][T15694] vivid-007: disconnect [ 962.006992][T15664] vivid-007: reconnect [ 962.264580][T15701] binder: 15697:15701 ioctl c0306201 0 returned -14 [ 962.318748][ T5833] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 962.670876][T11752] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 962.720130][ T5833] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 962.838198][ T5833] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 962.988072][ T5833] usb 1-1: config 1 interface 0 has no altsetting 0 [ 963.018191][ T5833] usb 1-1: string descriptor 0 read error: -22 [ 963.035006][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2449'. [ 963.059249][ T5833] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 963.102997][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.506817][T15711] loop5: detected capacity change from 0 to 8 [ 963.632615][T15714] overlayfs: failed to resolve './file1': -2 [ 964.406500][T15711] SQUASHFS error: lzo decompression failed, data probably corrupt [ 964.414774][T15711] SQUASHFS error: Failed to read block 0x82: -5 [ 964.421224][T15711] SQUASHFS error: Unable to read metadata cache entry [80] [ 964.428550][T15711] SQUASHFS error: Unable to read inode 0x11f [ 965.238203][ T5833] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 965.265482][ T5833] keytouch 0003:0926:3333.0017: usb_submit_urb(out) failed: -90 [ 965.318018][ T5833] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.0017/input/input37 [ 965.467670][ T5833] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 965.551037][ T5833] usb 1-1: USB disconnect, device number 27 [ 965.725183][T15724] fido_id[15724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 966.065386][T15734] loop5: detected capacity change from 0 to 32768 [ 966.092660][T15734] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2456 (15734) [ 966.124171][T15734] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 966.134604][T15734] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 966.143411][T15734] BTRFS info (device loop5): using free space tree [ 966.248160][T15734] BTRFS info (device loop5): enabling ssd optimizations [ 966.255454][T15734] BTRFS info (device loop5): auto enabling async discard [ 966.315877][ T28] audit: type=1800 audit(3726560655.080:140): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2456" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 966.472385][T15752] vivid-007: disconnect [ 966.742397][T15733] vivid-007: reconnect [ 967.295573][T15473] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 968.832978][T15772] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2461'. [ 969.189657][T15776] loop7: detected capacity change from 0 to 8 [ 969.291147][T15776] SQUASHFS error: lzo decompression failed, data probably corrupt [ 969.299308][T15776] SQUASHFS error: Failed to read block 0x82: -5 [ 969.305687][T15776] SQUASHFS error: Unable to read metadata cache entry [80] [ 969.312958][T15776] SQUASHFS error: Unable to read inode 0x11f [ 970.952238][T15788] loop7: detected capacity change from 0 to 32768 [ 970.966485][T15788] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2466 (15788) [ 971.013663][T15788] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 971.025301][T15788] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 971.034038][T15788] BTRFS info (device loop7): using free space tree [ 971.395924][ T5833] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 971.459476][T15788] BTRFS info (device loop7): enabling ssd optimizations [ 971.466602][T15788] BTRFS info (device loop7): auto enabling async discard [ 971.617985][ T28] audit: type=1800 audit(3726560660.410:141): pid=15788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2466" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 971.679473][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.691237][ T5833] usb 1-1: config 0 has no interfaces? [ 971.696787][ T5833] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 971.705929][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.736134][ T5833] usb 1-1: config 0 descriptor?? [ 971.862685][T15813] vivid-007: disconnect [ 972.006606][T15787] vivid-007: reconnect [ 972.187606][T11752] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 972.399209][ T5833] usb 1-1: USB disconnect, device number 28 [ 972.811683][T15821] binder: 15819:15821 ioctl c0306201 0 returned -14 [ 974.396845][T12822] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 974.658686][T12822] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 974.794179][T12822] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 974.907557][T12822] usb 6-1: config 1 interface 0 has no altsetting 0 [ 974.995382][T12822] usb 6-1: string descriptor 0 read error: -22 [ 975.016411][T12822] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 975.058092][T12822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.174983][T15851] binder: 15847:15851 ioctl c0306201 0 returned -14 [ 976.251384][T12822] usbhid 6-1:1.0: can't add hid device: -71 [ 976.637036][ T5833] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 977.252616][T12822] usbhid: probe of 6-1:1.0 failed with error -71 [ 977.541458][ T5833] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 977.606258][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 977.647039][ T5833] usb 1-1: Product: syz [ 977.666113][ T5833] usb 1-1: SerialNumber: syz [ 978.035307][ T5833] usb 1-1: config 0 descriptor?? [ 978.884685][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 210 seconds [ 978.895734][ T41] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 270 seconds [ 979.651242][T12822] usb 6-1: USB disconnect, device number 20 [ 980.273435][ T5833] usb 1-1: USB disconnect, device number 29 [ 983.448735][T14995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 983.469515][T14995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 983.487086][T14995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 983.495205][T14995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 983.506015][T14995] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 983.514217][T14995] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 983.664995][T15912] lo speed is unknown, defaulting to 1000 [ 985.131949][T15912] chnl_net:caif_netlink_parms(): no params data found [ 985.639707][ T5785] Bluetooth: hci0: command tx timeout [ 985.800141][T15940] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2500'. [ 985.889205][T15947] Bluetooth: MGMT ver 1.22 [ 985.894070][T15912] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.901678][T15912] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.909129][T15912] bridge_slave_0: entered allmulticast mode [ 985.916912][T15912] bridge_slave_0: entered promiscuous mode [ 985.926468][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.933710][T15912] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.941529][T15912] bridge_slave_1: entered allmulticast mode [ 985.949367][T15912] bridge_slave_1: entered promiscuous mode [ 986.047658][T15912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.070646][T15912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.124990][T15912] team0: Port device team_slave_0 added [ 986.141310][T15912] team0: Port device team_slave_1 added [ 986.209936][T15912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.223358][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.278189][T15912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.311509][T15912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.319661][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.363500][T15912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.737163][T15912] hsr_slave_0: entered promiscuous mode [ 986.759715][T15912] hsr_slave_1: entered promiscuous mode [ 986.776082][T15912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.806238][T15912] Cannot create hsr debugfs directory [ 987.111429][T15965] loop7: detected capacity change from 0 to 32768 [ 987.123418][T15965] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2505 (15965) [ 987.169361][T15965] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 987.179644][T15965] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 987.189222][T15965] BTRFS info (device loop7): using free space tree [ 987.302401][T15965] BTRFS info (device loop7): enabling ssd optimizations [ 987.309655][T15965] BTRFS info (device loop7): auto enabling async discard [ 987.381358][ T28] audit: type=1800 audit(3726560676.150:142): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2505" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 987.521108][T15912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.432794][ T5785] Bluetooth: hci0: command tx timeout [ 988.773781][T15912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.864056][T11752] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 989.072781][T16000] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2512'. [ 989.193528][T15912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.509850][T15912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.156616][T15912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 990.180900][T15912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 990.193955][T15912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 990.239636][T15912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 990.475968][ T5785] Bluetooth: hci0: command tx timeout [ 990.768215][T16023] binder: 16016:16023 ioctl c0306201 0 returned -14 [ 990.776499][T16023] binder: 16016:16023 ioctl c0306201 0 returned -14 [ 991.395122][T15912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.535212][T15912] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.620339][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.627589][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.657235][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.664497][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.174560][T15912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.326591][T15912] veth0_vlan: entered promiscuous mode [ 992.350595][T15912] veth1_vlan: entered promiscuous mode [ 992.378489][T16035] loop1: detected capacity change from 0 to 32768 [ 992.390342][T16035] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2518 (16035) [ 992.417058][T16035] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 992.428067][T16035] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 992.436830][T16035] BTRFS info (device loop1): using free space tree [ 992.450045][T15912] veth0_macvtap: entered promiscuous mode [ 992.483543][T15912] veth1_macvtap: entered promiscuous mode [ 992.546146][T16035] BTRFS info (device loop1): enabling ssd optimizations [ 992.553157][T16035] BTRFS info (device loop1): auto enabling async discard [ 992.561325][ T5785] Bluetooth: hci0: command tx timeout [ 992.600038][T15912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.611148][T15912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.622153][T15912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.634229][T15912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.655790][T15912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.663781][ T28] audit: type=1800 audit(3726560681.450:143): pid=16035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2518" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 992.703309][T15912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.729799][T15912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.752872][T15912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.769480][T15912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.049485][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.056025][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.081482][T15912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.138653][T15912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.154068][T15912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.169093][T15912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.178969][T15912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.337771][T15159] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 