last executing test programs: 19.867130647s ago: executing program 2 (id=927): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) fcntl$setsig(r2, 0xa, 0x12) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 16.786128818s ago: executing program 2 (id=949): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x118000, 0x800}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) syslog(0x3, 0xfffffffffffffffe, 0x13) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x274, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2d0) add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000300), 0x0, 0x0) 16.146592036s ago: executing program 5 (id=959): open$dir(0x0, 0x4240, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000, 0x40000000000000, 0x0, 0x80000000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 16.068271905s ago: executing program 4 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1e, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_a, @random="ad4b5b18de46", {0x6, 0x2b}, "", @value={0xe, 0x0, 0x1, 0x1, 0x8}}}}]}, 0x50}}, 0x0) 15.678643993s ago: executing program 2 (id=963): socket$nl_netfilter(0x10, 0x3, 0xc) mknod(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xcb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010200000000000000000000fffd05000100070000000900020073797a3000800000050005000a000000050004000000000011000300686173683a69702c706f727400000000"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) 15.612947708s ago: executing program 4 (id=965): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x15a4016, 0x0, 0x0, 0x0, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000012cc0)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b0495619a60bf5d77e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d13", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x9, 0x0, 0xc, 0xfffffffffffffffd, 0x4, 0xe, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c00000081000000fe"], 0xfeffffff) 15.116266462s ago: executing program 0 (id=968): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 15.012007998s ago: executing program 0 (id=969): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e45c, 0x700000000000000) 14.957021838s ago: executing program 5 (id=970): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f000001ff80)=ANY=[@ANYBLOB="240000001800210200000000000000001d01040008000900", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000ac40)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 14.956755751s ago: executing program 1 (id=971): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@delsa={0x178, 0x11, 0x10, 0x70bd26, 0x25dfdbff, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d3, 0x2, 0x3c}, [@policy={0xa8, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1, 0x4e23, 0xfffe, 0x4e21, 0x1, 0x2, 0x0, 0x80, 0xc}, {0x7f, 0x8, 0x0, 0x81, 0x3, 0x5, 0x7, 0x8}, {0x6, 0xe, 0x7fff}, 0x3, 0x6e6bbc, 0x2, 0x0, 0x3, 0x2}}, @policy={0xa8, 0x7, {{@in6=@private2, @in6=@empty, 0x4e22, 0x0, 0x4e21, 0xfff, 0x2, 0x60, 0x0, 0x3c}, {0x9, 0xd, 0x5, 0x100000001, 0xa3e6, 0x796c, 0x3, 0x7}, {0x8, 0x5, 0x2, 0x81}, 0x9, 0x6e6bb5, 0x2, 0x1, 0x1}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000014}, 0x8010) 14.718324192s ago: executing program 1 (id=972): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) socket(0x2, 0x80805, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0xc9}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x54}}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 14.596076634s ago: executing program 2 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) pipe(&(0x7f00000001c0)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xffe0, 0x5}, {0xfff4, 0x9}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004150}, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x60) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8], 0x3}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) 14.452876004s ago: executing program 4 (id=974): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000380)=0x4, 0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x31) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000010140)={r6}, &(0x7f00000102c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r6, 0xb0, "2cc119ebe23feaa6e22d7d71a290afd18e127afec6979fd0d74ba885ba3bc0ba0aeeca508fd153ed78840b9e6298873a7b0bfcdfb9491f89c5242b440da5bc1f38808d0ef8047929430375147bfdfa0c000bbb9b472d35c61a8be00bb5a636ab7ad35d790db85947637996d2e0f55c45021ed3e06f07625a9436630c11591f50857b828ea29551398e3dfec8836a379c27047aa706e3b5efbcf4b0d952ba5e842887c40bf33b3ac3dc46f3118b4a1664"}, &(0x7f0000000000)=0xb8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, 0x0) 14.442693144s ago: executing program 1 (id=975): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000001b40)=""/4107, 0x100b}, {&(0x7f0000000500)=""/38, 0x26}], 0x3}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 14.225202383s ago: executing program 5 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14.008584362s ago: executing program 2 (id=979): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x8) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="000086dd000011000000000000006e711fbe0f982f0100000000000000000000ffff64010100ff020000000000000000000000000001042022eb120000030c000800050086dd080088be000000021609"], 0xfce) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r5 = open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, r4, 0xd, 0x1c, 0x0, @void, @value=r5}, 0x20) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 13.84893535s ago: executing program 1 (id=980): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket(0x6, 0x2, 0xfffffffc) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000400b54e79390fa2b76c", @ANYRES32, @ANYBLOB="7a0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa}]}]}, 0x20}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 13.848559131s ago: executing program 0 (id=981): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x32) 13.670715472s ago: executing program 5 (id=982): open$dir(0x0, 0x4240, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000, 0x40000000000000, 0x0, 0x80000000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 13.341692474s ago: executing program 4 (id=983): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 13.006920545s ago: executing program 2 (id=985): socket$nl_netfilter(0x10, 0x3, 0xc) mknod(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xcb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010200000000000000000000fffd05000100070000000900020073797a3000800000050005000a000000050004000000000011000300686173683a69702c706f727400000000"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) 12.95285992s ago: executing program 0 (id=986): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x15, 0x3, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40180}, 0x0) 12.930871124s ago: executing program 4 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 12.788440274s ago: executing program 0 (id=988): syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008050}, 0x5011) memfd_create(0x0, 0x0) socket(0x2, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000700), 0x80) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000780)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000010c0)="aabf75aa76", 0x5}, {0x0}], 0x2, 0x3, 0x0) 8.494321673s ago: executing program 5 (id=989): openat$sndtimer(0xffffff9c, &(0x7f0000000100), 0x101) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000840)='z', 0x34000, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 8.424033743s ago: executing program 0 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 7.83981797s ago: executing program 1 (id=992): syz_emit_ethernet(0x31f, &(0x7f0000004a40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @remote, @void, {@ipv6={0x86dd, @tcp={0xf, 0x6, "b65115", 0x2e9, 0x6, 0x1, @remote, @private1, {[@fragment={0x67, 0x0, 0x5, 0x0, 0x0, 0x7, 0x64}, @hopopts={0x1d, 0x17, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @generic={0x0, 0x98, "62a28717163ca5a1df1871ed21a36ca11ab75d196abca201577ea28bda336a140ed24f50d6594b228a86b0650ca78d91c3cfaeae3836cb3b18a495466c81a684f6c7ec650367706e54e1a271d35d502091c5a0bb9d03004467cd83e01a0e4fcc56f66cb95da43cab6a7d98605f054de83c10d5af340ff454ca316508d54cdb1183dd88c6fd715f5cc7840d660e3c82200b5bd91e390e5ef2"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @pad1, @pad1, @generic={0x3}, @ra={0x5, 0x2, 0x5}]}, @fragment={0xaff2e28bb55941ee, 0x0, 0x6, 0x1, 0x0, 0x14, 0x64}, @srh={0x88, 0x14, 0x4, 0xa, 0xff, 0x78, 0x2, [@local, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x6c, 0x3, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x101}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8000}]}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x6c, 0x0, 0x9, 0x1, 0x0, 0x5, 0x68}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x50, 0x0, 0x2, {[@sack={0x5, 0x12, [0xfffffff8, 0x2, 0x0, 0x4]}]}}, {"eb3c24acaa4331a37b4941732a2c02fa4e0536a71f6e4eb115de9e870e18760c359e608e2a5840420491706300a7fca01460c4c7c56816a09cdad8aab423f2b49b1af12242c9a2d53fb1b7e7eacd564e79cfafc22b00c97a39e44925c22cc5da79501354852a9d7c5645990615f37aa5c39d979c8952e4109976c244aac7de962c3fdbb02f0c86ad40b6d09ff0659129b92964f978344d0cf4946c14c8b1b52bbf014aaf517b8ca3b84619ea0530bffcd65c04b00c4e78db219b01bac0ac860fdd17a264c69086b85290a9fd8e17062c572b3e01e349bc0fdeed6412c545ad9bdfe6ee5cfda5019502a996bd0b7b1ad29f35b512d075bbe27b"}}}}}}}, &(0x7f0000005000)={0x0, 0x4, [0xb7b, 0x9f9, 0xc2b, 0x506]}) 7.705953656s ago: executing program 4 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.489092122s ago: executing program 5 (id=994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.371522574s ago: executing program 1 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) socket$isdn(0x22, 0x2, 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000b16c0)={0x0, ""/256, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000003d00)={0x0, 0x0, "d5f21d23221806dfb1f2d3bd03bc8ad5d62f1a7395ba39c7da07f8b5d6265c73f133f408403ad77cf1e05925cfea14ca249d7748470cad034090380d2ec6aae9d37a056901a63bf7145071dec0000b803bcea1c33867945ae178b77e3c3baa33b4a389e2231c5d6141bc47e3952524edf116dc537d67063385ceabb705cc1649e063422ac8e168fa800bfbdd7c8abd1d59d215e66c11d0bd976c2be7f3c807867d872b9fb854eddccd66221e1c2317a6cdc60cee5fb17ee208855f208ebd793b14f22e5a24faa260340beba29fb6b7bc42d4d6947e1e70f1262106c7b811914b95fdb802262bb25a7cc9af6f9e0a1ddc2b3e03da39488efd05684e9adc85f9b7", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000b1ac0)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {r1}], 0x80, "71339774016fa7"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000003c0)={r1, 0x8001}) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000060a0b040000000000000000020000007700074049ef4427354ed74f61b676273aa3f9cb8d36288b52a41f0c162dd0fbe33e1e6b3dcba5beba6839e152b0285be81dff8593115079376543d34ba4df93c90e230a51caf141ac13fe9dbd725a34ac89ea24d9da2e34892f887ea6a024ebf4dc032a4478353f17ff4cb4d1b7c51e230c25ff219643000900010073797a30000000000800094000000000140000001100010000000000000000000000000a00"/200], 0xc8}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[], 0x0) 2.347093431s ago: executing program 3 (id=998): futex(&(0x7f0000000380), 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.18682677s ago: executing program 3 (id=999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.092507692s ago: executing program 3 (id=1000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x7f) readv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1) r2 = dup2(r1, r0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000800000000000000000001d00"}) r3 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) 1.909330121s ago: executing program 3 (id=1001): open$dir(0x0, 0x4240, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000, 0x40000000000000, 0x0, 0x80000000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 910.987134ms ago: executing program 3 (id=1002): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@delsa={0x11c, 0x11, 0x10, 0x70bd26, 0x25dfdbff, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d3, 0x2, 0x3c}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd160\x00'}, 0x0, 0x60}}, @policy={0xa8, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1, 0x4e23, 0xfffe, 0x4e21, 0x1, 0x2, 0x0, 0x80, 0xc}, {0x7f, 0x8, 0x0, 0x81, 0x3, 0x5, 0x7, 0x8}, {0x6, 0xe, 0x7fff}, 0x3, 0x6e6bbc, 0x2, 0x0, 0x3, 0x2}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000014}, 0x8010) 0s ago: executing program 3 (id=1003): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001140)=""/181, 0xb5}], 0x3}, 0x0) kernel console output (not intermixed with test programs): : config 0 descriptor?? [ 80.826803][ T5306] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 80.857681][ T5501] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 80.899850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.908547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.917154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.925756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.967953][ T5497] loop0: detected capacity change from 0 to 2048 [ 80.977467][ T5497] ext4: Unknown parameter 'seclabel' [ 81.071078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.080925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 81.179803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 81.205002][ T8] cfg80211: failed to load regulatory.db [ 81.580381][ T5485] XFS (loop5): Ending clean mount [ 82.002357][ T5478] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.070366][ T5240] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.232105][ T5478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.305130][ T5293] usb 5-1: USB disconnect, device number 2 [ 83.721695][ T5516] loop1: detected capacity change from 0 to 8192 [ 83.862799][ T5516] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.876407][ T5516] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 83.894720][ T5516] REISERFS (device loop1): using ordered data mode [ 83.901595][ T5516] reiserfs: using flush barriers [ 83.907708][ T5516] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device unknown-block(7,1): -16 [ 83.927152][ T5516] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device [ 83.977452][ T5516] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 83.995163][ T5530] Zero length message leads to an empty skb [ 86.201188][ T5526] loop4: detected capacity change from 0 to 32768 [ 86.332500][ T5526] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.340975][ T5526] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.432212][ T5296] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.512532][ T5526] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 86.550047][ T5293] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.577045][ T931] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 86.584882][ T931] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 86.652484][ T931] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 86.662792][ T931] gfs2: fsid=syz:syz.0: jid=0: Done [ 86.668692][ T5526] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 86.670542][ T5296] usb 6-1: Using ep0 maxpacket: 16 [ 86.687968][ T5296] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 86.702175][ T5296] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 172, using maximum allowed: 30 [ 86.714319][ T5296] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 86.727611][ T5296] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 86.736713][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.807459][ T5296] usb 6-1: config 0 descriptor?? [ 86.839293][ T5296] usb 6-1: unknown interface protocol 0x3, assuming v1 [ 86.846900][ T5296] usb 6-1: cannot find UAC_HEADER [ 86.914947][ T5296] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 86.965860][ T5293] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 86.975087][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.983445][ T5293] usb 1-1: Product: syz [ 86.986006][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.987606][ T5293] usb 1-1: Manufacturer: syz [ 87.008397][ T5293] usb 1-1: SerialNumber: syz [ 87.057888][ T5293] usb 1-1: config 0 descriptor?? [ 87.168470][ T5578] bridge0: entered promiscuous mode [ 87.186722][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 87.196782][ T5578] bridge_slave_1: left allmulticast mode [ 87.203864][ T5578] bridge_slave_1: left promiscuous mode [ 87.210725][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.224825][ T5578] bridge_slave_0: left allmulticast mode [ 87.231652][ T5578] bridge_slave_0: left promiscuous mode [ 87.237630][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.325647][ T5567] loop0: detected capacity change from 0 to 1024 [ 87.352771][ T5578] bridge0 (unregistering): left promiscuous mode [ 87.415792][ T5567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.430529][ T5567] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.452830][ T5583] netlink: 'syz.2.62': attribute type 29 has an invalid length. [ 87.485592][ T5306] usb 1-1: USB disconnect, device number 2 [ 87.546215][ T5583] netlink: 'syz.2.62': attribute type 29 has an invalid length. [ 87.737906][ T5586] syzkaller0: entered promiscuous mode [ 87.746165][ T5586] syzkaller0: entered allmulticast mode [ 87.791743][ T5588] openvswitch: netlink: Actions may not be safe on all matching packets [ 87.840649][ T5579] loop1: detected capacity change from 0 to 32768 [ 87.847890][ T5579] ======================================================= [ 87.847890][ T5579] WARNING: The mand mount option has been deprecated and [ 87.847890][ T5579] and is ignored by this kernel. Remove the mand [ 87.847890][ T5579] option from the mount to silence this warning. [ 87.847890][ T5579] ======================================================= [ 87.968135][ T5593] netlink: 188 bytes leftover after parsing attributes in process `syz.3.66'. [ 87.978215][ T5593] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 87.986004][ T5593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 88.004917][ T5594] loop2: detected capacity change from 0 to 512 [ 88.094314][ T5291] usb 6-1: USB disconnect, device number 2 [ 88.097642][ T5579] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.214176][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.342429][ T5228] ocfs2: Unmounting device (7,1) on (node local) [ 88.451702][ T5594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.474572][ T5594] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.498389][ T5602] geneve2: entered promiscuous mode [ 88.524729][ T5602] geneve2: entered allmulticast mode [ 88.959799][ T5613] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 88.970286][ T5613] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.686424][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 90.070830][ T5624] loop1: detected capacity change from 0 to 256 [ 90.078609][ T931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.774263][ T931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.809623][ T931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.630285][ T5641] netlink: 104 bytes leftover after parsing attributes in process `syz.2.80'. [ 92.700355][ T5648] openvswitch: netlink: Actions may not be safe on all matching packets [ 92.747876][ T931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.757855][ T931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.768639][ T931] usb 1-1: can't set config #1, error -71 [ 92.775553][ T931] usb 1-1: USB disconnect, device number 3 [ 92.892432][ T5651] Bluetooth: MGMT ver 1.23 [ 92.932680][ T5644] loop1: detected capacity change from 0 to 4096 [ 92.959234][ T5644] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 93.041578][ T5644] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 94.979559][ T5247] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.989710][ T5241] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 95.023227][ T5676] loop0: detected capacity change from 0 to 512 [ 95.085618][ T5676] EXT4-fs: Ignoring removed oldalloc option [ 95.276897][ T5680] fuse: Invalid rootmode [ 95.347538][ T5228] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 95.357420][ T5228] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 97.763045][ T5686] netlink: 'syz.5.95': attribute type 29 has an invalid length. [ 97.771865][ T5676] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 97.773506][ T5676] EXT4-fs: failed to create workqueue [ 97.864614][ T5676] EXT4-fs (loop0): mount failed [ 97.910897][ T5686] netlink: 'syz.5.95': attribute type 29 has an invalid length. [ 98.745154][ T5292] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.048407][ T5705] loop0: detected capacity change from 0 to 2048 [ 99.070210][ T5705] ext4: Unknown parameter 'seclabel' [ 99.428619][ T5703] loop1: detected capacity change from 0 to 40427 [ 99.446197][ T5703] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 99.454231][ T5703] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.506054][ T5693] loop4: detected capacity change from 0 to 8192 [ 99.540415][ T5703] F2FS-fs (loop1): invalid crc value [ 99.587335][ T5693] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.659697][ T5693] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 99.692067][ T5703] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.764758][ T5292] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 99.774293][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.786712][ T5693] REISERFS (device loop4): using ordered data mode [ 99.793704][ T5703] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.800971][ T5703] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.004760][ T5292] usb 3-1: Product: syz [ 100.008988][ T5292] usb 3-1: Manufacturer: syz [ 100.013657][ T5292] usb 3-1: SerialNumber: syz [ 100.022868][ T5292] usb 3-1: config 0 descriptor?? [ 100.028385][ T5693] reiserfs: using flush barriers [ 100.037056][ T5292] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 002 [ 100.240178][ T29] audit: type=1804 audit(1726944416.998:2): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.100" name="/newroot/16/file0/bus" dev="loop1" ino=10 res=1 errno=0 [ 100.302348][ T5693] REISERFS warning (device loop4): sh-458 journal_init_dev: cannot init journal device unknown-block(7,4): -16 [ 100.427696][ T29] audit: type=1804 audit(1726944416.998:3): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.100" name="/newroot/16/file0/bus" dev="loop1" ino=10 res=1 errno=0 [ 100.496576][ T5693] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 100.534917][ T5693] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 100.547518][ T5228] syz-executor: attempt to access beyond end of device [ 100.547518][ T5228] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.618302][ T5725] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.626597][ T5228] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 100.752852][ T5292] i2c i2c-1: failure reading functionality [ 100.771378][ T5292] i2c i2c-1: connected i2c-tiny-usb device [ 100.808086][ T5292] usb 3-1: USB disconnect, device number 2 [ 100.939222][ T5707] loop5: detected capacity change from 0 to 32768 [ 100.955325][ T5729] fuse: Bad value for 'rootmode' [ 101.053977][ T5707] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.178037][ T5741] netlink: 'syz.3.109': attribute type 9 has an invalid length. [ 101.186631][ T5741] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.109'. [ 101.225725][ T5732] loop4: detected capacity change from 0 to 2048 [ 101.260034][ T5732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.909730][ T29] audit: type=1804 audit(1726944418.688:4): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.108" name="/newroot/8/file1/bus" dev="loop4" ino=1367 res=1 errno=0 [ 102.538266][ T5747] loop3: detected capacity change from 0 to 512 [ 102.545484][ T5747] EXT4-fs: Ignoring removed oldalloc option [ 102.550624][ T5748] netlink: 'syz.2.111': attribute type 29 has an invalid length. [ 102.581614][ T5748] netlink: 'syz.2.111': attribute type 29 has an invalid length. [ 102.687742][ T5707] XFS (loop5): Ending clean mount [ 102.769838][ T5240] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.792425][ T5747] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.110: casefold flag without casefold feature [ 102.812230][ T5747] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.110: couldn't read orphan inode 15 (err -117) [ 102.881070][ T5747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.085454][ T5757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.114'. [ 103.239243][ T5759] loop1: detected capacity change from 0 to 512 [ 103.278505][ T5763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.312772][ T5759] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 103.352510][ T5759] block device autoloading is deprecated and will be removed. [ 103.360523][ T5759] syz.1.105: attempt to access beyond end of device [ 103.360523][ T5759] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 103.373474][ T5759] EXT4-fs (loop1): couldn't read superblock of external journal [ 103.464314][ T5761] loop0: detected capacity change from 0 to 2048 [ 103.472759][ T5761] ext4: Unknown parameter 'seclabel' [ 103.540832][ T5767] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.110: Directory hole found for htree leaf block 0 [ 103.929665][ T5768] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.110: Directory hole found for htree leaf block 0 [ 104.558200][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.224820][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 105.236433][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 105.262195][ T5778] netlink: 112 bytes leftover after parsing attributes in process `syz.4.119'. [ 105.349280][ T5790] loop1: detected capacity change from 0 to 512 [ 105.485997][ T5790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.520115][ T5790] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.637131][ T5806] netlink: 'syz.5.126': attribute type 29 has an invalid length. [ 105.686553][ T5806] netlink: 'syz.5.126': attribute type 29 has an invalid length. [ 106.009967][ T5813] input: syz0 as /devices/virtual/input/input5 [ 107.031887][ T5791] sctp: failed to load transform for md5: -2 [ 107.291267][ T5815] overlayfs: missing 'lowerdir' [ 108.050792][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.081985][ T5829] netlink: 'syz.0.134': attribute type 5 has an invalid length. [ 108.212943][ T5826] loop4: detected capacity change from 0 to 40427 [ 108.222491][ T5826] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 108.230262][ T5826] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 108.254484][ T5826] F2FS-fs (loop4): invalid crc value [ 108.279184][ T5826] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.382886][ T5826] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 108.390085][ T5826] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.416246][ T29] audit: type=1804 audit(1726944425.348:5): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.132" name="/newroot/14/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 108.432876][ T5839] netlink: 'syz.5.136': attribute type 29 has an invalid length. [ 108.484271][ T5844] netlink: 'syz.5.136': attribute type 29 has an invalid length. [ 108.505968][ T29] audit: type=1804 audit(1726944425.358:6): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.132" name="/newroot/14/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 108.530100][ T5842] loop1: detected capacity change from 0 to 2048 [ 108.571762][ T5842] ext4: Unknown parameter 'seclabel' [ 108.770107][ T5851] netlink: 'syz.5.139': attribute type 29 has an invalid length. [ 108.846500][ T5851] netlink: 'syz.5.139': attribute type 29 has an invalid length. [ 109.311071][ T5237] syz-executor: attempt to access beyond end of device [ 109.311071][ T5237] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.412613][ T5237] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 109.630367][ T5863] netlink: 'syz.3.143': attribute type 29 has an invalid length. [ 109.647574][ T5863] netlink: 'syz.3.143': attribute type 29 has an invalid length. [ 109.736973][ T5866] tipc: Started in network mode [ 109.759580][ T5866] tipc: Node identity , cluster identity 4711 [ 109.797644][ T5866] tipc: Failed to obtain node identity [ 109.840056][ T5866] tipc: Enabling of bearer rejected, failed to enable media [ 110.198898][ T5872] netlink: 68 bytes leftover after parsing attributes in process `syz.3.145'. [ 110.654905][ T5847] loop0: detected capacity change from 0 to 40427 [ 110.698909][ T5847] F2FS-fs (loop0): Unrecognized mount option "lazytime" or missing value [ 111.147838][ T5873] loop5: detected capacity change from 0 to 512 [ 111.359351][ T5882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.149'. [ 111.610106][ T5887] loop0: detected capacity change from 0 to 512 [ 111.634431][ T5887] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 111.844626][ T5873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 112.069860][ T931] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.104129][ T5873] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.607502][ T5873] overlayfs: missing 'workdir' [ 112.693887][ T931] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.710862][ T931] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.781531][ T931] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.669655][ T931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.687697][ T5877] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.700758][ T931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.865721][ T5913] netlink: 'syz.3.157': attribute type 29 has an invalid length. [ 113.914210][ T5913] netlink: 'syz.3.157': attribute type 29 has an invalid length. [ 113.923695][ T5240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.218475][ T931] usb 3-1: USB disconnect, device number 3 [ 117.140375][ T5967] syz.1.175 uses obsolete (PF_INET,SOCK_PACKET) [ 117.633627][ T5938] loop3: detected capacity change from 0 to 40427 [ 117.651292][ T5938] F2FS-fs (loop3): Unrecognized mount option "lazytime" or missing value [ 118.113874][ T5991] loop3: detected capacity change from 0 to 512 [ 118.124392][ T5991] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 118.668584][ T5988] loop2: detected capacity change from 0 to 4096 [ 118.724619][ T5988] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 118.964595][ T5988] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 119.227998][ T5235] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 119.267886][ T5235] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 120.121884][ T6027] netlink: 'syz.0.194': attribute type 29 has an invalid length. [ 120.154095][ T6027] netlink: 'syz.0.194': attribute type 29 has an invalid length. [ 120.270186][ T6029] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.192'. [ 121.983794][ T6055] loop4: detected capacity change from 0 to 4096 [ 122.028186][ T6055] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 122.089628][ T6055] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 122.211694][ T5237] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 122.236345][ T5237] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 122.318573][ T6067] netlink: 'syz.3.209': attribute type 29 has an invalid length. [ 122.388969][ T6067] netlink: 'syz.3.209': attribute type 29 has an invalid length. [ 122.516824][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 124.803782][ T6110] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.855834][ T5291] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.033437][ T6104] netlink: 68 bytes leftover after parsing attributes in process `syz.2.223'. [ 125.062602][ T6112] openvswitch: netlink: Actions may not be safe on all matching packets [ 125.281043][ T5291] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.292456][ T5291] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 125.309547][ T5291] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 125.332630][ T5291] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.533581][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.125476][ T5291] usb 5-1: can't set config #27, error -71 [ 126.221337][ T5291] usb 5-1: USB disconnect, device number 3 [ 127.248131][ T6144] openvswitch: netlink: Actions may not be safe on all matching packets [ 127.454903][ T6153] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.185723][ T6176] netlink: 68 bytes leftover after parsing attributes in process `syz.5.251'. [ 128.686502][ T5291] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.103066][ T5291] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.114191][ T5291] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 129.149594][ T5291] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 129.235376][ T5291] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.335147][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.389120][ T6189] openvswitch: netlink: Actions may not be safe on all matching packets [ 129.411646][ T6168] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.439022][ T5291] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.837388][ T5291] usb 3-1: USB disconnect, device number 4 [ 129.920598][ T6211] tipc: Started in network mode [ 129.954190][ T6211] tipc: Node identity 5e21dc180ac3, cluster identity 4711 [ 129.996908][ T6211] tipc: Enabled bearer , priority 0 [ 130.008301][ T6202] syz.4.262 (6202) used greatest stack depth: 18224 bytes left [ 131.033570][ T5293] tipc: Node number set to 1424153624 [ 131.059926][ T6230] openvswitch: netlink: Actions may not be safe on all matching packets [ 131.130759][ T6232] netlink: 68 bytes leftover after parsing attributes in process `syz.5.269'. [ 131.230645][ T6213] tipc: Resetting bearer [ 131.432473][ T6210] tipc: Resetting bearer [ 132.264215][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.448742][ T6247] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.352337][ T6210] tipc: Disabling bearer [ 134.363275][ T6234] netlink: 'syz.1.271': attribute type 29 has an invalid length. [ 134.479212][ T6260] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 134.507934][ T6260] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 134.704984][ T6273] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.952179][ T6282] openvswitch: netlink: Actions may not be safe on all matching packets [ 135.064367][ T5293] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.328897][ T5293] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.534604][ T5293] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 135.811230][ T5293] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 135.822873][ T5293] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.843253][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.854057][ T6277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.865060][ T5293] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.216740][ T6295] netlink: 'syz.0.293': attribute type 29 has an invalid length. [ 136.264472][ T6295] netlink: 'syz.0.293': attribute type 29 has an invalid length. [ 136.349044][ T5293] usb 2-1: USB disconnect, device number 3 [ 136.536382][ T5243] udevd[5243]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.922523][ T6311] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.209684][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 138.626100][ T6333] loop4: detected capacity change from 0 to 40427 [ 138.633424][ T6335] netlink: 'syz.1.310': attribute type 29 has an invalid length. [ 138.642230][ T6333] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 138.649963][ T6333] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.650996][ T6335] netlink: 'syz.1.310': attribute type 29 has an invalid length. [ 138.674401][ T6333] F2FS-fs (loop4): invalid crc value [ 138.786387][ T6339] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 139.006119][ T6333] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.061030][ T6333] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.068118][ T6333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.489601][ T29] audit: type=1804 audit(1726944456.418:7): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.309" name="/newroot/51/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 139.820414][ T29] audit: type=1804 audit(1726944456.418:8): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.309" name="/newroot/51/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 139.953296][ T5237] syz-executor: attempt to access beyond end of device [ 139.953296][ T5237] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.998859][ T5237] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 140.294988][ T6371] netlink: 'syz.0.325': attribute type 29 has an invalid length. [ 140.349673][ T6371] netlink: 'syz.0.325': attribute type 29 has an invalid length. [ 140.462088][ T5294] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.491973][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.328'. [ 140.621470][ T5294] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.632864][ T5294] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 109, changing to 10 [ 140.650227][ T5294] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 42584, setting to 1024 [ 140.669524][ T5294] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.686573][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.773481][ T6365] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.940703][ T5294] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.203295][ T6400] infiniband syz1: set active [ 141.208672][ T6400] infiniband syz1: added bond0 [ 141.512714][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.340'. [ 141.663486][ T6400] RDS/IB: syz1: added [ 141.668948][ T6400] smc: adding ib device syz1 with port count 1 [ 141.675862][ T6400] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 141.804000][ T6417] netlink: 'syz.1.341': attribute type 29 has an invalid length. [ 141.818650][ T5294] usb 3-1: USB disconnect, device number 5 [ 141.826085][ T6417] netlink: 'syz.1.341': attribute type 29 has an invalid length. [ 141.969633][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.180223][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.199517][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.228274][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.253131][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.301534][ T6435] netlink: 'syz.5.349': attribute type 29 has an invalid length. [ 142.311141][ T6435] netlink: 'syz.5.349': attribute type 29 has an invalid length. [ 142.331415][ T6403] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 142.366834][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.830849][ T5296] usb 5-1: USB disconnect, device number 4 [ 143.128096][ T6450] netlink: 'syz.1.355': attribute type 29 has an invalid length. [ 143.151045][ T6450] netlink: 'syz.1.355': attribute type 29 has an invalid length. [ 143.761025][ T6470] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 143.811104][ T6470] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 144.146537][ T6485] loop5: detected capacity change from 0 to 4096 [ 144.160665][ T6485] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 144.207005][ T6489] loop3: detected capacity change from 0 to 512 [ 144.306516][ T6489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.319743][ T6489] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.514600][ T6485] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 145.709592][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.747839][ T5240] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22. [ 145.770391][ T5240] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 145.790083][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 145.861354][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.872565][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.913173][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 145.951261][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.968486][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.995968][ T6483] loop4: detected capacity change from 0 to 40427 [ 146.014828][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 146.039999][ T6498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.050515][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.099171][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 