last executing test programs: 17.166155238s ago: executing program 2 (id=3149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x6f2, &(0x7f0000001200)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xc0586300}], 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@data_err_abort}, {@nodelalloc}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000140)=0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x0, &(0x7f00000003c0)=""/144, &(0x7f0000000180)=0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x80000000000000, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x24, 0x0, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 14.193053781s ago: executing program 1 (id=3158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001e00)=""/4108, 0x100c) sendmsg$alg(r1, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x5) 14.104824639s ago: executing program 2 (id=3159): bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f000000be40)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r2, 0x0, 0x8001, &(0x7f0000000040)="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", 0xfa) syz_pidfd_open(0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x400448cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0x0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5}) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d7401097307733960000000109021200010000"], 0x0) 13.215503201s ago: executing program 1 (id=3160): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4872, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@loopback}}}, &(0x7f0000000480)=0xe8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd"}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000140)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc}]}, 0x28}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x0, &(0x7f0000000540)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) fsopen(&(0x7f00000006c0)='hugetlbfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 10.260518672s ago: executing program 2 (id=3171): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 9.950909197s ago: executing program 3 (id=3172): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0x40505331, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000580)=""/240, 0xf0}], 0x1, 0x47, 0x0) 9.860268915s ago: executing program 3 (id=3173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 9.726777416s ago: executing program 3 (id=3174): r0 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x1000080, &(0x7f0000001b80)=ANY=[@ANYBLOB='errors=continue,discard,allow_utime=0000000000000000401,iocharset=iso8859-7,fmask=00000000000000000100001,dmask=00000000000000000000000,namecase=1,utf8,namecase=1,\x00'], 0x1, 0x1515, &(0x7f00000002c0)="$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") fremovexattr(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7472015c4e0d96d63e7bff2053853c904846f357ba059b5bb7ef3cf3faa45479720ef823aedda92d9d36ed6a3710cfdaf413c9e39442a439d38936785747c5e187bae4df76b047f3dfbb22d94e6118ecf68b01edfcf87dbd9d83dfd243f44d750f9eb2c83b46bf9faacaaadb2d4041e2c0df69f698162159189cb4f33f955f4edf38fbd55e010e0a2c87d293604e477228b802a2797826f2"]) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1}) syz_open_dev$hiddev(0x0, 0x10000, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0xfefc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 8.813161741s ago: executing program 4 (id=3175): r0 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 8.785956092s ago: executing program 1 (id=3176): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400000, 0x2e) unshare(0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_submit(0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[]}, 0x78) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00005f29551c86a01d00"/140]}, 0x104) 8.684545901s ago: executing program 2 (id=3177): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000900)={{0x10b, 0x4, 0x3, 0x15, 0x394, 0x6, 0xf7, 0x3}, "52ef105d565254c2543e4f174ff3016bb03c3bd53bef813a20f3f09d2bfdcc6cfcaf2eb38ec81a0263cddc24a090dc6c8291a22cceb62399516f9ee12fb110524267de0bcb4b6a6d3b052f91b2704231c00458e1b0de63bcc31f6abb13b723e166ff8d6c80e7fd03dc9408b9519c6fbce5084251ae89d1b15147e0d36a9593b24745216a6dd70629895c276ea749ccb22bdd9024b41df3a768f3b3c39056669b294c31447725b7d0364bbe8746f0dffaf5c9ead6dd53f6f14a1d7d8b714bfb093ecbfbf891d3ea536b3820bc8a0fe5064c5f3fe5cedd65d7139ca9b8fe0d3404537344b8f20646995e11047c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c900040080000100"], 0x9) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffff}]}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) sendmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000800)}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r6, 0x0, 0x40000062) read$FUSE(r5, &(0x7f0000006580)={0x2020}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f000000b1c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab9c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329ebed9130ff79dcd7bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed300a9ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b6b31ce436396f68134a6ef23d6b926988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123548e332d25f2b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efef6e17ca522d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096c0000000000002831b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6170baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34c971f0579070ab6e9a6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2810552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d6462", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6a7c, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') unshare(0x4000300) 8.4514042s ago: executing program 3 (id=3178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x4c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0x4}]}, 0x4c}}, 0x0) 8.45056411s ago: executing program 4 (id=3179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000006c00000008000300", @ANYRES32=r2, @ANYBLOB="0800a10000000000050058013b00000008009f000000000008002600d516"], 0x44}}, 0x0) 4.232453384s ago: executing program 0 (id=3180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0xfffffffc}, 0x48) ftruncate(r0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000080), 0x0, 0x4) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = io_uring_setup(0x7ee6, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)={0x0}) futex(&(0x7f0000000000), 0xb, 0x0, &(0x7f0000000180)={r8}, &(0x7f00000001c0), 0x0) close_range(r7, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500bbc1", 0x8}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 4.231871404s ago: executing program 2 (id=3181): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0xb, 0x41, 0x63, 0x20, 0x46d, 0x928, 0x2652, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x38, 0x1f}}]}}]}}, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) 4.008712372s ago: executing program 4 (id=3182): bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f000000be40)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r2, 0x0, 0x8001, &(0x7f0000000040)="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", 0xfa) syz_pidfd_open(0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x400448cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0x0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5}) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d7401097307733960000000109021200010000"], 0x0) 3.727672835s ago: executing program 3 (id=3183): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002540)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xffffffbc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x38, r3, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) socket(0x0, 0x3, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) setresuid(0xee01, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r8, r8, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x45c010, &(0x7f0000000100)={[{}, {@noblock_validity}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@nogrpid}, {@noinit_itable}, {}, {@resuid, 0x32}]}, 0x1b, 0x4e4, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1b40402, &(0x7f0000001300)={[], [{@smackfshat={'smackfshat', 0x3d, '%-,,&%@'}}, {@smackfshat={'smackfshat', 0x3d, '-]CZH\xa6\x12\x10\xbe\xd4=\x1f\x17\x18\xc3\x9bR3S@\x90\x98\xa48\x9c\x93\x80\xaa\xf8M\xee\xe4\xe2\xb3\xb7R\x87\x15\xc1\xdf\xa0\xe5\xed\xbbgD&'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x49b, &(0x7f0000000100)="$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") syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="040e0480130cff2f8d747328d9f295b7047695c4bec2c8a252b1ab9ff43ff9ddd2293b103094b187e092b2a16205a913b84088b69896ec0810787e369cab201086584f5e2f8a8141f06796593a85028dbe7be757586f2537b07c1564640e16a6ce863d22a3c99b9bd0b16a2859e88622602af009e78835c537d145917260624b5c25b45046370497fc43e3941e1bb733ad450d1f86679830c4aa"], 0x7) gettid() r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r9, r9, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 3.224088787s ago: executing program 0 (id=3184): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x7, 0x4e21, 0x8, 0xa, 0x0, 0x0, 0x1}, {0x40b, 0x4, 0x8, 0x0, 0x8, 0x1, 0x0, 0x5}, {0x0, 0x3cb, 0x7f}, 0x8, 0x6e6bbc, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0x4, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x2}}, 0xe8) socket$inet(0x2, 0x80001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r5, 0x0, 0x0) 2.81709124s ago: executing program 1 (id=3185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001e00)=""/4108, 0x100c) sendmsg$alg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) finit_module(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x5) 2.244679356s ago: executing program 0 (id=3186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x100, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="bb3a59cc5aa9"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0045103, &(0x7f0000000000)) 2.014260255s ago: executing program 0 (id=3187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 1.989062178s ago: executing program 3 (id=3188): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 735.172649ms ago: executing program 1 (id=3189): r0 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x1000080, &(0x7f0000001b80)=ANY=[@ANYBLOB='errors=continue,discard,allow_utime=0000000000000000401,iocharset=iso8859-7,fmask=00000000000000000100001,dmask=00000000000000000000000,namecase=1,utf8,namecase=1,\x00'], 0x1, 0x1515, &(0x7f00000002c0)="$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") fremovexattr(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7472015c4e0d96d63e7bff2053853c904846f357ba059b5bb7ef3cf3faa45479720ef823aedda92d9d36ed6a3710cfdaf413c9e39442a439d38936785747c5e187bae4df76b047f3dfbb22d94e6118ecf68b01edfcf87dbd9d83dfd243f44d750f9eb2c83b46bf9faacaaadb2d4041e2c0df69f698162159189cb4f33f955f4edf38fbd55e010e0a2c87d293604e477228b802a2797826f2"]) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1}) syz_open_dev$hiddev(0x0, 0x10000, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0xfefc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 734.58852ms ago: executing program 2 (id=3190): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x12, 0x0, 0xfffffffffffffd25) 713.269711ms ago: executing program 4 (id=3191): preadv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000580)=""/240, 0xf0}], 0x1, 0x47, 0x0) 562.336063ms ago: executing program 4 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x0) 561.859333ms ago: executing program 0 (id=3193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x4c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0x4}]}, 0x4c}}, 0x0) 472.811971ms ago: executing program 4 (id=3194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40001, 0x0, 0x0, 0xfffffffc}, 0x48) ftruncate(r0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000080), 0x0, 0x4) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = io_uring_setup(0x7ee6, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)={0x0}) futex(&(0x7f0000000000), 0xb, 0x0, &(0x7f0000000180)={r8}, &(0x7f00000001c0), 0x0) close_range(r7, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500bbc1", 0x8}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 64.103524ms ago: executing program 1 (id=3195): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400000, 0x2e) unshare(0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_submit(0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[]}, 0x78) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00005f29551c86a01d00"/140]}, 0x104) 0s ago: executing program 0 (id=3196): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x3, &(0x7f0000000000)=[{0x2, 0x9}, {0x2, 0x0, 0x0, 0x7}, {0x6}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x45, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="00012abd7000fddfdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="780000803c000100240001006270665f68617368f4687e1e84204a7df85f66756e6300000000000000000000070000000000000000050003000b0000000c0004000004ff030400000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004", @ANYRES16=r4, @ANYBLOB="340102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400faffffff", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000050003000600000004", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESDEC, @ANYBLOB="3800010024000100618674697665706f727400000000000000000000000000000000000000000000050003000300000008000400789f02e46a0ca815d0b0ac20ce5d7a87c8526a0bf9c5d3fcf1ba461dd2574fcee8af1adb0843393dd0a31b19cfe2c7907fa83505ecc0d6b91b07bf0b61d3becc5d296d0a8d08f1002e7923abf41cb30c3b8b5e781caa9fd1bf35de26e7ddb84d262f501b34339c4c55b739752bd5c9a8f460c98b77c2db42d52b9ffc9ae157194a1181b2846982269b77", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="e80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffff7f38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400de0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES16=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="363046664ad0a9c0a0ba6f40c1b844717c58e08e21d947f5020cd0a8"], 0x3c4}}, 0x24004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000081}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) kernel console output (not intermixed with test programs): to 512 [ 824.169448][T13186] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 824.275213][ T3563] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 824.372472][ T5528] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 824.413428][ T7321] EXT4-fs (loop4): unmounting filesystem. [ 824.592291][ T5528] usb 2-1: device descriptor read/64, error -71 [ 824.928650][ T3605] libceph: connect (1)[c::]:6789 error -101 [ 825.052345][ T5528] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 825.302594][ T5528] usb 2-1: device descriptor read/64, error -71 [ 825.433732][ T5528] usb usb2-port1: attempt power cycle [ 825.476433][T13221] ceph: No mds server is up or the cluster is laggy [ 825.670855][ T3605] libceph: mon0 (1)[c::]:6789 connect error [ 826.079193][T13241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2424'. [ 826.087083][ T5528] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 826.115335][ T26] audit: type=1326 audit(1720761613.359:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13243 comm="syz.2.2425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x0 [ 827.236876][T13255] vivid-000: disconnect [ 827.373576][ T5528] usb 2-1: device descriptor read/8, error -71 [ 827.393372][T13251] vivid-000: reconnect [ 827.485503][T13257] loop1: detected capacity change from 0 to 128 [ 827.642997][T13257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 827.684444][T13257] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 827.740701][T13261] loop2: detected capacity change from 0 to 512 [ 827.791842][T13261] EXT4-fs: Ignoring removed bh option [ 827.827804][T13273] loop0: detected capacity change from 0 to 512 [ 827.884727][T13261] EXT4-fs error (device loop2): __ext4_iget:5044: inode #15: block 1803188595: comm syz.2.2429: invalid block [ 827.897457][T13261] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.2429: couldn't read orphan inode 15 (err -117) [ 827.913038][T13261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 827.930216][T13261] EXT4-fs (loop2): unmounting filesystem. [ 828.069198][T13273] loop0: detected capacity change from 0 to 512 [ 828.139275][T11846] EXT4-fs (loop1): unmounting filesystem. [ 829.057103][ T3558] libceph: connect (1)[c::]:6789 error -101 [ 829.075078][ T3558] libceph: mon0 (1)[c::]:6789 connect error [ 829.115967][ T26] audit: type=1800 audit(1720761616.359:838): pid=13270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2429" name="/" dev="fuse" ino=1 res=0 errno=0 [ 829.196512][T13287] ceph: No mds server is up or the cluster is laggy [ 829.234893][T13304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2436'. [ 829.419355][ T26] audit: type=1326 audit(1720761616.659:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.2439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7a5575bd9 code=0x0 [ 829.684849][T13315] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 830.972236][ T3605] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 831.013089][T13331] loop4: detected capacity change from 0 to 128 [ 831.052411][ T5447] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 831.162497][ T3605] usb 3-1: device descriptor read/64, error -71 [ 831.192560][T13331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 