993.569950][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.593624][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.678948][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.715738][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.223958][T16084] binder: 16082:16084 ioctl c0306201 0 returned -14 [ 994.232015][T16084] binder: 16082:16084 ioctl c0306201 0 returned -14 [ 995.090847][T16090] binder: 16088:16090 ioctl c0306201 200000000080 returned -14 [ 995.193569][T16090] binder: 16088:16090 ioctl c0306201 2000000003c0 returned -14 [ 996.555154][T16101] loop5: detected capacity change from 0 to 32768 [ 996.581470][T16101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2529 (16101) [ 996.606105][T16101] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 996.616504][T16101] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 996.625715][T16101] BTRFS info (device loop5): using free space tree [ 996.736903][T16101] BTRFS info (device loop5): enabling ssd optimizations [ 996.743952][T16101] BTRFS info (device loop5): auto enabling async discard [ 996.805736][ T28] audit: type=1800 audit(3726560685.590:144): pid=16101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2529" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 997.450105][T15473] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 997.474578][T16129] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2534'. [ 997.635870][T12822] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 997.744208][T16136] binder: 16134:16136 ioctl c0306201 0 returned -14 [ 997.929899][T12822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.038756][T12822] usb 1-1: config 0 has no interfaces? [ 998.107739][T12822] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 998.207077][T12822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.358583][ T5762] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop5 scanned by udevd (5762) [ 998.415002][T12822] usb 1-1: config 0 descriptor?? [ 998.969624][T16150] loop7: detected capacity change from 0 to 512 [ 998.977372][T16150] EXT4-fs: Ignoring removed bh option [ 1002.136418][T16150] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1002.136724][T16150] EXT4-fs: failed to create workqueue [ 1002.153272][T16150] EXT4-fs (loop7): mount failed [ 1002.807827][ T27] usb 1-1: USB disconnect, device number 30 [ 1003.272093][T16170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2544'. [ 1004.495923][T16181] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2546'. [ 1004.648207][T16170] loop0: detected capacity change from 0 to 8 [ 1004.672190][T11335] Bluetooth: hci3: Frame reassembly failed (-84) [ 1004.738190][ T789] IPVS: starting estimator thread 0... [ 1004.798763][T16170] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1004.852149][T16170] SQUASHFS error: Failed to read block 0x82: -5 [ 1004.885828][T16191] IPVS: using max 18 ests per chain, 43200 per kthread [ 1004.925685][T16170] SQUASHFS error: Unable to read metadata cache entry [80] [ 1004.933044][T16170] SQUASHFS error: Unable to read inode 0x11f [ 1005.065739][ T789] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1005.075984][ T5833] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1005.277706][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.297781][ T789] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1005.313262][ T5833] usb 2-1: config 0 has no interfaces? [ 1005.319071][ T789] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1005.327995][ T5833] usb 2-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 1005.337542][ T789] usb 6-1: Product: syz [ 1005.341745][ T789] usb 6-1: SerialNumber: syz [ 1005.346566][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.361401][ T789] usb 6-1: config 0 descriptor?? [ 1005.368419][ T5833] usb 2-1: config 0 descriptor?? [ 1005.782042][T16202] loop7: detected capacity change from 0 to 512 [ 1005.789802][T16202] EXT4-fs: Ignoring removed bh option [ 1006.716119][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1009.148312][T16202] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1009.148712][T16202] EXT4-fs: failed to create workqueue [ 1009.164419][T16202] EXT4-fs (loop7): mount failed [ 1009.176033][ T789] usb 6-1: USB disconnect, device number 21 [ 1009.709989][ T5896] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 300 seconds [ 1009.720784][ T24] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 240 seconds [ 1009.948164][ T9] usb 2-1: USB disconnect, device number 30 [ 1010.408118][T16219] loop5: detected capacity change from 0 to 512 [ 1010.415399][T16219] EXT4-fs: Ignoring removed bh option [ 1010.490316][T16219] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1011.041495][T16219] EXT4-fs (loop5): 1 truncate cleaned up [ 1011.059020][T16219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.968229][T16219] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2555: bg 0: block 465: padding at end of block bitmap is not set [ 1011.999782][T16219] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1012.013151][T16219] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1012.013151][T16219] [ 1012.837826][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1012.855614][ T49] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1012.855614][ T49] [ 1012.909492][ T49] EXT4-fs (loop5): Total free blocks count 0 [ 1012.960461][T16236] loop7: detected capacity change from 0 to 512 [ 1012.972522][T16236] EXT4-fs: Ignoring removed bh option [ 1013.106735][T16236] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1013.177927][T16236] EXT4-fs (loop7): 1 truncate cleaned up [ 1013.191076][T16236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.865754][ T49] EXT4-fs (loop5): Free/Dirty block details [ 1013.925664][ T49] EXT4-fs (loop5): free_blocks=0 [ 1013.953330][ T49] EXT4-fs (loop5): dirty_blocks=1 [ 1013.979939][ T49] EXT4-fs (loop5): Block reservation details [ 1014.969188][T16247] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2558'. [ 1015.000716][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.314145][T16258] loop0: detected capacity change from 0 to 512 [ 1015.353425][T16258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.387720][T16258] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.556059][T12822] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1016.732860][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.913349][T16275] loop5: detected capacity change from 0 to 512 [ 1016.951925][T12822] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1016.961817][T12822] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1016.970164][T12822] usb 8-1: Product: syz [ 1016.974029][T16275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.974683][T12822] usb 8-1: SerialNumber: syz [ 1016.993089][T16275] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1017.005315][T12822] usb 8-1: config 0 descriptor?? [ 1017.146174][ T5833] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1017.367329][T14995] Bluetooth: hci3: command 0x1003 tx timeout [ 1017.374824][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1017.391703][T16279] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2567: iget: bad i_size value: 2533274857506816 [ 1017.407326][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 1017.643341][T16280] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2567: iget: bad i_size value: 2533274857506816 [ 1018.209317][T12822] usb 8-1: USB disconnect, device number 8 [ 1018.233408][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1018.245068][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.283066][ T5833] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1018.299251][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.307384][ T5833] usb 1-1: Product: syz [ 1018.311571][ T5833] usb 1-1: Manufacturer: syz [ 1018.316221][ T5833] usb 1-1: SerialNumber: syz [ 1018.800076][T16289] loop5: detected capacity change from 0 to 512 [ 1018.811827][T16289] EXT4-fs: Ignoring removed bh option [ 1021.176415][T16289] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1021.586094][T16289] EXT4-fs: error -4 creating inode table initialization thread [ 1021.594620][T16289] EXT4-fs (loop5): mount failed [ 1021.951236][T16294] loop7: detected capacity change from 0 to 512 [ 1022.039884][T16294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.123406][T16294] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.241849][ T5833] usb 1-1: unit 0 not found! [ 1022.259540][ T5833] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1022.272143][ T5833] usb 1-1: unit 0 not found! [ 1022.293625][ T5833] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 1022.304968][ T5833] usb 1-1: unit 0 not found! [ 1022.365197][ T5833] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 1022.394480][ T5833] usb 1-1: USB disconnect, device number 31 [ 1022.482445][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1022.686583][T16303] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.2570: iget: bad i_size value: 2533274857506816 [ 1022.707409][T16303] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.2570: iget: bad i_size value: 2533274857506816 [ 1022.769057][T16307] binder: 16306:16307 ioctl c0306201 200000000080 returned -14 [ 1022.940021][T16307] binder: 16306:16307 ioctl c0306201 2000000003c0 returned -14 [ 1023.739193][T16313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2575'. [ 1023.769443][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.827750][T16317] loop5: detected capacity change from 0 to 512 [ 1023.835135][T16317] EXT4-fs: Ignoring removed bh option [ 1024.219029][T16317] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1024.248033][T16317] EXT4-fs (loop5): 1 truncate cleaned up [ 1024.261663][T16317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.412619][T16317] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2576: bg 0: block 465: padding at end of block bitmap is not set [ 1024.643452][T16317] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1024.656465][T16317] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1024.656465][T16317] [ 1025.418937][T16325] loop1: detected capacity change from 0 to 512 [ 1026.144400][T16239] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1026.708060][T16325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.721626][T16239] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1026.721626][T16239] [ 1026.794367][T16239] EXT4-fs (loop5): Total free blocks count 0 [ 1026.815729][T16325] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.834041][T16239] EXT4-fs (loop5): Free/Dirty block details [ 1026.866690][T16239] EXT4-fs (loop5): free_blocks=0 [ 1026.872431][T16239] EXT4-fs (loop5): dirty_blocks=1 [ 1026.890241][T16239] EXT4-fs (loop5): Block reservation details [ 1027.347048][ T789] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1028.108470][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.135798][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1029.234598][ T789] usb 1-1: device descriptor read/all, error -71 [ 1029.382024][T16354] loop1: detected capacity change from 0 to 512 [ 1029.489094][T16354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.518362][T16354] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.984586][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.192932][T16375] loop5: detected capacity change from 0 to 512 [ 1031.272770][T16375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.287804][T16375] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.302858][T16380] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2587'. [ 1032.480648][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.714713][T16397] loop0: detected capacity change from 0 to 512 [ 1032.722085][T16397] EXT4-fs: Ignoring removed bh option [ 