146.267991][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 146.367901][ T6510] loop5: detected capacity change from 0 to 40427 [ 146.380287][ T6483] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 146.388009][ T6483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 146.407148][ T6510] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 146.415084][ T6510] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 146.433824][ T6510] F2FS-fs (loop5): invalid crc value [ 146.442116][ T6483] F2FS-fs (loop4): invalid crc value [ 146.448434][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 146.486903][ T6483] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 146.576107][ T6510] F2FS-fs (loop5): Found nat_bits in checkpoint [ 146.692214][ T6510] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 146.699287][ T6510] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 146.718794][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 146.738165][ T29] audit: type=1804 audit(1726944463.658:9): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.377" name="/newroot/74/file0/bus" dev="loop5" ino=10 res=1 errno=0 [ 146.815789][ T25] usb 3-1: USB disconnect, device number 6 [ 146.839723][ T29] audit: type=1804 audit(1726944463.658:10): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.377" name="/newroot/74/file0/bus" dev="loop5" ino=10 res=1 errno=0 [ 146.887236][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 146.997661][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 147.098778][ T5240] syz-executor: attempt to access beyond end of device [ 147.098778][ T5240] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.113131][ T5231] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 147.148643][ T6532] validate_nla: 2 callbacks suppressed [ 147.148662][ T6532] netlink: 'syz.0.383': attribute type 29 has an invalid length. [ 147.164751][ T5240] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 147.175406][ T6532] netlink: 'syz.0.383': attribute type 29 has an invalid length. [ 147.579773][ T6536] netlink: 'syz.1.387': attribute type 29 has an invalid length. [ 147.595149][ T6539] netlink: 'syz.1.387': attribute type 29 has an invalid length. [ 147.780191][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.391'. [ 147.887008][ T6545] loop0: detected capacity change from 0 to 4096 [ 147.911595][ T6551] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 147.949175][ T6545] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 148.129870][ T5293] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.139265][ T6545] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 148.293977][ T6555] loop2: detected capacity change from 0 to 764 [ 148.309638][ T5293] usb 2-1: Using ep0 maxpacket: 16 [ 148.326980][ T5293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.410539][ T5293] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.998684][ T6565] openvswitch: netlink: Actions may not be safe on all matching packets [ 149.036060][ T5293] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.045903][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.059513][ T5293] usb 2-1: Product: syz [ 149.063702][ T5293] usb 2-1: Manufacturer: syz [ 149.068399][ T5293] usb 2-1: SerialNumber: syz [ 149.101517][ T5227] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 149.112317][ T5227] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 149.155422][ T5293] usb 2-1: config 0 descriptor?? [ 149.165104][ T6562] tipc: Started in network mode [ 149.170284][ T6562] tipc: Node identity fa, cluster identity 4711 [ 149.177353][ T6562] tipc: Node number set to 250 [ 149.466795][ T6573] netlink: 'syz.0.398': attribute type 29 has an invalid length. [ 149.476953][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 149.528377][ T6577] netlink: 'syz.0.398': attribute type 29 has an invalid length. [ 149.837962][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.405'. [ 149.860972][ T6587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.104624][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.148993][ T6594] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.160129][ T6593] loop5: detected capacity change from 0 to 512 [ 150.200741][ T6593] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 150.290195][ T6593] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.690321][ T6593] EXT4-fs (loop5): 1 truncate cleaned up [ 150.832887][ T6593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.978751][ T51] usb 2-1: USB disconnect, device number 4 [ 151.102598][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.199380][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.199727][ T6611] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.210243][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.229277][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.242028][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.251492][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.259353][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.468833][ T5306] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 151.530096][ T6614] netlink: 68 bytes leftover after parsing attributes in process `syz.2.416'. [ 151.571897][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.616327][ T6618] netlink: 'syz.1.417': attribute type 29 has an invalid length. [ 151.668738][ T6618] netlink: 'syz.1.417': attribute type 29 has an invalid length. [ 151.697616][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.721933][ T5306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 151.738565][ T5306] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 151.753183][ T5306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.762512][ T5306] usb 6-1: Product: syz [ 151.767067][ T5306] usb 6-1: Manufacturer: syz [ 151.778518][ T6621] netlink: 'syz.0.419': attribute type 29 has an invalid length. [ 151.786593][ T5306] usb 6-1: SerialNumber: syz [ 151.804790][ T6622] netlink: 'syz.0.419': attribute type 29 has an invalid length. [ 151.820307][ T5306] usb 6-1: config 0 descriptor?? [ 151.844480][ T5306] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.065056][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'. [ 152.332438][ T6593] overlay: ./file1 is not a directory [ 152.575542][ T6636] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.587605][ T5306] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 152.601277][ T5230] udevd[5230]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.619206][ T5306] usb 6-1: USB disconnect, device number 3 [ 153.320968][ T5247] Bluetooth: hci2: command tx timeout [ 153.765027][ T5240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.566335][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.580103][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.592093][ T52] bond0 (unregistering): Released all slaves [ 154.826978][ T52] tipc: Left network mode [ 155.345506][ T6678] loop2: detected capacity change from 0 to 2048 [ 155.352769][ T6678] udf: Bad value for 'session' [ 155.947659][ T6670] netlink: 'syz.1.431': attribute type 29 has an invalid length. [ 156.070962][ T6680] syz.0.433[6680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.071061][ T6680] syz.0.433[6680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.099730][ T5247] Bluetooth: hci2: command tx timeout [ 156.324793][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.5.434'. [ 156.483147][ T6685] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.795224][ T6606] chnl_net:caif_netlink_parms(): no params data found [ 157.018692][ T6701] loop1: detected capacity change from 0 to 512 [ 157.212394][ T6701] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.730622][ T6701] EXT4-fs (loop1): 1 truncate cleaned up [ 157.764909][ T6701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.172649][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.5.449'. [ 158.218890][ T5291] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.326987][ T6727] netlink: 'syz.4.446': attribute type 29 has an invalid length. [ 158.359797][ T6731] netlink: 'syz.2.447': attribute type 29 has an invalid length. [ 158.450639][ T5247] Bluetooth: hci2: command tx timeout [ 158.524466][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.625750][ T5291] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 158.670520][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.688543][ T6730] netlink: 'syz.4.446': attribute type 29 has an invalid length. [ 158.718301][ T6738] netlink: 'syz.2.447': attribute type 29 has an invalid length. [ 158.731821][ T5291] usb 2-1: Product: syz [ 158.748872][ T5291] usb 2-1: Manufacturer: syz [ 158.753811][ T5291] usb 2-1: SerialNumber: syz [ 158.774176][ T5291] usb 2-1: config 0 descriptor?? [ 158.796396][ T5291] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.874514][ T52] hsr_slave_0: left promiscuous mode [ 158.896903][ T52] hsr_slave_1: left promiscuous mode [ 158.932557][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.979370][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.007372][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.064563][ T6756] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.073606][ T5296] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 159.161027][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.241309][ T5296] usb 6-1: Using ep0 maxpacket: 16 [ 159.254542][ T6701] overlay: ./file1 is not a directory [ 159.283115][ T5296] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.352375][ T5296] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.381957][ T5296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.412527][ T5296] usb 6-1: Product: syz [ 159.419099][ T52] veth1_macvtap: left promiscuous mode [ 159.430008][ T5296] usb 6-1: Manufacturer: syz [ 159.438204][ T52] veth0_macvtap: left promiscuous mode [ 159.444171][ T5296] usb 6-1: SerialNumber: syz [ 159.451866][ T52] veth1_vlan: left promiscuous mode [ 159.457650][ T52] veth0_vlan: left promiscuous mode [ 159.464456][ T5296] usb 6-1: config 0 descriptor?? [ 160.534231][ T5247] Bluetooth: hci2: command tx timeout [ 161.536795][ T52] team0 (unregistering): Port device team_slave_1 removed [ 161.637927][ T52] team0 (unregistering): Port device team_slave_0 removed [ 161.844591][ T5293] usb 6-1: USB disconnect, device number 4 [ 162.160123][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.461'. [ 163.882264][ T5291] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 163.893822][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.910382][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.926528][ T5230] udevd[5230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.928722][ T6606] bridge_slave_0: entered allmulticast mode [ 163.970861][ T6606] bridge_slave_0: entered promiscuous mode [ 164.073151][ T5291] usb 2-1: USB disconnect, device number 5 [ 164.101811][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.151683][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.178518][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.270311][ T6606] bridge_slave_1: entered allmulticast mode [ 164.277373][ T6606] bridge_slave_1: entered promiscuous mode [ 164.446449][ T6796] netlink: 'syz.1.465': attribute type 29 has an invalid length. [ 164.454682][ T6799] openvswitch: netlink: Missing valid actions attribute. [ 164.484529][ T6799] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.633673][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.738575][ T6801] netlink: 'syz.1.465': attribute type 29 has an invalid length. [ 164.758803][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.738785][ T6813] loop4: detected capacity change from 0 to 764 [ 165.796429][ T6606] team0: Port device team_slave_0 added [ 165.834015][ T6606] team0: Port device team_slave_1 added [ 166.043766][ T6826] loop0: detected capacity change from 0 to 512 [ 166.067973][ T6826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.128893][ T6820] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 166.175344][ T6826] EXT4-fs (loop0): 1 truncate cleaned up [ 166.206441][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.254485][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.263575][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.271666][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.299001][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.378441][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.402430][ T6813] tipc: Started in network mode [ 166.407604][ T6813] tipc: Node identity fa, cluster identity 4711 [ 166.415384][ T6813] tipc: Node number set to 250 [ 166.532379][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.539370][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.641507][ T6844] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.651106][ T931] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.651149][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.821436][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 166.871894][ T931] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 166.975512][ T6606] hsr_slave_0: entered promiscuous mode [ 166.988026][ T6606] hsr_slave_1: entered promiscuous mode [ 167.110590][ T931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.118669][ T931] usb 1-1: Product: syz [ 167.123054][ T931] usb 1-1: Manufacturer: syz [ 167.127686][ T931] usb 1-1: SerialNumber: syz [ 167.151638][ T931] usb 1-1: config 0 descriptor?? [ 167.212497][ T931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.243670][ T6859] netlink: 'syz.5.484': attribute type 29 has an invalid length. [ 167.296167][ T6862] netlink: 'syz.5.484': attribute type 29 has an invalid length. [ 167.686815][ T6826] overlay: ./file1 is not a directory [ 167.781182][ T931] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 167.809894][ T931] usb 1-1: USB disconnect, device number 4 [ 167.856830][ T5230] udevd[5230]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.413957][ T6881] loop1: detected capacity change from 0 to 764 [ 168.455480][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.070219][ T6881] tipc: Started in network mode [ 169.075192][ T6881] tipc: Node identity fa, cluster identity 4711 [ 169.082241][ T6881] tipc: Node number set to 250 [ 169.259940][ T6889] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.276145][ T6888] openvswitch: netlink: Actions may not be safe on all matching packets [ 169.362770][ T6891] netlink: 'syz.2.496': attribute type 9 has an invalid length. [ 169.370760][ T6891] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.496'. [ 169.627681][ T6900] netlink: 'syz.4.499': attribute type 29 has an invalid length. [ 169.679867][ T6901] netlink: 'syz.4.499': attribute type 29 has an invalid length. [ 169.903921][ T6909] loop0: detected capacity change from 0 to 512 [ 170.089664][ T6909] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.186680][ T6909] EXT4-fs (loop0): 1 truncate cleaned up [ 170.221725][ T6909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.085580][ T6606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.187554][ T6922] loop1: detected capacity change from 0 to 764 [ 171.223465][ T6606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.248798][ T6926] openvswitch: netlink: Actions may not be safe on all matching packets [ 171.311503][ T6606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.496945][ T6606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.529631][ T931] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 171.740078][ T931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 171.793760][ T931] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 171.823727][ T931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.861562][ T6938] openvswitch: netlink: Actions may not be safe on all matching packets [ 171.872446][ T931] usb 1-1: Product: syz [ 171.876639][ T931] usb 1-1: Manufacturer: syz [ 171.901931][ T931] usb 1-1: SerialNumber: syz [ 171.921594][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.929338][ T931] usb 1-1: config 0 descriptor?? [ 171.975635][ T6606] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.978776][ T931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.026238][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.033397][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.141053][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.148213][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.522626][ T6949] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.581426][ T6952] overlay: ./file1 is not a directory [ 173.286741][ T6966] openvswitch: netlink: Actions may not be safe on all matching packets [ 173.534148][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.632698][ T6979] netlink: 'syz.5.520': attribute type 9 has an invalid length. [ 173.721171][ T6979] netlink: 134672 bytes leftover after parsing attributes in process `syz.5.520'. [ 173.772562][ T6606] veth0_vlan: entered promiscuous mode [ 173.806303][ T6979] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 173.847832][ T6984] loop4: detected capacity change from 0 to 16 [ 173.905301][ T6606] veth1_vlan: entered promiscuous mode [ 173.980406][ T6984] erofs: (device loop4): mounted with root inode @ nid 36. [ 174.525796][ T931] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 174.607574][ T931] usb 1-1: USB disconnect, device number 5 [ 174.684478][ T5230] udevd[5230]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.867300][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.883025][ T6606] veth0_macvtap: entered promiscuous mode [ 174.898391][ T6606] veth1_macvtap: entered promiscuous mode [ 175.002065][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.024030][ T6995] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.058118][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.109567][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.219602][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.292613][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.362859][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.466645][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.555366][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.619806][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.638042][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.657034][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.723028][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.734167][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.750917][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.930252][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.054863][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.135376][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.188754][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.259466][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.291278][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.349500][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.367887][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.472445][ T6606] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.490630][ T6606] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.517631][ T6606] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.585875][ T6606] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.686718][ T7032] netlink: 'syz.5.533': attribute type 9 has an invalid length. [ 176.889661][ T7032] netlink: 134672 bytes leftover after parsing attributes in process `syz.5.533'. [ 176.899049][ T7032] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 177.709737][ T5429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.775806][ T5429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.924446][ T7051] loop5: detected capacity change from 0 to 512 [ 178.007776][ T7051] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 178.069126][ T7058] syz.4.537[7058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.069261][ T7058] syz.4.537[7058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.183726][ T7051] EXT4-fs (loop5): 1 truncate cleaned up [ 178.330576][ T7051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.374029][ T2504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.384834][ T2504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.599662][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.773934][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 178.801585][ T25] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 178.848792][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.910833][ T25] usb 6-1: Product: syz [ 178.934172][ T25] usb 6-1: Manufacturer: syz [ 178.948964][ T25] usb 6-1: SerialNumber: syz [ 179.070427][ T25] usb 6-1: config 0 descriptor?? [ 179.199031][ T25] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.739590][ T7099] overlay: ./file1 is not a directory [ 180.392528][ T7111] netlink: 'syz.0.546': attribute type 9 has an invalid length. [ 180.436736][ T7111] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.546'. [ 180.472691][ T7111] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 181.571543][ T5240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.691060][ T25] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 181.755735][ T25] usb 6-1: USB disconnect, device number 5 [ 181.776678][ T7135] loop3: detected capacity change from 0 to 764 [ 181.888870][ T5230] udevd[5230]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.341887][ T7149] tipc: Started in network mode [ 182.346801][ T7149] tipc: Node identity fa, cluster identity 4711 [ 182.353438][ T7149] tipc: Node number set to 250 [ 182.590288][ T7160] netlink: 'syz.0.561': attribute type 9 has an invalid length. [ 182.622427][ T7160] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.561'. [ 182.709835][ T5296] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 182.827974][ T7169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.564'. [ 182.847598][ T7170] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.865826][ T7169] netlink: 172 bytes leftover after parsing attributes in process `syz.0.564'. [ 182.900324][ T5296] usb 3-1: Using ep0 maxpacket: 16 [ 182.918503][ T5296] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 182.960130][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 183.015911][ T5296] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 183.049529][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.057581][ T5296] usb 3-1: Product: syz [ 183.100505][ T7177] netlink: 'syz.1.567': attribute type 9 has an invalid length. [ 183.108632][ T5296] usb 3-1: Manufacturer: syz [ 183.119483][ T5296] usb 3-1: SerialNumber: syz [ 183.139581][ T5296] usb 3-1: config 0 descriptor?? [ 183.147590][ T7180] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.149077][ T7177] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.567'. [ 183.165224][ T5296] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 183.493493][ T7187] pim6reg1: entered promiscuous mode [ 183.498848][ T7187] pim6reg1: entered allmulticast mode [ 183.605376][ T7194] loop0: detected capacity change from 0 to 764 [ 183.845884][ T7204] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.018641][ T7207] netlink: 60 bytes leftover after parsing attributes in process `syz.5.581'. [ 184.052929][ T7205] tipc: Started in network mode [ 184.057858][ T7205] tipc: Node identity fa, cluster identity 4711 [ 184.066062][ T7205] tipc: Node number set to 250 [ 184.068494][ T7207] netlink: 172 bytes leftover after parsing attributes in process `syz.5.581'. [ 184.126467][ T7209] tipc: Enabled bearer , priority 0 [ 184.221984][ T7215] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.258940][ T7209] tipc: Resetting bearer [ 184.580154][ T7208] tipc: Resetting bearer [ 185.055170][ T7244] openvswitch: netlink: Actions may not be safe on all matching packets [ 185.245898][ T7252] netlink: 172 bytes leftover after parsing attributes in process `syz.4.597'. [ 185.264974][ T7255] openvswitch: netlink: Actions may not be safe on all matching packets [ 185.402766][ T7258] loop4: detected capacity change from 0 to 764 [ 185.542734][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 185.549236][ T5234] Bluetooth: hci5: command 0x0406 tx timeout [ 185.555944][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 185.562445][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 185.573812][ T8] usb 3-1: USB disconnect, device number 7 [ 187.081759][ T7208] tipc: Disabling bearer [ 187.597035][ T7283] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.653338][ T7286] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.791579][ T7288] netlink: 172 bytes leftover after parsing attributes in process `syz.4.612'. [ 188.545098][ T4674] udevd[4674]: worker [5230] terminated by signal 33 (Unknown signal 33) [ 188.593683][ T4674] udevd[4674]: worker [5230] failed while handling '/devices/virtual/block/loop2' [ 188.608660][ T4674] udevd[4674]: worker [6237] terminated by signal 33 (Unknown signal 33) [ 188.624364][ T4674] udevd[4674]: worker [6237] failed while handling '/devices/virtual/block/loop3' [ 188.688781][ T4674] udevd[4674]: worker [5914] terminated by signal 33 (Unknown signal 33) [ 188.714644][ T4674] udevd[4674]: worker [5914] failed while handling '/devices/virtual/block/loop0' [ 188.919738][ T7324] openvswitch: netlink: Actions may not be safe on all matching packets [ 189.360434][ T7298] loop4: detected capacity change from 0 to 32768 [ 189.408882][ T7298] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.618 (7298) [ 189.422097][ T7335] netlink: 172 bytes leftover after parsing attributes in process `syz.1.630'. [ 189.555696][ T7298] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.620629][ T7298] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 189.856541][ T7298] BTRFS info (device loop4): rebuilding free space tree [ 190.126390][ T7298] BTRFS info (device loop4): disabling free space tree [ 190.154558][ T7298] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.227092][ T7368] loop5: detected capacity change from 0 to 512 [ 190.241556][ T7298] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.276508][ T7368] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.334900][ T7374] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.366787][ T7368] EXT4-fs (loop5): 1 truncate cleaned up [ 190.375698][ T7368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.461468][ T29] audit: type=1326 audit(1726944507.408:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 190.596136][ T29] audit: type=1326 audit(1726944507.408:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 190.697605][ T29] audit: type=1326 audit(1726944507.408:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 190.745914][ T29] audit: type=1326 audit(1726944507.408:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 190.776482][ T29] audit: type=1326 audit(1726944507.408:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 190.811026][ T29] audit: type=1326 audit(1726944507.408:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 190.930390][ T5292] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.934335][ T29] audit: type=1326 audit(1726944507.408:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 190.968571][ T29] audit: type=1326 audit(1726944507.408:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 191.032977][ T7389] netlink: 172 bytes leftover after parsing attributes in process `syz.0.648'. [ 191.103150][ T29] audit: type=1326 audit(1726944507.408:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 191.120902][ T5292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 191.126085][ T29] audit: type=1326 audit(1726944507.428:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c8877def9 code=0x7ffc0000 [ 191.191276][ T5292] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 191.229705][ T5292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.244305][ T5237] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.278274][ T5292] usb 6-1: Product: syz [ 191.299471][ T5292] usb 6-1: Manufacturer: syz [ 191.317290][ T5292] usb 6-1: SerialNumber: syz [ 191.449322][ T5292] usb 6-1: config 0 descriptor?? [ 191.519785][ T5292] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.726840][ T7410] openvswitch: netlink: Actions may not be safe on all matching packets [ 192.091846][ T7417] overlay: ./file1 is not a directory [ 192.397473][ T7423] loop2: detected capacity change from 0 to 4096 [ 192.526022][ T7423] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 193.142960][ T7423] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 193.364829][ T5292] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 193.523225][ T7440] netlink: 288 bytes leftover after parsing attributes in process `syz.4.669'. [ 193.529601][ T5292] usb 6-1: USB disconnect, device number 6 [ 193.576720][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.641681][ T5240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.862951][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.320117][ T5235] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 194.326634][ T5235] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 194.341817][ T7456] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.503880][ T7461] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.824647][ T7474] loop0: detected capacity change from 0 to 512 [ 194.831760][ T7474] EXT4-fs: Ignoring removed oldalloc option [ 194.884124][ T7476] loop2: detected capacity change from 0 to 512 [ 194.907201][ T7476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.931150][ T7474] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.682: casefold flag without casefold feature [ 194.949322][ T7476] EXT4-fs (loop2): 1 truncate cleaned up [ 194.953225][ T7474] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.682: couldn't read orphan inode 15 (err -117) [ 194.956226][ T7476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.976676][ T7474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.249812][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 195.285240][ T7486] netlink: 288 bytes leftover after parsing attributes in process `syz.4.685'. [ 195.415426][ T7490] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.682: Directory hole found for htree leaf block 0 [ 195.873544][ T7491] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.682: Directory hole found for htree leaf block 0 [ 196.087846][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 196.107577][ T8] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 196.117316][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.125539][ T8] usb 3-1: Product: syz [ 196.129893][ T8] usb 3-1: Manufacturer: syz [ 196.134775][ T8] usb 3-1: SerialNumber: syz [ 196.139713][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.151570][ T8] usb 3-1: config 0 descriptor?? [ 196.177518][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.265196][ T7505] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.340361][ T7509] loop1: detected capacity change from 0 to 512 [ 196.461598][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 196.642516][ T7512] overlay: ./file1 is not a directory [ 196.688946][ T7513] loop1: detected capacity change from 0 to 512 [ 197.066408][ T7513] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.749664][ T7513] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 198.788233][ T7513] EXT4-fs (loop1): 1 truncate cleaned up [ 198.796474][ T7513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.883969][ T7507] loop0: detected capacity change from 0 to 4096 [ 203.018497][ T7507] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 203.118511][ T7507] ntfs3: loop0: Failed to read $UpCase (-4). [ 203.366189][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.415200][ T8] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 203.498179][ T8] usb 3-1: USB disconnect, device number 8 [ 203.557927][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.618874][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.771991][ T7524] netlink: 288 bytes leftover after parsing attributes in process `syz.0.699'. [ 203.822651][ T7529] loop2: detected capacity change from 0 to 512 [ 203.839216][ T7529] EXT4-fs: Ignoring removed oldalloc option [ 203.920457][ T7529] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.702: casefold flag without casefold feature [ 203.940213][ T7529] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.702: couldn't read orphan inode 15 (err -117) [ 204.062718][ T7529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.651698][ T7552] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.702: Directory hole found for htree leaf block 0 [ 205.464434][ T7553] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.702: Directory hole found for htree leaf block 0 [ 206.278527][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.557641][ T7572] loop1: detected capacity change from 0 to 512 [ 206.612115][ T7572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.666325][ T7578] loop2: detected capacity change from 0 to 4096 [ 206.728409][ T7572] EXT4-fs (loop1): 1 truncate cleaned up [ 206.749552][ T7578] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 206.788970][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 206.800466][ T7572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.052311][ T7578] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 207.102366][ T5296] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.609855][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 207.642973][ T5296] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 207.652516][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.694594][ T5296] usb 2-1: Product: syz [ 207.713834][ T5296] usb 2-1: Manufacturer: syz [ 207.735674][ T5296] usb 2-1: SerialNumber: syz [ 207.992063][ T5296] usb 2-1: config 0 descriptor?? [ 208.288209][ T5296] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.755111][ T7602] loop3: detected capacity change from 0 to 764 [ 208.772167][ T7572] overlay: ./file1 is not a directory [ 208.857859][ T7607] netlink: 288 bytes leftover after parsing attributes in process `syz.4.722'. [ 208.872760][ T7606] loop0: detected capacity change from 0 to 512 [ 208.890319][ T7606] EXT4-fs: Ignoring removed oldalloc option [ 208.930575][ T7606] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.723: casefold flag without casefold feature [ 208.992683][ T7606] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.723: couldn't read orphan inode 15 (err -117) [ 209.075320][ T7606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.143409][ T7575] loop5: detected capacity change from 0 to 32768 [ 209.223182][ T7575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.716 (7575) [ 209.455417][ T7575] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.631310][ T7575] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 210.009594][ T7575] BTRFS info (device loop5): using free-space-tree [ 210.034293][ T7575] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 210.062070][ T7575] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 210.149938][ T7575] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 210.316664][ T7575] BTRFS error (device loop5): open_ctree failed [ 210.355049][ T5296] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 210.379759][ T5296] usb 2-1: USB disconnect, device number 6 [ 210.492587][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.628697][ T7636] loop4: detected capacity change from 0 to 16 [ 210.645288][ T7636] erofs: (device loop4): mounted with root inode @ nid 36. [ 211.571121][ T7638] netlink: 'syz.3.729': attribute type 9 has an invalid length. [ 211.611328][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.763323][ T7638] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.729'. [ 211.830921][ T7643] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.723: Directory hole found for htree leaf block 0 [ 211.903272][ T7645] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.723: Directory hole found for htree leaf block 0 [ 212.058145][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.730'. [ 212.294730][ T7654] netlink: 68 bytes leftover after parsing attributes in process `syz.3.734'. [ 212.631258][ T5235] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 212.637750][ T5235] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 212.789266][ T7659] netlink: 288 bytes leftover after parsing attributes in process `syz.5.736'. [ 213.213018][ T7661] loop1: detected capacity change from 0 to 764 [ 214.053279][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.331115][ T7648] loop4: detected capacity change from 0 to 32768 [ 214.346764][ T7648] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.731 (7648) [ 214.366249][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 214.449218][ T7648] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 214.489673][ T7648] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 214.498922][ T7648] BTRFS info (device loop4): disk space caching is enabled [ 214.523162][ T7648] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 214.539878][ T7685] netlink: 'syz.5.745': attribute type 9 has an invalid length. [ 214.547537][ T7685] netlink: 134672 bytes leftover after parsing attributes in process `syz.5.745'. [ 214.840241][ T7703] netlink: 68 bytes leftover after parsing attributes in process `syz.0.747'. [ 214.975217][ T7648] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 214.975585][ T7648] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 214.995041][ T7648] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 215.042284][ T7648] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 215.079792][ T7709] netlink: 288 bytes leftover after parsing attributes in process `syz.0.750'. [ 215.885369][ T7648] BTRFS error (device loop4): open_ctree failed [ 215.908271][ T7716] loop3: detected capacity change from 0 to 64 [ 216.275525][ T7727] netlink: 'syz.2.758': attribute type 9 has an invalid length. [ 216.283381][ T7727] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.758'. [ 216.856898][ T959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.901038][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 216.901061][ T29] audit: type=1800 audit(1726944533.818:23): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.755" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 217.309537][ T5292] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 217.453046][ T959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.497093][ T5292] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.538892][ T5292] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.599529][ T5292] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.608628][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.642571][ T959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.678592][ T7728] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 217.700782][ T5292] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.850016][ T959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.014527][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.025118][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.037664][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.055747][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.068906][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.078976][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.213766][ T7733] loop2: detected capacity change from 0 to 32768 [ 218.504589][ T25] usb 6-1: USB disconnect, device number 7 [ 218.555690][ T7733] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.568583][ T959] bridge_slave_1: left allmulticast mode [ 218.614243][ T959] bridge_slave_1: left promiscuous mode [ 218.622354][ T959] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.643726][ T959] bridge_slave_0: left allmulticast mode [ 218.649892][ T959] bridge_slave_0: left promiscuous mode [ 218.655883][ T959] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.691889][ T7733] XFS (loop2): Ending clean mount [ 218.720997][ T7733] XFS (loop2): Quotacheck needed: Please wait. [ 218.980236][ T7733] XFS (loop2): Quotacheck: Done. [ 219.670897][ T5235] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.827201][ T959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.848339][ T959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.868027][ T959] bond0 (unregistering): Released all slaves [ 