831.208704][T13331] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 831.310928][ T7321] EXT4-fs (loop4): unmounting filesystem. [ 831.422834][ T5447] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 831.433701][ T3605] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 831.457202][ T5447] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 832.125564][ T3605] usb 3-1: device descriptor read/64, error -71 [ 832.252660][ T5447] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 832.332387][ T3605] usb usb3-port1: attempt power cycle [ 832.342290][ T5447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.409400][ T5447] usb 4-1: Product: syz [ 832.452234][ T5447] usb 4-1: Manufacturer: syz [ 832.456908][ T5447] usb 4-1: SerialNumber: syz [ 832.581403][ T5447] usb 4-1: config 0 descriptor?? [ 832.633242][ T5447] usb 4-1: can't set config #0, error -71 [ 832.648424][ T5447] usb 4-1: USB disconnect, device number 48 [ 832.709332][T13353] loop0: detected capacity change from 0 to 512 [ 832.742070][T13356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2450'. [ 832.791060][T13353] loop0: detected capacity change from 0 to 512 [ 832.800106][ T7891] libceph: connect (1)[c::]:6789 error -101 [ 832.812316][ T7891] libceph: mon0 (1)[c::]:6789 connect error [ 832.853369][T13365] Driver unsupported XDP return value 0 on prog (id 425) dev N/A, expect packet loss! [ 832.919060][T13352] loop3: detected capacity change from 0 to 512 [ 832.954292][T13352] EXT4-fs: Ignoring removed bh option [ 832.984883][T13357] ceph: No mds server is up or the cluster is laggy [ 833.769388][T13352] EXT4-fs error (device loop3): __ext4_iget:5044: inode #15: block 1803188595: comm syz.3.2448: invalid block [ 833.827584][ T26] audit: type=1326 audit(1720761621.059:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.1.2454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc178775bd9 code=0x0 [ 833.853487][T13352] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2448: couldn't read orphan inode 15 (err -117) [ 833.878426][T13352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 833.896083][T13352] EXT4-fs (loop3): unmounting filesystem. [ 833.941546][T13380] loop0: detected capacity change from 0 to 128 [ 834.027514][T13380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 834.038978][T13380] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 834.200831][T10130] EXT4-fs (loop0): unmounting filesystem. [ 834.879647][ T7891] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 835.018956][ T26] audit: type=1800 audit(1720761622.259:841): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2448" name="/" dev="fuse" ino=1 res=0 errno=0 [ 835.122641][ T7891] usb 5-1: device descriptor read/64, error -71 [ 835.215861][ T3292] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 835.787538][T13396] loop0: detected capacity change from 0 to 6 [ 835.808703][T13396] Dev loop0: unable to read RDB block 6 [ 835.812305][ T7891] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 835.825572][T13396] loop0: unable to read partition table [ 835.852410][T13396] loop0: partition table beyond EOD, truncated [ 835.879140][T13396] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 835.879140][T13396] ) failed (rc=-5) [ 835.955328][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2463'. [ 836.012258][ T7891] usb 5-1: device descriptor read/64, error -71 [ 836.122502][ T3292] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 836.132720][ T7891] usb usb5-port1: attempt power cycle [ 836.148804][ T3292] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 836.164814][ T6163] libceph: connect (1)[c::]:6789 error -101 [ 836.174025][ T6163] libceph: mon0 (1)[c::]:6789 connect error [ 836.312536][ T3292] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 836.335574][ T3292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.352317][T13408] ceph: No mds server is up or the cluster is laggy [ 836.359224][ T3292] usb 3-1: Product: syz [ 836.364613][ T3292] usb 3-1: Manufacturer: syz [ 836.370467][ T3292] usb 3-1: SerialNumber: syz [ 836.490491][ T3292] usb 3-1: config 0 descriptor?? [ 836.542496][ T7891] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 836.611145][T13385] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 836.627667][ T5447] libceph: connect (1)[c::]:6789 error -101 [ 836.652569][ T5447] libceph: mon0 (1)[c::]:6789 connect error [ 836.668595][T13385] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 836.704921][ T7891] usb 5-1: device descriptor read/8, error -71 [ 837.012944][ T7891] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 837.024863][T13385] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 837.070615][T13385] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 837.112331][ T7891] usb 5-1: device descriptor read/8, error -71 [ 837.215103][ T26] audit: type=1326 audit(1720761624.459:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13423 comm="syz.4.2470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7a5575bd9 code=0x0 [ 837.248013][ T7891] usb usb5-port1: unable to enumerate USB device [ 838.152944][T13425] loop0: detected capacity change from 0 to 512 [ 838.166886][T13425] EXT4-fs: Ignoring removed bh option [ 838.392352][ T3292] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 838.408832][ T3292] usb 3-1: USB disconnect, device number 41 [ 838.671525][T13418] loop3: detected capacity change from 0 to 40427 [ 838.701037][T13425] EXT4-fs error (device loop0): __ext4_iget:5044: inode #15: block 1803188595: comm syz.0.2472: invalid block [ 838.768357][T13425] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2472: couldn't read orphan inode 15 (err -117) [ 838.818666][T13425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 838.821169][T13418] F2FS-fs (loop3): Found nat_bits in checkpoint [ 838.865109][T13425] EXT4-fs (loop0): unmounting filesystem. [ 839.015429][T13418] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 839.111914][T13450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2476'. [ 839.179782][ T26] audit: type=1800 audit(1720761626.419:843): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2472" name="/" dev="fuse" ino=1 res=0 errno=0 [ 839.181076][T11491] syz-executor: attempt to access beyond end of device [ 839.181076][T11491] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 839.353589][ T26] audit: type=1326 audit(1720761626.599:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.2.2484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x0 [ 839.407925][ T3292] libceph: connect (1)[c::]:6789 error -101 [ 839.414711][ T3292] libceph: mon0 (1)[c::]:6789 connect error [ 839.529259][T13457] ceph: No mds server is up or the cluster is laggy [ 840.423340][ T3292] libceph: connect (1)[c::]:6789 error -101 [ 840.429417][ T3292] libceph: mon0 (1)[c::]:6789 connect error [ 840.869078][T13475] 9pnet: Could not find request transport: fd0x0000000000000006 [ 841.112102][T13492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2491'. [ 841.152296][ T3292] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 841.252346][ T9333] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 841.357167][T13494] loop4: detected capacity change from 0 to 512 [ 841.369375][T13494] EXT4-fs: Ignoring removed bh option [ 841.380417][T13494] EXT4-fs error (device loop4): __ext4_iget:5044: inode #15: block 1803188595: comm syz.4.2492: invalid block [ 841.393658][T13494] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2492: couldn't read orphan inode 15 (err -117) [ 841.406375][T13494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 841.421843][ T3292] usb 4-1: Using ep0 maxpacket: 8 [ 841.433270][T13494] EXT4-fs (loop4): unmounting filesystem. [ 841.462485][ T3292] usb 4-1: no configurations [ 841.467133][ T3292] usb 4-1: can't read configurations, error -22 [ 841.622263][ T3292] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 841.672504][ T9333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 841.687775][ T9333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 841.854720][T13504] loop1: detected capacity change from 0 to 16 [ 841.862490][ T3292] usb 4-1: Using ep0 maxpacket: 8 [ 841.871470][ T9333] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 841.884964][ T9333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.901726][T13504] erofs: (device loop1): mounted with root inode @ nid 36. [ 841.901798][ T9333] usb 3-1: Product: syz [ 841.902566][ T3292] usb 4-1: no configurations [ 841.921778][ T9333] usb 3-1: Manufacturer: syz [ 841.940295][ T9333] usb 3-1: SerialNumber: syz [ 841.946880][ T3292] usb 4-1: can't read configurations, error -22 [ 841.964415][ T9333] usb 3-1: config 0 descriptor?? [ 841.981538][ T3292] usb usb4-port1: attempt power cycle [ 841.992566][T13484] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.000820][ T26] audit: type=1800 audit(1720761629.239:845): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2492" name="/" dev="fuse" ino=1 res=0 errno=0 [ 842.023785][T13484] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.275285][T13484] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.282977][T13484] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 842.432437][ T3292] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 843.174308][ T3292] usb 4-1: Using ep0 maxpacket: 8 [ 843.195183][ T26] audit: type=1326 audit(1720761630.439:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.0.2498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b89775bd9 code=0x0 [ 843.212596][ T3292] usb 4-1: no configurations [ 843.228267][ T3292] usb 4-1: can't read configurations, error -22 [ 843.277247][ T9334] libceph: connect (1)[c::]:6789 error -101 [ 843.284579][ T9334] libceph: mon0 (1)[c::]:6789 connect error [ 843.334286][T13523] 9pnet: Could not find request transport: fd0x0000000000000006 [ 843.414679][ T3292] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 843.441763][T13519] ceph: No mds server is up or the cluster is laggy [ 843.528623][ T3292] usb 4-1: Using ep0 maxpacket: 8 [ 843.802791][ T9333] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 844.043354][ T9333] usb 3-1: USB disconnect, device number 42 [ 844.273617][ T3292] usb 4-1: no configurations [ 844.283337][ T3292] usb 4-1: can't read configurations, error -22 [ 844.290319][ T3292] usb usb4-port1: unable to enumerate USB device [ 844.326965][T13538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2502'. [ 845.505523][T13550] loop1: detected capacity change from 0 to 512 [ 845.563671][T13550] EXT4-fs: Ignoring removed bh option [ 845.679813][T13550] EXT4-fs error (device loop1): __ext4_iget:5044: inode #15: block 1803188595: comm syz.1.2505: invalid block [ 845.767100][T13550] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2505: couldn't read orphan inode 15 (err -117) [ 845.831678][T13550] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 846.384066][ T3561] Bluetooth: hci4: command 0x0406 tx timeout [ 846.518725][ T3561] Bluetooth: hci0: command 0x0406 tx timeout [ 846.710360][T13550] EXT4-fs (loop1): unmounting filesystem. [ 846.761609][ T3558] libceph: connect (1)[c::]:6789 error -101 [ 846.769218][ T3558] libceph: mon0 (1)[c::]:6789 connect error [ 846.861984][T13568] 9pnet: Could not find request transport: fd0x0000000000000006 [ 846.892922][ T26] audit: type=1326 audit(1720761634.139:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13581 comm="syz.4.2514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7a5575bd9 code=0x0 [ 846.921226][T13571] ceph: No mds server is up or the cluster is laggy [ 846.956792][ T26] audit: type=1800 audit(1720761634.199:848): pid=13557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2505" name="/" dev="fuse" ino=1 res=0 errno=0 [ 847.972243][ T6163] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 848.046579][T13599] 9pnet: Could not find request transport: fd0x0000000000000004 [ 848.133602][ T9333] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 848.219962][ T6163] usb 4-1: Using ep0 maxpacket: 8 [ 848.322309][ T6163] usb 4-1: no configurations [ 848.327448][ T6163] usb 4-1: can't read configurations, error -22 [ 848.544124][ T6163] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 848.992490][ T6163] usb 4-1: Using ep0 maxpacket: 8 [ 849.162563][ T6163] usb 4-1: no configurations [ 849.190505][ T6163] usb 4-1: can't read configurations, error -22 [ 849.930970][ T6163] usb usb4-port1: attempt power cycle [ 850.042802][ T9333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 850.059130][ T9333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 850.100944][T13620] 9pnet_fd: Insufficient options for proto=fd [ 850.247952][ T26] audit: type=1326 audit(1720761637.489:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.1.2529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc178775bd9 code=0x0 [ 850.272797][ T9333] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 850.286464][ T9333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.296583][ T9333] usb 3-1: Product: syz [ 850.307298][ T9333] usb 3-1: Manufacturer: syz [ 850.430192][T13624] loop4: detected capacity change from 0 to 512 [ 850.458372][T13624] EXT4-fs: Ignoring removed bh option [ 850.497128][ T9333] usb 3-1: SerialNumber: syz [ 850.504275][ T9333] usb 3-1: config 0 descriptor?? [ 850.522565][T13597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 850.537442][T13597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 850.549089][T13624] EXT4-fs error (device loop4): __ext4_iget:5044: inode #15: block 1803188595: comm syz.4.2527: invalid block [ 850.735572][T13624] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2527: couldn't read orphan inode 15 (err -117) [ 850.796082][T13597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 850.824526][T13597] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 850.949978][T13624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 851.081294][T13624] EXT4-fs (loop4): unmounting filesystem. [ 851.312498][ T6163] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 851.376472][T13644] 9pnet: Could not find request transport: fd0x0000000000000003 [ 851.554422][ T9333] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 851.753270][ T9333] usb 3-1: USB disconnect, device number 43 [ 852.289605][ T6163] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 852.298947][ T26] audit: type=1800 audit(1720761639.549:850): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2527" name="/" dev="fuse" ino=1 res=0 errno=0 [ 852.522635][ T6163] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 852.533651][ T6163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.558544][ T6163] usb 4-1: config 0 descriptor?? [ 852.589629][T13666] 9pnet_fd: Insufficient options for proto=fd [ 852.730300][ T26] audit: type=1326 audit(1720761639.969:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13674 comm="syz.0.2544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b89775bd9 code=0x0 [ 852.822349][ T7891] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 852.845029][T13677] 9pnet: Could not find request transport: fd0x0000000000000004 [ 854.073599][ T3563] Bluetooth: Unexpected start frame (len 10) [ 854.082415][ T7891] usb 3-1: Using ep0 maxpacket: 8 [ 854.122692][ T7891] usb 3-1: no configurations [ 854.130964][ T7891] usb 3-1: can't read configurations, error -22 [ 854.162076][T13683] loop4: detected capacity change from 0 to 512 [ 854.195347][T13683] EXT4-fs: Ignoring removed bh option [ 854.293598][ T6163] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 854.304085][T13683] EXT4-fs error (device loop4): __ext4_iget:5044: inode #15: block 1803188595: comm syz.4.2547: invalid block [ 854.322284][ T7891] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 854.338628][ T6163] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 854.351181][T13683] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2547: couldn't read orphan inode 15 (err -117) [ 854.375664][ T6163] asix: probe of 4-1:0.0 failed with error -71 [ 854.381521][T13683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 854.390416][ T6163] usb 4-1: USB disconnect, device number 56 [ 854.411074][T13683] EXT4-fs (loop4): unmounting filesystem. [ 854.572279][ T7891] usb 3-1: Using ep0 maxpacket: 8 [ 854.612369][ T7891] usb 3-1: no configurations [ 854.617067][ T7891] usb 3-1: can't read configurations, error -22 [ 854.623766][ T26] audit: type=1800 audit(1720761641.859:852): pid=13691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2547" name="/" dev="fuse" ino=1 res=0 errno=0 [ 854.646419][ T7891] usb usb3-port1: attempt power cycle [ 854.672391][ T3292] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 854.672432][ T41] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 854.740564][T13702] loop4: detected capacity change from 0 to 512 [ 854.771061][T13702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 854.780660][T13702] ext4 filesystem being mounted at /361/bus supports timestamps until 2038 (0x7fffffff) [ 855.033618][ T3292] usb 1-1: Using ep0 maxpacket: 8 [ 855.063526][ T41] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 855.157532][ T41] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 855.492970][ T41] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 855.573758][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.581907][ T41] usb 2-1: Product: syz [ 855.646282][ T41] usb 2-1: Manufacturer: syz [ 855.689466][ T41] usb 2-1: SerialNumber: syz [ 855.740292][T13715] 9pnet_fd: Insufficient options for proto=fd [ 855.763851][ T41] usb 2-1: config 0 descriptor?? [ 855.770014][ T7891] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 855.779433][ T7321] EXT4-fs (loop4): unmounting filesystem. [ 855.786186][T13700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 855.805861][T13700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 855.862459][ T3292] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 855.884103][T13718] 9pnet_fd: Insufficient options for proto=fd [ 855.890773][ T3292] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 855.928529][ T3292] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 855.959096][ T3292] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.999663][ T3292] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 856.016474][ T7891] usb 3-1: device not accepting address 46, error -71 [ 856.024970][ T3292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.101365][T13700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 856.124913][T13700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 856.136681][ T3563] Bluetooth: hci0: unexpected event for opcode 0x080c [ 856.362851][ T3292] usb 1-1: GET_CAPABILITIES returned 0 [ 856.373858][ T3292] usbtmc 1-1:16.0: can't read capabilities [ 856.942011][ T3558] usb 1-1: USB disconnect, device number 39 [ 857.002062][T13727] loop2: detected capacity change from 0 to 4096 [ 857.058942][T11852] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 857.130724][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 857.252490][ T41] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 857.273601][ T41] usb 2-1: USB disconnect, device number 47 [ 857.382373][ T7891] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 857.432317][ T9333] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 857.692294][ T9333] usb 4-1: Using ep0 maxpacket: 8 [ 857.744983][ T26] audit: type=1800 audit(1720761644.989:853): pid=13737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2561" name="/" dev="fuse" ino=1 res=0 errno=0 [ 857.752554][ T7891] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 857.821814][ T7891] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 857.848821][ T7891] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 857.862640][ T9333] usb 4-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 857.865086][ T7891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.871903][ T41] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 857.892580][ T9333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.910768][T13727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 857.928103][ T9333] usb 4-1: config 0 descriptor?? [ 858.000672][T13749] 9pnet_fd: Insufficient options for proto=fd [ 858.112563][ T3558] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 858.125715][T13753] 9pnet_fd: Insufficient options for proto=fd [ 858.372941][ T41] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 859.161127][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.182461][ T3558] usb 5-1: Using ep0 maxpacket: 8 [ 859.204674][ T41] usb 1-1: config 0 descriptor?? [ 859.334327][ T3558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.383340][ T3558] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 859.401100][ T5528] usb 4-1: USB disconnect, device number 57 [ 859.560085][T13772] syz.1.2573 (13772): attempted to duplicate a private mapping with mremap. This is not supported. [ 859.582624][ T3558] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 859.596995][ T3558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.605236][ T3558] usb 5-1: Product: syz [ 859.607963][ T7891] usb 3-1: USB disconnect, device number 48 [ 859.610765][ T3558] usb 5-1: Manufacturer: syz [ 859.610786][ T3558] usb 5-1: SerialNumber: syz [ 859.639605][ T3558] usb 5-1: config 0 descriptor?? [ 859.897297][ T3558] usb 5-1: USB disconnect, device number 54 [ 860.150821][ T3563] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 860.160235][ T3563] Bluetooth: hci0: Injecting HCI hardware error event [ 860.169322][ T3563] Bluetooth: hci0: hardware error 0x00 [ 860.192366][ T41] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 860.216555][ T41] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 860.291589][ T41] asix: probe of 1-1:0.0 failed with error -71 [ 860.350486][ T41] usb 1-1: USB disconnect, device number 40 [ 860.542368][ T9334] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 860.551912][ T26] audit: type=1800 audit(1720761647.789:854): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2574" name="/" dev="fuse" ino=1 res=0 errno=0 [ 860.677194][T13794] 9pnet_fd: Insufficient options for proto=fd [ 860.750398][T13799] 9pnet_fd: Insufficient options for proto=fd [ 861.822251][ T9334] usb 4-1: Using ep0 maxpacket: 8 [ 862.022364][ T9334] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 862.038969][ T9334] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 862.062860][ T9334] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 862.082268][ T6163] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 862.272672][ T9334] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.286346][ T9334] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 862.295769][ T9334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.302600][ T3563] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 862.332309][ T6163] usb 2-1: Using ep0 maxpacket: 8 [ 862.452547][ T6163] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.276205][ T6163] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 863.422424][ T9334] usb 4-1: usb_control_msg returned -71 [ 863.428786][ T9334] usbtmc 4-1:16.0: can't read capabilities [ 863.452570][ T6163] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 863.479991][ T6163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.500892][ T9334] usb 4-1: USB disconnect, device number 58 [ 863.537236][ T6163] usb 2-1: Product: syz [ 863.562291][ T6163] usb 2-1: Manufacturer: syz [ 863.567332][ T6163] usb 2-1: SerialNumber: syz [ 863.608533][ T6163] usb 2-1: config 0 descriptor?? [ 863.633996][T13845] 9pnet_fd: Insufficient options for proto=fd [ 863.798328][T13850] 9pnet_fd: Insufficient options for proto=fd [ 863.929503][ T9333] usb 2-1: USB disconnect, device number 48 [ 863.985654][ T9334] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 864.403624][ T9334] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 864.442584][ T9334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.591049][ T9334] usb 4-1: config 0 descriptor?? [ 865.291153][T13877] loop1: detected capacity change from 0 to 256 [ 865.673538][ T9334] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 865.794989][ T9334] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 866.075826][ T9334] asix: probe of 4-1:0.0 failed with error -71 [ 866.253962][ T9334] usb 4-1: USB disconnect, device number 59 [ 866.291888][T13884] 9pnet_fd: Insufficient options for proto=fd [ 868.334526][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 868.472889][T13927] 9pnet_fd: Insufficient options for proto=fd [ 868.576493][T13932] loop2: detected capacity change from 0 to 256 [ 868.655043][T13932] exFAT-fs (loop2): failed to read sector(0x800000078) [ 868.719317][T13932] exFAT-fs (loop2): failed to load upcase table [ 868.725935][T13932] exFAT-fs (loop2): failed to recognize exfat type [ 870.007789][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.014260][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.144838][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2633'. [ 872.532028][T13991] loop2: detected capacity change from 0 to 256 [ 872.662494][T12210] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 872.689268][T13996] loop0: detected capacity change from 0 to 128 [ 872.695815][ T7891] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 872.771710][T13996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 872.782556][T13996] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 872.939693][T10130] EXT4-fs (loop0): unmounting filesystem. [ 873.062395][ T7891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.085585][ T7891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.101041][ T7891] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 873.113871][ T7891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.149232][ T7891] usb 2-1: config 0 descriptor?? [ 873.653131][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 873.800390][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 873.823877][T14030] device syz_tun entered promiscuous mode [ 873.829866][T14030] device macvtap1 entered promiscuous mode [ 873.858760][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 873.921483][ T6163] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 874.262768][ T7891] usb 2-1: string descriptor 0 read error: -71 [ 874.312556][ T6163] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 874.343614][ T7891] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 874.413049][ T6163] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 874.501897][ T7891] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 874.615608][ T7891] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 874.636870][T14041] Cannot find map_set index 0 as target [ 874.672240][ T7891] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 874.720693][ T7891] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 874.778423][ T6163] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 874.825162][ T6163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.833943][ T7891] usb 2-1: USB disconnect, device number 49 [ 874.852378][ T6163] usb 5-1: Product: syz [ 874.882724][ T6163] usb 5-1: Manufacturer: syz [ 874.897727][ T6163] usb 5-1: SerialNumber: syz [ 874.933493][ T6163] usb 5-1: config 0 descriptor?? [ 874.968036][T14023] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 874.985301][T14023] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 875.209230][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2662'. [ 875.234159][T14023] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 875.262595][T14023] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 876.012312][ T6163] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 876.055805][ T6163] usb 5-1: USB disconnect, device number 55 [ 876.391316][T14081] loop0: detected capacity change from 0 to 128 [ 876.800724][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 876.812486][ T3292] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 877.662440][ T3563] Bluetooth: hci4: command 0x0406 tx timeout [ 877.852474][ T3292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.872297][ T3292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.901174][T14108] loop0: detected capacity change from 0 to 512 [ 877.907818][ T3292] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 877.928170][ T3292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.955133][T14108] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 877.970209][ T3292] usb 4-1: config 0 descriptor?? [ 878.008041][T14108] EXT4-fs (loop0): #blocks per group too big: 532480 [ 878.160650][T14112] netlink: 'syz.1.2680': attribute type 8 has an invalid length. [ 878.405541][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2686'. [ 879.298371][ T7891] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 879.582572][ T3292] usb 4-1: string descriptor 0 read error: -71 [ 879.612437][ T3292] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 879.631588][ T3292] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 879.660423][ T3292] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 879.689156][ T3292] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 879.697557][ T7891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 879.721590][ T7891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 879.738265][ T3292] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 879.790264][ T3292] usb 4-1: USB disconnect, device number 60 [ 879.957150][ T7891] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 879.985306][ T7891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.002533][ T7891] usb 3-1: Product: syz [ 880.012488][ T7891] usb 3-1: Manufacturer: syz [ 880.022677][ T7891] usb 3-1: SerialNumber: syz [ 880.048564][ T7891] usb 3-1: config 0 descriptor?? [ 880.112680][T14118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 880.139456][T14118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 881.063152][T14118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 881.102508][T14118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 881.815561][ T7891] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 881.990304][ T7891] usb 3-1: USB disconnect, device number 49 [ 882.519523][T14192] loop2: detected capacity change from 0 to 128 [ 882.560777][T14192] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 882.674349][T14192] loop2: detected capacity change from 0 to 2048 [ 882.723927][T14192] loop2: p1 < > p4 [ 882.731970][T14192] loop2: p4 size 8388608 extends beyond EOD, truncated [ 883.810405][T14199] loop2: detected capacity change from 0 to 1024 [ 883.875874][T14199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 883.966804][T11850] EXT4-fs (loop2): unmounting filesystem. [ 885.377646][T14183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2709'. [ 885.600795][T14219] 9pnet_fd: Insufficient options for proto=fd [ 885.903132][T14233] dccp_invalid_packet: P.Data Offset(0) too small [ 888.378875][T14258] loop3: detected capacity change from 0 to 256 [ 888.528952][T14258] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 889.289336][T14267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2733'. [ 894.481856][T14299] loop2: detected capacity change from 0 to 256 [ 894.617749][T14299] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 895.339552][T14309] loop2: detected capacity change from 0 to 512 [ 895.351390][T14309] EXT4-fs: Ignoring removed mblk_io_submit option [ 895.390594][T14309] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2745: invalid indirect mapped block 10 (level 1) [ 895.409326][T14309] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2745: invalid indirect mapped block 8 (level 1) [ 895.423931][T14309] EXT4-fs (loop2): 1 truncate cleaned up [ 895.429616][T14309] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 896.302235][ T14] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 896.331815][T11850] EXT4-fs (loop2): unmounting filesystem. [ 896.662563][ T14] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 896.699944][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.738799][ T14] usb 4-1: config 0 descriptor?? [ 896.830382][T14332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 896.848686][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 896.888007][ T3561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 896.901657][ T3561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 896.911148][ T3561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 896.922043][ T3561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 896.930414][ T3561] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 896.940108][ T3561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 897.256147][ T26] audit: type=1326 audit(897.226:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 897.341930][ T26] audit: type=1326 audit(897.226:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 897.380578][ T26] audit: type=1326 audit(897.226:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 897.433529][ T26] audit: type=1326 audit(897.226:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 897.626347][ T26] audit: type=1326 audit(897.226:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 897.682324][ T14] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 897.702264][ T14] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 897.821863][T14344] loop2: detected capacity change from 0 to 256 [ 897.915004][T14344] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 898.466039][T14334] chnl_net:caif_netlink_parms(): no params data found [ 898.483651][ T26] audit: type=1326 audit(897.226:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 898.514354][ T14] asix: probe of 4-1:0.0 failed with error -71 [ 898.525212][ T14] usb 4-1: USB disconnect, device number 61 [ 898.647634][ T26] audit: type=1326 audit(897.226:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 898.698207][ T26] audit: type=1326 audit(897.226:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 898.957730][ T26] audit: type=1326 audit(897.226:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 898.980649][ T26] audit: type=1326 audit(897.226:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.2.