last executing test programs: 37.767478575s ago: executing program 3 (id=1301): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1, 0x0, 0x4b}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 37.581724355s ago: executing program 3 (id=1302): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) r3 = gettid() r4 = getpid() kcmp(r3, r4, 0x1, 0xffffffffffffffff, r0) 36.907941612s ago: executing program 3 (id=1303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000006800010000000000000000040a000000000000000600070005000000", @ANYRES32=r2, @ANYBLOB="28000880"], 0x50}}, 0x0) 35.068398758s ago: executing program 3 (id=1309): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x41, 0x0, 0x30, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/182, 0x20, 0xb6, 0x0, 0x100, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1600000000000000250000000100000000000000474575ebcb08bdee232191ad0a40c233fdbacf084e53ff1710fd7616c7041e907c248ea5679b0a6fc5524a4b692d1c6811a56a7a705f815cf282ada0c25f56dad9bde095ba0100000000000000d6ea144fde5b4e3b6066938fbc2153f0ce15fa1e018000000000000015cc972e045bfe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB], 0x48) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) lstat(&(0x7f0000000600)='./file2\x00', &(0x7f00000009c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 33.759290641s ago: executing program 3 (id=1314): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) fallocate(r2, 0x0, 0x0, 0x1001f0) fallocate(r2, 0x3, 0x1000, 0x10000) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000800)={0x0, 0x7, 0x4}) 28.71970206s ago: executing program 3 (id=1329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x25, 0x1507, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005fb75c2f084bf912b70081ffffff0000000000fffffff4001e80ffffff00", 0x24) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x43451) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) 27.200078251s ago: executing program 4 (id=1333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xb7}]}}}], 0x18}}], 0x2, 0x0) 26.802605792s ago: executing program 4 (id=1334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 26.57998778s ago: executing program 4 (id=1336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xf6, 0x0) 26.376308057s ago: executing program 4 (id=1338): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 25.867506674s ago: executing program 4 (id=1340): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, 0x0, 0x0, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 25.379986404s ago: executing program 4 (id=1342): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4, 0x2, 0x10001, 0x60185, 0xffffffffffffffff, 0xfffe, '\x00', 0x0, r0, 0x3, 0x3, 0x4, 0x1, @void, @value, @void, @value}, 0x50) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x28}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) 21.631135127s ago: executing program 1 (id=1346): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_virt_wifi\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x85, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 21.300096712s ago: executing program 1 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) unshare(0x40020000) 17.663298769s ago: executing program 0 (id=1274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16.486371542s ago: executing program 0 (id=1349): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpid() pipe2$9p(&(0x7f0000000400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100000005000000000000000000", @ANYRES32], 0x20}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 11.910536417s ago: executing program 0 (id=1351): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 11.666129657s ago: executing program 1 (id=1352): msgget$private(0x0, 0x81) r0 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4"}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) io_uring_setup(0x1694, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") write$binfmt_aout(r2, 0x0, 0xff2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000001600)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x0, 0x4e23, 0x10, 0x0, @gue={{0x3}}}}}}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) 11.252994097s ago: executing program 0 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 11.219286754s ago: executing program 1 (id=1354): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 10.931906855s ago: executing program 1 (id=1355): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000002000000000000000000000203000000000000000000000900000000000cf2b8f2ec22e6635714c8eaa5000003000088d44a94dcc33d3f1f1a321ba681000000000000000000"], &(0x7f0000000140)=""/240, 0x4a, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000380)={[{@gid}]}) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 10.31321041s ago: executing program 0 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed2901020301090212"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0xc95) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.251680265s ago: executing program 2 (id=1358): r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x4e22, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = dup2(r0, r0) write$P9_RSTATFS(r4, &(0x7f00000000c0)={0x4, 0x9, 0x0, {0x0, 0xfffffffd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4a}}, 0x43) 9.998111876s ago: executing program 2 (id=1359): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d20680d7fdfe4b88942a31f48597e36e03b9d6579b1c599db6e466049c2d4c830345305135e65d3a895c50f80200f6c0aba61f6304000000ff"], 0xdd12}], 0x1}, 0x20048004) 9.778544222s ago: executing program 2 (id=1360): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x9c3fa077fa966179, 0x70bd26, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x804) 8.583928116s ago: executing program 2 (id=1361): socket(0x28, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x22020400) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) 7.783095313s ago: executing program 1 (id=1362): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 728.133399ms ago: executing program 0 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 357.162049ms ago: executing program 2 (id=1364): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0x168, 