1032.863606][T16397] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1032.877073][T16397] EXT4-fs (loop0): 1 truncate cleaned up [ 1032.884023][T16397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.935735][ T789] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1033.170372][ T789] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1033.194067][ T789] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1033.213767][ T789] usb 2-1: Product: syz [ 1033.218773][ T789] usb 2-1: SerialNumber: syz [ 1033.233161][ T789] usb 2-1: config 0 descriptor?? [ 1033.471602][ T789] usb 2-1: USB disconnect, device number 31 [ 1035.601775][T16417] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2600'. [ 1035.657303][T16420] fuse: Bad value for 'fd' [ 1037.132173][T16442] fuse: Bad value for 'fd' [ 1037.409337][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.543840][T16447] loop0: detected capacity change from 0 to 512 [ 1037.646267][ T788] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1037.706959][T16447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1037.775861][T16447] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.840288][ T788] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1038.606889][ T788] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1038.615069][ T788] usb 6-1: Product: syz [ 1038.704255][ T788] usb 6-1: SerialNumber: syz [ 1039.265451][ T788] usb 6-1: config 0 descriptor?? [ 1039.275711][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1039.275867][T14995] Bluetooth: hci3: command 0x1003 tx timeout [ 1039.323378][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.442063][T16462] fuse: Bad value for 'fd' [ 1039.472721][T16464] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2611'. [ 1039.551901][ T788] usb 6-1: USB disconnect, device number 22 [ 1039.762069][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 330 seconds [ 1039.762120][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 270 seconds [ 1040.130286][T16475] fuse: Bad value for 'fd' [ 1040.784363][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1040.970319][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1041.744781][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1041.750984][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1042.200161][T16501] loop0: detected capacity change from 0 to 512 [ 1042.212176][T16501] EXT4-fs: Ignoring removed bh option [ 1042.317025][T16501] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1042.358631][T16501] EXT4-fs (loop0): 1 truncate cleaned up [ 1042.372187][T16501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.539121][T16483] ceph: No mds server is up or the cluster is laggy [ 1042.608108][T16501] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2618: bg 0: block 465: padding at end of block bitmap is not set [ 1042.663047][T16501] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1042.676172][T16501] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1042.676172][T16501] [ 1043.149563][T16500] binder: 16499:16500 ioctl c0306201 2000000003c0 returned -14 [ 1044.128213][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1044.135197][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1044.148648][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1044.154734][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1044.711848][T16239] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1044.884989][T16239] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1044.884989][T16239] [ 1045.025210][T16239] EXT4-fs (loop0): Total free blocks count 0 [ 1045.130983][T16239] EXT4-fs (loop0): Free/Dirty block details [ 1045.237940][T16239] EXT4-fs (loop0): free_blocks=0 [ 1045.514756][T16516] loop1: detected capacity change from 0 to 512 [ 1045.522613][T16516] EXT4-fs: Ignoring removed bh option [ 1047.148733][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1049.543959][T16239] EXT4-fs (loop0): dirty_blocks=1 [ 1049.628047][T16239] EXT4-fs (loop0): Block reservation details [ 1049.634250][T16239] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1049.660422][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.672156][T16516] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1049.672585][T16516] EXT4-fs: failed to create workqueue [ 1049.687686][T16516] EXT4-fs (loop1): mount failed [ 1049.944939][T16520] fuse: Bad value for 'fd' [ 1050.112376][T16524] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2624'. [ 1050.416527][T16529] loop1: detected capacity change from 0 to 512 [ 1052.134901][T16529] EXT4-fs: Ignoring removed bh option [ 1052.156626][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 1052.165638][T16460] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1052.340992][T16529] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1052.355367][T16529] EXT4-fs (loop1): 1 truncate cleaned up [ 1052.362376][T16529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.386929][T16529] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2625: bg 0: block 465: padding at end of block bitmap is not set [ 1052.589958][ T788] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1054.074346][T16535] loop5: detected capacity change from 0 to 512 [ 1054.089010][T16529] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1054.101744][T16529] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1054.101744][T16529] [ 1054.112292][T16529] EXT4-fs (loop1): Total free blocks count 0 [ 1054.118414][T16529] EXT4-fs (loop1): Free/Dirty block details [ 1054.124383][T16529] EXT4-fs (loop1): free_blocks=0 [ 1054.129575][T16529] EXT4-fs (loop1): dirty_blocks=2 [ 1054.134633][T16529] EXT4-fs (loop1): Block reservation details [ 1054.140707][T16529] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 1054.286310][T16239] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1054.400903][T16535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.433669][T16543] loop0: detected capacity change from 0 to 512 [ 1054.440499][T16535] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.459035][T16543] EXT4-fs: Ignoring removed bh option [ 1054.491712][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.498526][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.737148][T16543] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1056.089993][T16550] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2626: iget: bad i_size value: 2533274857506816 [ 1056.547791][T16551] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2626: iget: bad i_size value: 2533274857506816 [ 1056.655898][T16543] EXT4-fs (loop0): 1 truncate cleaned up [ 1056.682294][T16543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.730109][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.832486][T16543] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2628: bg 0: block 465: padding at end of block bitmap is not set [ 1056.900265][T16543] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1056.936566][T16543] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1056.936566][T16543] [ 1057.147505][T16543] EXT4-fs (loop0): Total free blocks count 0 [ 1057.294991][T16543] EXT4-fs (loop0): Free/Dirty block details [ 1057.576851][T16543] EXT4-fs (loop0): free_blocks=0 [ 1057.581970][T16543] EXT4-fs (loop0): dirty_blocks=2 [ 1057.620716][T16564] loop5: detected capacity change from 0 to 512 [ 1057.844888][T16543] EXT4-fs (loop0): Block reservation details [ 1058.075205][T16543] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 1058.195386][T16564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.281315][T16564] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.420176][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1060.091380][T16590] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2632: iget: bad i_size value: 2533274857506816 [ 1060.753315][T16592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2636'. [ 1060.859006][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.148074][T16597] loop0: detected capacity change from 0 to 512 [ 1061.159930][T16597] EXT4-fs: Ignoring removed bh option [ 1063.127118][T16595] loop1: detected capacity change from 0 to 8 [ 1063.138510][ T27] IPVS: starting estimator thread 0... [ 1063.775454][T16597] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1063.785010][T16601] IPVS: using max 18 ests per chain, 43200 per kthread [ 1063.864005][T16597] EXT4-fs: error -4 creating inode table initialization thread [ 1063.872042][T16597] EXT4-fs (loop0): mount failed [ 1063.995497][T16595] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1064.143610][T16595] SQUASHFS error: Failed to read block 0x82: -5 [ 1064.150882][T16595] SQUASHFS error: Unable to read metadata cache entry [80] [ 1064.190132][T16595] SQUASHFS error: Unable to read inode 0x11f [ 1064.386028][T16605] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2637'. [ 1064.481797][T16611] loop7: detected capacity change from 0 to 512 [ 1064.609481][T16611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.639313][T16611] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.922734][T16619] loop1: detected capacity change from 0 to 512 [ 1065.002742][T16619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.331095][T16619] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.723882][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.427189][T16629] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.2640: iget: bad i_size value: 2533274857506816 [ 1066.665825][T16627] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.2640: iget: bad i_size value: 2533274857506816 [ 1067.454776][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.992520][T16641] loop7: detected capacity change from 0 to 512 [ 1068.119985][T16641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.158359][T16641] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1068.193407][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2648'. [ 1069.350732][T16657] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.2642: iget: bad i_size value: 2533274857506816 [ 1069.903251][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 1069.942885][T16654] loop5: detected capacity change from 0 to 8 [ 1069.953631][T16654] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1069.961598][T16654] SQUASHFS error: Failed to read block 0x82: -5 [ 1069.968038][T16654] SQUASHFS error: Unable to read metadata cache entry [80] [ 1069.975266][T16654] SQUASHFS error: Unable to read inode 0x11f [ 1070.154066][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 1070.269375][ T5896] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 360 seconds [ 1070.280317][ T24] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 300 seconds [ 1070.295443][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.392256][T16660] ceph: No mds server is up or the cluster is laggy [ 1070.752086][T16669] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2651'. [ 1071.178793][T16677] loop7: detected capacity change from 0 to 512 [ 1071.190482][T16677] EXT4-fs: Ignoring removed bh option [ 1071.318443][T16677] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1071.366912][T16677] EXT4-fs (loop7): 1 truncate cleaned up [ 1071.380301][T16677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.525163][T16677] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.2652: bg 0: block 465: padding at end of block bitmap is not set [ 1071.619688][T16677] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1071.633098][T16677] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1071.633098][T16677] [ 1072.140184][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1073.683738][T16685] loop0: detected capacity change from 0 to 512 [ 1073.691007][T16685] EXT4-fs: Ignoring removed bh option [ 1073.872032][T16685] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1073.905350][T16685] EXT4-fs (loop0): 1 truncate cleaned up [ 1073.918958][T16685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.076600][T16685] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2654: bg 0: block 465: padding at end of block bitmap is not set [ 1074.135049][T16239] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1074.147538][T16685] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1074.160437][T16685] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1074.160437][T16685] [ 1074.785668][T16239] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1074.785668][T16239] [ 1074.857510][T16239] EXT4-fs (loop7): Total free blocks count 0 [ 1074.895702][T16239] EXT4-fs (loop7): Free/Dirty block details [ 1074.944714][T16239] EXT4-fs (loop7): free_blocks=0 [ 1074.966816][T16239] EXT4-fs (loop7): dirty_blocks=1 [ 1074.992254][T16239] EXT4-fs (loop7): Block reservation details [ 1075.607040][T16240] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1075.696024][T16240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1075.696024][T16240] [ 1075.710922][T16240] EXT4-fs (loop0): Total free blocks count 0 [ 1075.720565][T16240] EXT4-fs (loop0): Free/Dirty block details [ 1075.728808][T16240] EXT4-fs (loop0): free_blocks=0 [ 1075.733913][T16240] EXT4-fs (loop0): dirty_blocks=1 [ 1075.752528][T16240] EXT4-fs (loop0): Block reservation details [ 1076.577615][T16700] loop7: detected capacity change from 0 to 512 [ 1076.584898][T16700] EXT4-fs: Ignoring removed bh option [ 1077.913619][T16704] loop0: detected capacity change from 0 to 512 [ 1077.924599][T16704] EXT4-fs: Ignoring removed bh option [ 1078.120083][T16704] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1078.137895][T16704] EXT4-fs (loop0): 1 truncate cleaned up [ 1078.148827][T16704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.384909][T16704] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2658: bg 0: block 465: padding at end of block bitmap is not set [ 1078.404537][T16700] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1078.536088][T16704] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1078.545164][T16700] EXT4-fs (loop7): 1 truncate cleaned up [ 1078.551103][T16704] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1078.551103][T16704] [ 1078.557884][T16700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.564411][T16704] EXT4-fs (loop0): Total free blocks count 0 [ 1078.582280][T16704] EXT4-fs (loop0): Free/Dirty block details [ 1078.588637][T16704] EXT4-fs (loop0): free_blocks=0 [ 1078.593712][T16704] EXT4-fs (loop0): dirty_blocks=2 [ 1078.598840][T16704] EXT4-fs (loop0): Block reservation details [ 1078.604851][T16704] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 1078.638307][T16699] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.2655: bg 0: block 465: padding at end of block bitmap is not set [ 1078.664484][T16699] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1078.677336][T16699] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1078.677336][T16699] [ 1078.687586][T16699] EXT4-fs (loop7): Total free blocks count 0 [ 1078.693625][T16699] EXT4-fs (loop7): Free/Dirty block details [ 1078.699606][T16699] EXT4-fs (loop7): free_blocks=0 [ 1078.704598][T16699] EXT4-fs (loop7): dirty_blocks=2 [ 1078.709725][T16699] EXT4-fs (loop7): Block reservation details [ 1078.715796][T16699] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 1078.786772][T16710] loop5: detected capacity change from 0 to 512 [ 1078.895488][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.973928][T16710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.046710][T16710] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.151736][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.715788][T16722] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2659: iget: bad i_size value: 2533274857506816 [ 1080.212054][T16723] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2659: iget: bad i_size value: 2533274857506816 [ 1080.345957][T16729] loop7: detected capacity change from 0 to 512 [ 1080.353223][T16729] EXT4-fs: Ignoring removed bh option [ 1080.411744][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1080.503449][T16729] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1080.523758][T16729] EXT4-fs (loop7): 1 truncate cleaned up [ 1080.537248][T16729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.678504][T16729] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.2661: bg 0: block 465: padding at end of block bitmap is not set [ 1080.713737][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1080.792695][T16729] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1080.805716][T16729] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1080.805716][T16729] [ 1080.907413][T16716] ceph: No mds server is up or the cluster is laggy [ 1081.600591][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.680561][T16733] loop0: detected capacity change from 0 to 512 [ 1081.976972][T16733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.135987][T16733] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.573709][T16739] loop1: detected capacity change from 0 to 512 [ 1082.581746][T16739] EXT4-fs: Ignoring removed bh option [ 1082.803277][T16739] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1082.827199][T16739] EXT4-fs (loop1): 1 truncate cleaned up [ 1082.840665][T16739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1083.016616][T16739] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2664: bg 0: block 465: padding at end of block bitmap is not set [ 1083.100895][T16739] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1083.113901][T16739] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1083.113901][T16739] [ 1083.864547][ T4523] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1084.686849][T16743] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.2662: iget: bad i_size value: 2533274857506816 [ 1085.186023][ T4523] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1085.186023][ T4523] [ 1085.282200][ T4523] EXT4-fs (loop7): Total free blocks count 0 [ 1085.307886][ T4523] EXT4-fs (loop7): Free/Dirty block details [ 1085.317272][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.317838][ T4523] EXT4-fs (loop7): free_blocks=0 [ 1085.331517][ T4523] EXT4-fs (loop7): dirty_blocks=1 [ 1085.339712][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.349265][ T4523] EXT4-fs (loop7): Block reservation details [ 1085.634484][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1085.800163][T16755] loop0: detected capacity change from 0 to 512 [ 1085.940264][T16759] loop7: detected capacity change from 0 to 512 [ 1085.952047][T16759] EXT4-fs: Ignoring removed bh option [ 1086.033557][T16759] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1086.073915][T16759] EXT4-fs (loop7): 1 truncate cleaned up [ 1086.087300][T16759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.245660][T16759] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.2665: bg 0: block 465: padding at end of block bitmap is not set [ 1086.330761][T16759] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1086.343907][T16759] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1086.343907][T16759] [ 1087.084124][T16755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.102911][T16764] loop1: detected capacity change from 0 to 8 [ 1087.126725][T16755] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.468377][T16764] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1087.537021][T16766] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.2667: iget: bad i_size value: 2533274857506816 [ 1087.561899][T16766] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.2667: iget: bad i_size value: 2533274857506816 [ 1087.643216][T16764] SQUASHFS error: Failed to read block 0x82: -5 [ 1087.783599][T16764] SQUASHFS error: Unable to read metadata cache entry [80] [ 1087.855874][T16764] SQUASHFS error: Unable to read inode 0x11f [ 1088.104635][T11335] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1088.163581][T11335] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1088.163581][T11335] [ 1088.186772][T11335] EXT4-fs (loop7): Total free blocks count 0 [ 1088.192813][T11335] EXT4-fs (loop7): Free/Dirty block details [ 1088.237086][T11335] EXT4-fs (loop7): free_blocks=0 [ 1088.242091][T11335] EXT4-fs (loop7): dirty_blocks=1 [ 1088.284656][T11335] EXT4-fs (loop7): Block reservation details [ 1089.603795][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.721529][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1089.727768][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1089.988761][ T971] libceph: connect (1)[c::]:6789 error -101 [ 1089.994962][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 1095.168953][ T9969] libceph: connect (1)[c::]:6789 error -101 [ 1095.175416][ T9969] libceph: mon0 (1)[c::]:6789 connect error [ 1095.187895][T16795] loop1: detected capacity change from 0 to 512 [ 1095.195036][T16795] EXT4-fs: Ignoring removed bh option [ 1095.217057][ T9969] libceph: connect (1)[c::]:6789 error -101 [ 1095.223113][ T9969] libceph: mon0 (1)[c::]:6789 connect error [ 1095.249649][T16795] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1095.250106][T16795] EXT4-fs: failed to create workqueue [ 1095.265210][T16795] EXT4-fs (loop1): mount failed [ 1095.289343][T16782] ceph: No mds server is up or the cluster is laggy [ 1095.619511][ T9969] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1095.776916][T16813] loop7: detected capacity change from 0 to 1024 [ 1095.828440][ T9969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.866224][ T9969] usb 6-1: config 0 has no interfaces? [ 1095.875101][ T9969] usb 6-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 1095.884567][ T9969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.900770][ T9969] usb 6-1: config 0 descriptor?? [ 1096.042963][ T67] Bluetooth: hci3: Frame reassembly failed (-84) [ 1096.056582][ T788] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1096.060339][T16813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.259035][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.269864][ T788] usb 1-1: config 0 has no interfaces? [ 1096.275490][ T788] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 1096.285087][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.289672][ T5761] usb 6-1: USB disconnect, device number 23 [ 1096.311519][ T788] usb 1-1: config 0 descriptor?? [ 1096.485664][ T9969] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1096.610513][ T5761] usb 1-1: USB disconnect, device number 35 [ 1096.631258][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.668629][ T9969] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1096.695730][ T9969] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1096.705691][ T9969] usb 2-1: Product: syz [ 1096.717184][ T9969] usb 2-1: SerialNumber: syz [ 1096.732447][ T9969] usb 2-1: config 0 descriptor?? [ 1096.827290][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2683'. [ 1097.363605][T16835] loop5: detected capacity change from 0 to 512 [ 1097.376337][T16835] EXT4-fs: Ignoring removed bh option [ 1099.559452][T16838] loop0: detected capacity change from 0 to 512 [ 1099.566850][T16838] EXT4-fs: Ignoring removed bh option [ 1099.573047][T16460] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1099.996084][T16838] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1100.329867][T16835] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1100.333177][T16835] EXT4-fs: failed to create workqueue [ 1100.349067][T16835] EXT4-fs (loop5): mount failed [ 1100.421801][T16838] EXT4-fs: error -4 creating inode table initialization thread [ 1100.430008][T16838] EXT4-fs (loop0): mount failed [ 1101.251926][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 390 seconds [ 1101.263031][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 330 seconds [ 1101.501304][ T9969] usb 2-1: USB disconnect, device number 32 [ 1102.679285][T16854] loop1: detected capacity change from 0 to 512 [ 1102.691079][T16854] EXT4-fs: Ignoring removed bh option [ 1104.156113][T16854] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1104.175877][T16854] EXT4-fs (loop1): 1 truncate cleaned up [ 1104.188021][T16854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1104.423710][T16854] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2688: bg 0: block 465: padding at end of block bitmap is not set [ 1104.540240][T16854] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1104.553909][T16854] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1104.553909][T16854] [ 1104.564081][T16854] EXT4-fs (loop1): Total free blocks count 0 [ 1104.570349][T16854] EXT4-fs (loop1): Free/Dirty block details [ 1104.576463][T16854] EXT4-fs (loop1): free_blocks=0 [ 1104.581477][T16854] EXT4-fs (loop1): dirty_blocks=2 [ 1104.586686][T16854] EXT4-fs (loop1): Block reservation details [ 1104.592736][T16854] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 1105.603761][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.742916][T16862] loop5: detected capacity change from 0 to 512 [ 1105.754421][T16862] EXT4-fs: Ignoring removed bh option [ 1105.891370][T16862] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1105.906267][T16862] EXT4-fs (loop5): 1 truncate cleaned up [ 1105.919231][T16862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.033359][T16862] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2689: bg 0: block 465: padding at end of block bitmap is not set [ 1106.132129][T16862] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1106.144986][T16862] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1106.144986][T16862] [ 1106.154794][T16862] EXT4-fs (loop5): Total free blocks count 0 [ 1106.161256][T16862] EXT4-fs (loop5): Free/Dirty block details [ 1106.167590][T16862] EXT4-fs (loop5): free_blocks=0 [ 1106.172702][T16862] EXT4-fs (loop5): dirty_blocks=2 [ 1106.177869][T16862] EXT4-fs (loop5): Block reservation details [ 1106.183914][T16862] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 1107.202390][T16869] loop1: detected capacity change from 0 to 512 [ 1107.375185][T16869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.441290][T16869] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.836677][T16460] Bluetooth: hci0: command 0x0406 tx timeout [ 1107.970662][T16876] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.2690: iget: bad i_size value: 2533274857506816 [ 1108.076748][T16877] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.2690: iget: bad i_size value: 2533274857506816 [ 1108.150107][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.758687][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.947678][T16886] loop1: detected capacity change from 0 to 512 [ 1109.013017][T16890] loop5: detected capacity change from 0 to 512 [ 1109.038746][T16886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.092208][T16890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.153309][T16890] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.173800][T16886] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.555769][T16902] loop0: detected capacity change from 0 to 512 [ 1109.563316][T16902] EXT4-fs: Ignoring removed bh option [ 1113.140384][T16903] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2695: iget: bad i_size value: 2533274857506816 [ 1114.378362][T16902] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1114.378811][T16902] EXT4-fs: failed to create workqueue [ 1114.393952][T16902] EXT4-fs (loop0): mount failed [ 1114.679991][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.761761][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.985116][T16914] loop5: detected capacity change from 0 to 512 [ 1115.089283][T16915] loop0: detected capacity change from 0 to 512 [ 1115.102114][T16915] EXT4-fs: Ignoring removed bh option [ 1115.283692][T16915] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1115.323534][T16915] EXT4-fs (loop0): 1 truncate cleaned up [ 1115.337245][T16915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.486501][T16915] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2699: bg 0: block 465: padding at end of block bitmap is not set [ 1115.585825][T16915] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1115.598904][T16915] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1115.598904][T16915] [ 1116.147166][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.153605][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.291076][T16914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.385909][T16914] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.262954][T16927] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2698: iget: bad i_size value: 2533274857506816 [ 1117.475894][T16928] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2698: iget: bad i_size value: 2533274857506816 [ 1117.910391][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.930649][T16925] loop7: detected capacity change from 0 to 512 [ 1118.052072][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.113979][T16930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2705'. [ 1118.165198][T16925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.244659][T16925] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.372642][T16930] loop1: detected capacity change from 0 to 8 [ 1118.410632][T16930] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1119.625603][T16930] SQUASHFS error: Failed to read block 0x82: -5 [ 1119.631947][T16930] SQUASHFS error: Unable to read metadata cache entry [80] [ 1119.705705][T16930] SQUASHFS error: Unable to read inode 0x11f [ 1119.797079][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.874082][T16944] loop5: detected capacity change from 0 to 512 [ 1119.932207][T16944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.945916][T16944] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.982497][ T5762] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1119.991371][T16950] loop7: detected capacity change from 0 to 512 [ 1120.249679][T16950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1120.287485][T16950] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1120.390831][T16955] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2706: iget: bad i_size value: 2533274857506816 [ 1120.576831][T16956] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2706: iget: bad i_size value: 2533274857506816 [ 1121.124713][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.151827][T16960] loop1: detected capacity change from 0 to 512 [ 1121.299324][T16960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.330197][T16960] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.581257][T16950] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.2707: iget: bad i_size value: 2533274857506816 [ 1121.902643][T16970] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.2709: iget: bad i_size value: 2533274857506816 [ 1122.697269][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.707746][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.044991][T16981] loop5: detected capacity change from 0 to 512 [ 1123.056837][T16981] EXT4-fs: Ignoring removed bh option [ 1123.163932][T16981] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1123.184212][T16981] EXT4-fs (loop5): 1 truncate cleaned up [ 1123.197608][T16981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.404580][T16981] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2712: bg 0: block 465: padding at end of block bitmap is not set [ 1125.236926][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.693313][T16995] loop0: detected capacity change from 0 to 512 [ 1131.704860][T16995] EXT4-fs: Ignoring removed bh option [ 1132.046000][T16995] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1132.046436][T16995] EXT4-fs: failed to create workqueue [ 1132.061450][T16995] EXT4-fs (loop0): mount failed [ 1132.854683][T17004] loop1: detected capacity change from 0 to 512 [ 1132.862641][T17004] EXT4-fs: Ignoring removed bh option [ 1132.946001][T17004] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1132.970277][T17004] EXT4-fs (loop1): 1 truncate cleaned up [ 1132.983135][T17004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.119766][T17004] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2717: bg 0: block 465: padding at end of block bitmap is not set [ 1134.125877][ T24] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 360 seconds [ 1134.136719][ T5896] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 420 seconds [ 1135.191581][T17012] overlayfs: missing 'lowerdir' [ 1135.892700][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.024658][T17015] fuse: root generation should be zero [ 1136.206305][T17024] loop7: detected capacity change from 0 to 512 [ 1136.281421][T17024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.393392][T17030] loop0: detected capacity change from 0 to 512 [ 1136.406202][T17030] EXT4-fs: Ignoring removed bh option [ 1136.425246][T17024] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.607676][T17030] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1136.623938][T17030] EXT4-fs (loop0): 1 truncate cleaned up [ 1136.636915][T17030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.788793][T17030] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2722: bg 0: block 465: padding at end of block bitmap is not set [ 1136.865750][T17030] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1136.879014][T17030] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1136.879014][T17030] [ 1138.720445][T17034] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.2723: iget: bad i_size value: 2533274857506816 [ 1139.189543][ T4523] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1139.272668][ T4523] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1139.272668][ T4523] [ 1139.323877][ T4523] EXT4-fs (loop0): Total free blocks count 0 [ 1139.351377][ T4523] EXT4-fs (loop0): Free/Dirty block details [ 1139.361914][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.396198][ T4523] EXT4-fs (loop0): free_blocks=0 [ 1139.401319][ T4523] EXT4-fs (loop0): dirty_blocks=1 [ 1139.435641][ T4523] EXT4-fs (loop0): Block reservation details [ 1141.570672][T17049] loop5: detected capacity change from 0 to 512 [ 1141.582686][T17049] EXT4-fs: Ignoring removed bh option [ 1141.901932][T17049] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1141.980843][T17049] EXT4-fs (loop5): 1 truncate cleaned up [ 1141.994250][T17049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1142.135929][T17049] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2725: bg 0: block 465: padding at end of block bitmap is not set [ 1142.230342][T17049] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1142.243709][T17049] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1142.243709][T17049] [ 1143.118550][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.565720][ T5761] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1143.846276][T17074] loop5: detected capacity change from 0 to 512 [ 1143.858734][T17074] EXT4-fs: Ignoring removed bh option [ 1144.054236][T17074] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1144.080047][T17074] EXT4-fs (loop5): 1 truncate cleaned up [ 1144.092808][T17074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1145.128579][ T5761] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1145.139696][ T5761] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1145.150390][ T5761] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1145.355058][T17078] loop0: detected capacity change from 0 to 32768 [ 1145.399613][T17078] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 1145.758638][ T5761] usb 8-1: string descriptor 0 read error: -22 [ 1145.764998][ T5761] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1145.781807][ T5761] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.793004][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.868694][T17079] vivid-007: disconnect [ 1145.892934][T17077] vivid-007: reconnect [ 1145.979593][T10988] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 