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x7fc00000 [ 899.034114][ T3563] Bluetooth: hci5: command tx timeout [ 899.732494][T14334] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.759385][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.797447][T14334] device bridge_slave_0 entered promiscuous mode [ 899.825897][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.869031][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.897894][T14334] device bridge_slave_1 entered promiscuous mode [ 900.006105][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.077988][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.188591][T14334] team0: Port device team_slave_0 added [ 900.220286][T14334] team0: Port device team_slave_1 added [ 900.303996][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.318689][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.378336][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.476342][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.488854][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.525840][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.112372][ T3563] Bluetooth: hci5: command tx timeout [ 901.424593][T14334] device hsr_slave_0 entered promiscuous mode [ 901.471825][T14374] loop3: detected capacity change from 0 to 256 [ 901.486839][T14334] device hsr_slave_1 entered promiscuous mode [ 901.495151][T14373] 9pnet_fd: Insufficient options for proto=fd [ 901.524223][T14374] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 901.665212][T14379] loop4: detected capacity change from 0 to 1024 [ 901.808879][ T14] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 902.601638][T14334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.804528][T14334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.205596][ T3561] Bluetooth: hci5: command tx timeout [ 904.482485][ T14] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 904.497695][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.520658][ T14] usb 3-1: config 0 descriptor?? [ 904.586796][ T14] usb 3-1: can't set config #0, error -71 [ 904.643078][ T14] usb 3-1: USB disconnect, device number 50 [ 904.760602][T14334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.994955][T14334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.329522][T14334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 905.357456][T14334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 905.378684][T14334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 905.399501][T14334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 905.550510][T14334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.627872][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 905.644576][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 905.677159][T14334] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.706648][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 905.724494][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 905.739651][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.746909][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.798039][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 905.823220][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 905.834612][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 905.849074][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.856298][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.876208][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 905.885833][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 905.949416][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 905.964206][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 905.983467][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 906.000125][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 906.009282][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 906.018664][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 906.051782][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 906.068003][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 907.125743][ T3563] Bluetooth: hci5: command tx timeout [ 907.133835][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 907.145474][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 907.189661][T14432] loop2: detected capacity change from 0 to 512 [ 907.209666][T14432] EXT4-fs: Ignoring removed mblk_io_submit option [ 907.280414][T14432] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2781: invalid indirect mapped block 10 (level 1) [ 907.329612][T14432] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2781: invalid indirect mapped block 8 (level 1) [ 907.352559][ T41] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 907.409599][T14432] EXT4-fs (loop2): 1 truncate cleaned up [ 907.421039][T14432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 907.701651][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 907.751899][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 907.901316][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.264322][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 908.295619][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 908.358502][T11850] EXT4-fs (loop2): unmounting filesystem. [ 908.379206][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 908.397221][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.451097][T14334] device veth0_vlan entered promiscuous mode [ 908.489119][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 908.489862][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 908.507272][T14334] device veth1_vlan entered promiscuous mode [ 908.519541][ T41] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 908.528951][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.545103][ T41] usb 4-1: config 0 descriptor?? [ 908.567242][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 908.567976][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 908.568600][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 908.569247][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 908.574800][T14334] device veth0_macvtap entered promiscuous mode [ 908.616435][T14334] device veth1_macvtap entered promiscuous mode [ 908.628621][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.628649][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.628664][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.628679][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.628693][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.628709][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.628723][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.628738][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.628750][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.628766][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.630231][T14334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.630353][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 908.631061][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 908.631726][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 908.632725][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 908.637255][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.637279][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.637293][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.637309][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.637323][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.637338][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.637352][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.637367][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.637378][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.637393][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.638738][T14334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.638853][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 908.639569][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 908.645930][T14334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.925317][T14334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.937997][T14334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.938038][T14334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.050767][ T6648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.059441][ T6648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.076115][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 909.107185][T11906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.125015][T11906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.146685][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 909.182756][ T3563] Bluetooth: hci5: command tx timeout [ 909.712720][ T41] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 909.837185][T14465] loop2: detected capacity change from 0 to 128 [ 910.941626][ T41] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 910.954565][ T41] asix: probe of 4-1:0.0 failed with error -71 [ 911.088111][ T41] usb 4-1: USB disconnect, device number 62 [ 911.452441][ T5447] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 912.002627][ T5447] usb 5-1: Using ep0 maxpacket: 8 [ 912.162480][ T5447] usb 5-1: unable to get BOS descriptor or descriptor too short [ 912.506267][ T5447] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.537895][ T5447] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 912.579505][ T5447] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 912.990442][ T5447] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 913.032842][ T5447] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.051333][ T5447] usb 5-1: Product: syz [ 913.059699][ T5447] usb 5-1: Manufacturer: syz [ 913.068541][ T5447] usb 5-1: SerialNumber: syz [ 913.163844][ T5447] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 913.264943][ T5447] cdc_ncm 5-1:1.0: bind() failure [ 913.379911][ T3561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 913.391563][ T3561] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 913.402858][ T3561] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 913.414619][ T3561] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 913.445960][ T3561] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 913.454491][ T5524] usb 5-1: USB disconnect, device number 56 [ 913.460670][ T3565] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 913.623098][ T5447] libceph: connect (1)[c::]:6789 error -101 [ 913.631017][ T5447] libceph: mon0 (1)[c::]:6789 connect error [ 913.777793][T14504] ceph: No mds server is up or the cluster is laggy [ 913.808876][T14494] chnl_net:caif_netlink_parms(): no params data found [ 914.079841][T14494] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.164331][T14494] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.201550][T14494] device bridge_slave_0 entered promiscuous mode [ 914.231207][T14494] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.256553][T14494] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.305985][T14494] device bridge_slave_1 entered promiscuous mode [ 914.440915][T14494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.485679][T14494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.616267][T14494] team0: Port device team_slave_0 added [ 914.676933][T14494] team0: Port device team_slave_1 added [ 914.790779][T14494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.809893][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.859936][T14494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.877993][T14494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.886154][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.942292][ T5524] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 915.044934][T14494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.302634][ T5524] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 915.391398][ T5524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.473437][ T5524] usb 4-1: config 0 descriptor?? [ 915.528756][ T3563] Bluetooth: hci6: command tx timeout [ 916.846006][T14494] device hsr_slave_0 entered promiscuous mode [ 916.896930][T14494] device hsr_slave_1 entered promiscuous mode [ 917.003862][T14494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.024770][T14494] Cannot create hsr debugfs directory [ 917.902378][ T3565] Bluetooth: hci6: command tx timeout [ 918.242398][ T5524] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 918.264123][T14494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.280296][ T5524] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 918.335974][ T5524] asix: probe of 4-1:0.0 failed with error -71 [ 918.414759][ T5524] usb 4-1: USB disconnect, device number 63 [ 918.865091][T14494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.180654][T14616] fuse: Bad value for 'fd' [ 919.278073][T14494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.319228][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 919.512878][T14494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.261196][ T3563] Bluetooth: hci6: command tx timeout [ 921.019961][T14494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 921.030823][T14494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 921.044826][T14494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 921.064348][T14494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 921.129871][ T3558] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 921.225848][T14494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.259832][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 921.270380][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 921.292970][T14494] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.317679][T14623] loop4: detected capacity change from 0 to 40427 [ 921.319442][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 921.335051][T14623] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 921.352424][T14623] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 921.367315][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 921.395887][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.403135][T14633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.419551][T14623] F2FS-fs (loop4): Found nat_bits in checkpoint [ 921.446476][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 921.460075][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 921.477798][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 921.490676][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.497925][ T7891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.505305][ T3558] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 921.522227][ T3558] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 921.539944][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 921.572331][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 921.580863][T14623] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 921.584006][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 921.596378][T14623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 921.649629][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 921.689348][T14645] loop3: detected capacity change from 0 to 8 [ 921.705184][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 921.705203][ T26] audit: type=1804 audit(2000000019.640:887): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2812" name="/newroot/416/bus/file0" dev="loop4" ino=10 res=1 errno=0 [ 921.733162][ T3558] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 921.736193][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 921.744302][ T3558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.758798][T14645] SQUASHFS error: lzo decompression failed, data probably corrupt [ 921.762907][ T3558] usb 3-1: Product: syz [ 921.771429][ T3558] usb 3-1: Manufacturer: syz [ 921.785029][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 921.786798][ T3558] usb 3-1: SerialNumber: syz [ 921.808583][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 921.810608][ T3558] usb 3-1: config 0 descriptor?? [ 921.823335][T14645] SQUASHFS error: Failed to read block 0x91: -5 [ 921.829629][T14645] SQUASHFS error: Unable to read metadata cache entry [8f] [ 921.837054][T14645] SQUASHFS error: Unable to read inode 0x11f [ 921.838063][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 921.850618][T14637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 921.852587][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 921.861133][T14637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 921.868962][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 921.882788][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 921.893286][T14494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 922.096041][T14637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 922.121932][T14637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 922.312790][ T3563] Bluetooth: hci6: command tx timeout [ 922.318621][T14654] loop3: detected capacity change from 0 to 512 [ 922.372445][ T9334] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 922.403670][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 922.423073][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 922.434007][T14654] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 922.455037][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.470207][T14654] UDF-fs: Scanning with blocksize 512 failed [ 922.488907][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 922.498709][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 922.524694][T14654] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 922.549803][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 922.561543][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 922.582070][T14494] device veth0_vlan entered promiscuous mode [ 922.582900][T14654] UDF-fs: Scanning with blocksize 1024 failed [ 922.601998][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 922.618595][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 922.649962][T14494] device veth1_vlan entered promiscuous mode [ 922.669396][T14654] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 922.691630][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 922.694676][T14657] loop4: detected capacity change from 0 to 1024 [ 922.705830][T14654] UDF-fs: Scanning with blocksize 2048 failed [ 922.710908][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 922.748995][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 922.758420][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 922.762549][ T9334] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 922.770520][T14494] device veth0_macvtap entered promiscuous mode [ 