0x9, 0x270, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 0s ago: executing program 2 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x4}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0b00000000000000000200000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r2], 0x34}}, 0x0) kernel console output (not intermixed with test programs): aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.250508][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.301245][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.341718][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.352111][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.362896][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.373062][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.383630][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.397949][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.555698][ T7793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.634379][ T7793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.638449][ T8125] xt_CT: No such helper "snmp_trap" [ 278.660775][ T7793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.683414][ T7793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.847460][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.361767][ T8149] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 279.371325][ T8149] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 279.901970][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.909818][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.013623][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.021480][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.574787][ T7823] veth0_vlan: entered promiscuous mode [ 280.609942][ T7823] veth1_vlan: entered promiscuous mode [ 280.727724][ T7823] veth0_macvtap: entered promiscuous mode [ 280.831087][ T7823] veth1_macvtap: entered promiscuous mode [ 281.076008][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.121702][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.173139][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.202374][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.217223][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.237919][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.272346][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.298269][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.342925][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.387237][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.422514][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.434034][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.444545][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.454495][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.464972][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.474836][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.485797][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.496033][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.506920][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.517196][ T7823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.527706][ T7823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.539506][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.575452][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 281.599275][ T7823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.622410][ T7823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.631131][ T7823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.661369][ T8197] loop0: detected capacity change from 0 to 1024 [ 281.667340][ T7823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.745149][ T8197] EXT4-fs: Ignoring removed orlov option [ 281.837849][ T8197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.872925][ T8207] loop1: detected capacity change from 0 to 512 [ 281.889496][ T5785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.912682][ T8207] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.921802][ T5785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.950795][ T8207] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.647: corrupted in-inode xattr: invalid ea_ino [ 281.968493][ T8203] loop3: detected capacity change from 0 to 4096 [ 281.981115][ T8207] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.647: couldn't read orphan inode 15 (err -117) [ 282.036346][ T8203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.066075][ T5785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.089939][ T5785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.131478][ T8207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.383210][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.424661][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 282.424678][ T29] audit: type=1326 audit(1727355009.150:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.449154][ T8197] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 282.474890][ T8197] System zones: 0-1, 3-12 [ 282.480573][ T8197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.507567][ T29] audit: type=1326 audit(1727355009.190:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.530722][ T29] audit: type=1326 audit(1727355009.220:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.560302][ T29] audit: type=1326 audit(1727355009.220:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.609599][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.613810][ T29] audit: type=1326 audit(1727355009.220:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.672972][ T29] audit: type=1326 audit(1727355009.220:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.696365][ T29] audit: type=1326 audit(1727355009.220:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.699196][ T8225] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2792: inode #14: comm syz.0.644: corrupted in-inode xattr: bad magic number in in-inode xattr [ 282.719316][ T29] audit: type=1326 audit(1727355009.260:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.719355][ T29] audit: type=1326 audit(1727355009.260:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.719390][ T29] audit: type=1326 