last executing test programs: 9.150061476s ago: executing program 4 (id=1284): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 9.060289173s ago: executing program 4 (id=1285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0xfffffffffffffda8, 0xc002}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 8.964451391s ago: executing program 4 (id=1290): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="9e87760b9e18406c0187b64a70cef4a51f48caabdccb5095a458ae9f6dede4fd1acaa62c0294784fdfeaa0ad3eea2366ba6ddadad42e62916143edb2fde713fbe7e9df35f3c4125f4273180db1c771af7de98368baa240fb7554aa9348fc423d098b46581f0f"], 0x3, 0x186, &(0x7f00000004c0)="$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") r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/snmp6\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, r0, 0x2) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40), 0x4000000000000aa, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0xe9) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000023b11bc7c06100000000003925", @ANYRES32=r8, @ANYBLOB="18005a801400018005000100300000000600020000000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000080}, 0x0) sendmmsg$inet(r5, &(0x7f00000019c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}}], 0x20}}], 0x1, 0x48040) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x800448d4, &(0x7f0000000080)={0xffffffffffffffff, 0xb, "ddc403"}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.771824859s ago: executing program 2 (id=1299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x16c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x564}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x12001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200}, 0x48) mremap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 7.768385459s ago: executing program 3 (id=1300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0x2, 0x0) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f00000002c0)="8691", 0x2}], 0x1, 0x6) tee(r1, r5, 0xaf5, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0x18c6) 5.632241476s ago: executing program 4 (id=1305): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x208, 0x0, &(0x7f0000000140)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, 0xd, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000404}, 0x4015) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000f9e97a3bad3845b2f51ac7d06c97f3bb000000e03e00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) fdatasync(r1) capget(&(0x7f0000000380)={0x20071026, 0xffffffffffffffff}, &(0x7f00000003c0)={0x8fc4, 0x8, 0x8, 0x8000, 0x80, 0x7a4829f5}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev}}}, 0x108) getsockopt$inet6_buf(r7, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01021800000002000000000000c8799e5a"], &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x2}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000fddbdf256800000808000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x108, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x65}, @void, @val={0xc, 0x99, {0x989, 0x8}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6a3f1e94dcffb3298f6f2a51e664f2a52f5315aa19adb0ef"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.400175905s ago: executing program 3 (id=1308): write$tun(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 5.325246141s ago: executing program 2 (id=1310): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffff5}, 0x78) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="527c9d65ec"], 0x8) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = dup(r4) dup3(r5, r3, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r7, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r8) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x5451, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 5.281675424s ago: executing program 1 (id=1313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 5.225662219s ago: executing program 2 (id=1314): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 5.224993439s ago: executing program 3 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x1, 0x10001, 0x8, 0x2100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000380)={0x8000}, 0x8) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x2c, 0x0, 0x2c, 0x0, 0x2c}, 0x48) 5.21416524s ago: executing program 1 (id=1316): inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b15, &(0x7f0000000500)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0xfb, 0x7b1, @vifc_lcl_ifindex=r8, @empty}, 0x10) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB, @ANYRES32=0x0], 0x94}}, 0x20000000) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @multicast}, 0xfee3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xb5, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x58}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@initdev, @rand_addr, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf25060000000c00018008000300060000004800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300010000000800030002000000140002006970766c616e310000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2400018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="7400018008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f6261746164760008000100", @ANYRES32=r12, @ANYBLOB="080003000200000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c2176655f30000014000200626f6e643001000000000000000000001c0001800800030000000000080003000000000008000300010000005c0001800800030001000000080003000100000008000100", @ANYRES32=r13, @ANYBLOB="08000300020000001400020076657468315f746f5f62726964676500080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f31000000000c0001800800030000000000"], 0x190}, 0x1, 0x0, 0x0, 0x24080808}, 0x24048010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 5.061914783s ago: executing program 0 (id=1318): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, 0x0, 0x0) futex(0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$mptcp(0x0, r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x2fc69e00b20624c) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3ff}, 0x44) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) lseek(r6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x100, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x72}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4, [], [], 'pim6reg0\x00', 'team0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "2e0422079ddd6625f322f2efcf6fb3f683d84a22bddb3582f45812ce0592"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x447) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRES32=r5, @ANYBLOB="01000055000c0001149d97102814fe5abef6b1dae4a0dc776c99c7e43a5ac40f7a090000000000000200000006b0ed02500000000000000000000000000089cbe811f23971c70a39da28621b72a46e200fb17a059ee8ae745096d8144e33424e23b3c71e90a0c8a57991a173", @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 4.995210458s ago: executing program 2 (id=1319): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030309025c0002010000000904000001020d0000052406000105240000000d"], 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 2.483623685s ago: executing program 3 (id=1320): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380), 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xf8, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x801) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f03c9120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x24, 0x2a, 0x1e6b45ee94b4ab7b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x8, 0x8000, 0x28, @dev={0xfe, 0x80, '\x00', 0xf}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x8000, 0xffffff7f, 0xfff}}) 2.483061895s ago: executing program 0 (id=1321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000b00), 0x5, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.482646935s ago: executing program 0 (id=1322): mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) r6 = fcntl$dupfd(r4, 0x0, r5) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001380)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0xc00c0000}, &(0x7f0000001400)=0x40) 2.347192336s ago: executing program 4 (id=1323): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.272274062s ago: executing program 1 (id=1324): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001100210f00000059ed6d38f13908a097e043e31def0000000000f55316039596adf20519ece86d55194181f1b99eddc791763ebf3b64d4d793f1b212c12a6b3505000000000000002452932bdf"], 0xe0}], 0x1}, 0x0) 2.271763723s ago: executing program 3 (id=1325): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) unshare(0x20000400) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0046686, 0x0) 2.194222659s ago: executing program 1 (id=1326): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1}, 0x8) 2.158682782s ago: executing program 4 (id=1327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @broadcast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) 2.083634978s ago: executing program 1 (id=1328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0) 1.93597336s ago: executing program 1 (id=1329): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000099c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000000440)="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", 0x2000, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2000010, &(0x7f0000000140)=ANY=[], 0x3, 0x6b5, &(0x7f0000001240)="$eJzs3c1vHGcdB/DvrNeOHargtEkaoaJaiVSQIhInVgrhQkAI5VChqhw4W4nTWNkkle0it0LgQgUnJA79AwqSb5yQkDgGhXM50auPlZC4RBwiLkYzO2uv7d14Hb+XzycazzP7vMxvfvvMjHed1Qb4v3XrUpqPU+TWpbcWy+2V5anWyvLUibq6laQsv5Q0kzSSFA+T4klys6wvkozW6/b2x73388nsjXc+f7ryRXurWS9Vv0ZX/0H0aLtUL5lIMlSvtxoedBcbxrvdPv5NRgYda0PDMmkXOwcPh211i6WddN/JeQscMZ27U9G+b24xnpys7/HV7wT11aFxcBHujx1d5QAAAOCY+uzRYUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx0/9/f9FvTTqdSZSdL7/f6TzWF0+1h4fdgAAAAAAAAAAsAdef5ZnWcypzvZqUf3N/0K1cSb/XU2+kvczn5nM5XIWM52FLGQuV5OMdw00sji9sDB3da1nqXfPaz17XjuoIwYAAAAAAACAL6Vf5db63/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAoKJKh9qpaznTK42k028WMlD+Wkn90ysdE0evBxwcfBwAAAOzK6Av0+eqzPMtiTv3zr+3t1aJ6zX+uer08mvfzMAuZzUJamcmd+jV0+aq/sbI81VpZnnpQLlvH/f6/dxRGNWLa7z303vP5qsVY7ma2euRyblfB3Emj6lk634mnd1wflTEV36sNGFmzTmu5s9/3exdhT+z0rYjxMrhkLSOTdWyNZDhJmYGieqOmLL++oeu2z05z857SyPDanq6msfbOz5l9yPnJel0ez2/2Nec7tZaJRqpMXOuafeeen4nkG3/500/vtR7ev3d3/tLROaRtDPV5fPOcmOrKxKvHOhPNHbafrDJxdm37Vn6Un+RSJvJ25jKbn2U6C5nJal0/Xc/n8uf48zN1c8PW29tFMlI/L+3nbJuYGmVME/lhFd10LlR9T2U2RR7lTmbyZvXvWq7m27me67nR9Qyf7Rt3dWzVWd9YP+tX16uS/K1n8Be/WRfGkvy2Xm/JwSb9ZudeaV/7y7ye7spre9Y/XWt1uus8mOzK0stlZvrflV/k2tj8Wl0o9/Hren00jNeZKE+gzl2iE90r7XnSrO9Lm+f5H6oJMt96eH/u3vR7fcZf2rT9Rr0up9Xy1weNcnjwA3ph5Xx5OaP1lWTj7CjrXlm7ypzecFcdqf/i0q5rbKk7W9UVRedM/XHfM3UkmTjXc6Rr1Uiv9qybqurOd9Vt+H0rj9LKnQPIHwC7NJ6TI2P/Gvts7NOxj8fujb01+oMT3znx2kiG/z783ebk0BuN14o/59P8IqcOO1IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgymP/gw/vTrdbMXO9Co3/VNoXtRt5UKOov9HmhfW0snNhd976Fp6PJwI1Hs6nxcPnA/gT2nMLY5jC2FFZ/mRxcPHWh8yWCvdv8riw0M8iAN7dr89EA8Zw44CflaBWG0nsCHPKFCdh3VxYevHdl/oMPvzX7YPrdmXdnHg5fv35j8sb1N6eu3J1tzUy2fx52lMB+WL/pH3YkAAAAAAAAAAAAwKB6fTDgwks7+KBL/894+J+FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ64dSnNxylydfLyZLm9sjzVKpdOeb1lM0mjkRQ/T4onyc20l4x3DVfkj0+y2mM/n8zeeOfzpytfrI/VbLdPGvV6F5bqJRNJhur1Xo13e9fjFf/pHGGZsIudxMFh+18AAAD//9kP8rA=") getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000080)=0xba) r3 = request_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000440)='\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r2, r3) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b0000000800030050d0b9cae5973bbea22ff5e0e10cbc2be2d01ad936b06e0031e6a545775b01fc129a0935a71c420ea8ce5a4aa659d7c92629b74c5a8732fc4cf54e05f3e031d09d0298621b276cbcabcf6497b90fc583a528b5c574ef08423812d0ff2e6218ae386b5cbe2f0aa2df72decaf2c33c9b4ad50a8a641b453302704095f061a5427ddb45fad1a651a2b254966267690e6b3183e31423f7a88089c5e1bee094c9f70ba3d3bf23983efb27552f2b98c5ebe56f6674ee16", @ANYRES32=r7, @ANYRES32=r1], 0x70}}, 0xc000) write$UHID_INPUT(r4, &(0x7f0000003840)={0xc, {"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", 0x1000}}, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r9, 0x5, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010300000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) 1.93558733s ago: executing program 2 (id=1330): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(&(0x7f0000000e00)='./file1\x00', 0x0) 1.896414673s ago: executing program 3 (id=1331): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@data_err_ignore}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000001c0)={0x20071026, r0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000010000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001900), 0x208e280) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.870734545s ago: executing program 2 (id=1332): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, 0x0, 0x0) futex(0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$mptcp(0x0, r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x2fc69e00b20624c) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3ff}, 0x44) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) lseek(r6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x100, 0x0, 0x1e8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x72}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4, [], [], 'pim6reg0\x00', 'team0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "2e0422079ddd6625f322f2efcf6fb3f683d84a22bddb3582f45812ce0592"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x447) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRESOCT=r2, @ANYRES32=r5, @ANYBLOB="01000055000c0001149d97102814fe5abef6b1dae4a0dc776c99c7e43a5ac40f7a090000000000000200000006b0ed02500000000000000000000000000089cbe811f23971c70a39da28621b72a46e200fb17a059ee8ae745096d8144e33424e23b3c71e90a0c8a57991a173", @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 1.052253023s ago: executing program 0 (id=1333): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB='showexec,shortname=winnt,shortname=lower,utf8=1,iocharset=cp865,shortname=win95,uni_xlate=1,shortname=win95,check=strict,shortname=winnt,utf8=0,iocharset=iso8859-5,codepage=874,shortname=mixed,shortname=win95,shortname=mixed,nonumtail=0,shortname=mixed,shortname=mixed,uni_xlate=1,rodir,nnonuni_xlate=1,shortname=win95,shortname=win95,utf8=0,nnonumtail=1,shortname=win95,shortname=win95,nnonumtail=1,uni_xlate=1,nfs=nostale_ro,\x00'/444], 0x6, 0x2d7, &(0x7f0000000340)="$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") chdir(&(0x7f0000000100)='./file0\x00') 963.21455ms ago: executing program 0 (id=1334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x4000) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 0 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) kernel console output (not intermixed with test programs): [ 128.946731][ T5524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.574'. [ 129.036602][ T3994] usb 1-1: USB disconnect, device number 5 [ 129.056954][ T5528] loop1: detected capacity change from 0 to 512 [ 129.220435][ T5528] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 129.232117][ T5528] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 129.245605][ T5528] EXT4-fs (loop1): group descriptors corrupted! [ 130.091624][ T5547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.106420][ T5549] loop3: detected capacity change from 0 to 512 [ 130.185323][ T5553] loop1: detected capacity change from 0 to 2048 [ 130.203765][ T5549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.222216][ T5555] loop4: detected capacity change from 0 to 1024 [ 130.230759][ T5549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 130.238734][ T5549] System zones: 1-12 [ 130.248245][ T5549] EXT4-fs (loop3): 1 truncate cleaned up [ 130.254251][ T5549] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 130.319567][ T3546] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.385776][ T5553] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.436560][ T5562] loop4: detected capacity change from 0 to 512 [ 130.461270][ T5560] loop3: detected capacity change from 0 to 512 [ 130.468175][ T5562] EXT4-fs (loop4): Ignoring removed orlov option [ 130.491199][ T5562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.513194][ T5553] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.514172][ T5560] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.530519][ T5562] EXT4-fs (loop4): 1 truncate cleaned up [ 130.544187][ T5553] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 442 with error 28 [ 130.546593][ T5562] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 130.578388][ T5560] ext4 filesystem being mounted at /94/bus supports timestamps until 2038 (0x7fffffff) [ 130.589173][ T5553] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.589173][ T5553] [ 130.589613][ T3546] usb 3-1: Using ep0 maxpacket: 32 [ 130.600673][ T5553] EXT4-fs (loop1): Total free blocks count 0 [ 130.610093][ T5553] EXT4-fs (loop1): Free/Dirty block details [ 130.616067][ T5553] EXT4-fs (loop1): free_blocks=2415919104 [ 130.622472][ T5553] EXT4-fs (loop1): dirty_blocks=448 [ 130.640637][ T5553] EXT4-fs (loop1): Block reservation details [ 130.652136][ T5553] EXT4-fs (loop1): i_reserved_data_blocks=28 [ 130.734389][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 130.752843][ T144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.752843][ T144] [ 130.921122][ T3546] usb 3-1: New USB device found, idVendor=1d6f, idProduct=0010, bcdDevice= a.a7 [ 130.930744][ T3546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.938749][ T3546] usb 3-1: Product: syz [ 130.943148][ T3546] usb 3-1: Manufacturer: syz [ 130.947988][ T3546] usb 3-1: SerialNumber: syz [ 130.954648][ T3546] usb 3-1: config 0 descriptor?? [ 131.001891][ T3546] usb 3-1: bad CDC descriptors [ 131.012416][ T3546] cp210x 3-1:0.0: cp210x converter detected [ 131.314131][ T5541] udc-core: couldn't find an available UDC or it's busy [ 131.348578][ T5541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.779157][ T5583] loop3: detected capacity change from 0 to 256 [ 131.809496][ T3546] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 131.820093][ T1066] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.845022][ T3546] cp210x 3-1:0.0: querying part number failed [ 131.862902][ T5583] FAT-fs (loop3): Unrecognized mount option "B1ºâqàÂéž³ÿÚ+d'‡#.