219.947616][ T7765] loop0: detected capacity change from 0 to 40427 [ 219.976803][ T7765] F2FS-fs (loop0): Unrecognized mount option "lazytime" or missing value [ 220.086089][ T7760] netlink: 288 bytes leftover after parsing attributes in process `syz.4.766'. [ 220.283971][ T5241] Bluetooth: hci1: command tx timeout [ 220.302256][ T7774] netlink: 'syz.4.772': attribute type 9 has an invalid length. [ 220.316063][ T959] tipc: Left network mode [ 220.368819][ T7774] netlink: 134672 bytes leftover after parsing attributes in process `syz.4.772'. [ 220.848574][ T7778] loop0: detected capacity change from 0 to 512 [ 220.872571][ T7778] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 222.158041][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 222.385926][ T5241] Bluetooth: hci1: command tx timeout [ 222.497716][ T7798] loop3: detected capacity change from 0 to 512 [ 222.518499][ T7798] EXT4-fs: Ignoring removed oldalloc option [ 222.611773][ T7798] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.775: casefold flag without casefold feature [ 222.653240][ T7798] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.775: couldn't read orphan inode 15 (err -117) [ 222.763284][ T7798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.211157][ T7817] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.775: Directory hole found for htree leaf block 0 [ 223.321306][ T7818] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.775: Directory hole found for htree leaf block 0 [ 223.890730][ T6606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.267410][ T7807] loop0: detected capacity change from 0 to 32768 [ 224.301199][ T7807] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.315600][ T959] hsr_slave_0: left promiscuous mode [ 224.326062][ T959] hsr_slave_1: left promiscuous mode [ 224.335556][ T959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.343613][ T959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.353072][ T959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.360600][ T959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.386956][ T959] veth1_macvtap: left promiscuous mode [ 224.392738][ T959] veth0_macvtap: left promiscuous mode [ 224.398356][ T959] veth1_vlan: left promiscuous mode [ 224.403780][ T959] veth0_vlan: left promiscuous mode [ 224.429728][ T5241] Bluetooth: hci1: command tx timeout [ 224.433221][ T7807] XFS (loop0): Ending clean mount [ 224.453515][ T7807] XFS (loop0): Quotacheck needed: Please wait. [ 224.531114][ T7807] XFS (loop0): Quotacheck: Done. [ 225.504749][ T5227] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.647958][ T959] team0 (unregistering): Port device team_slave_1 removed [ 225.717015][ T959] team0 (unregistering): Port device team_slave_0 removed [ 225.838454][ T7844] netlink: 'syz.0.785': attribute type 9 has an invalid length. [ 225.847761][ T7844] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.785'. [ 226.519089][ T5241] Bluetooth: hci1: command tx timeout [ 227.035310][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 227.379493][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 227.527783][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.529492][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 227.547993][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.564847][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 227.576935][ T7744] bridge_slave_0: entered allmulticast mode [ 227.590210][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.630860][ T7744] bridge_slave_0: entered promiscuous mode [ 227.641755][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.659513][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.701833][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.716755][ T8] usb 1-1: Product: syz [ 227.717301][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.744848][ T8] usb 1-1: Manufacturer: syz [ 227.748716][ T7744] bridge_slave_1: entered allmulticast mode [ 227.769599][ T8] usb 1-1: SerialNumber: syz [ 227.770989][ T7744] bridge_slave_1: entered promiscuous mode [ 227.797994][ T8] usb 1-1: config 0 descriptor?? [ 227.822779][ T8] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.849604][ T8] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 227.891456][ T7874] loop5: detected capacity change from 0 to 512 [ 227.914469][ T7874] EXT4-fs: Ignoring removed oldalloc option [ 227.936530][ T7874] EXT4-fs error (device loop5): ext4_orphan_get:1388: inode #15: comm syz.5.792: casefold flag without casefold feature [ 227.972274][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.995247][ T7874] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.792: couldn't read orphan inode 15 (err -117) [ 228.033930][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.064443][ T7874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.413497][ T7744] team0: Port device team_slave_0 added [ 228.438656][ T7744] team0: Port device team_slave_1 added [ 228.509233][ T7884] EXT4-fs error (device loop5): ext4_add_entry:2437: inode #2: comm syz.5.792: Directory hole found for htree leaf block 0 [ 228.539074][ T7884] EXT4-fs error (device loop5): ext4_add_entry:2437: inode #2: comm syz.5.792: Directory hole found for htree leaf block 0 [ 228.831180][ T7888] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 229.280079][ T8] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 229.288345][ T8] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 229.462004][ T5240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.500346][ T8] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 229.524306][ T8] em28xx 1-1:0.0: No AC97 audio processor [ 229.578798][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.603004][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.684719][ T7882] loop2: detected capacity change from 0 to 40427 [ 229.706461][ T7882] F2FS-fs (loop2): invalid crc value [ 229.784039][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.902783][ T7882] F2FS-fs (loop2): Found nat_bits in checkpoint [ 230.054366][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.095630][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.219641][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.359272][ T7882] F2FS-fs (loop2): Start checkpoint disabled! [ 230.447622][ T7900] loop5: detected capacity change from 0 to 512 [ 230.516865][ T7890] loop4: detected capacity change from 0 to 40427 [ 230.529327][ T7744] hsr_slave_0: entered promiscuous mode [ 230.537852][ T7744] hsr_slave_1: entered promiscuous mode [ 230.555273][ T7744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.611247][ T5291] usb 1-1: USB disconnect, device number 6 [ 230.618096][ T5291] em28xx 1-1:0.0: Disconnecting em28xx [ 230.629938][ T7744] Cannot create hsr debugfs directory [ 230.677637][ T5291] em28xx 1-1:0.0: Freeing device [ 230.738507][ T7900] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 230.748817][ T7900] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.758023][ T7900] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (fffc1829) [ 230.767667][ T7900] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 230.819838][ T7890] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 230.837985][ T7882] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 230.912872][ T7890] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 231.012328][ T7890] F2FS-fs (loop4): invalid crc value [ 231.229601][ T7890] F2FS-fs (loop4): Found nat_bits in checkpoint [ 231.924206][ T35] kworker/u8:2: attempt to access beyond end of device [ 231.924206][ T35] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 232.040847][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 232.048191][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 232.245308][ T29] audit: type=1800 audit(1726944549.188:24): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.805" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 233.417292][ T7962] netlink: 68 bytes leftover after parsing attributes in process `syz.2.800'. [ 233.618157][ T7968] netlink: 'syz.2.811': attribute type 9 has an invalid length. [ 233.642747][ T7968] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.811'. [ 233.679297][ T7970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.810'. [ 233.730944][ T7972] netlink: 172 bytes leftover after parsing attributes in process `syz.0.810'. [ 234.139660][ T29] audit: type=1326 audit(1726944550.998:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6160d7def9 code=0x7ffc0000 [ 234.161807][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.168842][ T29] audit: type=1326 audit(1726944550.998:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6160d7c890 code=0x7ffc0000 [ 234.191611][ T29] audit: type=1326 audit(1726944550.998:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6160d7f727 code=0x7ffc0000 [ 234.213704][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.220010][ T29] audit: type=1326 audit(1726944550.998:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6160d7def9 code=0x7ffc0000 [ 234.242411][ T29] audit: type=1326 audit(1726944550.998:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6160d7f727 code=0x7ffc0000 [ 234.264918][ T29] audit: type=1326 audit(1726944550.998:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6160d7cb8a code=0x7ffc0000 [ 234.287608][ T29] audit: type=1326 audit(1726944550.998:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6160d7def9 code=0x7ffc0000 [ 234.309768][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.713063][ T29] audit: type=1326 audit(1726944550.998:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6160d7def9 code=0x7ffc0000 [ 234.736250][ T29] audit: type=1326 audit(1726944551.008:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7969 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6160d7def9 code=0x7ffc0000 [ 235.501414][ T7994] fuse: root generation should be zero [ 235.731020][ T7744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.904134][ T7744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.153607][ T7744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.178454][ T7744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.211062][ T8011] netlink: 'syz.0.825': attribute type 9 has an invalid length. [ 236.610448][ T8013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.823'. [ 236.669607][ T8011] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.825'. [ 236.824435][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.883167][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.907115][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.5.827'. [ 236.918941][ T8026] netlink: 172 bytes leftover after parsing attributes in process `syz.5.827'. [ 236.942983][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.950152][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.041923][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.049092][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.192893][ T7744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.261612][ T7744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.638041][ T8028] loop3: detected capacity change from 0 to 32768 [ 237.658119][ T8028] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.830 (8028) [ 237.683483][ T8028] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.703174][ T8028] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 237.726447][ T8028] BTRFS info (device loop3): using free-space-tree [ 237.739785][ T8060] loop5: detected capacity change from 0 to 47 [ 237.756253][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 237.930581][ T8028] BTRFS info (device loop3): rebuilding free space tree [ 238.005860][ T8060] minix: Unknown parameter 'ÿÿ0xffffffffffffffffÿñ¼Þ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 238.005860][ T8060] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹' [ 238.122104][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.278995][ T35] kworker/u8:2: attempt to access beyond end of device [ 238.278995][ T35] loop5: rw=1, sector=48, nr_sectors = 2 limit=47 [ 238.292521][ T35] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 238.325659][ T35] kworker/u8:2: attempt to access beyond end of device [ 238.325659][ T35] loop5: rw=1, sector=50, nr_sectors = 2 limit=47 [ 238.381722][ T35] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 238.400899][ T7744] veth0_vlan: entered promiscuous mode [ 238.680440][ T7744] veth1_vlan: entered promiscuous mode [ 238.799031][ T7744] veth0_macvtap: entered promiscuous mode [ 238.962784][ T7744] veth1_macvtap: entered promiscuous mode [ 239.105101][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.153274][ T6606] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 239.182590][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.219817][ T8097] netlink: 60 bytes leftover after parsing attributes in process `syz.5.843'. [ 239.220153][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.259735][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.285067][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.299925][ T8100] netlink: 68 bytes leftover after parsing attributes in process `syz.4.841'. [ 239.319460][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.337701][ T8097] netlink: 172 bytes leftover after parsing attributes in process `syz.5.843'. [ 239.438847][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.519813][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.578469][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.651095][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.812094][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.880704][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.927882][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.966066][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.018093][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.078941][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.109563][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.156435][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.199562][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.226333][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.294045][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.325790][ T8124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.350684][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.357553][ T8124] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 240.445315][ T8130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.530256][ T8130] batadv_slave_0: entered promiscuous mode [ 240.546692][ T8124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.572624][ T8124] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 240.582341][ T7744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.603376][ T8138] loop0: detected capacity change from 0 to 16 [ 240.618935][ T7744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.638114][ T7744] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.654600][ T8138] erofs: (device loop0): mounted with root inode @ nid 36. [ 240.662768][ T7744] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.704552][ T8124] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 240.722425][ T8124] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 240.774182][ T8124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.792215][ T8124] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 240.886075][ T8124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.893158][ T5306] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 240.907002][ T8124] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 241.061166][ T5306] usb 6-1: Using ep0 maxpacket: 32 [ 241.092831][ T5306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.114073][ T5772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.142367][ T5772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.152498][ T5306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.186280][ T5306] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.236357][ T5306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.259079][ T8154] netlink: 60 bytes leftover after parsing attributes in process `syz.4.857'. [ 241.260839][ T5772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.284221][ T5306] usb 6-1: config 0 descriptor?? [ 241.288418][ T8154] netlink: 172 bytes leftover after parsing attributes in process `syz.4.857'. [ 241.301698][ T5772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.311994][ T5306] hub 6-1:0.0: USB hub found [ 241.459748][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 241.915817][ T8160] netlink: 68 bytes leftover after parsing attributes in process `syz.4.858'. [ 242.033553][ T5306] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 242.099612][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 242.115511][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.127347][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.158202][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 242.212131][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 242.260376][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.289296][ T25] usb 4-1: config 0 descriptor?? [ 242.300393][ T5306] usbhid 6-1:0.0: can't add hid device: -71 [ 242.306752][ T5306] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 242.369233][ T5306] usb 6-1: USB disconnect, device number 8 [ 242.915598][ T25] hid (null): unknown global tag 0xc [ 242.985503][ T25] hid (null): global environment stack underflow [ 243.361770][ T25] hid (null): report_id 2250602168 is invalid [ 243.404410][ T25] hid (null): unknown global tag 0xc [ 243.737283][ T25] hid (null): unknown global tag 0xf3 [ 243.819133][ T25] hid (null): invalid report_size 2036631993 [ 243.861159][ T25] hid (null): report_id 3944742287 is invalid [ 243.933216][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input6 [ 244.171707][ T25] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input7 [ 244.209606][ T8197] netlink: 60 bytes leftover after parsing attributes in process `syz.5.869'. [ 244.264210][ T8197] netlink: 172 bytes leftover after parsing attributes in process `syz.5.869'. [ 244.354616][ T25] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 244.369705][ T8204] trusted_key: syz.2.870 sent an empty control message without MSG_MORE. [ 244.501057][ T25] usb 4-1: USB disconnect, device number 2 [ 244.530761][ T8209] netlink: 'syz.1.873': attribute type 3 has an invalid length. [ 244.579602][ T8209] netlink: 3285 bytes leftover after parsing attributes in process `syz.1.873'. [ 244.896088][ T931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 245.316338][ T931] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.326977][ T931] usb 5-1: config 1 has no interface number 1 [ 245.333227][ T931] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 245.359542][ T931] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.388536][ T931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.405561][ T931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.913396][ T931] usb 5-1: SerialNumber: 抡֨顼ì¼âƒ‰ê«ã§¨ã™˜Ü“슪ꀡ⚃⶟墔蓼༣鴾êšå„§í™³Ú‹ìª—鸎 [ 246.092217][ T8249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.888'. [ 246.122506][ T8249] netlink: 172 bytes leftover after parsing attributes in process `syz.0.888'. [ 246.483447][ T931] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 246.609296][ T931] usb 5-1: USB disconnect, device number 5 [ 246.681294][ T5243] udevd[5243]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.753091][ T8277] netlink: 64 bytes leftover after parsing attributes in process `syz.2.897'. [ 246.825869][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 247.064367][ T8285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.903'. [ 247.105484][ T8285] netlink: 172 bytes leftover after parsing attributes in process `syz.2.903'. [ 247.128671][ T8282] loop1: detected capacity change from 0 to 4096 [ 247.138292][ T8282] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 247.206866][ T8282] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 249.144664][ T8334] loop0: detected capacity change from 0 to 512 [ 249.154522][ T8334] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 249.164058][ T8334] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.173174][ T8334] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 249.182884][ T8334] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 249.199734][ T7744] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 249.206763][ T7744] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 249.343001][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 249.466032][ T8350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.917'. [ 249.476173][ T8350] netlink: 172 bytes leftover after parsing attributes in process `syz.1.917'. [ 250.754487][ T8388] loop3: detected capacity change from 0 to 512 [ 250.774336][ T8388] EXT4-fs: Ignoring removed oldalloc option [ 250.824434][ T8388] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.932: casefold flag without casefold feature [ 250.865995][ T8388] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.932: couldn't read orphan inode 15 (err -117) [ 250.889714][ T8388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.934976][ T8396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.933'. [ 250.954312][ T8392] fuse: Unknown parameter '0x0000000000000008' [ 251.278027][ T8400] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.932: Directory hole found for htree leaf block 0 [ 251.798996][ T8401] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.932: Directory hole found for htree leaf block 0 [ 252.021157][ T6606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.117544][ T8408] tipc: Started in network mode [ 252.123998][ T8408] tipc: Node identity fa, cluster identity 4711 [ 252.149607][ T8408] tipc: Node number set to 250 [ 252.362596][ T8419] syzkaller1: entered promiscuous mode [ 252.384518][ T8419] syzkaller1: entered allmulticast mode [ 252.681761][ T8425] netlink: 6 bytes leftover after parsing attributes in process `syz.3.942'. [ 252.683073][ T8425] netlink: 6 bytes leftover after parsing attributes in process `syz.3.942'. [ 252.702968][ T8425] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 252.703083][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 253.257860][ T8440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.948'. [ 253.359051][ T8449] raw_sendmsg: syz.0.953 forgot to set AF_INET. Fix it! [ 253.421640][ T8453] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.682905][ T8485] netlink: 68 bytes leftover after parsing attributes in process `syz.3.964'. [ 254.712790][ T8487] netlink: 'syz.1.967': attribute type 10 has an invalid length. [ 254.892067][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 255.443913][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.973'. [ 255.654930][ T8509] netlink: 'syz.1.975': attribute type 29 has an invalid length. [ 255.683552][ T8511] netlink: 'syz.1.975': attribute type 29 has an invalid length. [ 255.838124][ T8509] netlink: 'syz.1.975': attribute type 29 has an invalid length. [ 256.862952][ T8537] tipc: Started in network mode [ 256.894282][ T8537] tipc: Node identity fa, cluster identity 4711 [ 256.934126][ T8537] tipc: Node number set to 250 [ 256.958376][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 261.129268][ T8528] sched: DL replenish lagged too much [ 263.437616][ T8562] delete_channel: no stack [ 264.763125][ T8431] coredump: 431(syz.4.939): written to core: VMAs: 34, size 99516416; core: 62120902 bytes, pos 99524608 [ 267.255888][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 267.282439][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.291598][ T5247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.309760][ T5247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.331336][ T5247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 267.342523][ T5247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 267.692681][ T8587] binder_alloc: 8586: binder_alloc_buf, no vma [ 269.379746][ T5241] Bluetooth: hci6: command tx timeout [ 271.459656][ T5241] Bluetooth: hci6: command tx timeout [ 272.337608][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.349050][ T5247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.357167][ T5247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.370469][ T5247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.378106][ T5247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.386601][ T5247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.166794][ T5247] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 273.179787][ T5247] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 273.187567][ T5247] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 273.196903][ T5247] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 273.208717][ T5247] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 273.219030][ T5247] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 273.287362][ T5241] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 273.299943][ T5241] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 273.308557][ T5241] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 273.320531][ T5241] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 273.328090][ T5241] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 273.336262][ T5241] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 273.540478][ T5241] Bluetooth: hci6: command tx timeout [ 273.773813][ T5247] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 273.791465][ T5247] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 273.801502][ T5247] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 273.822317][ T5247] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 273.830498][ T5247] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 273.838200][ T5247] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 274.420290][ T5247] Bluetooth: hci7: command tx timeout [ 275.299738][ T5247] Bluetooth: hci8: command tx timeout [ 275.379586][ T5247] Bluetooth: hci9: command tx timeout [ 275.621677][ T5247] Bluetooth: hci6: command tx timeout [ 275.949052][ T5247] Bluetooth: hci10: command tx timeout [ 276.499578][ T5247] Bluetooth: hci7: command tx timeout [ 277.399476][ T5247] Bluetooth: hci8: command tx timeout [ 277.459599][ T5247] Bluetooth: hci9: command tx timeout [ 278.019843][ T5247] Bluetooth: hci10: command tx timeout [ 278.579535][ T5247] Bluetooth: hci7: command tx timeout [ 279.460678][ T5247] Bluetooth: hci8: command tx timeout [ 279.540576][ T5247] Bluetooth: hci9: command tx timeout [ 280.110896][ T5247] Bluetooth: hci10: command tx timeout [ 280.300928][ T5241] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 280.312392][ T5241] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 280.320610][ T5241] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 280.331342][ T5241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 280.339089][ T5241] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 280.350463][ T5241] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 280.659584][ T5241] Bluetooth: hci7: command tx timeout [ 281.539563][ T5241] Bluetooth: hci8: command tx timeout [ 281.620374][ T5241] Bluetooth: hci9: command tx timeout [ 282.187837][ T5241] Bluetooth: hci10: command tx timeout [ 282.419612][ T5241] Bluetooth: hci11: command tx timeout [ 284.500326][ T5241] Bluetooth: hci11: command tx timeout [ 286.579598][ T5241] Bluetooth: hci11: command tx timeout [ 288.669644][ T5241] Bluetooth: hci11: command tx timeout [ 329.572599][ T5247] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 329.584406][ T5247] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 329.600182][ T5247] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 329.610387][ T5247] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 329.618293][ T5247] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 329.629850][ T5247] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 331.700377][ T5247] Bluetooth: hci12: command tx timeout [ 332.541055][ T5241] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 332.559674][ T5241] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 332.568890][ T5241] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 332.582005][ T5241] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 332.590461][ T5241] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 332.598098][ T5241] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 333.786266][ T5247] Bluetooth: hci12: command tx timeout [ 333.801847][ T5241] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 333.811626][ T5241] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 333.819832][ T5241] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 333.849861][ T5241] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 333.860454][ T5241] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 333.867914][ T5241] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 333.938653][ T5247] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 333.957159][ T5247] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 333.965171][ T5247] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 333.981392][ T5247] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 333.989087][ T5247] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 334.007793][ T5247] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 334.497971][ T5241] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 334.511172][ T5241] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 334.520317][ T5241] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 334.529028][ T5241] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 334.539558][ T5241] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 334.546925][ T5241] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 334.659844][ T5241] Bluetooth: hci13: command tx timeout [ 335.859657][ T5241] Bluetooth: hci12: command tx timeout [ 335.939628][ T5241] Bluetooth: hci14: command tx timeout [ 336.099729][ T5241] Bluetooth: hci15: command tx timeout [ 336.579846][ T5241] Bluetooth: hci16: command tx timeout [ 336.739540][ T5241] Bluetooth: hci13: command tx timeout [ 337.946158][ T5241] Bluetooth: hci12: command tx timeout [ 338.019944][ T5241] Bluetooth: hci14: command tx timeout [ 338.179556][ T5241] Bluetooth: hci15: command tx timeout [ 338.659649][ T5241] Bluetooth: hci16: command tx timeout [ 338.819688][ T5241] Bluetooth: hci13: command tx timeout [ 340.099611][ T5241] Bluetooth: hci14: command tx timeout [ 340.259548][ T5241] Bluetooth: hci15: command tx timeout [ 340.600167][ T5247] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 340.618083][ T5247] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 340.627772][ T5247] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 340.640408][ T5247] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 340.648815][ T5247] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 340.656907][ T5247] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 340.739610][ T5241] Bluetooth: hci16: command tx timeout [ 340.903711][ T5241] Bluetooth: hci13: command tx timeout [ 342.180454][ T5241] Bluetooth: hci14: command tx timeout [ 342.339682][ T5241] Bluetooth: hci15: command tx timeout [ 342.739713][ T5241] Bluetooth: hci17: command tx timeout [ 342.820059][ T5241] Bluetooth: hci16: command tx timeout [ 344.819570][ T5241] Bluetooth: hci17: command tx timeout [ 346.899448][ T5241] Bluetooth: hci17: command tx timeout [ 348.979601][ T5241] Bluetooth: hci17: command tx timeout [ 388.951367][ T5249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.960849][ T5249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.968510][ T5249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.987443][ T5249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.996298][ T5249] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 389.004092][ T5249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 390.339676][ T5249] Bluetooth: hci6: command 0x0406 tx timeout [ 391.065644][ T5247] Bluetooth: hci5: command tx timeout [ 393.139587][ T5247] Bluetooth: hci5: command tx timeout [ 394.210147][ T5234] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 394.229284][ T5236] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 394.240973][ T5236] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 394.252144][ T5236] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 394.261895][ T5236] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 394.269909][ T5236] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 394.278421][ T5236] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 394.286459][ T5236] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 394.294105][ T5236] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 394.303620][ T4612] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 394.314829][ T4612] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 394.329759][ T4612] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 394.622847][ T5234] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 394.634504][ T5234] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 394.643111][ T5234] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 394.654473][ T5234] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 394.663619][ T5234] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 394.673460][ T5234] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 395.098760][ T4612] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 395.108922][ T4612] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 395.118699][ T4612] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 395.128401][ T4612] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 395.139817][ T4612] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 395.147219][ T4612] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 395.219550][ T4612] Bluetooth: hci5: command tx timeout [ 395.484440][ T4612] Bluetooth: hci9: command 0x0406 tx timeout [ 395.491612][ T5234] Bluetooth: hci7: command 0x0406 tx timeout [ 395.497742][ T5234] Bluetooth: hci8: command 0x0406 tx timeout [ 396.419564][ T5247] Bluetooth: hci19: command tx timeout [ 396.435325][ T5249] Bluetooth: hci18: command tx timeout [ 396.739571][ T5247] Bluetooth: hci20: command tx timeout [ 397.219724][ T5247] Bluetooth: hci21: command tx timeout [ 397.299555][ T5247] Bluetooth: hci5: command tx timeout [ 398.501696][ T5241] Bluetooth: hci18: command tx timeout [ 398.509953][ T5249] Bluetooth: hci19: command tx timeout [ 398.819617][ T5247] Bluetooth: hci20: command tx timeout [ 399.299587][ T5247] Bluetooth: hci21: command tx timeout [ 400.588562][ T5247] Bluetooth: hci10: command 0x0406 tx timeout [ 400.594914][ T5249] Bluetooth: hci18: command tx timeout [ 400.600467][ T5234] Bluetooth: hci19: command tx timeout [ 400.900510][ T5241] Bluetooth: hci20: command tx timeout [ 401.115774][ T5247] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 401.128080][ T5247] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 401.136765][ T5247] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 401.145372][ T5247] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 401.155948][ T5247] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 401.163447][ T5247] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 401.379563][ T5241] Bluetooth: hci21: command tx timeout [ 402.659613][ T5247] Bluetooth: hci19: command tx timeout [ 402.665329][ T5241] Bluetooth: hci18: command tx timeout [ 402.979537][ T5241] Bluetooth: hci20: command tx timeout [ 403.219666][ T5241] Bluetooth: hci22: command tx timeout [ 403.459619][ T5241] Bluetooth: hci21: command tx timeout [ 405.299556][ T5241] Bluetooth: hci22: command tx timeout [ 405.708327][ T5241] Bluetooth: hci11: command 0x0406 tx timeout [ 407.379463][ T5247] Bluetooth: hci22: command tx timeout [ 409.459522][ T5247] Bluetooth: hci22: command tx timeout [ 425.379718][ T30] INFO: task kworker/u8:10:5772 blocked for more than 143 seconds. [ 425.387684][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 425.421661][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.454405][ T30] task:kworker/u8:10 state:D stack:19824 pid:5772 tgid:5772 ppid:2 flags:0x00004000 [ 425.482754][ T30] Workqueue: netns cleanup_net [ 425.487622][ T30] Call Trace: [ 425.569394][ T30] [ 425.572574][ T30] __schedule+0x1893/0x4b50 [ 425.577152][ T30] ? __pfx___schedule+0x10/0x10 [ 425.659529][ T30] ? __pfx_lock_release+0x10/0x10 [ 425.664913][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 425.682025][ T30] ? kthread_data+0x52/0xd0 [ 425.686587][ T30] ? schedule+0x90/0x320 [ 425.694608][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.703892][ T30] ? wq_worker_sleeping+0x66/0x240 [ 425.709060][ T30] ? schedule+0x90/0x320 [ 425.717010][ T30] schedule+0x14b/0x320 [ 425.727331][ T30] schedule_preempt_disabled+0x13/0x30 [ 425.736379][ T30] __mutex_lock+0x6a7/0xd70 [ 425.744544][ T30] ? __mutex_lock+0x52a/0xd70 [ 425.749273][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 425.763160][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 425.768258][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.777888][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 425.799465][ T30] cleanup_net+0x617/0xcc0 [ 425.803957][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 425.808949][ T30] ? process_scheduled_works+0x976/0x1850 [ 425.821377][ T30] process_scheduled_works+0xa65/0x1850 [ 425.827001][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.838101][ T30] ? assign_work+0x364/0x3d0 [ 425.850812][ T30] worker_thread+0x870/0xd30 [ 425.855496][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.868971][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 425.876394][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 425.888380][ T30] ? __kthread_parkme+0x169/0x1d0 [ 425.894903][ T30] ? __pfx_worker_thread+0x10/0x10 [ 425.908667][ T30] kthread+0x2f2/0x390 [ 425.914192][ T30] ? __pfx_worker_thread+0x10/0x10 [ 425.925246][ T30] ? __pfx_kthread+0x10/0x10 [ 425.930272][ T30] ret_from_fork+0x4d/0x80 [ 425.934737][ T30] ? __pfx_kthread+0x10/0x10 [ 425.953476][ T30] ret_from_fork_asm+0x1a/0x30 [ 425.958333][ T30] [ 425.968141][ T30] INFO: task syz.4.939:8431 blocked for more than 143 seconds. [ 425.982874][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 425.994106][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 426.013736][ T30] task:syz.4.939 state:D stack:19992 pid:8431 tgid:8431 ppid:5237 flags:0x00004002 [ 426.035125][ T30] Call Trace: [ 426.038430][ T30] [ 426.041819][ T30] __schedule+0x1893/0x4b50 [ 426.046394][ T30] ? __pfx___schedule+0x10/0x10 [ 426.058543][ T30] ? __pfx_lock_release+0x10/0x10 [ 426.065836][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 426.078187][ T30] ? schedule+0x90/0x320 [ 426.084815][ T30] schedule+0x14b/0x320 [ 426.089023][ T30] schedule_preempt_disabled+0x13/0x30 [ 426.101873][ T30] __mutex_lock+0x6a7/0xd70 [ 426.106427][ T30] ? __mutex_lock+0x52a/0xd70 [ 426.118316][ T30] ? tun_chr_close+0x3b/0x1b0 [ 426.123838][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 426.128937][ T30] ? __pfx_call_rcu+0x10/0x10 [ 426.139392][ T30] tun_chr_close+0x3b/0x1b0 [ 426.143937][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 426.149076][ T30] __fput+0x241/0x880 [ 426.162316][ T30] task_work_run+0x251/0x310 [ 426.168562][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 426.179463][ T30] ? __pfx_task_work_run+0x10/0x10 [ 426.184613][ T30] ? do_exit+0xa2a/0x27f0 [ 426.188968][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.203400][ T30] ? kmem_cache_free+0x1a3/0x420 [ 426.208376][ T30] ? do_exit+0xa2a/0x27f0 [ 426.217768][ T30] do_exit+0xa2f/0x27f0 [ 426.224450][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.235012][ T30] ? __pfx_do_exit+0x10/0x10 [ 426.242391][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.248159][ T30] ? proc_coredump_connector+0x1e8/0x750 [ 426.258686][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.275465][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.282915][ T30] do_group_exit+0x207/0x2c0 [ 426.287550][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 426.299056][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.306144][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 426.317240][ T30] get_signal+0x176f/0x1810 [ 426.324256][ T30] ? __pfx_get_signal+0x10/0x10 [ 