922.787314][T14654] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 922.797269][ T3558] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 922.821344][ T9334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.831854][ T3558] usb 3-1: USB disconnect, device number 51 [ 922.835902][T14494] device veth1_macvtap entered promiscuous mode [ 922.840253][T14657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 922.870628][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.902029][ T9334] usb 2-1: config 0 descriptor?? [ 922.914723][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.926542][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.937842][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.949034][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.960822][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.971252][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.982523][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.993056][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.011196][T14654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 923.025580][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.045921][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.062711][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.075478][T14494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.086854][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 923.104464][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 923.119678][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 923.134297][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 923.145563][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.156829][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.167771][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.190032][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.303789][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.377069][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.444507][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.579592][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.703962][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.716557][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.738323][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.751949][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.772678][T14494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.794161][T14662] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2818'. [ 923.953749][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 923.963019][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 923.989879][T14494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.012054][T14494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.031226][T14494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.042033][T14494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.065200][ T7321] EXT4-fs (loop4): unmounting filesystem. [ 924.182377][ T9334] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 924.214204][ T9334] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 924.238196][ T9334] asix: probe of 2-1:0.0 failed with error -71 [ 924.268304][ T9334] usb 2-1: USB disconnect, device number 50 [ 924.382572][ T3563] Bluetooth: hci6: command tx timeout [ 924.512300][ T4723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.522073][ T4723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.536468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 924.655249][ T4723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.677914][ T4723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.728362][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 927.280939][T14711] kernel profiling enabled (shift: 9) [ 927.508307][T14710] loop2: detected capacity change from 0 to 1024 [ 927.817821][T14710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 927.922248][ T3558] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 929.053927][ T3558] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 929.097358][ T3558] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 929.175915][T14721] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2831'. [ 929.333446][ T3558] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 929.343556][ T3558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.351914][ T3558] usb 2-1: Product: syz [ 929.357341][ T3558] usb 2-1: Manufacturer: syz [ 929.362441][ T3558] usb 2-1: SerialNumber: syz [ 929.385101][ T3558] usb 2-1: config 0 descriptor?? [ 929.404380][T14705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 929.413044][T14705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 929.613010][T14723] loop3: detected capacity change from 0 to 256 [ 929.644677][T14705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 929.653285][T14705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 929.713089][T14723] exfat: Deprecated parameter 'namecase' [ 929.718989][T14723] exfat: Deprecated parameter 'utf8' [ 929.739256][T14723] exfat: Deprecated parameter 'namecase' [ 929.774604][T14723] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 929.841828][T14723] Bluetooth: MGMT ver 1.22 [ 929.900161][T11850] EXT4-fs (loop2): unmounting filesystem. [ 930.332405][ T3558] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 930.361773][ T3558] usb 2-1: USB disconnect, device number 51 [ 930.409548][T14728] loop2: detected capacity change from 0 to 8 [ 930.453096][T14728] SQUASHFS error: lzo decompression failed, data probably corrupt [ 930.488295][T14730] loop3: detected capacity change from 0 to 1024 [ 930.492480][T14728] SQUASHFS error: Failed to read block 0x91: -5 [ 930.531572][T14728] SQUASHFS error: Unable to read metadata cache entry [8f] [ 930.535535][T14730] hfsplus: unable to find HFS+ superblock [ 930.541719][T14728] SQUASHFS error: Unable to read inode 0x11f [ 931.375528][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.381879][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.475754][T14737] loop2: detected capacity change from 0 to 512 [ 931.582488][T14737] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 931.690340][T14737] UDF-fs: Scanning with blocksize 512 failed [ 931.706551][T14737] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 931.714235][T14737] UDF-fs: Scanning with blocksize 1024 failed [ 931.734250][T14737] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 931.741734][T14737] UDF-fs: Scanning with blocksize 2048 failed [ 931.861707][T14737] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 931.901302][T14749] loop4: detected capacity change from 0 to 512 [ 931.961213][T14737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 932.044587][T12210] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 932.078508][T14743] loop4: detected capacity change from 0 to 512 [ 934.535764][T14765] loop3: detected capacity change from 0 to 512 [ 934.652286][T14765] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 934.832673][T14765] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.2844: iget: bad i_size value: -67835469387268086 [ 934.860127][T14765] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2844: couldn't read orphan inode 15 (err -117) [ 934.923436][T14765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 934.945134][T14765] ext2 filesystem being mounted at /170/file0 supports timestamps until 2038 (0x7fffffff) [ 935.034995][T14772] loop4: detected capacity change from 0 to 1024 [ 935.156105][T14772] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 935.644641][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 935.930921][T14783] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2846'. [ 936.663185][ T7321] EXT4-fs (loop4): unmounting filesystem. [ 937.531614][ T3565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 937.545962][ T3565] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 937.556936][ T3565] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 937.571574][ T3565] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 937.582060][ T3565] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 937.590877][ T3565] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 937.938478][T14804] loop4: detected capacity change from 0 to 512 [ 938.025258][T12210] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 938.041501][T14799] loop4: detected capacity change from 0 to 512 [ 938.063447][T12210] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.111228][T12210] Buffer I/O error on dev loop4, logical block 0, async page read [ 938.295820][T11491] EXT4-fs (loop3): unmounting filesystem. [ 938.310486][T14794] chnl_net:caif_netlink_parms(): no params data found [ 939.195287][T14794] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.328893][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.409401][T14794] device bridge_slave_0 entered promiscuous mode [ 939.495927][T14794] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.523768][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.552691][T14794] device bridge_slave_1 entered promiscuous mode [ 939.662734][ T3563] Bluetooth: hci7: command tx timeout [ 939.764769][T14829] loop2: detected capacity change from 0 to 8 [ 939.774449][T14829] SQUASHFS error: lzo decompression failed, data probably corrupt [ 939.895780][T14829] SQUASHFS error: Failed to read block 0x91: -5 [ 939.929861][T14829] SQUASHFS error: Unable to read metadata cache entry [8f] [ 939.961353][T14829] SQUASHFS error: Unable to read inode 0x11f [ 940.012456][T14794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.029752][T14794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.804574][T14794] team0: Port device team_slave_0 added [ 940.897045][T14840] loop4: detected capacity change from 0 to 1024 [ 940.921354][T14840] hfsplus: unable to find HFS+ superblock [ 941.100849][ T3616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.204993][T14794] team0: Port device team_slave_1 added [ 941.322270][ T9334] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 941.572381][ T9334] usb 2-1: Using ep0 maxpacket: 8 [ 941.608842][ T3616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.702809][ T9334] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 941.862308][ T9334] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.912341][ T9334] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 941.955258][ T9334] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 942.002763][ T3563] Bluetooth: hci7: command tx timeout [ 942.016599][ T9334] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.081064][ T9334] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 942.134004][ T9334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.186320][T14794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.251683][T14794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.319306][T14829] loop2: detected capacity change from 0 to 512 [ 942.332332][T14794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.376682][T14829] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 942.423235][ T9334] usb 2-1: GET_CAPABILITIES returned 0 [ 942.428907][ T9334] usbtmc 2-1:16.0: can't read capabilities [ 942.435758][ T3616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.466147][T14829] UDF-fs: Scanning with blocksize 512 failed [ 942.499262][T14794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.499637][T14829] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 942.514908][T14794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.524103][T14829] UDF-fs: Scanning with blocksize 1024 failed [ 942.592975][T14829] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 942.607903][T14855] loop4: detected capacity change from 0 to 512 [ 942.620879][T14794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.663388][T14829] UDF-fs: Scanning with blocksize 2048 failed [ 942.683044][T14829] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 942.705045][T12210] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 942.709998][T14829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.731467][T14850] loop4: detected capacity change from 0 to 512 [ 942.739203][ T3616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.960184][T14794] device hsr_slave_0 entered promiscuous mode [ 942.991199][T14794] device hsr_slave_1 entered promiscuous mode [ 943.034620][T14794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 943.062386][T14862] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 943.071225][T14794] Cannot create hsr debugfs directory [ 943.427042][ T3558] usb 2-1: USB disconnect, device number 52 [ 944.258896][ T3563] Bluetooth: hci7: command tx timeout [ 946.017777][T14886] loop4: detected capacity change from 0 to 256 [ 946.024932][T14886] exfat: Deprecated parameter 'namecase' [ 946.071147][T14886] exfat: Deprecated parameter 'utf8' [ 946.085956][T14886] exfat: Deprecated parameter 'namecase' [ 946.133858][T14886] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 946.158538][T14883] loop1: detected capacity change from 0 to 4096 [ 946.230211][T14883] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 946.313798][ T3563] Bluetooth: hci7: command tx timeout [ 946.532147][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 948.248315][T14921] loop2: detected capacity change from 0 to 512 [ 948.435274][T12210] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 948.478725][T14914] loop2: detected capacity change from 0 to 512 [ 948.621740][T14794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 949.213633][T14794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 949.300260][T14794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 949.516767][T14794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 949.747924][T14943] loop2: detected capacity change from 0 to 256 [ 949.794305][T14943] exfat: Deprecated parameter 'namecase' [ 949.849168][T14943] exfat: Deprecated parameter 'utf8' [ 949.854735][T14943] exfat: Deprecated parameter 'namecase' [ 950.088873][T14943] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 951.107002][T14794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.188279][T14961] loop4: detected capacity change from 0 to 512 [ 951.215239][ T3616] device hsr_slave_0 left promiscuous mode [ 951.266269][T12210] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 951.302745][T14961] loop4: detected capacity change from 0 to 512 [ 951.316073][ T3616] device hsr_slave_1 left promiscuous mode [ 951.342986][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.353161][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.391853][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.421598][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.483169][ T3616] device bridge_slave_1 left promiscuous mode [ 951.489501][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.543581][ T3616] device bridge_slave_0 left promiscuous mode [ 951.549897][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.651228][ T3616] device veth1_macvtap left promiscuous mode [ 951.660085][ T3616] device veth0_macvtap left promiscuous mode [ 951.728160][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 951.765950][ T3616] device veth1_vlan left promiscuous mode [ 951.790166][ T3616] device veth0_vlan left promiscuous mode [ 953.657772][T14959] loop2: detected capacity change from 0 to 40427 [ 954.064227][T14959] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 954.131603][T14959] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 954.378779][T14959] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 954.542268][T14996] loop3: detected capacity change from 0 to 256 [ 954.577709][T14996] exfat: Deprecated parameter 'namecase' [ 954.587094][T14996] exfat: Deprecated parameter 'utf8' [ 954.706608][T14996] exfat: Deprecated parameter 'namecase' [ 954.757951][T14996] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 955.572457][T15008] loop1: detected capacity change from 0 to 512 [ 955.658911][T15008] loop1: detected capacity change from 0 to 512 [ 955.674234][T12210] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 957.778478][ T3616] team0 (unregistering): Port device team_slave_1 removed [ 958.183764][ T3616] team0 (unregistering): Port device team_slave_0 removed [ 958.726691][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.009530][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.029431][T15041] loop4: detected capacity change from 0 to 2048 [ 959.143141][T15041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 959.151835][T15041] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038 (0x7fffffff) [ 959.364664][ T7321] EXT4-fs (loop4): unmounting filesystem. [ 959.670451][T15052] loop4: detected capacity change from 0 to 256 [ 959.789103][T15052] exfat: Deprecated parameter 'namecase' [ 959.899919][T15052] exfat: Deprecated parameter 'utf8' [ 960.014299][T15052] exfat: Deprecated parameter 'namecase' [ 960.326657][T15052] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 960.491737][T15043] loop2: detected capacity change from 0 to 40427 [ 960.509982][T15043] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 960.638926][T15043] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 960.739222][T15043] F2FS-fs (loop2): Found nat_bits in checkpoint [ 960.890164][T15043] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 960.921512][T15043] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 961.509966][ T3616] bond0 (unregistering): Released all slaves [ 961.751786][T14794] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.779312][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 961.790247][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 