1146.054295][T17083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2737'. [ 1146.682805][T17087] loop5: detected capacity change from 0 to 512 [ 1146.690704][T17087] EXT4-fs: Ignoring removed bh option [ 1146.759150][T17083] loop1: detected capacity change from 0 to 8 [ 1147.007233][T17083] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1147.015341][T17083] SQUASHFS error: Failed to read block 0x82: -5 [ 1147.021771][T17083] SQUASHFS error: Unable to read metadata cache entry [80] [ 1147.029117][T17083] SQUASHFS error: Unable to read inode 0x11f [ 1147.998697][T17087] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1148.046792][T17087] EXT4-fs (loop5): 1 truncate cleaned up [ 1148.059699][T17087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1148.150027][T17087] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2736: bg 0: block 465: padding at end of block bitmap is not set [ 1148.178301][T17087] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1148.191213][T17087] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1148.191213][T17087] [ 1149.680396][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.728101][ T5761] usbhid 8-1:1.0: can't add hid device: -71 [ 1149.734334][ T5761] usbhid: probe of 8-1:1.0 failed with error -71 [ 1149.751322][ T5761] usb 8-1: USB disconnect, device number 9 [ 1149.783315][ T34] Bluetooth: hci3: Frame reassembly failed (-84) [ 1150.248907][T17105] loop1: detected capacity change from 0 to 512 [ 1150.335636][ T9969] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1150.359648][T17105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.438824][T17105] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1150.720741][T17116] loop7: detected capacity change from 0 to 512 [ 1150.728425][T17116] EXT4-fs: Ignoring removed bh option [ 1152.010423][T16460] Bluetooth: hci3: command 0x1003 tx timeout [ 1152.017754][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1153.364297][T17118] loop5: detected capacity change from 0 to 32768 [ 1153.419204][T17116] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1153.419653][T17116] EXT4-fs: failed to create workqueue [ 1153.434664][T17116] EXT4-fs (loop7): mount failed [ 1153.507655][T17118] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1153.518030][T17118] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1153.526775][T17118] BTRFS info (device loop5): using free space tree [ 1153.703974][ T9969] usb 1-1: device descriptor read/all, error -71 [ 1153.830435][T17118] BTRFS info (device loop5): enabling ssd optimizations [ 1153.837504][T17118] BTRFS info (device loop5): auto enabling async discard [ 1153.870496][ T28] audit: type=1800 audit(3726560842.660:145): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2746" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1153.902328][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.135187][T17118] vivid-007: disconnect [ 1154.151599][T17117] vivid-007: reconnect [ 1154.211473][T17146] loop7: detected capacity change from 0 to 512 [ 1154.218865][T17146] EXT4-fs: Ignoring removed bh option [ 1156.510469][T17146] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1157.923681][T17151] loop1: detected capacity change from 0 to 512 [ 1157.930995][T17151] EXT4-fs: Ignoring removed bh option [ 1159.153819][T17146] EXT4-fs: error -4 creating inode table initialization thread [ 1159.172822][T17146] EXT4-fs (loop7): mount failed [ 1161.158902][T17151] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1161.159443][T17151] EXT4-fs: failed to create workqueue [ 1161.175238][T17151] EXT4-fs (loop1): mount failed [ 1161.468149][T15473] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1161.672863][ T5873] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop5 scanned by udevd (5873) [ 1161.688148][T17161] loop1: detected capacity change from 0 to 2048 [ 1166.222695][T17176] overlayfs: missing 'lowerdir' [ 1166.400210][T17161] EXT4-fs: error -4 creating inode table initialization thread [ 1166.408159][ T5136] udevd[5136]: worker [10990] /devices/virtual/block/nbd5 timeout; kill it [ 1166.608861][T17161] EXT4-fs (loop1): mount failed [ 1166.620370][ T5136] udevd[5136]: seq 15402 '/devices/virtual/block/nbd5' killed [ 1166.695844][ T5136] udevd[5136]: worker [5765] /devices/virtual/block/nbd2 timeout; kill it [ 1166.725927][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 450 seconds [ 1166.745827][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 390 seconds [ 1166.781703][ T5136] udevd[5136]: seq 14997 '/devices/virtual/block/nbd2' killed [ 1168.721807][T17192] loop5: detected capacity change from 0 to 32768 [ 1168.756254][T17192] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1168.767000][T17192] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1168.775765][T17192] BTRFS info (device loop5): using free space tree [ 1168.877662][T17199] loop0: detected capacity change from 0 to 512 [ 1168.889543][T17199] EXT4-fs: Ignoring removed bh option [ 1168.934984][T17199] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1168.956724][T17199] EXT4-fs (loop0): 1 truncate cleaned up [ 1168.969801][T17199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.188479][T17199] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2760: bg 0: block 465: padding at end of block bitmap is not set [ 1170.048812][T17192] BTRFS info (device loop5): enabling ssd optimizations [ 1170.055946][T17192] BTRFS info (device loop5): auto enabling async discard [ 1170.099253][T17214] loop1: detected capacity change from 0 to 512 [ 1170.125576][ T28] audit: type=1800 audit(3726560858.910:146): pid=17192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2759" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1170.252329][T17214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.366753][T17214] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.414769][T17222] vivid-007: disconnect [ 1170.813582][T17191] vivid-007: reconnect [ 1171.603585][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.708076][T15473] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1171.782482][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.848274][T17228] loop7: detected capacity change from 0 to 512 [ 1171.943068][T17228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.960492][T17228] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.398429][T17243] loop1: detected capacity change from 0 to 512 [ 1172.410801][T17243] EXT4-fs: Ignoring removed bh option [ 1172.633306][T17243] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1172.671392][T17243] EXT4-fs (loop1): 1 truncate cleaned up [ 1172.686356][T17243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.763669][T17243] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2765: bg 0: block 465: padding at end of block bitmap is not set [ 1175.247203][T17248] overlayfs: missing 'lowerdir' [ 1175.733043][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.782672][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.289659][T17258] loop5: detected capacity change from 0 to 512 [ 1176.297619][T17258] EXT4-fs: Ignoring removed bh option [ 1178.145355][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.153457][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.736282][T17258] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1179.736705][T17258] EXT4-fs: failed to create workqueue [ 1179.751705][T17258] EXT4-fs (loop5): mount failed [ 1180.345318][T17261] loop1: detected capacity change from 0 to 2048 [ 1180.656817][T17261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.681331][T17270] loop0: detected capacity change from 0 to 32768 [ 1180.732155][T17275] loop5: detected capacity change from 0 to 512 [ 1180.739636][T17275] EXT4-fs: Ignoring removed bh option [ 1181.086347][T17270] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2772 (17270) [ 1181.221340][T17275] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1181.267707][T17275] EXT4-fs (loop5): 1 truncate cleaned up [ 1181.281261][T17275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1181.435317][T17275] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2771: bg 0: block 465: padding at end of block bitmap is not set [ 1182.153176][T17270] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1182.163605][T17270] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1182.173197][T17270] BTRFS info (device loop0): using free space tree [ 1182.451630][T17270] BTRFS info (device loop0): enabling ssd optimizations [ 1182.458922][T17270] BTRFS info (device loop0): auto enabling async discard [ 1182.527326][ T28] audit: type=1800 audit(3726560871.300:147): pid=17270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2772" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1182.709422][T17294] vivid-007: disconnect [ 1182.838991][T17269] vivid-007: reconnect [ 1183.164658][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.227252][ T49] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1183.254135][T15912] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1183.285919][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1183.313704][ T49] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1183.313704][ T49] [ 1183.356198][ T49] EXT4-fs (loop1): Total free blocks count 0 [ 1183.365597][ T49] EXT4-fs (loop1): Free/Dirty block details [ 1183.371732][ T49] EXT4-fs (loop1): free_blocks=2415919104 [ 1183.381906][T17298] loop5: detected capacity change from 0 to 512 [ 1183.430545][ T49] EXT4-fs (loop1): dirty_blocks=16 [ 1183.436772][ T49] EXT4-fs (loop1): Block reservation details [ 1183.443492][ T49] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1183.450956][ T5762] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (5762) [ 1183.474121][T15159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.691321][T17298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.704071][T17298] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.222358][T17320] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2773: iget: bad i_size value: 2533274857506816 [ 1185.961971][T17319] overlayfs: failed to resolve './file0': -2 [ 1186.027882][T17321] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2773: iget: bad i_size value: 2533274857506816 [ 1186.335241][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.837207][T17338] loop0: detected capacity change from 0 to 512 [ 1186.849375][T17338] EXT4-fs: Ignoring removed bh option [ 1187.021872][T17338] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1187.042770][T17338] EXT4-fs (loop0): 1 truncate cleaned up [ 1187.056108][T17338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.182487][T17338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2779: bg 0: block 465: padding at end of block bitmap is not set [ 1187.697256][ T5868] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1188.038266][ T5868] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1188.137500][ T5868] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1188.181067][ T5868] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1188.243493][ T5868] usb 8-1: string descriptor 0 read error: -22 [ 1188.285605][ T5868] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1188.335764][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.857194][ T5868] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 1188.902355][ T5868] keytouch 0003:0926:3333.0018: usb_submit_urb(out) failed: -90 [ 1189.013115][ T5868] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0926:3333.0018/input/input38 [ 1189.065374][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.232738][ T5868] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1189.517590][ T5868] usb 8-1: USB disconnect, device number 10 [ 1189.565706][T17345] fido_id[17345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1190.593493][T17342] loop5: detected capacity change from 0 to 40427 [ 1190.695728][T17342] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1190.734829][T17342] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1193.171195][T17363] overlayfs: missing 'workdir' [ 1193.728249][T17366] loop7: detected capacity change from 0 to 512 [ 1193.774700][T17367] loop0: detected capacity change from 0 to 512 [ 1193.821685][T17367] EXT4-fs: Ignoring removed bh option [ 1193.838773][T17367] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1193.872441][T17367] EXT4-fs (loop0): 1 truncate cleaned up [ 1193.877991][T17366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.924634][T17367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1193.938651][T17366] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.071490][T17367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2788: bg 0: block 465: padding at end of block bitmap is not set [ 1194.270618][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.058460][T17379] loop5: detected capacity change from 0 to 512 [ 1195.073617][T17379] EXT4-fs: Ignoring removed bh option [ 1195.205645][T17379] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1195.230565][T17379] EXT4-fs (loop5): 1 truncate cleaned up [ 1195.243506][T17379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.407731][T17379] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2791: bg 0: block 465: padding at end of block bitmap is not set [ 1196.339750][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.084115][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.135999][ T24] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 420 seconds [ 1198.147874][ T5896] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 480 seconds [ 1198.342908][T17390] loop7: detected capacity change from 0 to 512 [ 1198.518921][T17390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.597373][T17390] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.333165][T17400] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.2793: iget: bad i_size value: 2533274857506816 [ 1200.156060][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.369157][T17418] overlayfs: missing 'workdir' [ 1203.877003][T17425] loop5: detected capacity change from 0 to 2048 [ 1203.946385][T17425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.086370][T17430] fuse: Unknown parameter 'grou00000000000000000000' [ 1205.622960][ T67] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1205.657520][T16460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1205.669531][ T67] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1205.670953][T16460] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1205.691533][ T67] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1205.691533][ T67] [ 1205.701390][T16460] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1205.718147][T16460] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1205.730132][ T67] EXT4-fs (loop5): Total free blocks count 0 [ 1205.736510][T16460] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1205.743905][T16460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1205.795821][ T67] EXT4-fs (loop5): Free/Dirty block details [ 1205.801811][ T67] EXT4-fs (loop5): free_blocks=2415919104 [ 1205.807901][ T67] EXT4-fs (loop5): dirty_blocks=16 [ 1205.813130][ T67] EXT4-fs (loop5): Block reservation details [ 1205.819551][ T67] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1205.871585][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.883159][T17423] loop0: detected capacity change from 0 to 40427 [ 1205.897751][T17423] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1205.915716][T17423] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1205.928562][T17423] F2FS-fs (loop0): invalid crc value [ 1206.045329][T17438] lo speed is unknown, defaulting to 1000 [ 1206.145220][T17423] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1206.175966][T17423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1208.428810][T16460] Bluetooth: hci3: command tx timeout [ 1208.645079][T17458] loop7: detected capacity change from 0 to 2048 [ 1208.761478][T17458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.663601][T17438] chnl_net:caif_netlink_parms(): no params data found [ 1210.129543][T17483] fuse: Unknown parameter 'grou00000000000000000000' [ 1210.229061][T17438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.236661][T17438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.243927][T17438] bridge_slave_0: entered allmulticast mode [ 1210.251436][T17438] bridge_slave_0: entered promiscuous mode [ 1210.261263][T17438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.268583][T17438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.338710][T17485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1210.347896][T17485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1210.423444][T17438] bridge_slave_1: entered allmulticast mode [ 1210.495880][T16460] Bluetooth: hci3: command tx timeout [ 1210.714883][T17438] bridge_slave_1: entered promiscuous mode [ 1210.986063][ T6039] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1211.021721][T17438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.034777][T17438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.071639][T17438] team0: Port device team_slave_0 added [ 1211.105965][ T6039] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1211.155581][ T6039] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1211.155581][ T6039] [ 1211.165407][ T6039] EXT4-fs (loop7): Total free blocks count 0 [ 1211.181175][T17438] team0: Port device team_slave_1 added [ 1211.187342][ T6039] EXT4-fs (loop7): Free/Dirty block details [ 1211.205809][ T6039] EXT4-fs (loop7): free_blocks=2415919104 [ 1211.211711][ T6039] EXT4-fs (loop7): dirty_blocks=16 [ 1211.235610][ T6039] EXT4-fs (loop7): Block reservation details [ 1211.241672][ T6039] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 1211.255772][T17438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.262863][T17438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.293187][T17492] loop5: detected capacity change from 0 to 2048 [ 1211.304444][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.320826][T17438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.345284][T17438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.363881][T17438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.395705][T17438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.447254][T17492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.739265][T17438] hsr_slave_0: entered promiscuous mode [ 1211.750502][T17499] loop7: detected capacity change from 0 to 512 [ 1211.757736][T17499] EXT4-fs: Ignoring removed bh option [ 1211.772636][T17499] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1211.783237][T17499] EXT4-fs (loop7): 1 truncate cleaned up [ 1211.790344][T17499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.814213][T17438] hsr_slave_1: entered promiscuous mode [ 1211.827045][T17499] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.2815: bg 0: block 465: padding at end of block bitmap is not set [ 1211.841996][T17499] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 1211.854798][T17499] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1211.854798][T17499] [ 1211.888320][T17438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1211.918998][T17438] Cannot create hsr debugfs directory [ 1213.320841][T16460] Bluetooth: hci3: command tx timeout [ 1213.359145][ T6039] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1213.363806][T17438] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1213.412109][ T6039] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1213.424675][ T6039] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1213.424675][ T6039] [ 1213.443790][ T6039] EXT4-fs (loop5): Total free blocks count 0 [ 1213.454378][T17438] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1213.461407][ T6039] EXT4-fs (loop5): Free/Dirty block details [ 1213.467615][ T6039] EXT4-fs (loop5): free_blocks=2415919104 [ 1213.473373][ T6039] EXT4-fs (loop5): dirty_blocks=16 [ 1213.478593][ T6039] EXT4-fs (loop5): Block reservation details [ 1213.484598][ T6039] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1213.497782][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.511911][T17438] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1213.520284][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.535245][T17438] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1213.727300][T17514] binder: 17513:17514 ioctl c0306201 200000000080 returned -14 [ 1213.736772][T17514] binder: 17513:17514 ioctl c0306201 2000000003c0 returned -14 [ 1213.770463][T17438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.809798][T17438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.827719][T17517] loop0: detected capacity change from 0 to 512 [ 1213.861533][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.868781][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.968861][T17517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.985004][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.992285][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.036246][T17517] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1215.199573][T17525] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1215.208631][T17525] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1215.220141][T17528] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.2822: iget: bad i_size value: 2533274857506816 [ 1216.280374][T16460] Bluetooth: hci3: command tx timeout [ 1216.976946][T15912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.139391][T17532] loop5: detected capacity change from 0 to 2048 [ 1217.297877][T17532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.586538][T17438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.604278][T17466] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1218.638838][ T7143] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1218.695797][ T7143] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1218.695797][ T7143] [ 1218.729168][ T7143] EXT4-fs (loop5): Total free blocks count 0 [ 1218.735264][ T7143] EXT4-fs (loop5): Free/Dirty block details [ 1218.785676][ T7143] EXT4-fs (loop5): free_blocks=2415919104 [ 1218.791511][ T7143] EXT4-fs (loop5): dirty_blocks=16 [ 1218.828725][ T7143] EXT4-fs (loop5): Block reservation details [ 1218.834783][ T7143] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1218.855054][T17561] binder: 17560:17561 ioctl c0306201 200000000080 returned -14 [ 1218.887446][T17561] binder: 17560:17561 ioctl c0306201 2000000003c0 returned -14 [ 1220.379085][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.644698][T17438] veth0_vlan: entered promiscuous mode [ 1220.671489][T17438] veth1_vlan: entered promiscuous mode [ 1220.738954][T17438] veth0_macvtap: entered promiscuous mode [ 1220.751099][T17438] veth1_macvtap: entered promiscuous mode [ 1220.772002][T17438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.782661][T17438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.793190][T17438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.814622][T17438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.842873][T17438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.860282][T17438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.881083][T17438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.904180][T17438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.947932][T17438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.003595][T17438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.022972][T17438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.910892][T17438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.945160][T17438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.967592][T17438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.084715][T17586] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2835'. [ 