ԒͯÈ?oè\ò„Ž [ 131.862902][ T5583] ÿÿ18446744073709551615" or missing value [ 131.900051][ T3546] usb 3-1: cp210x converter now attached to ttyUSB0 [ 131.921799][ T3546] usb 3-1: USB disconnect, device number 7 [ 131.967363][ T3546] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.001037][ T3546] cp210x 3-1:0.0: device disconnected [ 132.157855][ T5601] loop3: detected capacity change from 0 to 2048 [ 132.202808][ T1066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.234986][ T5609] loop0: detected capacity change from 0 to 128 [ 132.242208][ T1066] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.262903][ T1066] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.273895][ T1066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.275461][ T5601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.284019][ T1066] usb 2-1: config 0 descriptor?? [ 132.390382][ T5615] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.416405][ T5615] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 824 with error 28 [ 132.429055][ T5615] EXT4-fs (loop3): This should not happen!! Data will be lost [ 132.429055][ T5615] [ 132.446114][ T5615] EXT4-fs (loop3): Total free blocks count 0 [ 132.453322][ T5615] EXT4-fs (loop3): Free/Dirty block details [ 132.459460][ T5609] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 132.468123][ T5615] EXT4-fs (loop3): free_blocks=2415919104 [ 132.482238][ T5609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.483089][ T5615] EXT4-fs (loop3): dirty_blocks=832 [ 132.508048][ T5615] EXT4-fs (loop3): Block reservation details [ 132.630727][ T5615] EXT4-fs (loop3): i_reserved_data_blocks=52 [ 133.175316][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.178850][ T5575] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 133.181940][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346593][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 133.364244][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.364244][ T9] [ 133.381529][ T5622] loop4: detected capacity change from 0 to 256 [ 133.452384][ T1066] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 133.464793][ T1066] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.470445][ T5622] FAT-fs (loop4): Unrecognized mount option "B1ºâqàÂéž³ÿÚ+d'‡#.ԒͯÈ?oè\ò„Ž [ 133.470445][ T5622] ÿÿ18446744073709551615" or missing value [ 133.602206][ T5631] loop3: detected capacity change from 0 to 128 [ 133.792708][ T1066] usb 2-1: USB disconnect, device number 6 [ 133.838618][ T5641] loop4: detected capacity change from 0 to 2048 [ 134.456886][ T5641] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.863565][ T5664] netlink: 'syz.2.626': attribute type 46 has an invalid length. [ 134.919518][ T5664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.626'. [ 135.015023][ T5674] netlink: 'syz.1.631': attribute type 21 has an invalid length. [ 135.053911][ T5674] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.059430][ T5675] netlink: 'syz.0.630': attribute type 11 has an invalid length. [ 135.088180][ T5674] IPv6: Can't replace route, no match found [ 135.126051][ T5675] netlink: 'syz.0.630': attribute type 11 has an invalid length. [ 135.176974][ T5675] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.630'. [ 135.229562][ T5668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.455951][ T5688] loop3: detected capacity change from 0 to 128 [ 135.794070][ T5688] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 135.823632][ T5688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.345798][ T5714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.642'. [ 136.364222][ T5718] overlayfs: missing 'lowerdir' [ 136.370263][ T25] audit: type=1326 audit(2000000074.130:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5715 comm="syz.3.648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5d140db59 code=0x0 [ 137.264247][ T5747] tipc: Enabling of bearer rejected, media not registered [ 137.641287][ T3509] Bluetooth: hci0: Unknown advertising packet type: 0x6200 [ 137.730699][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.824455][ T5781] block nbd0: shutting down sockets [ 138.009451][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 138.113138][ T5787] loop0: detected capacity change from 0 to 128 [ 138.143427][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.169835][ T5787] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.185796][ T5787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.225198][ T26] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.271513][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.325377][ T26] usb 4-1: config 0 descriptor?? [ 138.369278][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 138.605276][ T26] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.820352][ T26] usb 4-1: USB disconnect, device number 6 [ 138.839661][ T26] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 138.902256][ T5825] loop0: detected capacity change from 0 to 512 [ 138.983147][ T5825] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.013699][ T5825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 139.041934][ T5825] System zones: 1-12 [ 139.065300][ T5825] EXT4-fs (loop0): 1 truncate cleaned up [ 139.071488][ T5825] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 140.309918][ T3546] Bluetooth: hci1: command 0x0411 tx timeout [ 140.540380][ T5864] loop0: detected capacity change from 0 to 128 [ 140.605323][ T5864] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 140.640611][ T5864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.847502][ T5875] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 142.363128][ T5912] loop1: detected capacity change from 0 to 2048 [ 142.378424][ T5915] loop3: detected capacity change from 0 to 512 [ 142.454605][ T5915] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 142.494325][ T5915] EXT4-fs (loop3): group descriptors corrupted! [ 142.625498][ T5912] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.632312][ T5930] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 145.083618][ T4127] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.281720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 145.291049][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 145.300278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 145.319355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 145.328360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 145.337338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 145.346337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 145.355309][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 145.364310][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 145.373289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 145.744799][ T5994] syz.4.746[5994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.745060][ T5994] syz.4.746[5994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.864318][ T5999] : renamed from ipvlan1 [ 145.880247][ T4127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.902255][ T4127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.916728][ T4127] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.927121][ T4127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.963983][ T4127] usb 2-1: config 0 descriptor?? [ 146.255790][ T5983] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 146.501809][ T4127] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 146.538855][ T4127] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 146.848911][ T6035] loop3: detected capacity change from 0 to 2048 [ 146.859849][ T3546] usb 2-1: USB disconnect, device number 7 [ 146.959697][ T6035] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.173271][ T6062] loop1: detected capacity change from 0 to 32768 [ 148.233087][ T6062] Dev loop1 SGI disklabel: csum bad, label corrupted [ 148.282281][ T2963] Dev loop1 SGI disklabel: csum bad, label corrupted [ 152.196424][ T6155] loop1: detected capacity change from 0 to 1024 [ 152.444154][ T6157] loop0: detected capacity change from 0 to 512 [ 152.535083][ T6157] EXT4-fs (loop0): Unrecognized mount option "context=user_u" or missing value [ 152.714201][ T6157] loop0: detected capacity change from 0 to 512 [ 152.743240][ T6157] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.808988][ T6157] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 152.907992][ T6157] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.804: inode #15: comm syz.0.804: iget: illegal inode # [ 152.992609][ T6157] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.804: couldn't read orphan inode 15 (err -117) [ 153.022976][ T6157] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.468546][ T6188] loop4: detected capacity change from 0 to 512 [ 153.604906][ T6188] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.708002][ T6188] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.813: casefold flag without casefold feature [ 153.734755][ T6188] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.813: missing EA_INODE flag [ 153.819723][ T6188] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.813: error while reading EA inode 12 err=-117 [ 153.866918][ T6188] EXT4-fs (loop4): 1 orphan inode deleted [ 153.916774][ T6188] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 155.051485][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.823'. [ 155.241781][ T6227] netlink: 'syz.4.825': attribute type 4 has an invalid length. [ 155.415536][ T6236] binder_alloc: 6234: binder_alloc_buf, no vma [ 155.436718][ T6242] loop3: detected capacity change from 0 to 2048 [ 155.444055][ T6238] squashfs: Unknown parameter 'euid' [ 155.511827][ T6242] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.833: casefold flag without casefold feature [ 155.527418][ T6242] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 155.542828][ T6242] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 155.550806][ T6242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.031913][ T6259] loop1: detected capacity change from 0 to 164 [ 156.070445][ T6259] isofs_fill_super: get root inode failed [ 156.149467][ T25] audit: type=1326 audit(2000000093.860:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.1.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ebc74b59 code=0x0 [ 156.424457][ T25] audit: type=1326 audit(2000000094.180:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ebc74b59 code=0x0 [ 156.526583][ T6271] loop1: detected capacity change from 0 to 256 [ 156.589966][ T6271] FAT-fs (loop1): Unrecognized mount option "¶8sdƒgÚ"RpÔ?= ¸LY6ó…ÌgVj:‰ &£_.é„ž·±­¤YˆO%gûÖVâq^i%ºÍLÛ5Hþålz$éõ¾8" or missing value [ 157.460860][ T6300] loop0: detected capacity change from 0 to 164 [ 157.482811][ T6300] isofs_fill_super: get root inode failed [ 157.529448][ T25] audit: type=1326 audit(2000000095.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.0.852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbc4ff5b59 code=0x0 [ 157.714770][ T6309] loop1: detected capacity change from 0 to 512 [ 157.753300][ T6314] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 157.803095][ T6316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.943835][ T6309] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 157.970946][ T6309] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038 (0x7fffffff) [ 158.091003][ T6309] EXT4-fs (loop1): shut down requested (0) [ 158.159505][ T3674] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.429495][ T3674] usb 3-1: Using ep0 maxpacket: 8 [ 158.787424][ T6354] loop1: detected capacity change from 0 to 164 [ 158.965273][ T6354] isofs_fill_super: get root inode failed [ 159.269634][ T25] audit: type=1326 audit(2000000096.930:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ebc74b59 code=0x0 [ 159.446342][ T25] audit: type=1326 audit(2000000097.200:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.1.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ebc74b59 code=0x0 [ 159.519538][ T3674] usb 3-1: New USB device found, idVendor=10c4, idProduct=81c8, bcdDevice=fa.86 [ 159.529468][ T3674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.537760][ T3674] usb 3-1: Product: syz [ 159.555336][ T3674] usb 3-1: Manufacturer: syz [ 159.560585][ T3674] usb 3-1: SerialNumber: syz [ 159.600123][ T3674] usb 3-1: config 0 descriptor?? [ 159.617088][ T6366] blktrace: Concurrent blktraces are not allowed on loop0 [ 159.628169][ T6363] loop3: detected capacity change from 0 to 4096 [ 159.656444][ T3674] cp210x 3-1:0.0: cp210x converter detected [ 159.684368][ T6363] EXT4-fs (loop3): Test dummy encryption mode enabled [ 159.707985][ T6363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.796074][ T6363] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 159.859738][ T3674] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 159.876178][ T3674] cp210x 3-1:0.0: querying part number failed [ 159.891398][ T6371] loop0: detected capacity change from 0 to 1024 [ 159.911772][ T3674] usb 3-1: cp210x converter now attached to ttyUSB0 [ 159.994545][ T6371] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.877: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 160.020701][ T3674] usb 3-1: USB disconnect, device number 8 [ 160.063353][ T6371] EXT4-fs error (device loop0): ext4_quota_enable:6390: comm syz.0.877: Bad quota inode: 4, type: 1 [ 160.068817][ T3674] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.089241][ T6363] loop3: detected capacity change from 0 to 512 [ 160.089421][ T6371] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.096448][ T3674] cp210x 3-1:0.0: device disconnected [ 160.146121][ T6363] EXT4-fs (loop3): Unrecognized mount option "smackfstransmute=usrjquota=" or missing value [ 160.167576][ T6371] EXT4-fs (loop0): mount failed [ 160.360023][ T6381] loop1: detected capacity change from 0 to 1024 [ 160.488442][ T6379] kvm: emulating exchange as write [ 160.489489][ T6381] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.881: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 160.575357][ T6381] EXT4-fs error (device loop1): ext4_quota_enable:6390: comm syz.1.881: Bad quota inode: 4, type: 1 [ 160.591854][ T6394] loop3: detected capacity change from 0 to 512 [ 160.597098][ T6381] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.614180][ T6381] EXT4-fs (loop1): mount failed [ 160.688263][ T6394] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 160.799567][ T6394] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038 (0x7fffffff) [ 160.897071][ T6404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.136531][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 161.260313][ T6424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.289490][ T4132] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.465626][ T6435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.559609][ T4132] usb 2-1: Using ep0 maxpacket: 16 [ 161.579579][ T1066] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 161.729706][ T4132] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.747396][ T4132] usb 2-1: config 0 has no interfaces? [ 161.753567][ T4132] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 161.762693][ T4132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.774482][ T4132] usb 2-1: config 0 descriptor?? [ 161.897516][ T6456] device vlan1 entered promiscuous mode [ 161.905082][ T6456] device vlan1 left promiscuous mode [ 161.941547][ T1066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 161.969711][ T3992] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.035756][ T4132] usb 2-1: USB disconnect, device number 8 [ 162.098175][ T6464] device syzkaller1 entered promiscuous mode [ 162.112829][ T1066] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 162.122435][ T1066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.130952][ T1066] usb 3-1: Product: syz [ 162.135169][ T1066] usb 3-1: Manufacturer: syz [ 162.139857][ T1066] usb 3-1: SerialNumber: syz [ 162.152156][ T1066] usb 3-1: config 0 descriptor?? [ 162.339496][ T3992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.350529][ T3992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.360347][ T3992] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 162.370092][ T3992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.379947][ T3992] usb 1-1: config 0 descriptor?? [ 162.421780][ T1066] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 162.431785][ T1066] usb 3-1: USB disconnect, device number 9 [ 162.448409][ T3497] udevd[3497]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.489645][ T26] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.719609][ T3992] usbhid 1-1:0.0: can't add hid device: -71 [ 162.740936][ T3992] usbhid: probe of 1-1:0.0 failed with error -71 [ 162.749449][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 162.862611][ T3992] usb 1-1: USB disconnect, device number 6 [ 162.880420][ T26] usb 4-1: config 0 has no interfaces? [ 162.886300][ T26] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 162.904702][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.956231][ T26] usb 4-1: config 0 descriptor?? [ 163.223878][ T26] usb 4-1: USB disconnect, device number 7 [ 163.789474][ T26] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 163.875172][ T6504] hub 9-0:1.0: USB hub found [ 163.881254][ T6504] hub 9-0:1.0: 8 ports detected [ 164.190466][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.389651][ T26] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 164.413846][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.422417][ T26] usb 3-1: Product: syz [ 164.426768][ T26] usb 3-1: Manufacturer: syz [ 164.434593][ T26] usb 3-1: SerialNumber: syz [ 164.442884][ T26] usb 3-1: config 0 descriptor?? [ 164.530499][ T6511] loop1: detected capacity change from 0 to 512 [ 164.598632][ T6515] tipc: Started in network mode [ 164.605564][ T6515] tipc: Node identity , cluster identity 4711 [ 164.611726][ T6515] tipc: Failed to set node id, please configure manually [ 164.634347][ T6515] tipc: Enabling of bearer rejected, failed to enable media [ 164.663306][ T6511] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.674729][ T6511] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 164.704479][ T6511] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 164.724068][ T26] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 164.729597][ T6511] System zones: 0-2, 18-18, 34-34 [ 164.732386][ T26] usb 3-1: USB disconnect, device number 10 [ 164.744868][ T3497] udevd[3497]: setting owner of /dev/bus/usb/003/010 to uid=0, gid=0 failed: No such file or directory [ 164.757892][ T6511] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 164.779811][ T6511] EXT4-fs (loop1): 1 truncate cleaned up [ 164.789540][ T6511] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.919497][ T3674] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.949743][ T4132] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.958032][ T3497] udevd[3497]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.070790][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 165.085270][ T6526] netlink: 108 bytes leftover after parsing attributes in process `syz.0.938'. [ 165.189615][ T3674] usb 5-1: Using ep0 maxpacket: 8 [ 165.330039][ T3674] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.348299][ T3674] usb 5-1: config 0 has no interface number 0 [ 165.355271][ T4132] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.368694][ T3674] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.382633][ T4132] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.385312][ T6538] loop0: detected capacity change from 0 to 2048 [ 165.393088][ T4132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.409224][ T3674] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.419663][ T3674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.428653][ T4132] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.429502][ T1066] Bluetooth: hci2: command 0x0406 tx timeout [ 165.442148][ T3674] usb 5-1: config 0 descriptor?? [ 165.477118][ T1066] Bluetooth: hci3: command 0x0406 tx timeout [ 165.493321][ T3674] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 165.518231][ T6538] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.569627][ T4132] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.589887][ T4132] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.598188][ T4132] usb 4-1: Product: syz [ 165.602813][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 165.610588][ T4132] usb 4-1: Manufacturer: syz [ 165.655114][ T6542] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.680335][ T4132] cdc_wdm 4-1:1.0: skipping garbage [ 165.686121][ T4132] cdc_wdm 4-1:1.0: skipping garbage [ 165.696557][ T6542] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 788 with error 28 [ 165.714622][ T4132] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 165.727475][ T4132] cdc_wdm 4-1:1.0: Unknown control protocol [ 165.774021][ T6542] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.774021][ T6542] [ 165.786503][ T6542] EXT4-fs (loop0): Total free blocks count 0 [ 165.799811][ T6542] EXT4-fs (loop0): Free/Dirty block details [ 165.808820][ T6542] EXT4-fs (loop0): free_blocks=2415919104 [ 165.815284][ T3992] usb 5-1: USB disconnect, device number 6 [ 165.815401][ T6542] EXT4-fs (loop0): dirty_blocks=1152 [ 165.828725][ T6542] EXT4-fs (loop0): Block reservation details [ 165.835902][ T6542] EXT4-fs (loop0): i_reserved_data_blocks=72 [ 165.889614][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 165.926716][ T3712] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 788 with max blocks 556 with error 28 [ 165.939611][ T3712] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.939611][ T3712] [ 166.059703][ T26] usb 3-1: config 0 has no interfaces? [ 166.068456][ T26] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 166.082058][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.101676][ T26] usb 3-1: config 0 descriptor?? [ 166.169572][ T4132] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 166.423705][ T3992] usb 3-1: USB disconnect, device number 11 [ 166.510881][ T26] usb 4-1: USB disconnect, device number 8 [ 166.532713][ T6552] input: syz0 as /devices/virtual/input/input26 [ 166.559952][ T4132] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.589471][ T4132] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.655501][ T4132] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.687067][ T4132] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.849691][ T4132] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.896926][ T4132] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.908396][ T4132] usb 2-1: Product: syz [ 166.915178][ T4132] usb 2-1: Manufacturer: syz [ 166.990048][ T4132] cdc_wdm 2-1:1.0: skipping garbage [ 166.996680][ T4132] cdc_wdm 2-1:1.0: skipping garbage [ 167.006461][ T4132] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 167.013223][ T4132] cdc_wdm 2-1:1.0: Unknown control protocol [ 167.119458][ T3546] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.245893][ T3992] usb 2-1: USB disconnect, device number 9 [ 167.309444][ T3546] usb 4-1: device descriptor read/64, error -71 [ 167.579396][ T3546] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 167.779458][ T3546] usb 4-1: device descriptor read/64, error -71 [ 167.899573][ T3546] usb usb4-port1: attempt power cycle [ 168.319435][ T3546] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 168.422845][ T3546] usb 4-1: device descriptor read/8, error -71 [ 168.579384][ T3542] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.699569][ T3546] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.799861][ T3546] usb 4-1: device descriptor read/8, error -71 [ 168.819422][ T3542] usb 5-1: Using ep0 maxpacket: 16 [ 168.920925][ T3546] usb usb4-port1: unable to enumerate USB device [ 168.939656][ T3542] usb 5-1: config 0 has no interfaces? [ 168.947392][ T3542] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 168.987301][ T3542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.025419][ T3542] usb 5-1: config 0 descriptor?? [ 169.373891][ T3542] usb 5-1: USB disconnect, device number 7 [ 169.855834][ T6617] loop0: detected capacity change from 0 to 2048 [ 169.947392][ T6617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.976577][ T6621] loop3: detected capacity change from 0 to 256 [ 170.131895][ T6624] loop4: detected capacity change from 0 to 2048 [ 170.494530][ T6624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.942061][ T6654] loop4: detected capacity change from 0 to 2048 [ 172.040940][ T6658] loop1: detected capacity change from 0 to 256 [ 172.095865][ T6654] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 172.122680][ T6654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.172146][ T25] audit: type=1800 audit(2000000109.930:14): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.981" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 172.237258][ T25] audit: type=1804 audit(2000000109.950:15): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.981" name="/newroot/159/file0/bus" dev="loop4" ino=1367 res=1 errno=0 [ 172.256363][ T6660] loop0: detected capacity change from 0 to 4096 [ 172.288418][ T25] audit: type=1800 audit(2000000109.950:16): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.981" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 172.351774][ T6660] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 172.419258][ T6663] loop4: detected capacity change from 0 to 512 [ 172.597606][ T6663] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 172.725800][ T6663] ext4 filesystem being mounted at /160/bus supports timestamps until 2038 (0x7fffffff) [ 172.879478][ T6663] loop_set_status: loop4 () has still dirty pages (nrpages=2) [ 173.000732][ T3888] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /160/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 175.098431][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.216585][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.318378][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.535595][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.014873][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 176.105581][ T6720] loop0: detected capacity change from 0 to 256 [ 176.303599][ T3860] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 176.354633][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.385270][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.409597][ T3860] FAT-fs (loop0): Filesystem has been set read-only [ 176.417599][ T3860] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 176.427017][ T6690] device bridge_slave_0 entered promiscuous mode [ 176.464480][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.498330][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.527345][ T6690] device bridge_slave_1 entered promiscuous mode [ 176.657468][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.687192][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.766258][ T6690] team0: Port device team_slave_0 added [ 176.790499][ T6690] team0: Port device team_slave_1 added [ 176.863321][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.899351][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.961083][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.019800][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.027262][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.144333][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.338431][ T6690] device hsr_slave_0 entered promiscuous mode [ 177.351899][ T6690] device hsr_slave_1 entered promiscuous mode [ 177.430046][ T3542] Bluetooth: hci3: command 0x0409 tx timeout [ 177.687808][ T144] device hsr_slave_0 left promiscuous mode [ 177.744018][ T144] device hsr_slave_1 left promiscuous mode [ 177.777243][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.806249][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.817169][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.832017][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.846513][ T144] device bridge_slave_1 left promiscuous mode [ 177.858708][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.872976][ T144] device bridge_slave_0 left promiscuous mode [ 177.879176][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.897169][ T144] device veth1_macvtap left promiscuous mode [ 177.909222][ T144] device veth0_macvtap left promiscuous mode [ 177.926204][ T144] device veth1_vlan left promiscuous mode [ 177.937384][ T144] device veth0_vlan left promiscuous mode [ 178.069693][ T3546] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 178.343323][ T144] team0 (unregistering): Port device team_slave_1 removed [ 178.373545][ T144] team0 (unregistering): Port device team_slave_0 removed [ 178.403949][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.439473][ T3546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.449710][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.469788][ T3546] usb 4-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 178.478996][ T3546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.500610][ T3546] usb 4-1: config 0 descriptor?? [ 178.638411][ T144] bond0 (unregistering): Released all slaves [ 178.932716][ T6793] device vlan2 entered promiscuous mode [ 178.941890][ T6793] device gretap0 entered promiscuous mode [ 178.953859][ T6781] udc-core: couldn't find an available UDC or it's busy [ 178.971908][ T6781] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.979698][ T6793] device gretap0 left promiscuous mode [ 178.996986][ T6781] udc-core: couldn't find an available UDC or it's busy [ 179.043484][ T6781] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 179.081615][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 179.326507][ T3546] hid-generic 0003:046D:1017.0016: hidraw0: USB HID v0.00 Device [HID 046d:1017] on usb-dummy_hcd.3-1/input0 [ 179.505968][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.509434][ T3546] Bluetooth: hci3: command 0x041b tx timeout [ 179.529173][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.529427][ T3546] Bluetooth: hci0: command 0x0409 tx timeout [ 179.550505][ T6759] device bridge_slave_0 entered promiscuous mode [ 179.602172][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.644366][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.677905][ T6759] device bridge_slave_1 entered promiscuous mode [ 179.692071][ T6820] netlink: 'syz.2.1029': attribute type 9 has an invalid length. [ 179.719402][ T6820] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1029'. [ 179.740704][ T3542] usb 4-1: USB disconnect, device number 13 [ 179.782344][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.820503][ T6690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.857561][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.886853][ T6690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.905372][ T6690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.945017][ T6759] team0: Port device team_slave_0 added [ 179.960180][ T6690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.970838][ T6759] team0: Port device team_slave_1 added [ 180.061281][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.068245][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.119353][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.173399][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.182549][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.249455][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.360579][ T6759] device hsr_slave_0 entered promiscuous mode [ 180.377712][ T6759] device hsr_slave_1 entered promiscuous mode [ 180.407059][ T6759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.434490][ T6759] Cannot create hsr debugfs directory [ 180.445495][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.539082][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.564909][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.586403][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.619432][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.628199][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.670862][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.677955][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.706125][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.731787][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.756623][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.763752][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.867992][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.880213][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.914105][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.985710][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.006507][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.025428][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.048363][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.077600][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.107014][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.139585][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.180240][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.206204][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.242446][ T6690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.384386][ T6759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.474896][ T6759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.547957][ T6759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.589708][ T3546] Bluetooth: hci0: command 0x041b tx timeout [ 181.596083][ T3546] Bluetooth: hci3: command 0x040f tx timeout [ 181.650276][ T6759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.711427][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.727227][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.760963][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.825392][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.846738][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.904876][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.922531][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.945256][ T6690] device veth0_vlan entered promiscuous mode [ 181.962867][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.973184][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.001358][ T6690] device veth1_vlan entered promiscuous mode [ 182.041348][ T6759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.077071][ T6759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.101056][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.116991][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.127802][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.158336][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.185126][ T6690] device veth0_macvtap entered promiscuous mode [ 182.201754][ T6759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.229600][ T6759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.274599][ T6690] device veth1_macvtap entered promiscuous mode [ 182.336336][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.362218][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.397707][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.420006][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.439402][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.468263][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.498075][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.528957][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.550973][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.574951][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.589816][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.600262][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.626210][ T6928] trusted_key: encrypted_key: keyword 'ne)ê»!0¤Lt' not recognized [ 182.641147][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.667569][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.685616][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.708911][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.729339][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.738375][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 182.739166][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.739184][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.739201][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.798006][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.823650][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.845276][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.863546][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.910901][ T6690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.931305][ T6690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.945728][ T6690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.982997][ T6690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.162629][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.344648][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.356212][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.391877][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.398995][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.409645][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.420193][ T3542] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 183.435219][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.478955][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.488249][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.498072][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.505177][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.524228][ T3713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.539080][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.547598][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.564271][ T3713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.572923][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.582122][ T3992] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.589179][ T3992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.597209][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.605889][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.634880][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.642995][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.652641][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.659575][ T4121] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 183.660580][ T3542] usb 4-1: Using ep0 maxpacket: 16 [ 183.674744][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.684662][ T3546] Bluetooth: hci3: command 0x0419 tx timeout [ 183.691210][ T3546] Bluetooth: hci0: command 0x040f tx timeout [ 183.723036][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.737243][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.746960][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.762867][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.775140][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.785534][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.789598][ T3542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 183.808032][ T3542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 183.821577][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.932428][ T6952] chnl_net:caif_netlink_parms(): no params data found [ 183.980685][ T3542] usb 4-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 183.988016][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 183.997607][ T3542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.007684][ T3542] usb 4-1: Product: syz [ 184.012192][ T3542] usb 4-1: Manufacturer: syz [ 184.016787][ T3542] usb 4-1: SerialNumber: syz [ 184.040019][ T3542] usb 4-1: config 0 descriptor?? [ 184.049932][ T4121] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.063753][ T4121] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.073611][ T4121] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 184.083173][ T4121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.101058][ T4121] usb 3-1: config 0 descriptor?? [ 184.148822][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.158961][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.183601][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.208808][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.216252][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.224954][ T6952] device bridge_slave_0 entered promiscuous mode [ 184.241761][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.248815][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.259621][ T6952] device bridge_slave_1 entered promiscuous mode [ 184.279477][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.288188][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.314270][ T3542] kaweth 4-1:0.0: Firmware present in device. [ 184.329249][ T6759] device veth0_vlan entered promiscuous mode [ 184.336041][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.344640][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.370895][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 184.372385][ T6952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.395005][ T6759] device veth1_vlan entered promiscuous mode [ 184.402026][ T4121] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 184.416193][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.432067][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.443728][ T3504] Bluetooth: hci2: Dropping invalid advertising data [ 184.451351][ T3504] Bluetooth: hci2: Malicious advertising data. [ 184.458311][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.465927][ T1069] usb 3-1: USB disconnect, device number 12 [ 184.469903][ T6952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.519667][ T3542] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 184.528619][ T3542] kaweth: probe of 4-1:0.0 failed with error -5 [ 184.540864][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.549092][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.554302][ T3542] usb 4-1: USB disconnect, device number 14 [ 184.558915][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.586383][ T6952] team0: Port device team_slave_0 added [ 184.596260][ T6952] team0: Port device team_slave_1 added [ 184.605095][ T6759] device veth0_macvtap entered promiscuous mode [ 184.631255][ T6759] device veth1_macvtap entered promiscuous mode [ 184.650537][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.657666][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.684604][ T6952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.697233][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.709087][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.735732][ T6952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.764695][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.778681][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.788872][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.800122][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.811676][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.822651][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.832789][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.845093][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.849601][ T4121] usb 2-1: config 0 has no interfaces? [ 184.855358][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.867894][ T4121] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 184.871437][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.887035][ T4121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.891353][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.906369][ T4121] usb 2-1: config 0 descriptor?? [ 184.926846][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.935208][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.943442][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.952121][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.975433][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.986304][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.997659][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.010086][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.020553][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.040438][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.057275][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.077671][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.097990][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.129019][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.141982][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.170924][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.188230][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.209788][ T6759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.221151][ T6759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.242826][ T6759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.255070][ T6759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.306080][ T3712] device hsr_slave_0 left promiscuous mode [ 185.320492][ T3712] device hsr_slave_1 left promiscuous mode [ 185.328168][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'. [ 185.341430][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.348940][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.357255][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.365350][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.373569][ T3712] device bridge_slave_1 left promiscuous mode [ 185.380167][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.395086][ T3712] device bridge_slave_0 left promiscuous mode [ 185.401674][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.429951][ T3992] Bluetooth: hci4: command 0x0409 tx timeout [ 185.464027][ T3712] device veth1_macvtap left promiscuous mode [ 185.472282][ T3712] device veth0_macvtap left promiscuous mode [ 185.486249][ T3712] device veth1_vlan left promiscuous mode [ 185.494436][ T3712] device veth0_vlan left promiscuous mode [ 185.667086][ T25] audit: type=1326 audit(2000000123.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.1072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5d140db59 code=0x0 [ 185.731688][ T3992] usb 2-1: USB disconnect, device number 10 [ 185.755086][ T3542] Bluetooth: hci0: command 0x0419 tx timeout [ 185.857291][ T3712] team0 (unregistering): Port device team_slave_1 removed [ 185.874191][ T3712] team0 (unregistering): Port device team_slave_0 removed [ 185.887852][ T3712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.927642][ T3712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.998941][ T3712] bond0 (unregistering): Released all slaves [ 186.056317][ T6952] device hsr_slave_0 entered promiscuous mode [ 186.066172][ T6952] device hsr_slave_1 entered promiscuous mode [ 186.073617][ T6952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.082089][ T6952] Cannot create hsr debugfs directory [ 186.088682][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 186.173581][ T7011] loop0: detected capacity change from 0 to 7 [ 186.197386][ T7011] loop0: [POWERTEC] [ 186.401190][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.411433][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.494707][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 186.513630][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.569271][ T413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.610065][ T413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.627638][ T6952] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.674753][ T4132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.701848][ T6952] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.838221][ T6952] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.973438][ T6952] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.062291][ T4132] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 187.110698][ T7045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.161449][ T6952] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.206701][ T7048] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 187.209541][ T3992] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.251643][ T7048] team0: Port device netdevsim0 added [ 187.278414][ T6952] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.294263][ T7050] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 187.308693][ T7050] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 187.319491][ T4132] usb 4-1: Using ep0 maxpacket: 16 [ 187.354436][ T7050] team0: Failed to send options change via netlink (err -105) [ 187.371130][ T7050] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 187.388372][ T7050] team0: Port device netdevsim0 removed [ 187.404505][ T7050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 187.415813][ T6952] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.435944][ T6952] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.509645][ T3994] Bluetooth: hci4: command 0x041b tx timeout [ 187.550147][ T6952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.565535][ T3994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.579559][ T3992] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x11, skipping [ 187.600934][ T3994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.613224][ T6952] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.620045][ T3992] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 187.636566][ T3992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.654829][ T4132] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 187.668356][ T3992] usb 2-1: config 0 descriptor?? [ 187.676393][ T4132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.685071][ T1066] Bluetooth: hci1: command 0x0409 tx timeout [ 187.694295][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.704989][ T4132] usb 4-1: Product: syz [ 187.712711][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.719423][ T4132] usb 4-1: Manufacturer: syz [ 187.725432][ T4132] usb 4-1: SerialNumber: syz [ 187.736966][ T3992] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 187.744529][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.751627][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.766781][ T4132] usb 4-1: config 0 descriptor?? [ 187.781530][ T3497] udevd[3497]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.798783][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.807944][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.829736][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.836837][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.846289][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.855949][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.887269][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.901167][ T3497] udevd[3497]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.918320][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.947018][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.968335][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.990187][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.998921][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.004176][ T4132] usb 2-1: USB disconnect, device number 11 [ 188.023281][ T6952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.036240][ T7048] syz.0.1089 (7048) used greatest stack depth: 18392 bytes left [ 188.086466][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.110855][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.127102][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.135439][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.150869][ T7060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.171861][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.255568][ T7060] netlink: 'syz.0.1092': attribute type 10 has an invalid length. [ 188.264105][ T4132] usb 4-1: USB disconnect, device number 15 [ 188.333139][ T7060] bond0: (slave netdevsim0): Releasing backup interface [ 188.381396][ T3504] Bluetooth: Unexpected start frame (len 18) [ 188.422196][ T7060] team0: Port device netdevsim0 added [ 188.443140][ T7064] netlink: 'syz.0.1092': attribute type 10 has an invalid length. [ 188.471050][ T7064] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 188.524211][ T7064] team0: Failed to send options change via netlink (err -105) [ 188.538720][ T7064] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 188.585563][ T7064] team0: Port device netdevsim0 removed [ 188.621823][ T7064] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 188.645735][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.655850][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.656741][ T7071] binder: 7070:7071 ioctl 400c620e 20000140 returned -22 [ 188.677364][ T6952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.738145][ T7071] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.000122][ T3994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.019770][ T3994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.050146][ T3994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.058484][ T3994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.087753][ T6952] device veth0_vlan entered promiscuous mode [ 189.100574][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.105057][ T4127] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 189.110835][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.133271][ T6952] device veth1_vlan entered promiscuous mode [ 189.183185][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.200178][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.210769][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.230395][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.241336][ T6952] device veth0_macvtap entered promiscuous mode [ 189.262022][ T6952] device veth1_macvtap entered promiscuous mode [ 189.297506][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.315573][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.326544][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.337378][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.347813][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.359687][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.369816][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.381864][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.392230][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.403040][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.420822][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.438319][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.489747][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.508623][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.535323][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.551648][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.589802][ T3992] Bluetooth: hci4: command 0x040f tx timeout [ 189.589845][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.651787][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.665786][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.676454][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.688643][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.698787][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.710330][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.720471][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.731905][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.739694][ T4127] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 189.749253][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.759347][ T4127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.767394][ T4127] usb 2-1: Product: syz [ 189.771952][ T4127] usb 2-1: Manufacturer: syz [ 189.776568][ T4127] usb 2-1: SerialNumber: syz [ 189.782782][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.797832][ T4127] usb 2-1: config 0 descriptor?? [ 189.800192][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.830054][ T6952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.838766][ T6952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.856917][ T4127] ch341 2-1:0.0: ch341-uart converter detected [ 189.878552][ T6952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.897486][ T6952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.919580][ T3992] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 190.059650][ T4127] usb 2-1: short control message received (0 < 2) [ 190.072706][ T4127] usb 2-1: failed to receive control message: -5 [ 190.082047][ T4127] ch341-uart: probe of ttyUSB0 failed with error -5 [ 190.111281][ T3713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.119760][ T3713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.146491][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.173018][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.181997][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.195475][ T4127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.279783][ T3992] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 190.293954][ T3992] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 6593, setting to 1024 [ 190.305996][ T7095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.317172][ T3992] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 190.328592][ T3992] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.344486][ T3992] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.360289][ T3992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.397540][ T7096] netlink: 'syz.4.1055': attribute type 10 has an invalid length. [ 190.399671][ T7088] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 190.435742][ T7096] team0: Port device netdevsim0 added [ 190.446254][ T3992] usb 4-1: invalid MIDI out EP 0 [ 190.474612][ T7097] netlink: 'syz.4.1055': attribute type 10 has an invalid length. [ 190.513460][ T7097] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 190.558478][ T3992] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 190.581537][ T7097] team0: Failed to send options change via netlink (err -105) [ 190.615596][ T7097] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 190.632650][ T3655] udevd[3655]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.652279][ T3992] usb 4-1: USB disconnect, device number 16 [ 190.665092][ T3504] Bluetooth: Unexpected continuation frame (len 24) [ 190.671232][ T7100] binder: 7070:7100 ioctl 5417 200003c0 returned -22 [ 190.685080][ T7097] team0: Port device netdevsim0 removed [ 190.701872][ T7097] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 191.005427][ T3712] device hsr_slave_0 left promiscuous mode [ 191.016448][ T3712] device hsr_slave_1 left promiscuous mode [ 191.025693][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.041956][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.057493][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.073809][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.084108][ T3712] device bridge_slave_1 left promiscuous mode [ 191.095212][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.106485][ T3712] device bridge_slave_0 left promiscuous mode [ 191.117522][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.129382][ T3543] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.150482][ T3712] device veth1_macvtap left promiscuous mode [ 191.156535][ T3712] device veth0_macvtap left promiscuous mode [ 191.171195][ T3712] device veth1_vlan left promiscuous mode [ 191.177128][ T3712] device veth0_vlan left promiscuous mode [ 191.495792][ T3543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.506242][ T3543] usb 1-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 191.523079][ T3543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.536223][ T3543] usb 1-1: config 0 descriptor?? [ 191.655388][ T3712] team0 (unregistering): Port device team_slave_1 removed [ 191.671915][ T3542] Bluetooth: hci4: command 0x0419 tx timeout [ 191.709112][ T3712] team0 (unregistering): Port device team_slave_0 removed [ 191.733555][ T3542] usb 2-1: USB disconnect, device number 12 [ 191.756158][ T3712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.757649][ T3542] ch341 2-1:0.0: device disconnected [ 191.822049][ T3712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.984059][ T7103] udc-core: couldn't find an available UDC or it's busy [ 191.995711][ T7103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.004847][ T7103] udc-core: couldn't find an available UDC or it's busy [ 192.011857][ T3712] bond0 (unregistering): Released all slaves [ 192.026467][ T7103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.179406][ T3542] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 192.263646][ T3543] hid-generic 0003:046D:1017.0017: hidraw0: USB HID v0.00 Device [HID 046d:1017] on usb-dummy_hcd.0-1/input0 [ 192.419471][ T3542] usb 2-1: Using ep0 maxpacket: 16 [ 192.495412][ T1066] usb 1-1: USB disconnect, device number 7 [ 192.611127][ T7118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.701028][ T3542] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 192.719402][ T3542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.727484][ T3542] usb 2-1: Product: syz [ 192.739449][ T3542] usb 2-1: Manufacturer: syz [ 192.744062][ T3542] usb 2-1: SerialNumber: syz [ 192.755153][ T7119] netlink: 'syz.4.1105': attribute type 10 has an invalid length. [ 192.764149][ T3542] usb 2-1: config 0 descriptor?? [ 192.797744][ T7119] bond0: (slave netdevsim0): Releasing backup interface [ 192.852971][ T7119] team0: Port device netdevsim0 added [ 192.889163][ T3497] udevd[3497]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.912662][ T7120] netlink: 'syz.4.1105': attribute type 10 has an invalid length. [ 192.950204][ T7120] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 193.064288][ T7120] team0: Failed to send options change via netlink (err -105) [ 193.085204][ T7123] misc userio: No port type given on /dev/userio [ 193.093527][ T7120] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 193.130184][ T7120] team0: Port device netdevsim0 removed [ 193.138479][ T7120] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 193.320406][ T7128] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.500996][ T1069] usb 2-1: USB disconnect, device number 13 [ 193.756829][ T25] audit: type=1326 audit(2000000131.510:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.3.1122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5d140db59 code=0x0 [ 193.785962][ T3542] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.074964][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.081326][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.159586][ T3542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.170667][ T3542] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.183995][ T3542] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.217716][ T3542] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.271132][ T3542] usb 5-1: config 0 descriptor?? [ 194.464393][ T7198] misc userio: No port type given on /dev/userio [ 194.522800][ T3546] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 194.523584][ T7143] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 194.761845][ T3542] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 194.769965][ T3546] usb 4-1: Using ep0 maxpacket: 16 [ 194.793672][ T3542] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 195.049581][ T3546] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 195.061932][ T3546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.072864][ T3546] usb 4-1: Product: syz [ 195.077847][ T3546] usb 4-1: Manufacturer: syz [ 195.088798][ T3546] usb 4-1: SerialNumber: syz [ 195.117446][ T3674] usb 5-1: USB disconnect, device number 8 [ 195.118145][ T3546] usb 4-1: config 0 descriptor?? [ 195.224275][ T3497] udevd[3497]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.732366][ T7185] device bridge0 entered promiscuous mode [ 195.749780][ T3546] Bluetooth: hci1: command 0x0409 tx timeout [ 195.757110][ T7185] device bridge0 left promiscuous mode [ 195.847117][ T3546] usb 4-1: USB disconnect, device number 17 [ 197.264760][ T7273] syz.2.1160[7273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.264853][ T7273] syz.2.1160[7273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.721132][ T25] audit: type=1326 audit(2000000135.470:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d140db59 code=0x7ffc0000 [ 197.827510][ T7283] device batadv_slave_1 entered promiscuous mode [ 198.159718][ T7283] device batadv_slave_1 left promiscuous mode [ 198.175144][ T25] audit: type=1326 audit(2000000135.470:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d140db59 code=0x7ffc0000 [ 198.451763][ T7301] device bridge0 entered promiscuous mode [ 198.514125][ T25] audit: type=1326 audit(2000000136.270:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569104db59 code=0x7ffc0000 [ 198.576057][ T7307] device pim6reg1 entered promiscuous mode [ 198.586635][ T25] audit: type=1326 audit(2000000136.310:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f569104db59 code=0x7ffc0000 [ 198.630052][ T25] audit: type=1326 audit(2000000136.310:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569104db59 code=0x7ffc0000 [ 198.656984][ T1066] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.886373][ T7316] syz.0.1179[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.886470][ T7316] syz.0.1179[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.904457][ T3994] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.940374][ T25] audit: type=1326 audit(2000000136.690:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8819529b59 code=0x7ffc0000 [ 198.963049][ T1066] usb 4-1: Using ep0 maxpacket: 16 [ 198.974203][ T25] audit: type=1326 audit(2000000136.690:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f8819529b59 code=0x7ffc0000 [ 199.385526][ T25] audit: type=1326 audit(2000000136.690:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8819529b59 code=0x7ffc0000 [ 199.480642][ T25] audit: type=1326 audit(2000000136.850:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.2.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef85ccdb59 code=0x7ffc0000 [ 199.508865][ T25] audit: type=1326 audit(2000000136.850:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7313 comm="syz.2.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef85ccdb59 code=0x7ffc0000 [ 199.692517][ T7328] input: syz1 as /devices/virtual/input/input30 [ 199.729539][ T1066] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 199.755582][ T1066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.777256][ T1066] usb 4-1: Product: syz [ 199.787943][ T1066] usb 4-1: Manufacturer: syz [ 199.797412][ T1066] usb 4-1: SerialNumber: syz [ 199.802552][ T3994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.820822][ T3994] usb 2-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 199.839115][ T1066] usb 4-1: config 0 descriptor?? [ 199.844977][ T3994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.906798][ T3994] usb 2-1: config 0 descriptor?? [ 199.981835][ T5222] udevd[5222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.438775][ T7310] udc-core: couldn't find an available UDC or it's busy [ 200.614299][ T7310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.760521][ T7310] udc-core: couldn't find an available UDC or it's busy [ 200.767493][ T7310] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 201.015627][ T3994] hid-generic 0003:046D:1017.0019: hidraw0: USB HID v0.00 Device [HID 046d:1017] on usb-dummy_hcd.1-1/input0 [ 201.169812][ T25] audit: type=1326 audit(2000000138.870:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8819529b59 code=0x7ffc0000 [ 201.541341][ T25] audit: type=1326 audit(2000000138.870:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8819529b59 code=0x7ffc0000 [ 201.642225][ T3994] usb 2-1: USB disconnect, device number 14 [ 202.325742][ T25] audit: type=1326 audit(2000000140.080:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef85ccdb59 code=0x7ffc0000 [ 202.419434][ T25] audit: type=1326 audit(2000000140.080:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef85ccdb59 code=0x7ffc0000 [ 202.419609][ T25] audit: type=1326 audit(2000000140.090:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8819529b59 code=0x7ffc0000 [ 202.745424][ T3674] usb 4-1: USB disconnect, device number 18 [ 202.985857][ T7372] loop0: detected capacity change from 0 to 2048 [ 203.184808][ T7372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.966767][ T7380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 204.342905][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 204.342983][ T25] audit: type=1326 audit(2000000142.090:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef85ccdb59 code=0x7ffc0000 [ 204.796758][ T25] audit: type=1326 audit(2000000142.090:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef85ccdb59 code=0x7ffc0000 [ 204.839521][ T7372] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 204.914790][ T7372] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 656 with error 28 [ 204.931480][ T7372] EXT4-fs (loop0): This should not happen!! Data will be lost [ 204.931480][ T7372] [ 204.950828][ T7372] EXT4-fs (loop0): Total free blocks count 0 [ 204.956950][ T7372] EXT4-fs (loop0): Free/Dirty block details [ 204.963599][ T7372] EXT4-fs (loop0): free_blocks=2415919104 [ 204.989476][ T7372] EXT4-fs (loop0): dirty_blocks=672 [ 204.994708][ T7372] EXT4-fs (loop0): Block reservation details [ 205.030091][ T7372] EXT4-fs (loop0): i_reserved_data_blocks=42 [ 205.129453][ T3992] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 205.172245][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 205.200560][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 205.200560][ T144] [ 205.381786][ T25] audit: type=1326 audit(2000000143.070:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605aae8b59 code=0x7ffc0000 [ 205.765488][ T25] audit: type=1326 audit(2000000143.070:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605aae8b59 code=0x7ffc0000 [ 206.032418][ T7421] loop4: detected capacity change from 0 to 512 [ 206.032418][ T7422] loop0: detected capacity change from 0 to 512 [ 206.049714][ T3992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.082834][ T3992] usb 4-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 206.094029][ T3992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.107250][ T7422] EXT4-fs (loop0): Ignoring removed bh option [ 206.115790][ T7421] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 206.126545][ T3992] usb 4-1: config 0 descriptor?? [ 206.177341][ T7422] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.1210: inline data xattr refers to an external xattr inode [ 206.235151][ T7421] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 206.260458][ T7422] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1210: couldn't read orphan inode 12 (err -117) [ 206.296616][ T7421] EXT4-fs (loop4): 1 truncate cleaned up [ 206.314084][ T7422] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 206.327982][ T7421] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 206.784333][ T7400] udc-core: couldn't find an available UDC or it's busy [ 206.876583][ T7439] syz.0.1210[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.877090][ T7439] syz.0.1210[7439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.371479][ T7400] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.467987][ T7400] udc-core: couldn't find an available UDC or it's busy [ 207.475611][ T7400] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 208.001085][ T25] audit: type=1326 audit(2000000145.750:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569104db59 code=0x7ffc0000 [ 208.293987][ T25] audit: type=1326 audit(2000000145.820:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569104db59 code=0x7ffc0000 [ 208.350100][ T3992] hid-generic 0003:046D:1017.001A: hidraw0: USB HID v0.00 Device [HID 046d:1017] on usb-dummy_hcd.3-1/input0 [ 208.373132][ T7447] loop0: detected capacity change from 0 to 2048 [ 208.387272][ T3992] usb 4-1: USB disconnect, device number 19 [ 208.455328][ T7447] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.572317][ T7447] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 208.632622][ T7447] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 378 with error 28 [ 208.645629][ T4132] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 208.662377][ T7447] EXT4-fs (loop0): This should not happen!! Data will be lost [ 208.662377][ T7447] [ 208.675157][ T7447] EXT4-fs (loop0): Total free blocks count 0 [ 208.695301][ T7447] EXT4-fs (loop0): Free/Dirty block details [ 208.734768][ T7447] EXT4-fs (loop0): free_blocks=2415919104 [ 208.756201][ T7447] EXT4-fs (loop0): dirty_blocks=384 [ 208.766360][ T7447] EXT4-fs (loop0): Block reservation details [ 208.795921][ T7447] EXT4-fs (loop0): i_reserved_data_blocks=24 [ 208.981057][ T25] audit: type=1326 audit(2000000146.730:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569104db59 code=0x7ffc0000 [ 209.059587][ T4132] usb 3-1: Using ep0 maxpacket: 16 [ 209.211333][ T4132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 209.349851][ T4132] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 209.395582][ T25] audit: type=1326 audit(2000000146.730:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f569104db59 code=0x7ffc0000 [ 209.520725][ T4132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.536749][ T4132] usb 3-1: config 0 descriptor?? [ 209.563034][ T3563] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 209.596574][ T3563] EXT4-fs (loop0): This should not happen!! Data will be lost [ 209.596574][ T3563] [ 209.628164][ T7464] input: syz1 as /devices/virtual/input/input31 [ 209.749446][ T3994] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 210.572040][ T7451] udc-core: couldn't find an available UDC or it's busy [ 210.579019][ T7451] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.692975][ T4132] hid-generic 0003:0158:0100.001B: unknown main item tag 0x0 [ 210.716869][ T4132] hid-generic 0003:0158:0100.001B: unknown main item tag 0x0 [ 210.744904][ T4132] hid-generic 0003:0158:0100.001B: unexpected long global item [ 210.765567][ T4132] hid-generic: probe of 0003:0158:0100.001B failed with error -22 [ 210.795218][ T3994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.806639][ T3994] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.861896][ T3994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.880701][ T7483] syz.4.1227[7483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.880794][ T7483] syz.4.1227[7483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.893334][ T3994] usb 4-1: config 0 descriptor?? [ 210.925849][ T7484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871424 (1073742848 ns) > initial count (34 ns). Using initial count to start timer. [ 211.529034][ T4132] usb 3-1: USB disconnect, device number 13 [ 213.768572][ T3994] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 213.788310][ T3994] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/input/input32 [ 213.833983][ T7507] loop1: detected capacity change from 0 to 2048 [ 213.864736][ T7511] input: syz1 as /devices/virtual/input/input33 [ 213.930484][ T3994] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 213.959586][ T3994] usb 4-1: USB disconnect, device number 20 [ 213.972652][ T7507] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.072857][ T7507] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 214.088254][ T7507] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 460 with error 28 [ 214.101081][ T7507] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.101081][ T7507] [ 214.110774][ T7507] EXT4-fs (loop1): Total free blocks count 0 [ 214.117007][ T7507] EXT4-fs (loop1): Free/Dirty block details [ 214.147846][ T7507] EXT4-fs (loop1): free_blocks=2415919104 [ 214.203867][ T7507] EXT4-fs (loop1): dirty_blocks=464 [ 214.224240][ T7507] EXT4-fs (loop1): Block reservation details [ 214.901667][ T7507] EXT4-fs (loop1): i_reserved_data_blocks=29 [ 215.035606][ T413] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 215.035641][ T413] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.035641][ T413] [ 215.084881][ T7539] loop3: detected capacity change from 0 to 512 [ 215.232818][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.232918][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.232939][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.232959][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.232979][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.232999][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233019][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233039][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233059][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233079][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233099][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233119][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233139][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233168][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233188][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233207][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233227][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233247][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233268][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233288][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233308][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233328][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233348][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233368][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233388][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233408][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233428][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233453][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233473][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233493][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.233520][ T26] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.284061][ T7547] loop1: detected capacity change from 0 to 256 [ 215.315784][ T7543] loop0: detected capacity change from 0 to 512 [ 215.429686][ T26] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 215.436951][ T7539] EXT4-fs (loop3): Ignoring removed bh option [ 215.470404][ T7543] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.602062][ T7539] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.1246: inline data xattr refers to an external xattr inode [ 215.617433][ T7539] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1246: couldn't read orphan inode 12 (err -117) [ 215.636880][ T7539] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 215.647931][ T7543] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 215.743773][ T7543] EXT4-fs (loop0): 1 truncate cleaned up [ 215.768044][ T7543] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 215.881282][ T7556] input: syz1 as /devices/virtual/input/input34 [ 217.275289][ T1069] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 217.516888][ T7578] device syzkaller0 entered promiscuous mode [ 218.048596][ T1069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.256691][ T7585] dccp_invalid_packet: P.Data Offset(0) too small [ 218.316007][ T1069] usb 5-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 218.325161][ T1069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.345326][ T1069] usb 5-1: config 0 descriptor?? [ 218.355263][ T7588] input: syz1 as /devices/virtual/input/input35 [ 218.750784][ T7601] loop0: detected capacity change from 0 to 2048 [ 218.822959][ T7565] udc-core: couldn't find an available UDC or it's busy [ 218.865629][ T7565] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.899259][ T7565] udc-core: couldn't find an available UDC or it's busy [ 218.927579][ T7565] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.943133][ T7601] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 219.106188][ T7611] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 219.171741][ T7613] device syzkaller1 entered promiscuous mode [ 219.179255][ T7611] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 276 with error 28 [ 219.224534][ T7611] EXT4-fs (loop0): This should not happen!! Data will be lost [ 219.224534][ T7611] [ 219.239870][ T7611] EXT4-fs (loop0): Total free blocks count 0 [ 219.246013][ T7611] EXT4-fs (loop0): Free/Dirty block details [ 219.258425][ T7611] EXT4-fs (loop0): free_blocks=2415919104 [ 219.264560][ T7611] EXT4-fs (loop0): dirty_blocks=288 [ 219.275854][ T7611] EXT4-fs (loop0): Block reservation details [ 219.282267][ T7611] EXT4-fs (loop0): i_reserved_data_blocks=18 [ 219.299912][ T1069] usbhid 5-1:0.0: can't add hid device: -71 [ 219.311861][ T1069] usbhid: probe of 5-1:0.0 failed with error -71 [ 219.325991][ T1069] usb 5-1: USB disconnect, device number 9 [ 219.564668][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 219.574302][ T3607] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 219.594053][ T3607] EXT4-fs (loop0): This should not happen!! Data will be lost [ 219.594053][ T3607] [ 219.716304][ T7621] device syzkaller0 entered promiscuous mode [ 219.974756][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 220.111726][ T7652] loop4: detected capacity change from 0 to 16 [ 220.189948][ T7652] erofs: Unknown parameter 'ž‡v ž@l‡¶JpÎô¥HÊ«ÜËP•¤X®Ÿmíäýʦ' [ 220.401122][ T7663] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.654918][ T3674] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.909552][ T3674] usb 5-1: Using ep0 maxpacket: 16 [ 221.029641][ T3674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 221.047013][ T3674] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 221.056709][ T3674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.082566][ T3674] usb 5-1: config 0 descriptor?? [ 221.516940][ T7688] tap0: tun_chr_ioctl cmd 1074025681 [ 221.716189][ T7652] udc-core: couldn't find an available UDC or it's busy [ 221.723262][ T7652] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 221.752759][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.767495][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.777288][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.790659][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.798317][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x2 [ 221.809727][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x6 [ 221.817239][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.830030][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.837608][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.850321][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.857917][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.870601][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.883676][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.894068][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.905170][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x3 [ 221.915648][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.927047][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.937156][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.948399][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.958445][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.970221][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.977623][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 221.991854][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.002330][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.013486][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.023516][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.034859][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.044992][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.056181][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.066243][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.077438][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.089207][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.100452][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.107849][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.120155][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.127690][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.140060][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.147454][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.159985][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.167528][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.179893][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.189228][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.201686][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.209089][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.220326][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.227866][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.240463][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.247862][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.260678][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.268226][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.280697][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.293678][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.303750][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.314917][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.324932][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.336056][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.346049][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.357190][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.367235][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.378477][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.388494][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.401458][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.409003][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.420408][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.427947][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.441790][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.449188][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.460549][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.468079][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.494407][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.503591][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.516035][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.524981][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.537187][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.546151][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.558405][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.567438][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.579684][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.587077][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.601119][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.608665][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.620004][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.627400][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.645728][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.659447][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.666981][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.679413][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.686813][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.700814][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.708364][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.721584][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.728991][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.740460][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.748082][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.760395][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.767791][ T3674] hid-generic 0003:0158:0100.001E: unknown main item tag 0x0 [ 222.778979][ T3674] hid-generic 0003:0158:0100.001E: unexpected long global item [ 222.789610][ T3674] hid-generic: probe of 0003:0158:0100.001E failed with error -22 [ 222.869129][ T1069] usb 5-1: USB disconnect, device number 10 [ 222.975905][ T7693] loop4: detected capacity change from 0 to 2048 [ 223.353454][ T7680] sched: RT throttling activated [ 223.453805][ T7693] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.608611][ T7693] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.686491][ T7693] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 398 with error 28 [ 223.734066][ T7693] EXT4-fs (loop4): This should not happen!! Data will be lost [ 223.734066][ T7693] [ 223.785202][ T7693] EXT4-fs (loop4): Total free blocks count 0 [ 223.839966][ T7693] EXT4-fs (loop4): Free/Dirty block details [ 223.884539][ T7693] EXT4-fs (loop4): free_blocks=2415919104 [ 223.927510][ T7693] EXT4-fs (loop4): dirty_blocks=400 [ 223.967788][ T7693] EXT4-fs (loop4): Block reservation details [ 223.986132][ T7693] EXT4-fs (loop4): i_reserved_data_blocks=25 [ 223.986605][ T7731] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1316'. [ 226.177220][ T7731] device bridge_slave_1 left promiscuous mode [ 226.202313][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.257270][ T7731] device bridge_slave_0 left promiscuous mode [ 226.350999][ T3543] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 226.456893][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.652038][ T3712] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 226.696125][ T3712] EXT4-fs (loop4): This should not happen!! Data will be lost [ 226.696125][ T3712] [ 226.789632][ T3543] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.829389][ T3543] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.866082][ T7754] loop3: detected capacity change from 0 to 2048 [ 226.872568][ T3543] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.901297][ T7761] tipc: Started in network mode [ 226.930259][ T7761] tipc: Node identity 3ae4e3834843, cluster identity 4711 [ 226.945901][ T7761] tipc: Enabled bearer , priority 0 [ 226.958058][ T7754] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.989546][ T3543] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.000034][ T7754] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038 (0x7fffffff) [ 227.004838][ T7768] device syzkaller0 entered promiscuous mode [ 227.033217][ T3543] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.068472][ T3543] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.108024][ T7770] loop1: detected capacity change from 0 to 1024 [ 227.706540][ T7760] tipc: Resetting bearer [ 227.928487][ T7776] loop0: detected capacity change from 0 to 256 [ 227.990898][ T1069] tipc: Node number set to 1923605379 [ 239.829571][ T4121] Bluetooth: hci5: command 0x0409 tx timeout [ 239.838035][ T4121] Bluetooth: hci8: command 0x0409 tx timeout [ 239.851311][ T4121] Bluetooth: hci7: command 0x0409 tx timeout [ 239.857400][ T4121] Bluetooth: hci6: command 0x0409 tx timeout [ 241.509494][ T1069] Bluetooth: hci9: command 0x0409 tx timeout [ 241.909566][ T1069] Bluetooth: hci6: command 0x041b tx timeout [ 241.915679][ T1069] Bluetooth: hci7: command 0x041b tx timeout [ 241.927396][ T1069] Bluetooth: hci8: command 0x041b tx timeout [ 241.933829][ T1069] Bluetooth: hci5: command 0x041b tx timeout [ 243.589511][ T1069] Bluetooth: hci9: command 0x041b tx timeout [ 243.990030][ T1069] Bluetooth: hci5: command 0x040f tx timeout [ 243.997660][ T1069] Bluetooth: hci8: command 0x040f tx timeout [ 244.013259][ T1069] Bluetooth: hci7: command 0x040f tx timeout [ 244.020834][ T1069] Bluetooth: hci6: command 0x040f tx timeout [ 245.669396][ T1069] Bluetooth: hci9: command 0x040f tx timeout [ 246.069560][ T4121] Bluetooth: hci6: command 0x0419 tx timeout [ 246.075647][ T4121] Bluetooth: hci7: command 0x0419 tx timeout [ 246.088897][ T4121] Bluetooth: hci8: command 0x0419 tx timeout [ 246.095263][ T4121] Bluetooth: hci5: command 0x0419 tx timeout [ 247.749460][ T4121] Bluetooth: hci9: command 0x0419 tx timeout [ 255.510980][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.517292][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.709496][ T1069] Bluetooth: hci1: command 0x0406 tx timeout [ 298.549418][ T4121] Bluetooth: hci3: command 0x0406 tx timeout [ 299.749504][ T4121] Bluetooth: hci11: command 0x0409 tx timeout [ 299.759857][ T4121] Bluetooth: hci10: command 0x0409 tx timeout [ 300.789399][ T4121] Bluetooth: hci13: command 0x0409 tx timeout [ 300.802363][ T4121] Bluetooth: hci12: command 0x0409 tx timeout [ 301.759550][ T1069] Bluetooth: hci14: command 0x0409 tx timeout [ 301.829461][ T1069] Bluetooth: hci10: command 0x041b tx timeout [ 301.839546][ T1069] Bluetooth: hci11: command 0x041b tx timeout [ 302.869405][ T1069] Bluetooth: hci12: command 0x041b tx timeout [ 302.881399][ T1069] Bluetooth: hci13: command 0x041b tx timeout [ 303.669358][ T1069] Bluetooth: hci0: command 0x0406 tx timeout [ 303.829333][ T1069] Bluetooth: hci14: command 0x041b tx timeout [ 303.909349][ T1069] Bluetooth: hci11: command 0x040f tx timeout [ 303.915549][ T1069] Bluetooth: hci10: command 0x040f tx timeout [ 304.949434][ T1069] Bluetooth: hci13: command 0x040f tx timeout [ 304.962223][ T1069] Bluetooth: hci12: command 0x040f tx timeout [ 305.909434][ T1069] Bluetooth: hci14: command 0x040f tx timeout [ 305.989422][ T1069] Bluetooth: hci10: command 0x0419 tx timeout [ 305.999557][ T1069] Bluetooth: hci11: command 0x0419 tx timeout [ 307.029379][ T4121] Bluetooth: hci12: command 0x0419 tx timeout [ 307.041299][ T4121] Bluetooth: hci13: command 0x0419 tx timeout [ 307.989409][ T1069] Bluetooth: hci14: command 0x0419 tx timeout [ 308.789410][ T1069] Bluetooth: hci4: command 0x0406 tx timeout [ 316.952472][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.958787][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.989435][ T1069] Bluetooth: hci16: command 0x0409 tx timeout [ 359.996935][ T1069] Bluetooth: hci15: command 0x0409 tx timeout [ 360.014011][ T1069] Bluetooth: hci6: command 0x0406 tx timeout [ 360.022691][ T1069] Bluetooth: hci7: command 0x0406 tx timeout [ 360.028914][ T1069] Bluetooth: hci8: command 0x0406 tx timeout [ 360.039900][ T1069] Bluetooth: hci5: command 0x0406 tx timeout [ 360.949334][ T4121] Bluetooth: hci17: command 0x0409 tx timeout [ 361.029423][ T4121] Bluetooth: hci18: command 0x0409 tx timeout [ 362.069422][ T1069] Bluetooth: hci15: command 0x041b tx timeout [ 362.076921][ T1069] Bluetooth: hci16: command 0x041b tx timeout [ 362.229362][ T1069] Bluetooth: hci19: command 0x0409 tx timeout [ 363.033503][ T1069] Bluetooth: hci17: command 0x041b tx timeout [ 363.109328][ T1069] Bluetooth: hci18: command 0x041b tx timeout [ 364.149331][ T1069] Bluetooth: hci16: command 0x040f tx timeout [ 364.156256][ T1069] Bluetooth: hci15: command 0x040f tx timeout [ 364.309365][ T4121] Bluetooth: hci19: command 0x041b tx timeout [ 365.109437][ T4121] Bluetooth: hci17: command 0x040f tx timeout [ 365.116317][ T4121] Bluetooth: hci9: command 0x0406 tx timeout [ 365.189357][ T4121] Bluetooth: hci18: command 0x040f tx timeout [ 366.229460][ T4121] Bluetooth: hci15: command 0x0419 tx timeout [ 366.244377][ T4121] Bluetooth: hci16: command 0x0419 tx timeout [ 366.389366][ T4121] Bluetooth: hci19: command 0x040f tx timeout [ 367.189314][ T4121] Bluetooth: hci17: command 0x0419 tx timeout [ 367.269500][ T4121] Bluetooth: hci18: command 0x0419 tx timeout [ 368.469314][ T4121] Bluetooth: hci19: command 0x0419 tx timeout [ 389.269410][ T27] INFO: task kworker/1:1:26 blocked for more than 143 seconds. [ 389.276984][ T27] Not tainted 5.15.163-syzkaller #0 [ 389.307574][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.326236][ T27] task:kworker/1:1 state:D stack:20704 pid: 26 ppid: 2 flags:0x00004000 [ 389.340282][ T27] Workqueue: ipv6_addrconf addrconf_dad_work [ 389.346309][ T27] Call Trace: [ 389.362400][ T27] [ 389.365360][ T27] __schedule+0x12c4/0x45b0 [ 389.382871][ T27] ? mark_lock+0x98/0x340 [ 389.387324][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 389.408307][ T27] ? release_firmware_map_entry+0x190/0x190 [ 389.421342][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 389.426833][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 389.441304][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 389.446528][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 389.456320][ T27] schedule+0x11b/0x1f0 [ 389.461847][ T27] schedule_preempt_disabled+0xf/0x20 [ 389.467226][ T27] __mutex_lock_common+0xe34/0x25a0 [ 389.477182][ T27] ? addrconf_dad_work+0xcc/0x1720 [ 389.483677][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 389.488897][ T27] mutex_lock_nested+0x17/0x20 [ 389.498259][ T27] addrconf_dad_work+0xcc/0x1720 [ 389.504568][ T27] ? read_lock_is_recursive+0x10/0x10 [ 389.521278][ T27] ? rcu_lock_release+0x20/0x20 [ 389.526251][ T27] ? print_irqtrace_events+0x210/0x210 [ 389.536585][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 389.542806][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 389.548026][ T27] process_one_work+0x8a1/0x10c0 [ 389.558667][ T27] ? worker_detach_from_pool+0x260/0x260 [ 389.564625][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 389.575810][ T27] ? kthread_data+0x4e/0xc0 [ 389.580594][ T27] ? wq_worker_running+0x97/0x170 [ 389.585640][ T27] worker_thread+0xaca/0x1280 [ 389.596144][ T27] kthread+0x3f6/0x4f0 [ 389.600491][ T27] ? rcu_lock_release+0x20/0x20 [ 389.605344][ T27] ? kthread_blkcg+0xd0/0xd0 [ 389.617185][ T27] ret_from_fork+0x1f/0x30 [ 389.621983][ T27] [ 389.625168][ T27] INFO: task udevd:2963 blocked for more than 143 seconds. [ 389.639875][ T27] Not tainted 5.15.163-syzkaller #0 [ 389.645593][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.660530][ T27] task:udevd state:D stack:22624 pid: 2963 ppid: 1 flags:0x00004002 [ 389.680800][ T27] Call Trace: [ 389.684091][ T27] [ 389.687019][ T27] __schedule+0x12c4/0x45b0 [ 389.697540][ T27] ? release_firmware_map_entry+0x190/0x190 [ 389.703701][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 389.709170][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 389.721173][ T27] schedule+0x11b/0x1f0 [ 389.725333][ T27] schedule_preempt_disabled+0xf/0x20 [ 389.736444][ T27] __mutex_lock_common+0xe34/0x25a0 [ 389.743094][ T27] ? blkdev_get_by_dev+0x14d/0xa50 [ 389.748212][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 389.762777][ T27] ? iput+0x371/0x8b0 [ 389.766776][ T27] ? ilookup+0x1d6/0x210 [ 389.773530][ T27] mutex_lock_nested+0x17/0x20 [ 389.778303][ T27] blkdev_get_by_dev+0x14d/0xa50 [ 389.786832][ T27] blkdev_open+0x138/0x2d0 [ 389.793767][ T27] ? block_ioctl+0xf0/0xf0 [ 389.798186][ T27] do_dentry_open+0x807/0xfb0 [ 389.806438][ T27] path_openat+0x2705/0x2f20 [ 389.814625][ T27] ? do_filp_open+0x460/0x460 [ 389.822821][ T27] do_filp_open+0x21c/0x460 [ 389.827336][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 389.834478][ T27] ? _raw_spin_unlock+0x24/0x40 [ 389.842800][ T27] ? alloc_fd+0x594/0x630 [ 389.847146][ T27] do_sys_openat2+0x13b/0x4f0 [ 389.855793][ T27] ? do_sys_open+0x220/0x220 [ 389.863961][ T27] __x64_sys_openat+0x243/0x290 [ 389.868834][ T27] ? __ia32_sys_open+0x270/0x270 [ 389.876858][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 389.886397][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 389.894047][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 389.903644][ T27] do_syscall_64+0x3b/0xb0 [ 389.908064][ T27] ? clear_bhb_loop+0x15/0x70 [ 389.916549][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.926227][ T27] RIP: 0033:0x7f76f12049a4 [ 389.933114][ T27] RSP: 002b:00007ffd85341590 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 389.945004][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f76f12049a4 [ 389.955354][ T27] RDX: 00000000000a0800 RSI: 000055a1af2cdc60 RDI: 00000000ffffff9c [ 389.968035][ T27] RBP: 000055a1af2cdc60 R08: 0000000000000008 R09: 7d5120d8e2fc8efe [ 389.978411][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 389.990665][ T27] R13: 0000000200000001 R14: 000055a1aebedfee R15: 0000000000000000 [ 389.998670][ T27] [ 390.006487][ T27] INFO: task syz.4.1327:7760 blocked for more than 144 seconds. [ 390.015512][ T27] Not tainted 5.15.163-syzkaller #0 [ 390.026777][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.036927][ T27] task:syz.4.1327 state:D stack:27064 pid: 7760 ppid: 6952 flags:0x00004004 [ 390.050757][ T27] Call Trace: [ 390.054051][ T27] [ 390.056981][ T27] __schedule+0x12c4/0x45b0 [ 390.065366][ T27] ? release_firmware_map_entry+0x190/0x190 [ 390.077348][ T27] schedule+0x11b/0x1f0 [ 390.085032][ T27] schedule_timeout+0xac/0x300 [ 390.092318][ T27] ? console_conditional_schedule+0x40/0x40 [ 390.098220][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 390.108403][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 390.116093][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 390.126374][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 390.133960][ T27] do_wait_for_common+0x2d9/0x480 [ 390.139090][ T27] ? console_conditional_schedule+0x40/0x40 [ 390.148544][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 390.160014][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 390.165143][ T27] ? start_flush_work+0x776/0x820 [ 390.174800][ T27] wait_for_completion+0x48/0x60 [ 390.182275][ T27] __flush_work+0x124/0x1a0 [ 390.186789][ T27] ? flush_work+0x20/0x20 [ 390.196100][ T27] ? start_flush_work+0x820/0x820 [ 390.202472][ T27] ? print_irqtrace_events+0x210/0x210 [ 390.207941][ T27] ? flush_delayed_work+0x140/0x1a0 [ 390.218448][ T27] flush_delayed_work+0x14b/0x1a0 [ 390.226000][ T27] ? __cancel_work_timer+0x6a0/0x6a0 [ 390.238225][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 390.245107][ T27] nf_flow_table_gc_cleanup+0x331/0x380 [ 390.255203][ T27] ? nf_flow_offload_work_gc+0x60/0x60 [ 390.262077][ T27] nf_flow_table_cleanup+0x45/0x90 [ 390.267201][ T27] flow_offload_netdev_event+0x4d/0x60 [ 390.277427][ T27] raw_notifier_call_chain+0xd0/0x170 [ 390.284172][ T27] dev_close_many+0x37c/0x530 [ 390.288865][ T27] ? __dev_open+0x500/0x500 [ 390.299341][ T27] unregister_netdevice_many+0x4b0/0x18f0 [ 390.305086][ T27] ? mark_lock+0x98/0x340 [ 390.315241][ T27] ? alloc_netdev_mqs+0xc10/0xc10 [ 390.321149][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 390.328231][ T27] ? print_irqtrace_events+0x210/0x210 [ 390.339629][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 390.344933][ T27] unregister_netdevice_queue+0x2e6/0x350 [ 390.355276][ T27] ? delayed_work_timer_fn+0x80/0x80 [ 390.361911][ T27] ? list_netdevice+0x450/0x450 [ 390.366856][ T27] ? linkwatch_fire_event+0x2f2/0x3c0 [ 390.376918][ T27] __tun_detach+0x6b6/0x1600 [ 390.382842][ T27] tun_chr_close+0x104/0x1b0 [ 390.387435][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 390.396740][ T27] __fput+0x3fe/0x8e0 [ 390.403251][ T27] task_work_run+0x129/0x1a0 [ 390.407860][ T27] exit_to_user_mode_loop+0x106/0x130 [ 390.418110][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 390.424990][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 390.436874][ T27] do_syscall_64+0x47/0xb0 [ 390.442615][ T27] ? clear_bhb_loop+0x15/0x70 [ 390.447377][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.457892][ T27] RIP: 0033:0x7f605aae8b59 [ 390.463714][ T27] RSP: 002b:00007ffd671f0728 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 390.476647][ T27] RAX: 0000000000000000 RBX: 00007f605ac78a60 RCX: 00007f605aae8b59 [ 390.485936][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 390.498521][ T27] RBP: 00007f605ac78a60 R08: 0000000000000006 R09: 0000000b671f0a4f [ 390.507831][ T27] R10: 00000000005f08c0 R11: 0000000000000246 R12: 0000000000037965 [ 390.521549][ T27] R13: 0000000000000032 R14: 00007f605ac78a60 R15: 00007f605ac77038 [ 390.534239][ T27] [ 390.537270][ T27] INFO: task syz.0.1335:7781 blocked for more than 144 seconds. [ 390.548107][ T27] Not tainted 5.15.163-syzkaller #0 [ 390.565712][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.576843][ T27] task:syz.0.1335 state:D stack:27520 pid: 7781 ppid: 6759 flags:0x00004004 [ 390.591727][ T27] Call Trace: [ 390.595012][ T27] [ 390.597942][ T27] __schedule+0x12c4/0x45b0 [ 390.605056][ T27] ? release_firmware_map_entry+0x190/0x190 [ 390.614580][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 390.622469][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 390.627679][ T27] schedule+0x11b/0x1f0 [ 390.638334][ T27] schedule_preempt_disabled+0xf/0x20 [ 390.646374][ T27] __mutex_lock_common+0xe34/0x25a0 [ 390.655882][ T27] ? __tun_chr_ioctl+0x460/0x2270 [ 390.663286][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 390.668501][ T27] ? __might_fault+0xb4/0x110 [ 390.676836][ T27] mutex_lock_nested+0x17/0x20 [ 390.684040][ T27] __tun_chr_ioctl+0x460/0x2270 [ 390.688917][ T27] ? tun_flow_create+0x310/0x310 [ 390.697506][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 390.704846][ T27] ? security_file_ioctl+0x7d/0xa0 [ 390.723116][ T27] ? tun_chr_poll+0x620/0x620 [ 390.727812][ T27] __se_sys_ioctl+0xf1/0x160 [ 390.737098][ T27] do_syscall_64+0x3b/0xb0 [ 390.745148][ T27] ? clear_bhb_loop+0x15/0x70 [ 390.753390][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 390.762373][ T27] RIP: 0033:0x7f8819529b59 [ 390.766798][ T27] RSP: 002b:00007f8817faa048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.778967][ T27] RAX: ffffffffffffffda RBX: 00007f88196b7f60 RCX: 00007f8819529b59 [ 390.789472][ T27] RDX: 0000000020000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 390.797451][ T27] RBP: 00007f8819598e5d R08: 0000000000000000 R09: 0000000000000000 [ 390.813040][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.822426][ T27] R13: 000000000000000b R14: 00007f88196b7f60 R15: 00007ffdacc0bef8 [ 390.834935][ T27] [ 390.839107][ T27] INFO: task syz-executor:7787 blocked for more than 144 seconds. [ 390.848396][ T27] Not tainted 5.15.163-syzkaller #0 [ 390.859923][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.868608][ T27] task:syz-executor state:D stack:27064 pid: 7787 ppid: 1 flags:0x00004004 [ 390.884565][ T27] Call Trace: [ 390.887856][ T27] [ 390.891177][ T27] __schedule+0x12c4/0x45b0 [ 390.895716][ T27] ? release_firmware_map_entry+0x190/0x190 [ 390.907320][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 390.913060][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 390.918265][ T27] schedule+0x11b/0x1f0 [ 390.928166][ T27] schedule_preempt_disabled+0xf/0x20 [ 390.933837][ T27] __mutex_lock_common+0xe34/0x25a0 [ 390.939048][ T27] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 390.951194][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 390.956512][ T27] mutex_lock_nested+0x17/0x20 [ 390.964911][ T27] rtnetlink_rcv_msg+0x94c/0xee0 [ 390.973436][ T27] ? reacquire_held_locks+0x660/0x660 [ 390.978824][ T27] ? rtnetlink_bind+0x80/0x80 [ 390.987172][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 390.995226][ T27] ? __kernel_text_address+0x94/0x100 [ 391.004192][ T27] ? unwind_get_return_address+0x49/0x80 [ 391.012405][ T27] ? reacquire_held_locks+0x660/0x660 [ 391.017856][ T27] ? arch_stack_walk+0xf3/0x140 [ 391.026335][ T27] ? mark_lock+0x98/0x340 [ 391.033149][ T27] ? mark_lock+0x98/0x340 [ 391.037493][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 391.047283][ T27] netlink_rcv_skb+0x1cf/0x410 [ 391.054490][ T27] ? rtnetlink_bind+0x80/0x80 [ 391.062753][ T27] ? netlink_ack+0xb10/0xb10 [ 391.067371][ T27] netlink_unicast+0x7b6/0x980 [ 391.074654][ T27] ? netlink_detachskb+0x90/0x90 [ 391.084254][ T27] ? __virt_addr_valid+0x3bb/0x460 [ 391.092118][ T27] ? 0xffffffff81000000 [ 391.096277][ T27] ? __check_object_size+0x300/0x410 [ 391.105893][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 391.113399][ T27] netlink_sendmsg+0xa30/0xd60 [ 391.118180][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 391.126953][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 391.134309][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 391.143522][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 391.150315][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 391.155527][ T27] __sys_sendto+0x564/0x720 [ 391.166026][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 391.171669][ T27] ? print_irqtrace_events+0x210/0x210 [ 391.177129][ T27] ? vtime_user_exit+0x2d1/0x400 [ 391.187765][ T27] __x64_sys_sendto+0xda/0xf0 [ 391.195462][ T27] do_syscall_64+0x3b/0xb0 [ 391.205570][ T27] ? clear_bhb_loop+0x15/0x70 [ 391.211099][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.216997][ T27] RIP: 0033:0x7f5b415958ec [ 391.227302][ T27] RSP: 002b:00007ffe706f4740 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 391.235999][ T27] RAX: ffffffffffffffda RBX: 00007f5b42252620 RCX: 00007f5b415958ec [ 391.251093][ T27] RDX: 0000000000000028 RSI: 00007f5b42252670 RDI: 0000000000000003 [ 391.259083][ T27] RBP: 0000000000000000 R08: 00007ffe706f4794 R09: 000000000000000c [ 391.270873][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 391.278852][ T27] R13: 0000000000000000 R14: 00007f5b42252670 R15: 0000000000000000 [ 391.290507][ T27] [ 391.293548][ T27] INFO: task syz-executor:7788 blocked for more than 145 seconds. [ 391.306151][ T27] Not tainted 5.15.163-syzkaller #0 [ 391.314325][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.327093][ T27] task:syz-executor state:D stack:27064 pid: 7788 ppid: 1 flags:0x00004004 [ 391.339028][ T27] Call Trace: [ 391.345800][ T27] [ 391.348845][ T27] __schedule+0x12c4/0x45b0 [ 391.356917][ T27] ? release_firmware_map_entry+0x190/0x190 [ 391.366402][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 391.374266][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 391.383018][ T27] schedule+0x11b/0x1f0 [ 391.387185][ T27] schedule_preempt_disabled+0xf/0x20 [ 391.395034][ T27] __mutex_lock_common+0xe34/0x25a0 [ 391.403735][ T27] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 391.408860][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 391.417674][ T27] mutex_lock_nested+0x17/0x20 [ 391.426029][ T27] rtnetlink_rcv_msg+0x94c/0xee0 [ 391.433936][ T27] ? reacquire_held_locks+0x660/0x660 [ 391.442882][ T27] ? rtnetlink_bind+0x80/0x80 [ 391.447571][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 391.456111][ T27] ? __kernel_text_address+0x94/0x100 [ 391.465092][ T27] ? unwind_get_return_address+0x49/0x80 [ 391.473169][ T27] ? reacquire_held_locks+0x660/0x660 [ 391.478545][ T27] ? arch_stack_walk+0xf3/0x140 [ 391.486959][ T27] ? mark_lock+0x98/0x340 [ 391.493692][ T27] ? mark_lock+0x98/0x340 [ 391.498029][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 391.506639][ T27] netlink_rcv_skb+0x1cf/0x410 [ 391.513852][ T27] ? rtnetlink_bind+0x80/0x80 [ 391.518539][ T27] ? netlink_ack+0xb10/0xb10 [ 391.527832][ T27] netlink_unicast+0x7b6/0x980 [ 391.535072][ T27] ? netlink_detachskb+0x90/0x90 [ 391.544067][ T27] ? __virt_addr_valid+0x3bb/0x460 [ 391.549795][ T27] ? 0xffffffff81000000 [ 391.555053][ T27] ? __check_object_size+0x300/0x410 [ 391.566131][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 391.571835][ T27] netlink_sendmsg+0xa30/0xd60 [ 391.576626][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 391.587532][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 391.599067][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 391.610144][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 391.615766][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 391.625584][ T27] __sys_sendto+0x564/0x720 [ 391.632580][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 391.637983][ T27] ? print_irqtrace_events+0x210/0x210 [ 391.648163][ T27] ? vtime_user_exit+0x2d1/0x400 [ 391.655433][ T27] __x64_sys_sendto+0xda/0xf0 [ 391.665789][ T27] do_syscall_64+0x3b/0xb0 [ 391.671686][ T27] ? clear_bhb_loop+0x15/0x70 [ 391.676458][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.686951][ T27] RIP: 0033:0x7f642e9338ec [ 391.692700][ T27] RSP: 002b:00007fff1be83d50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 391.705648][ T27] RAX: ffffffffffffffda RBX: 00007f642f5f0620 RCX: 00007f642e9338ec [ 391.714946][ T27] RDX: 0000000000000028 RSI: 00007f642f5f0670 RDI: 0000000000000003 [ 391.727431][ T27] RBP: 0000000000000000 R08: 00007fff1be83da4 R09: 000000000000000c [ 391.736750][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 391.760222][ T27] R13: 0000000000000000 R14: 00007f642f5f0670 R15: 0000000000000000 [ 391.768230][ T27] [ 391.776719][ T27] INFO: task syz-executor:7791 blocked for more than 145 seconds. [ 391.786241][ T27] Not tainted 5.15.163-syzkaller #0 [ 391.796525][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.806528][ T27] task:syz-executor state:D stack:27064 pid: 7791 ppid: 1 flags:0x00004004 [ 391.820356][ T27] Call Trace: [ 391.823649][ T27] [ 391.826577][ T27] __schedule+0x12c4/0x45b0 [ 391.839460][ T27] ? release_firmware_map_entry+0x190/0x190 [ 391.845367][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 391.856305][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 391.864030][ T27] schedule+0x11b/0x1f0 [ 391.868206][ T27] schedule_preempt_disabled+0xf/0x20 [ 391.879495][ T27] __mutex_lock_common+0xe34/0x25a0 [ 391.884718][ T27] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 391.895049][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 391.901642][ T27] mutex_lock_nested+0x17/0x20 [ 391.906413][ T27] rtnetlink_rcv_msg+0x94c/0xee0 [ 391.915975][ T27] ? reacquire_held_locks+0x660/0x660 [ 391.922713][ T27] ? rtnetlink_bind+0x80/0x80 [ 391.927400][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 391.936984][ T27] ? __kernel_text_address+0x94/0x100 [ 391.943727][ T27] ? unwind_get_return_address+0x49/0x80 [ 391.953845][ T27] ? reacquire_held_locks+0x660/0x660 [ 391.960559][ T27] ? arch_stack_walk+0xf3/0x140 [ 391.966510][ T27] ? mark_lock+0x98/0x340 [ 391.976675][ T27] ? mark_lock+0x98/0x340 [ 391.982527][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 391.987582][ T27] netlink_rcv_skb+0x1cf/0x410 [ 391.996956][ T27] ? rtnetlink_bind+0x80/0x80 [ 392.003614][ T27] ? netlink_ack+0xb10/0xb10 [ 392.008224][ T27] netlink_unicast+0x7b6/0x980 [ 392.017547][ T27] ? netlink_detachskb+0x90/0x90 [ 392.023847][ T27] ? __virt_addr_valid+0x3bb/0x460 [ 392.028967][ T27] ? 