audit(1727355009.260:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 282.862091][ T5330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 282.907094][ T8225] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.644: attempt to clear invalid blocks 1886221359 len 1 [ 282.956551][ T8232] loop3: detected capacity change from 0 to 512 [ 282.992439][ T8232] EXT4-fs: Ignoring removed oldalloc option [ 283.038724][ T5330] usb 3-1: Using ep0 maxpacket: 32 [ 283.050989][ T8232] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.650: Parent and EA inode have the same ino 15 [ 283.066241][ T5330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.220097][ T8232] EXT4-fs (loop3): Remounting filesystem read-only [ 283.310395][ T5330] usb 3-1: config 0 has no interfaces? [ 283.320784][ T5330] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 283.330572][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.338754][ T8232] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 283.338865][ T8232] EXT4-fs (loop3): 1 orphan inode deleted [ 283.339694][ T8232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.349442][ T5330] usb 3-1: Product: syz [ 283.349463][ T5330] usb 3-1: Manufacturer: syz [ 283.349478][ T5330] usb 3-1: SerialNumber: syz [ 283.484995][ T5330] usb 3-1: config 0 descriptor?? [ 283.538922][ T5242] Bluetooth: hci3: command 0x0406 tx timeout [ 284.079838][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.286014][ T8254] loop4: detected capacity change from 0 to 256 [ 284.553881][ T8263] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 284.564136][ T8262] IPVS: stopping master sync thread 8263 ... [ 284.744586][ T8265] loop3: detected capacity change from 0 to 2048 [ 285.062051][ T7586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.513481][ T9] usb 3-1: USB disconnect, device number 4 [ 285.678382][ T8285] netlink: 140 bytes leftover after parsing attributes in process `syz.0.661'. [ 286.231554][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'. [ 286.525923][ T8305] loop2: detected capacity change from 0 to 512 [ 286.813291][ T8305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.822635][ T8305] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.847083][ T8305] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 287.671025][ T8305] loop2: detected capacity change from 0 to 2048 [ 287.738524][ T8305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.767201][ T8313] futex_wake_op: syz.0.668 tries to shift op by -1; fix this program [ 287.955837][ T8315] loop0: detected capacity change from 0 to 512 [ 288.790576][ T5242] Bluetooth: hci1: command 0x0406 tx timeout [ 288.834128][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.416515][ T8323] loop4: detected capacity change from 0 to 512 [ 289.453048][ T8315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.511558][ T8323] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 289.558530][ T8315] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.572111][ T8323] EXT4-fs (loop4): orphan cleanup on readonly fs [ 289.608811][ T8323] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 289.675314][ T8323] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 289.708568][ T8323] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.670: bg 0: block 40: padding at end of block bitmap is not set [ 289.735235][ T8336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.674'. [ 289.870106][ T8323] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 289.901590][ T8323] EXT4-fs (loop4): 1 truncate cleaned up [ 289.908674][ T8323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.998743][ T8323] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.670: bad symlink. [ 290.498445][ T7586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.064593][ T7823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.096671][ T8350] loop1: detected capacity change from 0 to 256 [ 292.369749][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'. [ 293.052727][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 293.052770][ T29] audit: type=1326 audit(1727355019.770:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 293.476283][ T29] audit: type=1326 audit(1727355019.770:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 293.695050][ T29] audit: type=1326 audit(1727355019.840:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 293.849854][ T8386] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 293.881860][ T8385] IPVS: stopping master sync thread 8386 ... [ 293.887978][ T29] audit: type=1326 audit(1727355019.840:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 293.969447][ T29] audit: type=1326 audit(1727355019.850:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 294.029236][ T29] audit: type=1326 audit(1727355019.850:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 294.077310][ T29] audit: type=1326 audit(1727355019.850:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 294.107524][ T29] audit: type=1326 audit(1727355019.850:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 294.216093][ T29] audit: type=1326 audit(1727355019.850:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 294.261836][ T29] audit: type=1326 audit(1727355019.850:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 294.729755][ T8399] loop1: detected capacity change from 0 to 4096 [ 294.760253][ T8399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.640405][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.949909][ T8439] loop1: detected capacity change from 0 to 4096 [ 297.066278][ T8439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.132696][ T8447] IPVS: stopping master sync thread 8448 ... [ 297.384465][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.322609][ T8467] rdma_op ffff88805c8849f0 conn xmit_rdma 0000000000000000 [ 299.113482][ T8483] loop0: detected capacity change from 0 to 512 [ 299.260295][ T8483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.273274][ T8483] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.724050][ T7586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.738057][ T8488] bridge_slave_0: left allmulticast mode [ 299.744413][ T8488] bridge_slave_0: left promiscuous mode [ 299.750144][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.875877][ T8452] loop3: detected capacity change from 0 to 40427 [ 302.371854][ T8510] rdma_op ffff88807d2fe9f0 conn xmit_rdma 0000000000000000 [ 303.179673][ T8527] loop3: detected capacity change from 0 to 512 [ 303.370957][ T8527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.384453][ T8527] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.654528][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.949045][ T8539] loop0: detected capacity change from 0 to 128 [ 305.849814][ T8543] loop3: detected capacity change from 0 to 4096 [ 305.877004][ T8543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.658075][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.449841][ T8576] loop0: detected capacity change from 0 to 512 [ 308.089063][ T8576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.101846][ T8576] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.295232][ T8585] loop2: detected capacity change from 0 to 128 [ 308.527083][ T8587] loop1: detected capacity change from 0 to 256 [ 309.887790][ T8596] loop2: detected capacity change from 0 to 256 [ 310.077420][ T7586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.432388][ T8600] loop1: detected capacity change from 0 to 4096 [ 310.471852][ T8600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.289149][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.784059][ T8622] loop2: detected capacity change from 0 to 512 [ 312.895719][ T8622] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.988142][ T8622] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.769: corrupted in-inode xattr: invalid ea_ino [ 313.114311][ T8622] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.769: couldn't read orphan inode 15 (err -117) [ 313.167864][ T8622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.356642][ T8637] loop4: detected capacity change from 0 to 256 [ 313.388169][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.434356][ T8639] loop3: detected capacity change from 0 to 512 [ 313.445151][ T8639] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 313.454578][ T8639] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.463819][ T8639] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 313.517517][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 313.712037][ T8639] loop3: detected capacity change from 0 to 2048 [ 314.099083][ T8639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.062148][ T8648] loop1: detected capacity change from 0 to 1024 [ 315.105766][ T8648] ext4: Unknown parameter 'noacl' [ 315.173646][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 315.173664][ T29] audit: type=1326 audit(1727355041.890:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.301422][ T8557] coredump: 64(syz.4.748): written to core: VMAs: 34, size 97415168; core: 60150726 bytes, pos 97423360 [ 315.339084][ T29] audit: type=1326 audit(1727355041.930:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.409393][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.483017][ T29] audit: type=1326 audit(1727355041.930:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.505764][ T29] audit: type=1326 audit(1727355041.930:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.555967][ T8655] xt_CT: No such helper "snmp_trap" [ 315.606572][ T29] audit: type=1326 audit(1727355041.930:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.629088][ T29] audit: type=1326 audit(1727355041.930:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.746665][ T29] audit: type=1326 audit(1727355041.930:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.817143][ T29] audit: type=1326 audit(1727355041.930:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.869807][ T29] audit: type=1326 audit(1727355041.930:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 315.912620][ T29] audit: type=1326 audit(1727355041.930:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f628a37df39 code=0x7ffc0000 [ 316.102556][ T8650] loop2: detected capacity change from 0 to 40427 [ 316.113292][ T8650] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 316.120891][ T8650] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 316.129171][ T8650] F2FS-fs (loop2): Unrecognized mount option "whint_mode=fs-based" or missing value [ 317.099342][ T8677] loop2: detected capacity change from 0 to 512 [ 317.214671][ T8677] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.262734][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.269047][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.316833][ T8677] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.519623][ T7793] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 317.857051][ T8693] loop2: detected capacity change from 0 to 256 [ 317.872938][ T8693] vfat: Bad value for 'shortname' [ 318.576693][ T8698] loop4: detected capacity change from 0 to 1024 [ 318.622500][ T8698] ext4: Unknown parameter 'noacl' [ 319.045214][ T8701] xt_CT: No such helper "snmp_trap" [ 320.424596][ T8718] loop1: detected capacity change from 0 to 128 [ 320.711064][ T8719] syzkaller0: entered promiscuous mode [ 320.716692][ T8719] syzkaller0: entered allmulticast mode [ 324.308337][ T8722] loop4: detected capacity change from 0 to 40427 [ 324.509436][ T8722] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 324.552017][ T8722] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 324.563584][ T8722] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 325.437230][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 325.437247][ T29] audit: type=1326 audit(1727355051.660:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 325.478732][ T29] audit: type=1326 audit(1727355051.660:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 325.501960][ T29] audit: type=1326 audit(1727355051.660:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 325.527285][ T29] audit: type=1326 audit(1727355051.670:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 325.581762][ T29] audit: type=1326 audit(1727355051.670:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 325.604198][ T29] audit: type=1326 audit(1727355051.670:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb6d337c7d7 code=0x7ffc0000 [ 325.626847][ T29] audit: type=1326 