426.329153][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.339420][ T30] ? __send_signal_locked+0xb44/0xdc0 [ 426.344839][ T30] arch_do_signal_or_restart+0x96/0x860 [ 426.356995][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 426.363679][ T30] ? irqentry_exit_to_user_mode+0x53/0x280 [ 426.378216][ T30] irqentry_exit_to_user_mode+0x79/0x280 [ 426.386219][ T30] exc_general_protection+0x410/0x5d0 [ 426.398187][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.404704][ T30] ? rcu_is_watching+0x15/0xb0 [ 426.415343][ T30] ? exc_page_fault+0x590/0x8c0 [ 426.421773][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.427473][ T30] asm_exc_general_protection+0x26/0x30 [ 426.439020][ T30] RIP: 0033:0x7f6160d7df01 [ 426.446928][ T30] RSP: 002b:0000000020000180 EFLAGS: 00010217 [ 426.458787][ T30] RAX: 0000000000000000 RBX: 00007f6160f35f80 RCX: 00007f6160d7def9 [ 426.468828][ T30] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000040004000 [ 426.485497][ T30] RBP: 00007f6160df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 426.495025][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 426.512253][ T30] R13: 0000000000000000 R14: 00007f6160f35f80 R15: 00007ffe592c2178 [ 426.526066][ T30] [ 426.529197][ T30] INFO: task syz-executor:8580 blocked for more than 144 seconds. [ 426.538653][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 426.553037][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 426.566292][ T30] task:syz-executor state:D stack:24992 pid:8580 tgid:8580 ppid:1 flags:0x00000004 [ 426.585784][ T30] Call Trace: [ 426.589097][ T30] [ 426.593692][ T30] __schedule+0x1893/0x4b50 [ 426.598270][ T30] ? __pfx___schedule+0x10/0x10 [ 426.609155][ T30] ? __pfx_lock_release+0x10/0x10 [ 426.615641][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 426.635101][ T30] ? schedule+0x90/0x320 [ 426.645141][ T30] schedule+0x14b/0x320 [ 426.650745][ T30] schedule_preempt_disabled+0x13/0x30 [ 426.656247][ T30] __mutex_lock+0x6a7/0xd70 [ 426.667753][ T30] ? __mutex_lock+0x52a/0xd70 [ 426.674678][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 426.689991][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 426.695118][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 426.707210][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 426.712660][ T30] ? __lock_acquire+0x1384/0x2050 [ 426.717735][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.729758][ T30] netlink_rcv_skb+0x1e5/0x430 [ 426.734570][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.748996][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.754641][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.766810][ T30] netlink_unicast+0x7f8/0x990 [ 426.771683][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 426.777004][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.791289][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.796978][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.812444][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.818133][ T30] ? __check_object_size+0x49c/0x900 [ 426.839447][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 426.844284][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.856360][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.864325][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 426.876113][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.883793][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.889127][ T30] __sock_sendmsg+0x223/0x270 [ 426.899485][ T30] __sys_sendto+0x398/0x4f0 [ 426.904051][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 426.909143][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 426.924122][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.933678][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.943725][ T30] ? exc_page_fault+0x590/0x8c0 [ 426.948626][ T30] __x64_sys_sendto+0xde/0x100 [ 426.957204][ T30] do_syscall_64+0xf3/0x230 [ 426.965463][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.975052][ T30] RIP: 0033:0x7fabb9b7fd8c [ 426.989404][ T30] RSP: 002b:00007ffcbc65b3e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 426.997863][ T30] RAX: ffffffffffffffda RBX: 00007fabba864620 RCX: 00007fabb9b7fd8c [ 427.014416][ T30] RDX: 0000000000000028 RSI: 00007fabba864670 RDI: 0000000000000003 [ 427.024489][ T30] RBP: 0000000000000000 R08: 00007ffcbc65b434 R09: 000000000000000c [ 427.039498][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 427.047519][ T30] R13: 0000000000000000 R14: 00007fabba864670 R15: 0000000000000000 [ 427.062013][ T30] [ 427.065190][ T30] INFO: task syz.3.1003:8598 blocked for more than 145 seconds. [ 427.079959][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 427.098026][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.107168][ T30] task:syz.3.1003 state:D stack:26000 pid:8598 tgid:8597 ppid:6606 flags:0x00000004 [ 427.124721][ T30] Call Trace: [ 427.128037][ T30] [ 427.133122][ T30] __schedule+0x1893/0x4b50 [ 427.137702][ T30] ? __pfx___schedule+0x10/0x10 [ 427.148675][ T30] ? __pfx_lock_release+0x10/0x10 [ 427.157232][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 427.168494][ T30] ? schedule+0x90/0x320 [ 427.173187][ T30] schedule+0x14b/0x320 [ 427.177389][ T30] schedule_preempt_disabled+0x13/0x30 [ 427.192220][ T30] __mutex_lock+0x6a7/0xd70 [ 427.196786][ T30] ? __mutex_lock+0x52a/0xd70 [ 427.206456][ T30] ? rtnl_dumpit+0x99/0x200 [ 427.215872][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 427.225683][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.233867][ T30] ? __alloc_skb+0x28f/0x440 [ 427.238517][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 427.248883][ T30] ? __pfx_neightbl_dump_info+0x10/0x10 [ 427.257046][ T30] rtnl_dumpit+0x99/0x200 [ 427.266153][ T30] netlink_dump+0x649/0xd80 [ 427.273232][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 427.278322][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 427.294745][ T30] __netlink_dump_start+0x5a2/0x790 [ 427.303121][ T30] ? __pfx_neightbl_dump_info+0x10/0x10 [ 427.308717][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 427.318732][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.326883][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 427.336579][ T30] ? __pfx_neightbl_dump_info+0x10/0x10 [ 427.347037][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.358118][ T30] ? ref_tracker_free+0x643/0x7e0 [ 427.365777][ T30] netlink_rcv_skb+0x1e5/0x430 [ 427.375773][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.384075][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.394440][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.405843][ T30] netlink_unicast+0x7f8/0x990 [ 427.413274][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 427.418606][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.429304][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.437514][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.447818][ T30] ? __check_object_size+0x49c/0x900 [ 427.455628][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 427.467843][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.475655][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.485973][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 427.493420][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.507392][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.517731][ T30] __sock_sendmsg+0x223/0x270 [ 427.524129][ T30] sock_write_iter+0x2d7/0x3f0 [ 427.528937][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 427.541696][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.547396][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.558042][ T30] ? security_file_permission+0x74/0x280 [ 427.566272][ T30] vfs_write+0xa6f/0xc90 [ 427.573622][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 427.578954][ T30] ? __pfx_vfs_write+0x10/0x10 [ 427.591886][ T30] ? do_futex+0x392/0x560 [ 427.596437][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.610820][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.616509][ T30] ? __fdget_pos+0x19a/0x320 [ 427.635174][ T30] ksys_write+0x1a0/0x2c0 [ 427.648992][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 427.655090][ T30] ? __pfx_ksys_write+0x10/0x10 [ 427.666882][ T30] ? do_syscall_64+0x100/0x230 [ 427.672075][ T30] ? do_syscall_64+0xb6/0x230 [ 427.676810][ T30] do_syscall_64+0xf3/0x230 [ 427.688821][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.697822][ T30] RIP: 0033:0x7fcb5857def9 [ 427.714070][ T30] RSP: 002b:00007fcb593a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.724195][ T30] RAX: ffffffffffffffda RBX: 00007fcb58735f80 RCX: 00007fcb5857def9 [ 427.738021][ T30] RDX: 000000000000fe33 RSI: 0000000020000100 RDI: 0000000000000003 [ 427.747523][ T30] RBP: 00007fcb585f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 427.761650][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.776175][ T30] R13: 0000000000000000 R14: 00007fcb58735f80 R15: 00007ffd2e2e7fc8 [ 427.784634][ T30] [ 427.787785][ T30] INFO: task syz-executor:8601 blocked for more than 145 seconds. [ 427.799377][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 427.816716][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.826844][ T30] task:syz-executor state:D stack:24992 pid:8601 tgid:8601 ppid:1 flags:0x00000004 [ 427.844197][ T30] Call Trace: [ 427.847507][ T30] [ 427.852093][ T30] __schedule+0x1893/0x4b50 [ 427.856689][ T30] ? __pfx___schedule+0x10/0x10 [ 427.880239][ T30] ? __pfx_lock_release+0x10/0x10 [ 427.885346][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 427.897813][ T30] ? schedule+0x90/0x320 [ 427.902911][ T30] schedule+0x14b/0x320 [ 427.908875][ T30] schedule_preempt_disabled+0x13/0x30 [ 427.919359][ T30] __mutex_lock+0x6a7/0xd70 [ 427.923924][ T30] ? __mutex_lock+0x52a/0xd70 [ 427.928647][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 427.943481][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 427.948588][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 427.958522][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 427.966160][ T30] ? __lock_acquire+0x1384/0x2050 [ 427.975910][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.983894][ T30] netlink_rcv_skb+0x1e5/0x430 [ 427.988709][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.003742][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.012713][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.017963][ T30] netlink_unicast+0x7f8/0x990 [ 428.029448][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 428.034778][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.048419][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.056766][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.069949][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.075636][ T30] ? __check_object_size+0x49c/0x900 [ 428.087014][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 428.093281][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.098620][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.115041][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 428.125416][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.135988][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.143804][ T30] __sock_sendmsg+0x223/0x270 [ 428.148533][ T30] __sys_sendto+0x398/0x4f0 [ 428.158065][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 428.165633][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.178337][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.186836][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.197928][ T30] ? exc_page_fault+0x590/0x8c0 [ 428.205887][ T30] __x64_sys_sendto+0xde/0x100 [ 428.217175][ T30] do_syscall_64+0xf3/0x230 [ 428.224385][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.237593][ T30] RIP: 0033:0x7f34f897fd8c [ 428.244639][ T30] RSP: 002b:00007ffe133badd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 428.257873][ T30] RAX: ffffffffffffffda RBX: 00007f34f9664620 RCX: 00007f34f897fd8c [ 428.268579][ T30] RDX: 0000000000000028 RSI: 00007f34f9664670 RDI: 0000000000000003 [ 428.283568][ T30] RBP: 0000000000000000 R08: 00007ffe133bae24 R09: 000000000000000c [ 428.296118][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 428.308895][ T30] R13: 0000000000000000 R14: 00007f34f9664670 R15: 0000000000000000 [ 428.325523][ T30] [ 428.328656][ T30] INFO: task syz-executor:8605 blocked for more than 146 seconds. [ 428.336964][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 428.353767][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.368291][ T30] task:syz-executor state:D stack:24992 pid:8605 tgid:8605 ppid:1 flags:0x00000004 [ 428.378781][ T30] Call Trace: [ 428.388995][ T30] [ 428.392328][ T30] __schedule+0x1893/0x4b50 [ 428.396903][ T30] ? __pfx___schedule+0x10/0x10 [ 428.408671][ T30] ? __pfx_lock_release+0x10/0x10 [ 428.417484][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 428.433141][ T30] ? schedule+0x90/0x320 [ 428.437439][ T30] schedule+0x14b/0x320 [ 428.444245][ T30] schedule_preempt_disabled+0x13/0x30 [ 428.455118][ T30] __mutex_lock+0x6a7/0xd70 [ 428.462230][ T30] ? __mutex_lock+0x52a/0xd70 [ 428.466962][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 428.479198][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 428.486871][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 428.496489][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 428.504382][ T30] ? __lock_acquire+0x1384/0x2050 [ 428.514192][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.523818][ T30] netlink_rcv_skb+0x1e5/0x430 [ 428.528632][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.543526][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.548892][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.556797][ T30] netlink_unicast+0x7f8/0x990 [ 428.566787][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 428.574604][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.586367][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.596694][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.607148][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.615329][ T30] ? __check_object_size+0x49c/0x900 [ 428.626824][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 428.634188][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.644299][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.654667][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 428.664360][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.673105][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.678439][ T30] __sock_sendmsg+0x223/0x270 [ 428.687971][ T30] __sys_sendto+0x398/0x4f0 [ 428.695080][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 428.707045][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 428.715758][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.724687][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.737074][ T30] ? exc_page_fault+0x590/0x8c0 [ 428.743433][ T30] __x64_sys_sendto+0xde/0x100 [ 428.748256][ T30] do_syscall_64+0xf3/0x230 [ 428.762089][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.768055][ T30] RIP: 0033:0x7f89ae77fd8c [ 428.778365][ T30] RSP: 002b:00007ffe69458be0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 428.788818][ T30] RAX: ffffffffffffffda RBX: 00007f89af464620 RCX: 00007f89ae77fd8c [ 428.803040][ T30] RDX: 0000000000000028 RSI: 00007f89af464670 RDI: 0000000000000003 [ 428.813666][ T30] RBP: 0000000000000000 R08: 00007ffe69458c34 R09: 000000000000000c [ 428.829465][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 428.837475][ T30] R13: 0000000000000000 R14: 00007f89af464670 R15: 0000000000000000 [ 428.851692][ T30] [ 428.854824][ T30] INFO: task syz-executor:8607 blocked for more than 146 seconds. [ 428.867574][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 428.877419][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.895623][ T30] task:syz-executor state:D stack:24992 pid:8607 tgid:8607 ppid:1 flags:0x00000004 [ 428.919917][ T30] Call Trace: [ 428.923245][ T30] [ 428.926288][ T30] __schedule+0x1893/0x4b50 [ 428.941957][ T30] ? __pfx___schedule+0x10/0x10 [ 428.946867][ T30] ? __pfx_lock_release+0x10/0x10 [ 428.959006][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 428.964957][ T30] ? schedule+0x90/0x320 [ 428.969244][ T30] schedule+0x14b/0x320 [ 428.979362][ T30] schedule_preempt_disabled+0x13/0x30 [ 428.984866][ T30] __mutex_lock+0x6a7/0xd70 [ 428.995245][ T30] ? __mutex_lock+0x52a/0xd70 [ 429.002655][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 429.007821][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 429.019392][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 429.024372][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 429.037535][ T30] ? __lock_acquire+0x1384/0x2050 [ 429.042893][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.048412][ T30] netlink_rcv_skb+0x1e5/0x430 [ 429.069559][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.075088][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.087522][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.093207][ T30] netlink_unicast+0x7f8/0x990 [ 429.098029][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 429.109748][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.115699][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.130665][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.138085][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.149936][ T30] ? __check_object_size+0x49c/0x900 [ 429.155546][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 429.167354][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.173259][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.178947][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 429.189436][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.195131][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.206843][ T30] __sock_sendmsg+0x223/0x270 [ 429.211972][ T30] __sys_sendto+0x398/0x4f0 [ 429.216528][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 429.235260][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.246268][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.258335][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.266323][ T30] ? exc_page_fault+0x590/0x8c0 [ 429.277073][ T30] __x64_sys_sendto+0xde/0x100 [ 429.283304][ T30] do_syscall_64+0xf3/0x230 [ 429.287961][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.301577][ T30] RIP: 0033:0x7fba76b7fd8c [ 429.306053][ T30] RSP: 002b:00007fffc855b9d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 429.321094][ T30] RAX: ffffffffffffffda RBX: 00007fba77864620 RCX: 00007fba76b7fd8c [ 429.329201][ T30] RDX: 0000000000000028 RSI: 00007fba77864670 RDI: 0000000000000003 [ 429.344257][ T30] RBP: 0000000000000000 R08: 00007fffc855ba24 R09: 000000000000000c [ 429.355116][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 429.369543][ T30] R13: 0000000000000000 R14: 00007fba77864670 R15: 0000000000000000 [ 429.377682][ T30] [ 429.389893][ T30] INFO: task syz-executor:8610 blocked for more than 147 seconds. [ 429.397769][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 429.409385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.418088][ T30] task:syz-executor state:D stack:24992 pid:8610 tgid:8610 ppid:1 flags:0x00000004 [ 429.437387][ T30] Call Trace: [ 429.443755][ T30] [ 429.446723][ T30] __schedule+0x1893/0x4b50 [ 429.457748][ T30] ? __pfx___schedule+0x10/0x10 [ 429.464309][ T30] ? __pfx_lock_release+0x10/0x10 [ 429.475369][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 429.484576][ T30] ? schedule+0x90/0x320 [ 429.488867][ T30] schedule+0x14b/0x320 [ 429.498967][ T30] schedule_preempt_disabled+0x13/0x30 [ 429.505884][ T30] __mutex_lock+0x6a7/0xd70 [ 429.516276][ T30] ? __mutex_lock+0x52a/0xd70 [ 429.522379][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 429.527621][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 429.538720][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 429.549038][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 429.560144][ T30] ? __lock_acquire+0x1384/0x2050 [ 429.565224][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.577365][ T30] netlink_rcv_skb+0x1e5/0x430 [ 429.582573][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.588082][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.601826][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.607187][ T30] netlink_unicast+0x7f8/0x990 [ 429.619061][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 429.624732][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.637322][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.643390][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.651015][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.656704][ T30] ? __check_object_size+0x49c/0x900 [ 429.670130][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 429.676787][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.687049][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.695312][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 429.705140][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.713343][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.718785][ T30] __sock_sendmsg+0x223/0x270 [ 429.733391][ T30] __sys_sendto+0x398/0x4f0 [ 429.738080][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 429.746790][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.757406][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.767681][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.776719][ T30] ? exc_page_fault+0x590/0x8c0 [ 429.789013][ T30] __x64_sys_sendto+0xde/0x100 [ 429.796430][ T30] do_syscall_64+0xf3/0x230 [ 429.805847][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.814393][ T30] RIP: 0033:0x7f8dd477fd8c [ 429.819054][ T30] RSP: 002b:00007fffcf424920 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 429.829777][ T30] RAX: ffffffffffffffda RBX: 00007f8dd5464620 RCX: 00007f8dd477fd8c [ 429.837875][ T30] RDX: 0000000000000028 RSI: 00007f8dd5464670 RDI: 0000000000000003 [ 429.856082][ T30] RBP: 0000000000000000 R08: 00007fffcf424974 R09: 000000000000000c [ 429.869298][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 429.884359][ T30] R13: 0000000000000000 R14: 00007f8dd5464670 R15: 0000000000000000 [ 429.896406][ T30] [ 429.905119][ T30] INFO: task syz-executor:8613 blocked for more than 147 seconds. [ 429.916692][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 429.927782][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.940201][ T30] task:syz-executor state:D stack:24992 pid:8613 tgid:8613 ppid:1 flags:0x00000004 [ 429.971413][ T30] Call Trace: [ 429.974814][ T30] [ 429.977919][ T30] __schedule+0x1893/0x4b50 [ 429.989569][ T30] ? __pfx___schedule+0x10/0x10 [ 429.994479][ T30] ? __pfx_lock_release+0x10/0x10 [ 430.007118][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 430.013005][ T30] ? schedule+0x90/0x320 [ 430.017294][ T30] schedule+0x14b/0x320 [ 430.029542][ T30] schedule_preempt_disabled+0x13/0x30 [ 430.035052][ T30] __mutex_lock+0x6a7/0xd70 [ 430.045807][ T30] ? __mutex_lock+0x52a/0xd70 [ 430.050775][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.057847][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 430.069869][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 430.074854][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 430.088526][ T30] ? __lock_acquire+0x1384/0x2050 [ 430.093969][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.109667][ T30] netlink_rcv_skb+0x1e5/0x430 [ 430.114502][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.127197][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.132827][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.138078][ T30] netlink_unicast+0x7f8/0x990 [ 430.149368][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 430.154700][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.168215][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.174173][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.189359][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.195045][ T30] ? __check_object_size+0x49c/0x900 [ 430.208384][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 430.213510][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.218847][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.229888][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 430.237297][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.246856][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.257639][ T30] __sock_sendmsg+0x223/0x270 [ 430.267695][ T30] __sys_sendto+0x398/0x4f0 [ 430.275770][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 430.284551][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.293903][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.303544][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.313485][ T30] ? exc_page_fault+0x590/0x8c0 [ 430.318383][ T30] __x64_sys_sendto+0xde/0x100 [ 430.329063][ T30] do_syscall_64+0xf3/0x230 [ 430.337451][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.347767][ T30] RIP: 0033:0x7ff6ca57fd8c [ 430.358276][ T30] RSP: 002b:00007fff749bbc90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 430.372276][ T30] RAX: ffffffffffffffda RBX: 00007ff6cb264620 RCX: 00007ff6ca57fd8c [ 430.386384][ T30] RDX: 0000000000000028 RSI: 00007ff6cb264670 RDI: 0000000000000003 [ 430.398204][ T30] RBP: 0000000000000000 R08: 00007fff749bbce4 R09: 000000000000000c [ 430.409421][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 430.417421][ T30] R13: 0000000000000000 R14: 00007ff6cb264670 R15: 0000000000000000 [ 430.432096][ T30] [ 430.435235][ T30] [ 430.435235][ T30] Showing all locks held in the system: [ 430.448521][ T30] 3 locks held by kworker/1:0/25: [ 430.458157][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 430.478203][ T30] #1: ffffc900001f7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 430.499092][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 430.519591][ T30] 1 lock held by khungtaskd/30: [ 430.524470][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 430.540872][ T30] 3 locks held by kworker/u8:3/52: [ 430.546017][ T30] #0: ffff88802db8f148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 430.566251][ T30] #1: ffffc90000bc7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 430.589357][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 430.606405][ T30] 3 locks held by kworker/u8:8/2988: [ 430.614038][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 430.632967][ T30] #1: ffffc9000a077d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 430.646885][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 430.659364][ T30] 2 locks held by getty/4979: [ 430.664159][ T30] #0: ffff88814bace0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.684379][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 430.698437][ T30] 4 locks held by kworker/0:6/5294: [ 430.707495][ T30] 3 locks held by kworker/1:4/5306: [ 430.717403][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 430.739078][ T30] #1: ffffc900049ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 430.757404][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 430.768104][ T30] 4 locks held by kworker/u8:10/5772: [ 430.782405][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 430.799180][ T30] #1: ffffc90003ec7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 430.816903][ T30] #2: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 430.834698][ T30] #3: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 430.845786][ T30] 1 lock held by syz.4.939/8431: [ 430.858869][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 430.869544][ T30] 1 lock held by syz.0.990/8549: [ 430.876206][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 430.891572][ T30] 1 lock held by syz.4.993/8556: [ 430.896545][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 430.913176][ T30] 1 lock held by syz.5.994/8560: [ 430.918156][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 430.932516][ T30] 3 locks held by syz.1.995/8563: [ 430.937579][ T30] #0: ffffffff8fcae3a8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 430.951515][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 430.966008][ T30] #2: ffffffff8e7d28d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 430.996819][ T30] 1 lock held by syz-executor/8580: [ 431.002756][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.019559][ T30] 2 locks held by syz.3.1003/8598: [ 431.024730][ T30] #0: ffff888031ad46c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 431.044630][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 431.055272][ T30] 1 lock held by syz-executor/8601: [ 431.069186][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.087757][ T30] 1 lock held by syz-executor/8605: [ 431.096662][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.112458][ T30] 1 lock held by syz-executor/8607: [ 431.117789][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.131645][ T30] 1 lock held by syz-executor/8610: [ 431.136886][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.160074][ T30] 1 lock held by syz-executor/8613: [ 431.165360][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.186605][ T30] 1 lock held by syz-executor/8619: [ 431.195542][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.208806][ T30] 1 lock held by syz-executor/8625: [ 431.220274][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.239773][ T30] 1 lock held by syz-executor/8629: [ 431.245043][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.261060][ T30] 1 lock held by syz-executor/8631: [ 431.266312][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.285567][ T30] 1 lock held by syz-executor/8634: [ 431.296561][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.308867][ T30] 1 lock held by syz-executor/8637: [ 431.319185][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.335842][ T30] 1 lock held by syz-executor/8649: [ 431.345728][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.360401][ T30] 1 lock held by syz-executor/8656: [ 431.365633][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.379362][ T30] 1 lock held by syz-executor/8657: [ 431.384589][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.404682][ T30] 1 lock held by syz-executor/8663: [ 431.414380][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.428983][ T30] 1 lock held by syz-executor/8666: [ 431.437871][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.451173][ T30] 1 lock held by syz-executor/8670: [ 431.456407][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 431.473234][ T30] [ 431.475629][ T30] ============================================= [ 431.475629][ T30] [ 431.486942][ T30] NMI backtrace for cpu 1 [ 431.491308][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 431.501501][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 431.511593][ T30] Call Trace: [ 431.514898][ T30] [ 431.517847][ T30] dump_stack_lvl+0x241/0x360 [ 431.522573][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.527810][ T30] ? __pfx__printk+0x10/0x10 [ 431.532453][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 431.537426][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 431.543001][ T30] ? _printk+0xd5/0x120 [ 431.547194][ T30] ? __pfx__printk+0x10/0x10 [ 431.551824][ T30] ? __wake_up_klogd+0xcc/0x110 [ 431.556711][ T30] ? __pfx__printk+0x10/0x10 [ 431.561336][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.567019][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 431.572087][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.578106][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 431.584119][ T30] watchdog+0xff4/0x1040 [ 431.588398][ T30] ? watchdog+0x1ea/0x1040 [ 431.592855][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.597568][ T30] kthread+0x2f2/0x390 [ 431.601673][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.606385][ T30] ? __pfx_kthread+0x10/0x10 [ 431.611003][ T30] ret_from_fork+0x4d/0x80 [ 431.615457][ T30] ? __pfx_kthread+0x10/0x10 [ 431.620071][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.624891][ T30] [ 431.628910][ T30] Sending NMI from CPU 1 to CPUs 0: [ 431.634639][ C0] NMI backtrace for cpu 0 [ 431.634656][ C0] CPU: 0 UID: 0 PID: 5294 Comm: kworker/0:6 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 431.634684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 431.634700][ C0] Workqueue: events nsim_dev_trap_report_work [ 431.634729][ C0] RIP: 0010:__local_bh_disable_ip+0x4d/0x220 [ 431.634765][ C0] Code: 18 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d 74 24 60 48 c7 44 24 20 b3 8a b5 41 <48> c7 44 24 28 ff 64 08 8e 48 c7 44 24 30 f0 64 57 81 4c 8d 6c 24 [ 431.634786][ C0] RSP: 0018:ffffc90000007440 EFLAGS: 00000282 [ 431.634806][ C0] RAX: 0ba5552f5fc99100 RBX: 0000000000000002 RCX: ffff88805d1e3c00 [ 431.634824][ C0] RDX: 0000000000000100 RSI: 0000000000000200 RDI: ffffffff8a46b412 [ 431.634841][ C0] RBP: ffffc90000007510 R08: ffffffff8a46b3fd R09: ffffc90000007680 [ 431.634860][ C0] R10: dffffc0000000000 R11: fffff52000000ed4 R12: dffffc0000000000 [ 431.634879][ C0] R13: dffffc0000000000 R14: ffffc900000074a0 R15: 0000000000000200 [ 431.634900][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 431.634924][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.634941][ C0] CR2: 000000110c43a4ee CR3: 000000000e734000 CR4: 0000000000350ef0 [ 431.634960][ C0] Call Trace: [ 431.634968][ C0] [ 431.634978][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 431.635005][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 431.635045][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 431.635070][ C0] ? nmi_handle+0x2a/0x5a0 [ 431.635105][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 431.635139][ C0] ? nmi_handle+0x151/0x5a0 [ 431.635162][ C0] ? nmi_handle+0x2a/0x5a0 [ 431.635187][ C0] ? __local_bh_disable_ip+0x4d/0x220 [ 431.635220][ C0] ? default_do_nmi+0x63/0x160 [ 431.635248][ C0] ? exc_nmi+0x123/0x1f0 [ 431.635274][ C0] ? end_repeat_nmi+0xf/0x53 [ 431.635314][ C0] ? ipt_do_table+0x2fd/0x1860 [ 431.635350][ C0] ? ipt_do_table+0x312/0x1860 [ 431.635382][ C0] ? __local_bh_disable_ip+0x4d/0x220 [ 431.635415][ C0] ? __local_bh_disable_ip+0x4d/0x220 [ 431.635450][ C0] ? __local_bh_disable_ip+0x4d/0x220 [ 431.635483][ C0] [ 431.635491][ C0] [ 431.635500][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.635539][ C0] ? ipt_do_table+0x312/0x1860 [ 431.635571][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 431.635603][ C0] ? ipt_do_table+0x312/0x1860 [ 431.635637][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 431.635671][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.635715][ C0] ipt_do_table+0x324/0x1860 [ 431.635763][ C0] ? ipt_do_table+0x312/0x1860 [ 431.635798][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 431.635835][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 431.635875][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 431.635908][ C0] nf_hook_slow+0xc5/0x220 [ 431.635944][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 431.635970][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 431.635997][ C0] NF_HOOK+0x29e/0x450 [ 431.636019][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.636060][ C0] ? NF_HOOK+0x9a/0x450 [ 431.636082][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 431.636108][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 431.636137][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.636176][ C0] ? ip_rcv_finish+0x406/0x560 [ 431.636201][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 431.636226][ C0] NF_HOOK+0x3a6/0x450 [ 431.636247][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.636285][ C0] ? __lock_acquire+0x1384/0x2050 [ 431.636323][ C0] ? NF_HOOK+0x9a/0x450 [ 431.636346][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 431.636368][ C0] ? ip_rcv_core+0x801/0xd10 [ 431.636394][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 431.636424][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 431.636448][ C0] __netif_receive_skb+0x2bf/0x650 [ 431.636479][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 431.636515][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 431.636542][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.636578][ C0] ? __pfx_lock_release+0x10/0x10 [ 431.636638][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 431.636679][ C0] process_backlog+0x662/0x15b0 [ 431.636713][ C0] ? process_backlog+0x33b/0x15b0 [ 431.636748][ C0] ? __pfx_process_backlog+0x10/0x10 [ 431.636777][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.636815][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.636854][ C0] __napi_poll+0xcd/0x490 [ 431.636884][ C0] net_rx_action+0x89b/0x1240 [ 431.636932][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 431.636963][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 431.637020][ C0] handle_softirqs+0x2c7/0x980 [ 431.637058][ C0] ? do_softirq+0x11b/0x1e0 [ 431.637091][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 431.637127][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.637168][ C0] do_softirq+0x11b/0x1e0 [ 431.637198][ C0] [ 431.637206][ C0] [ 431.637215][ C0] ? __pfx_do_softirq+0x10/0x10 [ 431.637247][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 431.637284][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.637324][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.637361][ C0] ? rcu_is_watching+0x15/0xb0 [ 431.637389][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 431.637423][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 431.637447][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 431.637481][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 431.637512][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.637550][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 431.637577][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 431.637611][ C0] ? process_scheduled_works+0x976/0x1850 [ 431.637645][ C0] process_scheduled_works+0xa65/0x1850 [ 431.637697][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.637738][ C0] ? assign_work+0x364/0x3d0 [ 431.637773][ C0] worker_thread+0x870/0xd30 [ 431.637811][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.637850][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.637888][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 431.637929][ C0] ? __kthread_parkme+0x169/0x1d0 [ 431.637968][ C0] ? __pfx_worker_thread+0x10/0x10 [ 431.638002][ C0] kthread+0x2f2/0x390 [ 431.638025][ C0] ? __pfx_worker_thread+0x10/0x10 [ 431.638060][ C0] ? __pfx_kthread+0x10/0x10 [ 431.638083][ C0] ret_from_fork+0x4d/0x80 [ 431.638119][ C0] ? __pfx_kthread+0x10/0x10 [ 431.638142][ C0] ret_from_fork_asm+0x1a/0x30 [ 431.638187][ C0] [ 432.310008][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 432.316918][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 432.327099][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 432.337172][ T30] Call Trace: [ 432.340465][ T30] [ 432.343440][ T30] dump_stack_lvl+0x241/0x360 [ 432.348169][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.353413][ T30] ? __pfx__printk+0x10/0x10 [ 432.358034][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 432.364062][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.369731][ T30] ? vscnprintf+0x5d/0x90 [ 432.374091][ T30] panic+0x349/0x880 [ 432.378018][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.383696][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 432.389877][ T30] ? __pfx_panic+0x10/0x10 [ 432.394327][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 432.399812][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.405478][ T30] ? __irq_work_queue_local+0x137/0x410 [ 432.411054][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.416724][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 432.422123][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 432.428477][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 432.434664][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 432.440334][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 432.446519][ T30] watchdog+0x1033/0x1040 [ 432.450886][ T30] ? watchdog+0x1ea/0x1040 [ 432.455344][ T30] ? __pfx_watchdog+0x10/0x10 [ 432.460058][ T30] kthread+0x2f2/0x390 [ 432.464153][ T30] ? __pfx_watchdog+0x10/0x10 [ 432.468916][ T30] ? __pfx_kthread+0x10/0x10 [ 432.473538][ T30] ret_from_fork+0x4d/0x80 [ 432.477992][ T30] ? __pfx_kthread+0x10/0x10 [ 432.482612][ T30] ret_from_fork_asm+0x1a/0x30 [ 432.487425][ T30] [ 432.490660][ T30] Kernel Offset: disabled [ 432.494984][ T30] Rebooting in 86400 seconds..