0xffffffff81000000 [ 392.037990][ T27] ? __check_object_size+0x300/0x410 [ 392.044659][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 392.054328][ T27] netlink_sendmsg+0xa30/0xd60 [ 392.059112][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 392.066903][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 392.076495][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 392.084412][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 392.094454][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 392.101000][ T27] __sys_sendto+0x564/0x720 [ 392.105519][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 392.116086][ T27] ? print_irqtrace_events+0x210/0x210 [ 392.122889][ T27] ? vtime_user_exit+0x2d1/0x400 [ 392.127839][ T27] __x64_sys_sendto+0xda/0xf0 [ 392.137092][ T27] do_syscall_64+0x3b/0xb0 [ 392.142851][ T27] ? clear_bhb_loop+0x15/0x70 [ 392.147535][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.157990][ T27] RIP: 0033:0x7f37986e18ec [ 392.164126][ T27] RSP: 002b:00007fff6bbc4640 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 392.178133][ T27] RAX: ffffffffffffffda RBX: 00007f379939e620 RCX: 00007f37986e18ec [ 392.187630][ T27] RDX: 0000000000000028 RSI: 00007f379939e670 RDI: 0000000000000003 [ 392.202681][ T27] RBP: 0000000000000000 R08: 00007fff6bbc4694 R09: 000000000000000c [ 392.214131][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 392.225252][ T27] R13: 0000000000000000 R14: 00007f379939e670 R15: 0000000000000000 [ 392.236745][ T27] [ 392.242462][ T27] INFO: task syz-executor:7792 blocked for more than 146 seconds. [ 392.253711][ T27] Not tainted 5.15.163-syzkaller #0 [ 392.261841][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.275171][ T27] task:syz-executor state:D stack:27064 pid: 7792 ppid: 1 flags:0x00004004 [ 392.286852][ T27] Call Trace: [ 392.293779][ T27] [ 392.296719][ T27] __schedule+0x12c4/0x45b0 [ 392.304088][ T27] ? release_firmware_map_entry+0x190/0x190 [ 392.314730][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 392.322624][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 392.327836][ T27] schedule+0x11b/0x1f0 [ 392.336238][ T27] schedule_preempt_disabled+0xf/0x20 [ 392.344051][ T27] __mutex_lock_common+0xe34/0x25a0 [ 392.352691][ T27] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 392.357822][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 392.365549][ T27] mutex_lock_nested+0x17/0x20 [ 392.374879][ T27] rtnetlink_rcv_msg+0x94c/0xee0 [ 392.382282][ T27] ? reacquire_held_locks+0x660/0x660 [ 392.387669][ T27] ? rtnetlink_bind+0x80/0x80 [ 392.395956][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 392.403388][ T27] ? __kernel_text_address+0x94/0x100 [ 392.408769][ T27] ? unwind_get_return_address+0x49/0x80 [ 392.417919][ T27] ? reacquire_held_locks+0x660/0x660 [ 392.427051][ T27] ? arch_stack_walk+0xf3/0x140 [ 392.435330][ T27] ? mark_lock+0x98/0x340 [ 392.442675][ T27] ? mark_lock+0x98/0x340 [ 392.447015][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 392.455579][ T27] netlink_rcv_skb+0x1cf/0x410 [ 392.462749][ T27] ? rtnetlink_bind+0x80/0x80 [ 392.467435][ T27] ? netlink_ack+0xb10/0xb10 [ 392.477536][ T27] netlink_unicast+0x7b6/0x980 [ 392.484821][ T27] ? netlink_detachskb+0x90/0x90 [ 392.493447][ T27] ? __virt_addr_valid+0x3bb/0x460 [ 392.498566][ T27] ? 0xffffffff81000000 [ 392.505211][ T27] ? __check_object_size+0x300/0x410 [ 392.514008][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 392.519128][ T27] netlink_sendmsg+0xa30/0xd60 [ 392.526413][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 392.536389][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 392.544468][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 392.553823][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 392.561740][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 392.566946][ T27] __sys_sendto+0x564/0x720 [ 392.575174][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 392.584120][ T27] ? print_irqtrace_events+0x210/0x210 [ 392.593173][ T27] ? vtime_user_exit+0x2d1/0x400 [ 392.598215][ T27] __x64_sys_sendto+0xda/0xf0 [ 392.605437][ T27] do_syscall_64+0x3b/0xb0 [ 392.613281][ T27] ? clear_bhb_loop+0x15/0x70 [ 392.618126][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.626557][ T27] RIP: 0033:0x7f6ba2e6d8ec [ 392.639317][ T27] RSP: 002b:00007ffebe8fb3d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 392.647747][ T27] RAX: ffffffffffffffda RBX: 00007f6ba3b2a620 RCX: 00007f6ba2e6d8ec [ 392.662243][ T27] RDX: 0000000000000028 RSI: 00007f6ba3b2a670 RDI: 0000000000000003 [ 392.673724][ T27] RBP: 0000000000000000 R08: 00007ffebe8fb424 R09: 000000000000000c [ 392.686277][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 392.696770][ T27] R13: 0000000000000000 R14: 00007f6ba3b2a670 R15: 0000000000000000 [ 392.708366][ T27] [ 392.719028][ T27] INFO: task syz-executor:7797 blocked for more than 146 seconds. [ 392.730338][ T27] Not tainted 5.15.163-syzkaller #0 [ 392.736144][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.749666][ T27] task:syz-executor state:D stack:27168 pid: 7797 ppid: 1 flags:0x00004004 [ 392.758892][ T27] Call Trace: [ 392.767989][ T27] [ 392.773007][ T27] __schedule+0x12c4/0x45b0 [ 392.777547][ T27] ? release_firmware_map_entry+0x190/0x190 [ 392.798351][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 392.808594][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 392.815246][ T27] schedule+0x11b/0x1f0 [ 392.823936][ T27] schedule_preempt_disabled+0xf/0x20 [ 392.830740][ T27] __mutex_lock_common+0xe34/0x25a0 [ 392.835955][ T27] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 392.845697][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 392.852401][ T27] mutex_lock_nested+0x17/0x20 [ 392.857182][ T27] rtnetlink_rcv_msg+0x94c/0xee0 [ 392.866735][ T27] ? reacquire_held_locks+0x660/0x660 [ 392.877440][ T27] ? rtnetlink_bind+0x80/0x80 [ 392.888014][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 392.894534][ T27] ? __kernel_text_address+0x94/0x100 [ 392.905156][ T27] ? unwind_get_return_address+0x49/0x80 [ 392.912265][ T27] ? reacquire_held_locks+0x660/0x660 [ 392.917642][ T27] ? arch_stack_walk+0xf3/0x140 [ 392.927095][ T27] ? mark_lock+0x98/0x340 [ 392.932794][ T27] ? mark_lock+0x98/0x340 [ 392.937129][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 392.946784][ T27] netlink_rcv_skb+0x1cf/0x410 [ 392.952951][ T27] ? rtnetlink_bind+0x80/0x80 [ 392.957641][ T27] ? netlink_ack+0xb10/0xb10 [ 392.966981][ T27] netlink_unicast+0x7b6/0x980 [ 392.973127][ T27] ? netlink_detachskb+0x90/0x90 [ 392.978069][ T27] ? __virt_addr_valid+0x3bb/0x460 [ 392.990313][ T27] ? 0xffffffff81000000 [ 392.994483][ T27] ? __check_object_size+0x300/0x410 [ 393.005158][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 393.012236][ T27] netlink_sendmsg+0xa30/0xd60 [ 393.017020][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 393.026865][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 393.033742][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 393.039043][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 393.049319][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 393.054641][ T27] __sys_sendto+0x564/0x720 [ 393.059154][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 393.070574][ T27] ? print_irqtrace_events+0x210/0x210 [ 393.076047][ T27] ? vtime_user_exit+0x2d1/0x400 [ 393.085621][ T27] __x64_sys_sendto+0xda/0xf0 [ 393.093995][ T27] do_syscall_64+0x3b/0xb0 [ 393.098423][ T27] ? clear_bhb_loop+0x15/0x70 [ 393.107981][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.117261][ T27] RIP: 0033:0x7fc68b92c8ec [ 393.126880][ T27] RSP: 002b:00007ffeacb8eb60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 393.136805][ T27] RAX: ffffffffffffffda RBX: 00007fc68c5e9620 RCX: 00007fc68b92c8ec [ 393.149353][ T27] RDX: 0000000000000028 RSI: 00007fc68c5e9670 RDI: 0000000000000003 [ 393.157336][ T27] RBP: 0000000000000000 R08: 00007ffeacb8ebb4 R09: 000000000000000c [ 393.170045][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 393.178026][ T27] R13: 0000000000000000 R14: 00007fc68c5e9670 R15: 0000000000000000 [ 393.191259][ T27] [ 393.195373][ T27] [ 393.195373][ T27] Showing all locks held in the system: [ 393.208195][ T27] 3 locks held by kworker/1:1/26: [ 393.216410][ T27] #0: ffff888023d82d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 393.231128][ T27] #1: ffffc90000e1fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 393.247733][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 393.259678][ T27] 1 lock held by khungtaskd/27: [ 393.264531][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 393.278710][ T27] 1 lock held by udevd/2963: [ 393.284684][ T27] #0: ffff88801bbc8918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 393.300444][ T27] 2 locks held by getty/3258: [ 393.305130][ T27] #0: ffff88814aec8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 393.319915][ T27] #1: ffffc9000229b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 393.335776][ T27] 3 locks held by kworker/0:5/3543: [ 393.341254][ T27] 2 locks held by syz-executor/4344: [ 393.346538][ T27] 2 locks held by syz.4.1327/7760: [ 393.358053][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 393.367319][ T27] #1: ffffffff8da717e8 (flowtable_lock){+.+.}-{3:3}, at: nf_flow_table_cleanup+0x1d/0x90 [ 393.382968][ T27] 2 locks held by syz.1.1329/7770: [ 393.388083][ T27] 1 lock held by syz.2.1332/7773: [ 393.394575][ T27] 1 lock held by syz.0.1335/7781: [ 393.405369][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x460/0x2270 [ 393.416203][ T27] 1 lock held by syz-executor/7787: [ 393.426570][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.438007][ T27] 1 lock held by syz-executor/7788: [ 393.448404][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.459248][ T27] 1 lock held by syz-executor/7791: [ 393.464445][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.480249][ T27] 1 lock held by syz-executor/7792: [ 393.485456][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.500830][ T27] 1 lock held by syz-executor/7797: [ 393.506032][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.520861][ T27] 1 lock held by syz-executor/7801: [ 393.526068][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.542742][ T27] 1 lock held by syz-executor/7802: [ 393.547946][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.561086][ T27] 1 lock held by syz-executor/7807: [ 393.566285][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.579511][ T27] 1 lock held by syz-executor/7808: [ 393.584711][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.599541][ T27] 1 lock held by syz-executor/7812: [ 393.605828][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.621472][ T27] 1 lock held by syz-executor/7822: [ 393.626675][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.638686][ T27] 1 lock held by syz-executor/7823: [ 393.647335][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.660537][ T27] 1 lock held by syz-executor/7828: [ 393.665823][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.687475][ T27] 1 lock held by syz-executor/7830: [ 393.696223][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.709632][ T27] 1 lock held by syz-executor/7833: [ 393.714838][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 393.731250][ T27] [ 393.733585][ T27] ============================================= [ 393.733585][ T27] [ 393.745671][ T27] NMI backtrace for cpu 1 [ 393.749993][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.163-syzkaller #0 [ 393.757961][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 393.768007][ T27] Call Trace: [ 393.771286][ T27] [ 393.774209][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 393.778886][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 393.784514][ T27] ? panic+0x860/0x860 [ 393.788614][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 393.793723][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 393.798656][ T27] ? __wake_up_klogd+0xd5/0x100 [ 393.803509][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 393.809653][ T27] ? _printk+0xd1/0x120 [ 393.813804][ T27] ? panic+0x860/0x860 [ 393.817868][ T27] ? __wake_up_klogd+0xcc/0x100 [ 393.822819][ T27] ? panic+0x860/0x860 [ 393.826891][ T27] ? __rcu_read_unlock+0x92/0x100 [ 393.831911][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 393.837973][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 393.843952][ T27] watchdog+0xe72/0xeb0 [ 393.848111][ T27] kthread+0x3f6/0x4f0 [ 393.852172][ T27] ? hungtask_pm_notify+0x50/0x50 [ 393.857190][ T27] ? kthread_blkcg+0xd0/0xd0 [ 393.861773][ T27] ret_from_fork+0x1f/0x30 [ 393.866197][ T27] [ 393.870229][ T27] Sending NMI from CPU 1 to CPUs 0: [ 393.875445][ C0] NMI backtrace for cpu 0 [ 393.875455][ C0] CPU: 0 PID: 7773 Comm: syz.2.1332 Not tainted 5.15.163-syzkaller #0 [ 393.875471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 393.875478][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 393.875499][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 0f c5 f3 02 66 2e 0f 1f 84 00 00 00 00 00 [ 393.875516][ C0] RSP: 0018:ffffc90000007e60 EFLAGS: 00000046 [ 393.875529][ C0] RAX: 00000000000391eb RBX: ffffffff8c3619b8 RCX: 0000000000000838 [ 393.875539][ C0] RDX: 0000000000000000 RSI: 00000000000391eb RDI: 0000000000000838 [ 393.875548][ C0] RBP: 00000000000391eb R08: ffffffff81726f9d R09: fffffbfff1bc8ede [ 393.875558][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b9a27240 [ 393.875568][ C0] R13: dffffc0000000000 R14: 00000000000391eb R15: dffffc0000000000 [ 393.875579][ C0] FS: 0000555555a2a500(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 393.875592][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.875602][ C0] CR2: 000000110c3d20ae CR3: 000000006620f000 CR4: 00000000003506f0 [ 393.875615][ C0] Call Trace: [ 393.875619][ C0] [ 393.875625][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 393.875641][ C0] ? read_lock_is_recursive+0x10/0x10 [ 393.875656][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 393.875671][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 393.875692][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 393.875705][ C0] ? nmi_handle+0xf7/0x370 [ 393.875719][ C0] ? native_apic_msr_write+0x35/0x50 [ 393.875734][ C0] ? default_do_nmi+0x62/0x150 [ 393.875750][ C0] ? exc_nmi+0xa8/0x100 [ 393.875763][ C0] ? end_repeat_nmi+0x16/0x31 [ 393.875780][ C0] ? clockevents_program_event+0x18d/0x310 [ 393.875797][ C0] ? native_apic_msr_write+0x35/0x50 [ 393.875812][ C0] ? native_apic_msr_write+0x35/0x50 [ 393.875827][ C0] ? native_apic_msr_write+0x35/0x50 [ 393.875841][ C0] [ 393.875845][ C0] [ 393.875849][ C0] lapic_next_event+0x5b/0x70 [ 393.875865][ C0] clockevents_program_event+0x1c5/0x310 [ 393.875881][ C0] hrtimer_interrupt+0x546/0x980 [ 393.875905][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 393.875922][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 393.875936][ C0] [ 393.875940][ C0] [ 393.875945][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 393.875959][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 393.875972][ C0] Code: 21 80 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 de a4 3a f7 48 89 df e8 b6 f8 3b f7 e8 01 b1 5e f7 fb bf 01 00 00 00 16 3d 2f f7 65 8b 05 57 42 da 75 85 c0 74 02 5b c3 e8 24 5f d8 [ 393.875983][ C0] RSP: 0018:ffffc900039d7bc0 EFLAGS: 00000282 [ 393.875994][ C0] RAX: d9b39ae98ff92e00 RBX: ffff88807dd540c0 RCX: ffffffff913f1f03 [ 393.876004][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001 [ 393.876014][ C0] RBP: 0000000000000000 R08: ffffffff8186de90 R09: ffffed100fbaa819 [ 393.876023][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 393.876032][ C0] R13: dffffc0000000000 R14: ffff88807dd54558 R15: ffff88807dd540c0 [ 393.876046][ C0] ? trace_hardirqs_on+0x30/0x80 [ 393.876065][ C0] get_signal+0x13ee/0x14e0 [ 393.876086][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 393.876103][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 393.876120][ C0] ? __might_fault+0xb4/0x110 [ 393.876137][ C0] ? _copy_from_user+0x10f/0x170 [ 393.876151][ C0] ? restore_altstack+0x274/0x400 [ 393.876167][ C0] ? get_sigframe_size+0x10/0x10 [ 393.876181][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 393.876200][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 393.876216][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 393.876232][ C0] exit_to_user_mode_loop+0x97/0x130 [ 393.876245][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 393.876260][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 393.876276][ C0] do_syscall_64+0x47/0xb0 [ 393.876288][ C0] ? clear_bhb_loop+0x15/0x70 [ 393.876302][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.876315][ C0] RIP: 0033:0x7fef85ccdb59 [ 393.876327][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.876339][ C0] RSP: 002b:00007ffd7c7e2f18 EFLAGS: 00000246 [ 393.876354][ C0] RAX: fffffffffffffffc RBX: 0000000000037770 RCX: 00007fef85ccdb59 [ 393.876364][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fef85e5bf6c [ 393.876373][ C0] RBP: 000000000003773e R08: 0000000000000010 R09: 000000167c7e323f [ 393.876382][ C0] R10: 00007ffd7c7e3000 R11: 0000000000000246 R12: 00007fef85e5bf6c [ 393.876392][ C0] R13: 0000000000000032 R14: 00007ffd7c7e3020 R15: 00007ffd7c7e3000 [ 393.876408][ C0] [ 394.379657][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 394.386514][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.163-syzkaller #0 [ 394.394489][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 394.404534][ T27] Call Trace: [ 394.407806][ T27] [ 394.410729][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 394.415405][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 394.421035][ T27] ? panic+0x860/0x860 [ 394.425108][ T27] panic+0x318/0x860 [ 394.428998][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 394.434627][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 394.440775][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 394.445969][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 394.452031][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 394.458178][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 394.464328][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 394.470477][ T27] watchdog+0xeb0/0xeb0 [ 394.474638][ T27] kthread+0x3f6/0x4f0 [ 394.478701][ T27] ? hungtask_pm_notify+0x50/0x50 [ 394.483721][ T27] ? kthread_blkcg+0xd0/0xd0 [ 394.488303][ T27] ret_from_fork+0x1f/0x30 [ 394.492730][ T27] [ 394.495923][ T27] Kernel Offset: disabled [ 394.500241][ T27] Rebooting in 86400 seconds..