audit(1727355051.670:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 325.649927][ T29] audit: type=1326 audit(1727355051.670:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 325.672628][ T29] audit: type=1326 audit(1727355051.670:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 325.694879][ T29] audit: type=1326 audit(1727355051.670:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 326.308078][ T5312] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 326.506723][ T8757] loop3: detected capacity change from 0 to 512 [ 326.574963][ T8757] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 326.591845][ T5312] usb 2-1: Using ep0 maxpacket: 32 [ 326.597176][ T8757] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.603269][ T8761] loop4: detected capacity change from 0 to 256 [ 326.609650][ T5312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.706240][ T8763] loop0: detected capacity change from 0 to 128 [ 326.827066][ T8757] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 326.892180][ T8761] vfat: Bad value for 'shortname' [ 327.347080][ T5312] usb 2-1: config 0 has no interfaces? [ 327.355523][ T5312] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 327.364652][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.372739][ T5312] usb 2-1: Product: syz [ 327.377652][ T5312] usb 2-1: Manufacturer: syz [ 327.382317][ T5312] usb 2-1: SerialNumber: syz [ 327.388903][ T5312] usb 2-1: config 0 descriptor?? [ 327.423899][ T8757] loop3: detected capacity change from 0 to 2048 [ 327.506474][ T8757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.712769][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.833386][ T5312] usb 2-1: USB disconnect, device number 8 [ 329.858060][ T8789] loop1: detected capacity change from 0 to 512 [ 329.888799][ T8789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 330.021980][ T8789] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.342024][ T8804] syzkaller0: entered promiscuous mode [ 331.347989][ T8804] syzkaller0: entered allmulticast mode [ 331.793989][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 332.260035][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 332.260059][ T29] audit: type=1326 audit(1727355058.980:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 332.561871][ T29] audit: type=1326 audit(1727355059.010:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 332.890334][ T29] audit: type=1326 audit(1727355059.010:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 332.979270][ T8817] loop3: detected capacity change from 0 to 1024 [ 333.091869][ T29] audit: type=1326 audit(1727355059.010:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 333.131949][ T29] audit: type=1326 audit(1727355059.010:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 333.137617][ T8817] ext4: Unknown parameter 'noacl' [ 333.209684][ T29] audit: type=1326 audit(1727355059.930:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 333.232775][ T29] audit: type=1326 audit(1727355059.930:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 333.255673][ T29] audit: type=1326 audit(1727355059.930:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 333.323140][ T29] audit: type=1326 audit(1727355060.040:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 333.572581][ T29] audit: type=1326 audit(1727355060.050:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 334.381809][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 334.541879][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 334.564608][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.615423][ T9] usb 1-1: config 0 has no interfaces? [ 334.655139][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 334.746229][ T8831] loop4: detected capacity change from 0 to 256 [ 334.753415][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.763454][ T8831] vfat: Bad value for 'shortname' [ 334.769970][ T9] usb 1-1: Product: syz [ 334.774235][ T9] usb 1-1: Manufacturer: syz [ 334.778845][ T9] usb 1-1: SerialNumber: syz [ 334.794741][ T9] usb 1-1: config 0 descriptor?? [ 336.313760][ T1669] usb 1-1: USB disconnect, device number 3 [ 336.439888][ T8855] loop2: detected capacity change from 0 to 1024 [ 336.462438][ T8855] ext4: Unknown parameter 'noacl' [ 337.536438][ T8869] rdma_op ffff888060a701f0 conn xmit_rdma 0000000000000000 [ 339.090054][ T8888] syzkaller0: entered promiscuous mode [ 339.095712][ T8888] syzkaller0: entered allmulticast mode [ 339.844546][ T5242] Bluetooth: hci0: command 0x0406 tx timeout [ 340.190578][ T8897] loop4: detected capacity change from 0 to 256 [ 341.750085][ T8911] loop0: detected capacity change from 0 to 1024 [ 341.831475][ T8911] ext4: Unknown parameter 'noacl' [ 341.902805][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 341.902823][ T29] audit: type=1326 audit(1727355068.630:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 341.936701][ T29] audit: type=1326 audit(1727355068.660:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 341.959203][ T29] audit: type=1326 audit(1727355068.660:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 341.990028][ T29] audit: type=1326 audit(1727355068.660:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 342.128709][ T29] audit: type=1326 audit(1727355068.660:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 342.178593][ T29] audit: type=1326 audit(1727355068.660:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 342.707503][ T29] audit: type=1326 audit(1727355068.660:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 342.730480][ T29] audit: type=1326 audit(1727355068.660:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 342.754010][ T29] audit: type=1326 audit(1727355068.660:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 342.777014][ T29] audit: type=1326 audit(1727355068.660:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 342.928366][ T8918] loop1: detected capacity change from 0 to 256 [ 342.952676][ T8918] vfat: Bad value for 'shortname' [ 343.953459][ T8948] loop3: detected capacity change from 0 to 1024 [ 343.974496][ T8948] ext4: Unknown parameter 'noacl' [ 345.136842][ T8957] loop3: detected capacity change from 0 to 256 [ 347.170463][ T8981] loop4: detected capacity change from 