961.882516][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 961.891408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 961.958002][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.965244][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.992397][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 962.027259][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 962.271415][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.278640][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.068610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 963.164038][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 963.345171][T15092] loop2: detected capacity change from 0 to 512 [ 963.392772][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 963.431557][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 963.475554][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 963.492375][T15092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 963.577808][T15092] ext4 filesystem being mounted at /149/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 963.647791][T15103] loop1: detected capacity change from 0 to 256 [ 963.693959][T15103] exfat: Deprecated parameter 'namecase' [ 963.702019][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 963.711942][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 963.736535][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 963.745520][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 963.754237][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 963.762299][T15103] exfat: Deprecated parameter 'utf8' [ 963.767658][T15103] exfat: Deprecated parameter 'namecase' [ 963.815456][T14794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 963.923680][T14794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 964.104749][T11850] EXT4-fs (loop2): unmounting filesystem. [ 964.115026][T15103] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 964.175368][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 964.236643][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 965.075030][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 965.092542][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 965.114556][T14794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.223310][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 965.240816][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 965.309098][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 965.334586][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 965.363511][T14794] device veth0_vlan entered promiscuous mode [ 965.406149][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 965.424793][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 965.466439][T14794] device veth1_vlan entered promiscuous mode [ 965.558745][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 965.601547][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 965.610533][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 965.653237][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 965.681682][T14794] device veth0_macvtap entered promiscuous mode [ 965.709656][T14794] device veth1_macvtap entered promiscuous mode [ 965.773643][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.812728][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.852210][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.873741][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.892259][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.915524][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.937885][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.958821][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.978287][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.009136][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.024785][T15111] loop3: detected capacity change from 0 to 40427 [ 966.057850][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.075657][T15111] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 966.104556][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.107549][T15111] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 966.128923][T15133] loop4: detected capacity change from 0 to 512 [ 966.166007][T14794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.190070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 966.200550][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 966.218014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 966.229516][T15111] F2FS-fs (loop3): Found nat_bits in checkpoint [ 966.233300][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 966.259036][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.282002][T12210] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 966.299022][T15128] loop4: detected capacity change from 0 to 512 [ 966.300247][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.332418][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.350273][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.369313][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.390492][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.429691][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.482938][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.502952][T15111] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 966.510154][T15111] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 966.532137][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.568509][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.589237][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.640798][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.665831][ T26] audit: type=1326 audit(2000000064.600:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.2.2928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f182e575bd9 code=0x0 [ 966.700529][T14794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.749480][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 968.001001][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 968.066093][T15156] loop1: detected capacity change from 0 to 256 [ 968.143628][T14794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.164043][T15156] exfat: Deprecated parameter 'namecase' [ 968.169784][T15156] exfat: Deprecated parameter 'utf8' [ 968.172281][T14794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.184068][T14794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.203261][T14794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.282710][T15156] exfat: Deprecated parameter 'namecase' [ 968.829190][T15156] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 969.183356][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.191805][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.278149][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 969.316242][T14579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.370994][T15172] loop1: detected capacity change from 0 to 1024 [ 969.382961][T14579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.435299][ T9334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 969.620191][T15178] loop2: detected capacity change from 0 to 512 [ 970.043098][ T5165] hfsplus: bad catalog file entry [ 970.109949][ T5165] hfsplus: b-tree write err: -5, ino 3 [ 970.381080][T15178] loop2: detected capacity change from 0 to 512 [ 970.641174][T15182] loop0: detected capacity change from 0 to 1024 [ 972.642621][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 972.672332][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 972.820728][T15185] loop3: detected capacity change from 0 to 40427 [ 972.878272][T15185] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 972.935885][T15185] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 973.020952][T15185] F2FS-fs (loop3): Found nat_bits in checkpoint [ 973.222212][T15212] loop1: detected capacity change from 0 to 256 [ 973.272186][T15212] exfat: Deprecated parameter 'namecase' [ 973.277936][T15212] exfat: Deprecated parameter 'utf8' [ 973.292760][T15185] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 973.300031][T15185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 973.320636][T15212] exfat: Deprecated parameter 'namecase' [ 973.350036][T15212] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 973.377395][ T6590] hfsplus: b-tree write err: -5, ino 4 [ 973.446131][T15217] loop2: detected capacity change from 0 to 128 [ 973.656603][T15217] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 973.682683][T15217] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 973.788401][T15227] loop1: detected capacity change from 0 to 512 [ 973.865482][ T26] audit: type=1800 audit(2000000071.800:889): pid=15217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2946" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 973.957068][T15227] loop1: detected capacity change from 0 to 512 [ 974.016254][T11850] EXT4-fs (loop2): unmounting filesystem. [ 975.660483][T15260] loop0: detected capacity change from 0 to 256 [ 975.865911][T15260] exfat: Deprecated parameter 'namecase' [ 975.936593][T15260] exfat: Deprecated parameter 'utf8' [ 976.065206][T15260] exfat: Deprecated parameter 'namecase' [ 976.312713][T15260] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 977.424433][T15276] loop0: detected capacity change from 0 to 512 [ 977.507247][ T7] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 977.686028][T12210] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 977.712228][ T7] usb 4-1: device descriptor read/64, error -71 [ 977.720513][T15276] loop0: detected capacity change from 0 to 512 [ 977.747032][T12210] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 977.978421][T12210] Buffer I/O error on dev loop0, logical block 0, async page read [ 978.502307][ T7] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 978.596143][T15286] loop2: detected capacity change from 0 to 512 [ 978.665240][T15286] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 978.678994][T15286] ext4 filesystem being mounted at /167/bus supports timestamps until 2038 (0x7fffffff) [ 978.713942][ T7] usb 4-1: device descriptor read/64, error -71 [ 978.853920][ T7] usb usb4-port1: attempt power cycle [ 979.022443][T11850] EXT4-fs (loop2): unmounting filesystem. [ 979.025763][ T7298] tipc: Subscription rejected, illegal request [ 980.131605][T15311] loop4: detected capacity change from 0 to 256 [ 980.142235][ T7] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 980.197783][T15311] exfat: Deprecated parameter 'namecase' [ 980.232320][T15311] exfat: Deprecated parameter 'utf8' [ 980.237750][T15311] exfat: Deprecated parameter 'namecase' [ 980.350965][T15311] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 980.819676][T15329] loop1: detected capacity change from 0 to 512 [ 981.182743][T15332] loop4: detected capacity change from 0 to 512 [ 981.523633][T15332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 981.603232][T15332] ext4 filesystem being mounted at /466/bus supports timestamps until 2038 (0x7fffffff) [ 981.718338][T12210] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 981.749228][T15323] loop1: detected capacity change from 0 to 512 [ 981.755988][T12210] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 981.782695][T12210] Buffer I/O error on dev loop1, logical block 0, async page read [ 981.824571][ T7] usb 4-1: device descriptor read/8, error -71 [ 981.841065][T15344] loop0: detected capacity change from 0 to 512 [ 981.910474][ T7321] EXT4-fs (loop4): unmounting filesystem. [ 981.969305][T15344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 981.992709][T15344] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 982.842406][ T26] audit: type=1800 audit(2000000080.760:890): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2983" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 983.468108][T15368] loop2: detected capacity change from 0 to 256 [ 983.475354][T15368] exfat: Deprecated parameter 'namecase' [ 983.481052][T15368] exfat: Deprecated parameter 'utf8' [ 983.486615][T15368] exfat: Deprecated parameter 'namecase' [ 983.523143][T15368] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 983.537103][T14794] EXT4-fs (loop0): unmounting filesystem. [ 984.688295][T15387] loop1: detected capacity change from 0 to 512 [ 985.295216][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 985.450576][T15387] loop1: detected capacity change from 0 to 512 [ 986.891945][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3001'. [ 986.912502][ T7889] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 987.102473][ T7889] usb 5-1: device descriptor read/64, error -71 [ 987.136296][T15415] loop0: detected capacity change from 0 to 256 [ 987.166131][T15415] exfat: Deprecated parameter 'namecase' [ 987.188031][T15415] exfat: Deprecated parameter 'utf8' [ 987.209215][T15415] exfat: Deprecated parameter 'namecase' [ 987.256600][T15415] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 987.382353][ T7889] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 988.236546][ T7889] usb 5-1: device descriptor read/64, error -71 [ 988.392533][ T7889] usb usb5-port1: attempt power cycle [ 988.553471][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 988.812914][ T7889] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 989.826026][T15442] loop0: detected capacity change from 0 to 512 [ 989.990900][T12210] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 990.011777][T15442] loop0: detected capacity change from 0 to 512 [ 990.036583][T12210] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 990.054301][T12210] Buffer I/O error on dev loop0, logical block 0, async page read [ 990.576338][T15458] ceph: No mds server is up or the cluster is laggy [ 990.595606][ T7891] libceph: connect (1)[c::]:6789 error -101 [ 990.601694][ T7891] libceph: mon0 (1)[c::]:6789 connect error [ 991.473058][ T7889] usb 5-1: device descriptor read/8, error -71 [ 992.783465][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.790340][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.778792][T15497] loop1: detected capacity change from 0 to 512 [ 993.869502][T15497] loop1: detected capacity change from 0 to 512 [ 993.973868][T15502] loop0: detected capacity change from 0 to 512 [ 994.110649][T15502] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 994.157021][T15502] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 994.187806][T15502] EXT4-fs (loop0): 1 truncate cleaned up [ 994.195913][ T7] libceph: connect (1)[c::]:6789 error -101 [ 994.203486][T15502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 994.214942][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 994.245890][T15502] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 994.266842][T15509] ceph: No mds server is up or the cluster is laggy [ 994.296151][T14794] EXT4-fs (loop0): unmounting filesystem. [ 996.407339][T15533] loop1: detected capacity change from 0 to 512 [ 996.531145][T15533] EXT4-fs (loop1): Test dummy encryption mode enabled [ 996.574013][T15533] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.3035: inline data xattr refers to an external xattr inode [ 996.768473][T15533] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.3035: couldn't read orphan inode 12 (err -117) [ 997.217991][T15533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 997.876026][T15553] loop3: detected capacity change from 0 to 512 [ 998.619280][T15553] loop3: detected capacity change from 0 to 512 [ 998.735690][ T3563] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 998.956297][T15568] loop3: detected capacity change from 0 to 512 [ 999.010059][T15568] EXT4-fs (loop3): Test dummy encryption mode enabled [ 999.072990][T15559] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 999.096292][T15568] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.3044: inline data xattr refers to an external xattr inode [ 999.131973][T15557] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 999.163117][T15568] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.3044: couldn't read orphan inode 12 (err -117) [ 999.202509][T15568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 999.605058][T14334] EXT4-fs (loop1): unmounting filesystem. [ 1001.893301][T15605] loop1: detected capacity change from 0 to 1024 [ 1002.633791][T15528] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1003.024716][T15528] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.141471][T15528] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.203822][T11906] hfsplus: b-tree write err: -5, ino 4 [ 1004.209691][T15528] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1004.236646][T15528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1005.032223][T15528] usb 5-1: SerialNumber: syz [ 1005.115184][T15627] loop1: detected capacity change from 0 to 8 [ 1005.144696][T15627] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1005.165523][T15627] SQUASHFS error: Failed to read block 0x91: -5 [ 1005.171845][T15627] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1005.189331][T15627] SQUASHFS error: Unable to read inode 0x11f [ 1005.318649][T15528] usb 5-1: 0:2 : does not exist [ 1005.346303][T15528] usb 5-1: unit 255 not found! [ 1005.433482][T15528] usb 5-1: USB disconnect, device number 61 [ 1005.492921][T11491] EXT4-fs (loop3): unmounting filesystem. [ 1005.607596][T15640] loop1: detected capacity change from 0 to 512 [ 1005.679866][T15640] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1005.708047][T15640] UDF-fs: Scanning with blocksize 512 failed [ 1005.723354][T12210] udevd[12210]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.790042][T15640] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1005.873997][T15640] UDF-fs: Scanning with blocksize 1024 failed [ 1006.318251][T15640] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1006.989129][T15640] UDF-fs: Scanning with blocksize 2048 failed [ 1007.015297][T15640] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1007.082049][T15640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.377963][T15656] loop4: detected capacity change from 0 to 1024 [ 1007.662287][ T3563] Bluetooth: hci7: command tx timeout [ 1008.607021][T15672] loop2: detected capacity change from 0 to 512 [ 1008.876010][T15672] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1009.598900][T15672] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.3075: inline data xattr refers to an external xattr inode [ 1009.642563][T15672] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.3075: couldn't read orphan inode 12 (err -117) [ 1009.824365][T15672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1011.020443][ T4162] hfsplus: b-tree write err: -5, ino 4 [ 1011.267980][T11850] EXT4-fs (loop2): unmounting filesystem. [ 1013.677784][ T3563] Bluetooth: hci7: command tx timeout [ 1014.316447][T15737] loop2: detected capacity change from 0 to 8 [ 1014.359205][T15737] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1014.423557][T15737] SQUASHFS error: Failed to read block 0x91: -5 [ 1014.429875][T15737] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1014.464866][T15737] SQUASHFS error: Unable to read inode 0x11f [ 1015.677093][T15733] loop1: detected capacity change from 0 to 1024 [ 1015.873559][T15750] loop2: detected capacity change from 0 to 512 [ 1015.975078][T15750] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1016.881113][T15750] UDF-fs: Scanning with blocksize 512 failed [ 1016.900860][T15750] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1016.917414][T15750] UDF-fs: Scanning with blocksize 1024 failed [ 1016.926983][T15750] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1016.936607][T15750] UDF-fs: Scanning with blocksize 2048 failed [ 1016.950821][T15750] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1017.159953][T15750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1017.966619][T14569] hfsplus: b-tree write err: -5, ino 4 [ 1019.260281][ T26] audit: type=1326 audit(2000000117.190:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1019.372185][ T26] audit: type=1326 audit(2000000117.220:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1019.440038][ T26] audit: type=1326 audit(2000000117.240:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1019.507600][ T26] audit: type=1326 audit(2000000117.240:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1019.952607][T15528] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1020.300103][ T26] audit: type=1326 audit(2000000117.240:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1020.382540][T15528] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1020.441987][ T26] audit: type=1326 audit(2000000117.250:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1020.464879][ T3565] Bluetooth: hci5: command 0x0406 tx timeout [ 1020.598808][ T26] audit: type=1326 audit(2000000117.250:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1020.622263][T15528] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1020.634278][ T26] audit: type=1326 audit(2000000117.250:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15792 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1020.993369][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1021.722350][T15528] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1021.836294][T15528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.865763][T15528] usb 1-1: Product: syz [ 1021.909092][T15814] loop3: detected capacity change from 0 to 1024 [ 1021.918358][T15528] usb 1-1: Manufacturer: syz [ 1021.937328][T15528] usb 1-1: SerialNumber: syz [ 1021.964695][T15528] usb 1-1: config 0 descriptor?? [ 1022.012638][T15797] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1022.041248][T15797] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1023.112499][T15528] dm9601: probe of 1-1:0.0 failed with error -71 [ 1023.143542][T15528] usb 1-1: USB disconnect, device number 41 [ 1023.764566][T15851] loop0: detected capacity change from 0 to 8 [ 1024.870122][T15851] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1024.880031][T15851] SQUASHFS error: Failed to read block 0x91: -5 [ 1024.889501][T15851] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1025.832394][T15851] SQUASHFS error: Unable to read inode 0x11f [ 1025.849893][ T7298] hfsplus: b-tree write err: -5, ino 4 [ 1026.489514][T15869] loop0: detected capacity change from 0 to 512 [ 1026.524459][T15869] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1026.532038][T15869] UDF-fs: Scanning with blocksize 512 failed [ 1026.544207][T15869] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1026.551871][T15869] UDF-fs: Scanning with blocksize 1024 failed [ 1026.572589][T15869] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1026.599188][T15869] UDF-fs: Scanning with blocksize 2048 failed [ 1026.618141][T15869] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1026.697638][T15869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1028.465998][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1030.495454][ T26] audit: type=1326 audit(2000000128.430:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1030.563929][ T26] audit: type=1326 audit(2000000128.430:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1030.674288][ T26] audit: type=1326 audit(2000000128.430:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1030.777810][ T26] audit: type=1326 audit(2000000128.430:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1030.867133][ T26] audit: type=1326 audit(2000000128.430:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1030.972778][ T26] audit: type=1326 audit(2000000128.430:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1031.046899][ T26] audit: type=1326 audit(2000000128.450:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1031.111696][ T26] audit: type=1326 audit(2000000128.450:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1031.203650][ T26] audit: type=1326 audit(2000000128.460:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1031.292557][ T5884] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1031.356078][ T26] audit: type=1326 audit(2000000128.460:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb75bd9 code=0x7ffc0000 [ 1031.609859][T15933] loop2: detected capacity change from 0 to 1024 [ 1031.662489][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.693037][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1031.802287][ T5884] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1031.817435][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1031.835926][ T5884] usb 2-1: SerialNumber: syz [ 1032.127689][ T5884] usb 2-1: 0:2 : does not exist [ 1032.153165][ T5884] usb 2-1: unit 255 not found! [ 1032.212707][ T5884] usb 2-1: USB disconnect, device number 53 [ 1032.714652][T12210] udevd[12210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.850230][T15958] loop4: detected capacity change from 0 to 8 [ 1032.876235][T15958] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1032.902665][T15958] SQUASHFS error: Failed to read block 0x91: -5 [ 1032.910100][T15958] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1032.920920][T15958] SQUASHFS error: Unable to read inode 0x11f [ 1034.255445][T15966] loop4: detected capacity change from 0 to 512 [ 1034.311019][ T4389] hfsplus: b-tree write err: -5, ino 4 [ 1034.370881][T15966] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1034.410223][T15966] UDF-fs: Scanning with blocksize 512 failed [ 1034.441913][T15966] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1034.466855][T15966] UDF-fs: Scanning with blocksize 1024 failed [ 1034.505796][T15966] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1034.551555][T15966] UDF-fs: Scanning with blocksize 2048 failed [ 1034.592600][T15966] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1034.722948][T15966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1035.012248][ T9334] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1035.365982][T15979] loop3: detected capacity change from 0 to 256 [ 1035.382254][ T9334] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1035.394955][T15979] exfat: Deprecated parameter 'namecase' [ 1035.426679][ T9334] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1035.461861][ T9334] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1035.501282][ T9334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.521487][T15979] exfat: Deprecated parameter 'utf8' [ 1035.537639][T15979] exfat: Deprecated parameter 'namecase' [ 1035.590623][ T9334] usb 3-1: config 0 descriptor?? [ 1035.849247][T15979] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 1038.113791][ T3558] usb 3-1: USB disconnect, device number 52 [ 1038.161873][T16008] loop3: detected capacity change from 0 to 512 [ 1038.279539][T16008] loop3: detected capacity change from 0 to 512 [ 1038.355125][ T3561] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 1039.610435][T16022] loop3: detected capacity change from 0 to 256 [ 1039.627762][T16022] exfat: Deprecated parameter 'namecase' [ 1039.678343][T16022] exfat: Deprecated parameter 'utf8' [ 1039.712479][T16022] exfat: Deprecated parameter 'namecase' [ 1039.783816][T16022] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 1045.355635][T16056] loop3: detected capacity change from 0 to 512 [ 1046.232354][ T9334] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1046.257473][T16056] loop3: detected capacity change from 0 to 512 [ 1046.335540][ T3561] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 1046.482199][ T9334] usb 3-1: Using ep0 maxpacket: 32 [ 1046.492461][ T7889] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1047.702226][ T9334] usb 3-1: New USB device found, idVendor=046d, idProduct=0928, bcdDevice=26.52 [ 1047.720467][ T9334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.754009][ T9334] usb 3-1: Product: syz [ 1047.769308][ T9334] usb 3-1: Manufacturer: syz [ 1047.776540][T16072] loop1: detected capacity change from 0 to 256 [ 1047.803460][ T9334] usb 3-1: config 0 descriptor?? [ 1047.822428][ T9334] usb 3-1: can't set config #0, error -71 [ 1047.833136][T16072] exfat: Deprecated parameter 'namecase' [ 1047.844025][ T7889] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1047.851657][ T7889] usb 5-1: can't read configurations, error -71 [ 1047.863783][ T9334] usb 3-1: USB disconnect, device number 53 [ 1047.902334][T16072] exfat: Deprecated parameter 'utf8' [ 1047.907931][T16072] exfat: Deprecated parameter 'namecase' [ 1048.090955][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1048.168662][T16072] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 1049.104838][ T27] INFO: task syz.1.2716:14214 blocked for more than 143 seconds. [ 1049.354473][ T27] Not tainted 6.1.98-syzkaller #0 [ 1049.360150][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1049.360166][ T26] audit: type=1326 audit(2000000147.290:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.0.3196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7983b75bd9 code=0x0 [ 1049.398829][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1049.575502][ T27] task:syz.1.2716 state:D stack:25528 pid:14214 ppid:11846 flags:0x00004004 [ 1049.585656][ T27] Call Trace: [ 1049.589100][ T27] [ 1049.592203][ T27] __schedule+0x142d/0x4550 [ 1049.597514][ T27] ? __sched_text_start+0x8/0x8 [ 1049.613498][ T27] ? print_irqtrace_events+0x210/0x210 [ 1049.630940][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1049.873265][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1049.896925][ T27] schedule+0xbf/0x180 [ 1049.922783][ T27] ? do_exit+0x4dd/0x26a0 [ 1049.953976][ T27] do_exit+0x555/0x26a0 [ 1049.979449][ T27] ? put_task_struct+0x80/0x80 [ 1050.019067][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1050.064386][ T27] ? print_irqtrace_events+0x210/0x210 [ 1050.098790][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1050.124942][ T27] do_group_exit+0x202/0x2b0 [ 1050.151591][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1050.182983][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1050.219581][ T27] get_signal+0x16f7/0x17d0 [ 1050.224562][ T27] ? ptrace_notify+0x370/0x370 [ 1050.229486][ T27] arch_do_signal_or_restart+0xb0/0x1a10 [ 1050.235596][ T27] ? ktime_get+0x7f/0x270 [ 1050.240028][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1050.580597][ T27] ? do_futex+0x3b5/0x490 [ 1050.718265][ T27] ? get_sigframe_size+0x10/0x10 [ 1050.749655][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1050.775951][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 1050.799420][ T27] exit_to_user_mode_loop+0x6a/0x100 [ 1050.823054][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 1050.857249][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 1050.883083][ T27] do_syscall_64+0x47/0xb0 [ 1050.902212][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1050.933331][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1050.939427][ T27] RIP: 0033:0x7fc178775bd9 [ 1050.944050][ T27] RSP: 002b:00007ffc459933d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1050.953188][ T27] RAX: fffffffffffffdfc RBX: 00000000000d8381 RCX: 00007fc178775bd9 [ 1050.961333][ T27] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc178904044 [ 1050.969567][ T27] RBP: 00000000000d834f R08: 0000000000000010 R09: 0000001a459936ff [ 1050.977735][ T27] R10: 00007ffc459934c0 R11: 0000000000000246 R12: 00007fc178904044 [ 1050.985885][ T27] R13: 0000000000000032 R14: 00007ffc459934e0 R15: 00007ffc459934c0 [ 1050.994051][ T27] [ 1050.997776][ T27] INFO: task syz.1.2716:14219 blocked for more than 145 seconds. [ 1051.006315][ T27] Not tainted 6.1.98-syzkaller #0 [ 1051.011990][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1051.020865][ T27] task:syz.1.2716 state:D stack:25752 pid:14219 ppid:11846 flags:0x00004006 [ 1051.033349][ T27] Call Trace: [ 1051.039736][ T27] [ 1051.044918][ T27] __schedule+0x142d/0x4550 [ 1051.049579][ T27] ? __sched_text_start+0x8/0x8 [ 1051.055032][ T27] schedule+0xbf/0x180 [ 1051.059164][ T27] schedule_timeout+0xac/0x300 [ 1051.064050][ T27] ? console_conditional_schedule+0x40/0x40 [ 1051.069999][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1051.076113][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1051.081361][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1051.086705][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1051.091965][ T27] __wait_for_common+0x3e1/0x6c0 [ 1051.097191][ T27] ? console_conditional_schedule+0x40/0x40 [ 1051.103547][ T27] ? bit_wait_io_timeout+0x110/0x110 [ 1051.108984][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1051.114474][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 1051.120023][ T27] wait_for_completion_state+0x18/0x30 [ 1051.125956][ T27] do_coredump+0x9c5/0x2700 [ 1051.130611][ T27] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.137892][ T27] ? nfs_ssc_unregister+0x30/0x30 [ 1051.143366][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1051.148704][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1051.156905][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1051.162985][ T27] get_signal+0x1454/0x17d0 [ 1051.167671][ T27] ? ptrace_notify+0x370/0x370 [ 1051.173429][ T27] ? rcu_is_watching+0x11/0xb0 [ 1051.178347][ T27] arch_do_signal_or_restart+0xb0/0x1a10 [ 1051.184391][ T27] ? get_sigframe_size+0x10/0x10 [ 1051.189493][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1051.195932][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 1051.201545][ T27] exit_to_user_mode_loop+0x6a/0x100 [ 1051.207228][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 1051.213417][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 1051.219127][ T27] do_syscall_64+0x47/0xb0 [ 1051.223953][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1051.228792][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.236199][ T27] RIP: 0033:0x7fc178639f60 [ 1051.240768][ T27] RSP: 002b:00007fc1794adb38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1051.249639][ T27] RAX: 0000000000000000 RBX: 00007fc178904040 RCX: 00007fc178775bd9 [ 1051.258599][ T27] RDX: 00007fc1794adb40 RSI: 00007fc1794adc70 RDI: 000000000000000b [ 1051.269319][ T27] RBP: 00007fc178904038 R08: 0000000000000010 R09: 00007fc1794ae6c0 [ 1051.277655][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc178904044 [ 1051.286031][ T27] R13: 000000000000006e R14: 00007ffc45993210 R15: 00007ffc459932f8 [ 1051.294452][ T27] [ 1051.297611][ T27] INFO: task syz.0.2763:14366 blocked for more than 145 seconds. [ 1051.305734][ T27] Not tainted 6.1.98-syzkaller #0 [ 1051.311444][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1051.320507][ T27] task:syz.0.2763 state:D stack:25752 pid:14366 ppid:10130 flags:0x00004004 [ 1051.330175][ T27] Call Trace: [ 1051.333860][ T27] [ 1051.338566][ T27] __schedule+0x142d/0x4550 [ 1051.343552][ T27] ? __sched_text_start+0x8/0x8 [ 1051.348578][ T27] ? print_irqtrace_events+0x210/0x210 [ 1051.354552][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1051.360636][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1051.376460][ T27] schedule+0xbf/0x180 [ 1051.380709][ T27] ? do_exit+0x4dd/0x26a0 [ 1051.393356][ T27] do_exit+0x555/0x26a0 [ 1051.398984][ T27] ? put_task_struct+0x80/0x80 [ 1051.408764][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1051.418945][ T27] ? print_irqtrace_events+0x210/0x210 [ 