1222.098552][T17438] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.135224][T17438] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.147994][T17438] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.157936][T17438] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.460526][T17590] loop7: detected capacity change from 0 to 8 [ 1223.063538][T17590] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1223.072259][T17590] SQUASHFS error: Failed to read block 0x82: -5 [ 1223.078628][T17590] SQUASHFS error: Unable to read metadata cache entry [80] [ 1223.086900][T17590] SQUASHFS error: Unable to read inode 0x11f [ 1223.184392][T17051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.288429][T17051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.425730][ T7143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.462739][ T7143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.696294][T17601] binder: 17600:17601 ioctl c0306201 200000000080 returned -14 [ 1223.737620][T17601] binder: 17600:17601 ioctl c0306201 2000000003c0 returned -14 [ 1223.775971][T17603] loop7: detected capacity change from 0 to 2048 [ 1223.852137][T17603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.411901][T17626] loop8: detected capacity change from 0 to 512 [ 1225.507493][T17626] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.550832][T17626] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.848634][T17630] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.2845: iget: bad i_size value: 2533274857506816 [ 1226.831490][T17608] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1226.853929][T17438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.694057][ T7143] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1227.707758][ T7143] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1227.707758][ T7143] [ 1227.720413][ T7143] EXT4-fs (loop7): Total free blocks count 0 [ 1227.726800][ T7143] EXT4-fs (loop7): Free/Dirty block details [ 1227.732789][ T7143] EXT4-fs (loop7): free_blocks=2415919104 [ 1227.740861][ T7143] EXT4-fs (loop7): dirty_blocks=16 [ 1227.749747][ T7143] EXT4-fs (loop7): Block reservation details [ 1227.782016][ T7143] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 1227.813696][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.090161][T17643] binder: 17642:17643 ioctl c0306201 200000000080 returned -14 [ 1228.161496][T17643] binder: 17642:17643 ioctl c0306201 2000000003c0 returned -14 [ 1229.763925][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 510 seconds [ 1229.775263][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 450 seconds [ 1230.740180][T17662] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1230.753793][T17662] binder: 17652:17662 ioctl 400c620e 0 returned -14 [ 1230.794636][T17662] loop5: detected capacity change from 0 to 512 [ 1230.805258][T17662] ext4: Unknown parameter 'appraise_type' [ 1231.943179][ T5762] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1233.504861][T17683] loop8: detected capacity change from 0 to 2048 [ 1233.541637][T17685] binder: 17684:17685 ioctl c0306201 200000000080 returned -14 [ 1233.562288][T17683] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.590235][T17685] binder: 17684:17685 ioctl c0306201 2000000003c0 returned -14 [ 1233.950870][T17697] overlayfs: missing 'lowerdir' [ 1235.396103][T17438] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.553500][T17717] fuse: Unknown parameter 'group_i00000000000000000000' [ 1236.606271][T17718] loop7: detected capacity change from 0 to 512 [ 1236.737798][T17721] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1236.750579][T17721] binder: 17711:17721 ioctl 400c620e 0 returned -14 [ 1236.798629][T17721] loop8: detected capacity change from 0 to 512 [ 1236.809812][T17721] ext4: Unknown parameter 'appraise_type' [ 1237.163297][T17718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.485767][T17718] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1238.061966][T17725] loop8: detected capacity change from 0 to 32768 [ 1238.077836][T17725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2870 (17725) [ 1238.171625][T17725] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1238.201533][T17725] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1238.254747][T17725] BTRFS info (device loop8): turning on sync discard [ 1238.271969][T17725] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1238.301106][T17725] BTRFS info (device loop8): use zstd compression, level 3 [ 1238.332193][T17725] BTRFS info (device loop8): turning on async discard [ 1238.429215][T17725] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1238.491441][T17725] BTRFS info (device loop8): trying to use backup root at mount time [ 1238.525012][T17725] BTRFS info (device loop8): force zlib compression, level 3 [ 1238.565599][T17725] BTRFS info (device loop8): using free space tree [ 1238.802638][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.809409][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.924364][T17716] loop5: detected capacity change from 0 to 40427 [ 1238.950550][ T6977] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1238.965094][T17725] BTRFS error (device loop8): failed to load root extent [ 1238.976441][T17725] BTRFS warning (device loop8): try to load backup roots slot 1 [ 1239.001934][T17751] overlayfs: missing 'lowerdir' [ 1239.068655][T17716] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1239.075735][ T34] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1239.185295][T17716] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1239.405090][T17725] BTRFS warning (device loop8): couldn't read tree root [ 1239.515816][T17725] BTRFS warning (device loop8): try to load backup roots slot 2 [ 1239.524004][ T4523] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1239.592800][T17725] BTRFS warning (device loop8): couldn't read tree root [ 1239.600205][T17725] BTRFS warning (device loop8): try to load backup roots slot 3 [ 1239.645613][T17725] BTRFS info (device loop8): enabling ssd optimizations [ 1239.658285][T17725] BTRFS info (device loop8): rebuilding free space tree [ 1239.759599][T17725] BTRFS info (device loop8): checking UUID tree [ 1240.204648][T17762] loop5: detected capacity change from 0 to 512 [ 1240.212359][T17762] EXT4-fs: Ignoring removed bh option [ 1243.146454][T17762] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1243.147225][T17762] EXT4-fs: failed to create workqueue [ 1243.162223][T17762] EXT4-fs (loop5): mount failed [ 1246.401786][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.581076][T17777] fuse: Unknown parameter 'group_i00000000000000000000' [ 1246.746350][T17782] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1246.759111][T17782] binder: 17774:17782 ioctl 400c620e 0 returned -14 [ 1246.814766][T17782] loop0: detected capacity change from 0 to 512 [ 1246.828211][T17782] ext4: Unknown parameter 'appraise_type' [ 1250.854144][T17807] loop5: detected capacity change from 0 to 2048 [ 1251.748830][T17807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1251.788398][T17815] loop7: detected capacity change from 0 to 512 [ 1251.881774][T17438] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1251.997016][T17815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.078208][T17815] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.308967][T17816] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1252.526580][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1252.583012][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1252.583012][ T12] [ 1252.628837][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 1252.634909][ T12] EXT4-fs (loop5): Free/Dirty block details [ 1252.674135][ T12] EXT4-fs (loop5): free_blocks=2415919104 [ 1252.725792][ T12] EXT4-fs (loop5): dirty_blocks=16 [ 1252.731007][ T12] EXT4-fs (loop5): Block reservation details [ 1252.742882][ T12] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1252.778142][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.112809][T17832] EXT4-fs error (device loop7): ext4_lookup:1858: inode #12: comm syz.7.2885: iget: bad i_size value: 2533274857506816 [ 1254.375602][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1254.935607][ T8] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1254.965287][ T8] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1254.980912][ T8] usb 9-1: Product: syz [ 1255.005827][ T8] usb 9-1: SerialNumber: syz [ 1255.024638][ T8] usb 9-1: config 0 descriptor?? [ 1255.058034][T11752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.482030][T17845] loop5: detected capacity change from 0 to 512 [ 1255.549629][T17845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.640882][T17845] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.800799][T17845] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2891: iget: bad i_size value: 2533274857506816 [ 1255.816904][T17845] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2891: iget: bad i_size value: 2533274857506816 [ 1255.878220][T15473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.916381][T16460] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1255.998271][ T8] usb 9-1: USB disconnect, device number 2 [ 1256.403457][T17858] loop5: detected capacity change from 0 to 32768 [ 1256.423544][T17858] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2894 (17858) [ 1256.450164][T17858] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1256.472050][T17858] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1256.481054][T17858] BTRFS info (device loop5): turning on sync discard [ 1256.488410][T17858] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1256.498068][T17858] BTRFS info (device loop5): use zstd compression, level 3 [ 1256.506101][T17858] BTRFS info (device loop5): turning on async discard [ 1256.507648][ T5812] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1256.514378][T17858] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1256.546984][T17858] BTRFS info (device loop5): trying to use backup root at mount time [ 1256.581458][T17858] BTRFS info (device loop5): force zlib compression, level 3 [ 1256.595645][T17858] BTRFS info (device loop5): using free space tree [ 1256.792858][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1256.834308][T17858] BTRFS error (device loop5): failed to load root extent [ 1256.850971][T17858] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1256.880527][ T34] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1256.902804][T17858] BTRFS warning (device loop5): couldn't read tree root [ 1256.913679][T17858] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1256.931431][ T12] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1256.943545][T17858] BTRFS warning (device loop5): couldn't read tree root [ 1257.015747][T17858] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1257.389529][ T5812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.746454][ T5812] usb 1-1: string descriptor 0 read error: -22 [ 1257.752863][ T5812] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1257.763051][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.880642][T17858] BTRFS info (device loop5): enabling ssd optimizations [ 1257.917651][T17858] BTRFS info (device loop5): rebuilding free space tree [ 1257.955037][T17858] BTRFS info (device loop5): checking UUID tree [ 1259.718518][ T788] usb 1-1: USB disconnect, device number 38 [ 1261.845299][ T24] block nbd2: Possible stuck request ffff8880222f8000: control (read@0,4096B). Runtime 540 seconds [ 1261.845358][ T5896] block nbd5: Possible stuck request ffff888022848200: control (read@0,4096B). Runtime 480 seconds [ 1262.120904][T15473] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1262.625718][ T788] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1262.971131][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.982189][ T788] usb 1-1: config 0 has no interfaces? [ 1262.993170][ T788] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 1263.024518][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.136644][ T788] usb 1-1: config 0 descriptor?? serialport: VM disconnected.