1051.429520][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1051.439592][ T27] do_group_exit+0x202/0x2b0 [ 1051.449092][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1051.458166][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1051.465100][ T27] get_signal+0x16f7/0x17d0 [ 1051.469808][ T27] ? ptrace_notify+0x370/0x370 [ 1051.475071][ T27] arch_do_signal_or_restart+0xb0/0x1a10 [ 1051.480956][ T27] ? ktime_get+0x7f/0x270 [ 1051.487761][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1051.493351][ T27] ? do_futex+0x3b5/0x490 [ 1051.497840][ T27] ? get_sigframe_size+0x10/0x10 [ 1051.503100][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1051.509198][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 1051.515002][ T27] exit_to_user_mode_loop+0x6a/0x100 [ 1051.520438][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 1051.526301][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 1051.531901][ T27] do_syscall_64+0x47/0xb0 [ 1051.536399][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1051.542343][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.548338][ T27] RIP: 0033:0x7f9b89775bd9 [ 1051.552981][ T27] RSP: 002b:00007ffd5bf0c9e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1051.561607][ T27] RAX: fffffffffffffdfc RBX: 00000000000dc199 RCX: 00007f9b89775bd9 [ 1051.570014][ T27] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9b89904044 [ 1051.578159][ T27] RBP: 00000000000dc167 R08: 0000000000000010 R09: 000000195bf0cd0f [ 1051.586238][ T27] R10: 00007ffd5bf0cad0 R11: 0000000000000246 R12: 00007f9b89904044 [ 1051.594453][ T27] R13: 0000000000000032 R14: 00007ffd5bf0caf0 R15: 00007ffd5bf0cad0 [ 1051.603932][ T27] [ 1051.607075][ T27] INFO: task syz.0.2763:14373 blocked for more than 145 seconds. [ 1051.616126][ T27] Not tainted 6.1.98-syzkaller #0 [ 1051.621719][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1051.630564][ T27] task:syz.0.2763 state:D stack:25832 pid:14373 ppid:10130 flags:0x00004006 [ 1051.640624][ T27] Call Trace: [ 1051.645173][ T27] [ 1051.648261][ T27] __schedule+0x142d/0x4550 [ 1051.653051][ T27] ? __sched_text_start+0x8/0x8 [ 1051.657972][ T27] schedule+0xbf/0x180 [ 1051.662598][ T27] schedule_timeout+0xac/0x300 [ 1051.668924][ T27] ? console_conditional_schedule+0x40/0x40 [ 1051.675014][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1051.681368][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1051.686952][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1051.692721][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1051.697999][ T27] __wait_for_common+0x3e1/0x6c0 [ 1051.703413][ T27] ? console_conditional_schedule+0x40/0x40 [ 1051.709350][ T27] ? bit_wait_io_timeout+0x110/0x110 [ 1051.717132][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1051.722707][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 1051.728146][ T27] wait_for_completion_state+0x18/0x30 [ 1051.734319][ T27] do_coredump+0x9c5/0x2700 [ 1051.738881][ T27] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.745609][ T27] ? nfs_ssc_unregister+0x30/0x30 [ 1051.751038][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1051.756397][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1051.761646][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1051.767006][ T27] get_signal+0x1454/0x17d0 [ 1051.771917][ T27] ? ptrace_notify+0x370/0x370 [ 1051.776858][ T27] ? rcu_is_watching+0x11/0xb0 [ 1051.781661][ T27] arch_do_signal_or_restart+0xb0/0x1a10 [ 1051.787401][ T27] ? get_sigframe_size+0x10/0x10 [ 1051.792475][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1051.798515][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 1051.804076][ T27] exit_to_user_mode_loop+0x6a/0x100 [ 1051.809398][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 1051.815097][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 1051.820714][ T27] do_syscall_64+0x47/0xb0 [ 1051.827211][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1051.831960][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.838005][ T27] RIP: 0033:0x7f9b89639f60 [ 1051.842524][ T27] RSP: 002b:00007f9b8a4c1ab8 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1051.851461][ T27] RAX: 0000000000000000 RBX: 00007f9b89904038 RCX: 00007f9b89775bd9 [ 1051.859592][ T27] RDX: 00007f9b8a4c1ac0 RSI: 00007f9b8a4c1bf0 RDI: 000000000000000b [ 1051.867633][ T27] RBP: 00007f9b897e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1051.876178][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.884273][ T27] R13: 000000000000006e R14: 00007f9b89904038 R15: 00007ffd5bf0c908 [ 1051.892392][ T27] [ 1051.895504][ T27] [ 1051.895504][ T27] Showing all locks held in the system: [ 1051.903362][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1051.908683][ T27] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1051.919347][ T27] 1 lock held by rcu_tasks_trace/13: [ 1051.924707][ T27] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1051.937832][ T27] 1 lock held by khungtaskd/27: [ 1051.942791][ T27] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1051.953504][ T27] 2 locks held by getty/3308: [ 1051.958220][ T27] #0: ffff888028905098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1051.968121][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1051.978756][ T27] 4 locks held by kworker/u4:17/7298: [ 1051.984415][ T27] #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1051.994561][ T27] #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 1052.006058][ T27] #2: ffff8880782b0d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa0/0x1480 [ 1052.015747][ T27] #3: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xb1/0x310 [ 1052.026185][ T27] [ 1052.028535][ T27] ============================================= [ 1052.028535][ T27] [ 1052.037048][ T27] NMI backtrace for cpu 0 [ 1052.041428][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 1052.049254][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1052.059350][ T27] Call Trace: [ 1052.062653][ T27] [ 1052.065596][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1052.070300][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1052.075785][ T27] ? panic+0x764/0x764 [ 1052.079875][ T27] ? vprintk_emit+0x622/0x740 [ 1052.084582][ T27] ? printk_sprint+0x490/0x490 [ 1052.089406][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 1052.094547][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 1052.099515][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1052.105691][ T27] ? _printk+0xd1/0x111 [ 1052.109863][ T27] ? panic+0x764/0x764 [ 1052.113945][ T27] ? __wake_up_klogd+0xcc/0x100 [ 1052.118817][ T27] ? panic+0x764/0x764 [ 1052.122899][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 1052.128999][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1052.135208][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 1052.141223][ T27] watchdog+0xf88/0xfd0 [ 1052.145404][ T27] ? watchdog+0x1f8/0xfd0 [ 1052.149761][ T27] kthread+0x28d/0x320 [ 1052.153848][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1052.158894][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1052.163501][ T27] ret_from_fork+0x1f/0x30 [ 1052.167952][ T27] [ 1052.171903][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1052.177456][ C1] NMI backtrace for cpu 1 [ 1052.177470][ C1] CPU: 1 PID: 2984 Comm: syslogd Not tainted 6.1.98-syzkaller #0 [ 1052.177490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1052.177500][ C1] RIP: 0010:unwind_next_frame+0x4c8/0x2220 [ 1052.177527][ C1] Code: 0f b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 e8 4c 0f 46 f9 48 8d 43 fc 48 0f 47 e8 4c 0f 46 e3 49 39 ef 76 a9 a7 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 7c cd 48 89 df 48 89 [ 1052.177543][ C1] RSP: 0018:ffffc900001e0200 EFLAGS: 00000212 [ 1052.177566][ C1] RAX: ffffffff8edf5528 RBX: ffffffff8edf552c RCX: ffffffff8edf5530 [ 1052.177581][ C1] RDX: ffffffff8f788e20 RSI: ffffffff8a12e9b1 RDI: dffffc0000000000 [ 1052.177595][ C1] RBP: ffffffff8edf552c R08: 0000000000000003 R09: ffffc900001e03d0 [ 1052.177608][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8edf552c [ 1052.177621][ C1] R13: ffffffff8a12e9b0 R14: ffffffff8edf5524 R15: ffffffff8edf5530 [ 1052.177635][ C1] FS: 00007fac286f3380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1052.177652][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1052.177666][ C1] CR2: 00007fb9402d03f8 CR3: 000000007e9a9000 CR4: 00000000003506e0 [ 1052.177682][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1052.177693][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1052.177705][ C1] Call Trace: [ 1052.177710][ C1] [ 1052.177716][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 1052.177745][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1052.177774][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1052.177802][ C1] ? nmi_handle+0x25/0x440 [ 1052.177838][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1052.177866][ C1] ? nmi_handle+0x12e/0x440 [ 1052.177892][ C1] ? nmi_handle+0x25/0x440 [ 1052.177918][ C1] ? unwind_next_frame+0x4c8/0x2220 [ 1052.177937][ C1] ? default_do_nmi+0x62/0x150 [ 1052.177956][ C1] ? exc_nmi+0xa8/0x100 [ 1052.177973][ C1] ? end_repeat_nmi+0x16/0x31 [ 1052.178000][ C1] ? ieee80211_beacon_get_tim+0xb0/0x5d0 [ 1052.178029][ C1] ? ieee80211_beacon_get_tim+0xb1/0x5d0 [ 1052.178053][ C1] ? unwind_next_frame+0x4c8/0x2220 [ 1052.178073][ C1] ? unwind_next_frame+0x4c8/0x2220 [ 1052.178093][ C1] ? unwind_next_frame+0x4c8/0x2220 [ 1052.178113][ C1] [ 1052.178119][ C1] [ 1052.178130][ C1] ? ieee80211_beacon_get_tim+0xb1/0x5d0 [ 1052.178156][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 1052.178180][ C1] arch_stack_walk+0x10d/0x140 [ 1052.178202][ C1] ? ieee80211_beacon_get_tim+0xb1/0x5d0 [ 1052.178229][ C1] stack_trace_save+0x113/0x1c0 [ 1052.178255][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 1052.178286][ C1] kasan_set_track+0x4b/0x70 [ 1052.178312][ C1] ? kasan_set_track+0x4b/0x70 [ 1052.178336][ C1] ? __kasan_kmalloc+0x97/0xb0 [ 1052.178351][ C1] ? __kmalloc_node_track_caller+0xb1/0x220 [ 1052.178371][ C1] ? __alloc_skb+0x135/0x670 [ 1052.178396][ C1] ? __netdev_alloc_skb+0xfb/0x500 [ 1052.178422][ C1] ? __ieee80211_beacon_get+0xc7d/0x2110 [ 1052.178445][ C1] ? ieee80211_beacon_get_tim+0xb1/0x5d0 [ 1052.178492][ C1] ? __kmem_cache_alloc_node+0x137/0x260 [ 1052.178513][ C1] ? __netdev_alloc_skb+0xfb/0x500 [ 1052.178539][ C1] __kasan_kmalloc+0x97/0xb0 [ 1052.178562][ C1] ? __netdev_alloc_skb+0xfb/0x500 [ 1052.178588][ C1] __kmalloc_node_track_caller+0xb1/0x220 [ 1052.178610][ C1] ? __netdev_alloc_skb+0xfb/0x500 [ 1052.178636][ C1] __alloc_skb+0x135/0x670 [ 1052.178660][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1052.178689][ C1] __netdev_alloc_skb+0xfb/0x500 [ 1052.178717][ C1] ? napi_skb_cache_get+0x1e0/0x1e0 [ 1052.178749][ C1] __ieee80211_beacon_get+0xc7d/0x2110 [ 1052.178779][ C1] ? __ieee80211_beacon_get+0xb0/0x2110 [ 1052.178808][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 1052.178831][ C1] ? __lock_acquire+0x125b/0x1f80 [ 1052.178859][ C1] ? mark_lock+0x9a/0x340 [ 1052.178887][ C1] ? __lock_acquire+0x125b/0x1f80 [ 1052.178919][ C1] ieee80211_beacon_get_tim+0xb1/0x5d0 [ 1052.178946][ C1] ? __ieee80211_beacon_get+0x2110/0x2110 [ 1052.178977][ C1] mac80211_hwsim_beacon_tx+0x1d2/0xaa0 [ 1052.179008][ C1] __iterate_interfaces+0x21e/0x4b0 [ 1052.179026][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 1052.179053][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 1052.179080][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1052.179100][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x170 [ 1052.179121][ C1] mac80211_hwsim_beacon+0xd0/0x1e0 [ 1052.179146][ C1] ? hw_scan_work+0xf20/0xf20 [ 1052.179169][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 1052.179200][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1052.179221][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 1052.179250][ C1] hrtimer_run_softirq+0x196/0x2c0 [ 1052.179274][ C1] handle_softirqs+0x2ee/0xa40 [ 1052.179305][ C1] ? __irq_exit_rcu+0x157/0x240 [ 1052.179334][ C1] ? do_softirq+0x240/0x240 [ 1052.179358][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 1052.179381][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 1052.179402][ C1] __irq_exit_rcu+0x157/0x240 [ 1052.179428][ C1] ? irq_exit_rcu+0x20/0x20 [ 1052.179460][ C1] irq_exit_rcu+0x5/0x20 [ 1052.179484][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 1052.179505][ C1] [ 1052.179510][ C1] [ 1052.179516][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1052.179542][ C1] RIP: 0010:kasan_check_range+0x1d/0x290 [ 1052.179565][ C1] Code: c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 41 57 41 56 53 b0 01 48 85 f6 0f 84 9a 01 00 00 48 89 fd 48 01 f5 0f 82 5a 02 00 00 <48> 89 fd 48 c1 ed 2f 81 fd ff ff 01 00 0f 82 47 02 00 00 48 89 fb [ 1052.179580][ C1] RSP: 0018:ffffc9000315f418 EFLAGS: 00000286 [ 1052.179595][ C1] RAX: 0000000000000001 RBX: 0000000000000010 RCX: ffffffff813cb207 [ 1052.179607][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc9000315f590 [ 1052.179619][ C1] RBP: ffffc9000315f5a0 R08: 000000000000000c R09: ffffc9000315f630 [ 1052.179632][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000315f540 [ 1052.179645][ C1] R13: ffffffff8ef89c24 R14: 0000000000000000 R15: ffffc9000315f590 [ 1052.179663][ C1] ? unwind_next_frame+0xde7/0x2220 [ 1052.179688][ C1] memset+0x1f/0x40 [ 1052.179707][ C1] unwind_next_frame+0xde7/0x2220 [ 1052.179732][ C1] ? kasan_save_free_info+0x27/0x40 [ 1052.179753][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 1052.179777][ C1] arch_stack_walk+0x10d/0x140 [ 1052.179799][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 1052.179830][ C1] stack_trace_save+0x113/0x1c0 [ 1052.179856][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 1052.179886][ C1] ? __unix_dgram_recvmsg+0xcb3/0x1260 [ 1052.179905][ C1] kasan_set_track+0x4b/0x70 [ 1052.179930][ C1] ? kasan_set_track+0x4b/0x70 [ 1052.179955][ C1] ? kasan_save_free_info+0x27/0x40 [ 1052.180003][ C1] kasan_save_free_info+0x27/0x40 [ 1052.180023][ C1] ____kasan_slab_free+0xd6/0x120 [ 1052.180051][ C1] kmem_cache_free+0x292/0x510 [ 1052.180073][ C1] ? __unix_dgram_recvmsg+0xcb3/0x1260 [ 1052.180093][ C1] __unix_dgram_recvmsg+0xcb3/0x1260 [ 1052.180111][ C1] ? aa_file_perm+0x12c/0xf60 [ 1052.180140][ C1] ? aa_sk_perm+0x92d/0xa60 [ 1052.180158][ C1] ? unix_unhash+0x10/0x10 [ 1052.180176][ C1] ? aa_af_perm+0x350/0x350 [ 1052.180191][ C1] ? aa_file_perm+0x3e3/0xf60 [ 1052.180213][ C1] ? generic_file_write_iter+0xb6/0x310 [ 1052.180233][ C1] ? aa_file_perm+0x12c/0xf60 [ 1052.180258][ C1] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1052.180282][ C1] ? security_socket_recvmsg+0x86/0xb0 [ 1052.180303][ C1] ? unix_dgram_recvmsg+0xaf/0xd0 [ 1052.180322][ C1] ? unix_dgram_sendmsg+0x2050/0x2050 [ 1052.180345][ C1] sock_read_iter+0x3b2/0x4b0 [ 1052.180366][ C1] ? kernel_sock_ip_overhead+0x590/0x590 [ 1052.180392][ C1] ? common_file_perm+0x17d/0x1d0 [ 1052.180419][ C1] vfs_read+0x88d/0xbf0 [ 1052.180441][ C1] ? kernel_read+0x1f0/0x1f0 [ 1052.180459][ C1] ? __rseq_handle_notify_resume+0x3b7/0x1500 [ 1052.180490][ C1] ? __fdget_pos+0x1db/0x360 [ 1052.180510][ C1] ksys_read+0x19c/0x2c0 [ 1052.180526][ C1] ? print_irqtrace_events+0x210/0x210 [ 1052.180560][ C1] ? vfs_write+0xbc0/0xbc0 [ 1052.180577][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1052.180598][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1052.180618][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1052.180641][ C1] do_syscall_64+0x3b/0xb0 [ 1052.180666][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1052.180693][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.180717][ C1] RIP: 0033:0x7fac28847b6a [ 1052.180731][ C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 1052.180745][ C1] RSP: 002b:00007ffd40eb8418 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.180762][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fac28847b6a [ 1052.180775][ C1] RDX: 00000000000000ff RSI: 00005577cc77b950 RDI: 0000000000000000 [ 1052.180787][ C1] RBP: 00005577cc77b910 R08: 0000000000000001 R09: 0000000000000000 [ 1052.180798][ C1] R10: 00007fac289e63a3 R11: 0000000000000246 R12: 00005577cc77b996 [ 1052.180811][ C1] R13: 00005577cc77b950 R14: 0000000000000000 R15: 00007fac28a24a80 [ 1052.180833][ C1] [ 1052.198663][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1052.198684][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 1052.198709][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1052.198723][ T27] Call Trace: [ 1052.198730][ T27] [ 1052.198739][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1052.198785][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1052.198820][ T27] ? panic+0x764/0x764 [ 1052.198846][ T27] ? llist_add_batch+0x160/0x1d0 [ 1052.198882][ T27] ? vscnprintf+0x59/0x80 [ 1052.198913][ T27] panic+0x318/0x764 [ 1052.198940][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 1052.198978][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 1052.199010][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 1052.199045][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 1052.199084][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 1052.199124][ T27] watchdog+0xfc7/0xfd0 [ 1052.199161][ T27] ? watchdog+0x1f8/0xfd0 [ 1052.199196][ T27] kthread+0x28d/0x320 [ 1052.199217][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1052.199245][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1052.199268][ T27] ret_from_fork+0x1f/0x30 [ 1052.199315][ T27] [ 1052.204565][ T27] Kernel Offset: disabled [ 1053.189593][ T27] Rebooting in 86400 seconds..