0 to 256 [ 348.369042][ T8999] loop2: detected capacity change from 0 to 128 [ 348.482647][ T9003] loop4: detected capacity change from 0 to 512 [ 348.501688][ T9003] ext4: Unknown parameter 'smackfsdef' [ 349.568420][ T9014] loop1: detected capacity change from 0 to 256 [ 349.861836][ T1669] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 351.466947][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 351.466966][ T29] audit: type=1804 audit(1727355078.190:756): pid=9047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.906" name="/newroot/154/file0/file1" dev="overlay" ino=865 res=1 errno=0 [ 352.346777][ T9066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.916'. [ 352.523852][ T9070] loop3: detected capacity change from 0 to 128 [ 352.642166][ T9072] FAT-fs (loop3): FAT read failed (blocknr 234) [ 352.723083][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'. [ 352.825053][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.889343][ T9070] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 352.954627][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.018346][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.261897][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 353.457223][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.597050][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.607706][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.615928][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.623965][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.632146][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.639436][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.696417][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.762008][ T9099] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 353.919070][ T9101] loop4: detected capacity change from 0 to 1024 [ 353.945591][ T9101] ext4: Unknown parameter 'noacl' [ 354.071741][ T9] usb 3-1: device descriptor read/64, error -71 [ 354.127737][ T29] audit: type=1326 audit(1727355080.810:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 354.150605][ T29] audit: type=1326 audit(1727355080.820:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 354.201837][ T29] audit: type=1326 audit(1727355080.910:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 354.352128][ T29] audit: type=1326 audit(1727355080.960:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 354.409580][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 354.431576][ T29] audit: type=1326 audit(1727355080.960:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 354.582092][ T29] audit: type=1326 audit(1727355080.960:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 354.631922][ T69] bridge_slave_1: left allmulticast mode [ 354.640042][ T69] bridge_slave_1: left promiscuous mode [ 354.654076][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.816849][ T29] audit: type=1326 audit(1727355080.960:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 354.875004][ T29] audit: type=1326 audit(1727355080.960:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 354.911713][ T29] audit: type=1326 audit(1727355080.960:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.4.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 355.002610][ T9] usb 3-1: device descriptor read/64, error -71 [ 355.112124][ T9] usb usb3-port1: attempt power cycle [ 355.266265][ T9129] loop4: detected capacity change from 0 to 128 [ 355.481693][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 355.540523][ T9] usb 3-1: device descriptor read/8, error -71 [ 355.562596][ T9129] syz.4.935: attempt to access beyond end of device [ 355.562596][ T9129] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 355.612165][ T9129] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 355.704188][ T9142] loop3: detected capacity change from 0 to 256 [ 355.721803][ T5242] Bluetooth: hci3: command tx timeout [ 355.848162][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 355.951972][ T9] usb 3-1: device descriptor read/8, error -71 [ 356.825177][ T9] usb usb3-port1: unable to enumerate USB device [ 356.941110][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.945596][ T9154] loop2: detected capacity change from 0 to 512 [ 356.975374][ T9155] loop3: detected capacity change from 0 to 512 [ 356.995385][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.012164][ T9154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.024746][ T9155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.057791][ T9154] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 357.070404][ T69] bond0 (unregistering): Released all slaves [ 357.072178][ T9155] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 357.091229][ T9154] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 357.108368][ T9155] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 357.148257][ T9088] chnl_net:caif_netlink_parms(): no params data found [ 357.210671][ T9154] loop2: detected capacity change from 0 to 2048 [ 357.351263][ T9154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.372491][ T9155] loop3: detected capacity change from 0 to 2048 [ 357.622218][ T9165] bridge_slave_0: left allmulticast mode [ 357.627984][ T9165] bridge_slave_0: left promiscuous mode [ 357.633745][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.815353][ T5242] Bluetooth: hci3: command tx timeout [ 357.857742][ T9155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.700154][ T9179] loop4: detected capacity change from 0 to 128 [ 359.907592][ T55] Bluetooth: hci3: command tx timeout [ 359.995848][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.048870][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.057977][ T9088] bridge_slave_0: entered allmulticast mode [ 360.102917][ T9088] bridge_slave_0: entered promiscuous mode [ 360.143183][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.150666][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.182390][ T9088] bridge_slave_1: entered allmulticast mode [ 360.199689][ T9088] bridge_slave_1: entered promiscuous mode [ 360.303168][ T69] hsr_slave_0: left promiscuous mode [ 360.461828][ T69] hsr_slave_1: left promiscuous mode [ 360.522000][ T5242] Bluetooth: hci5: command 0x0406 tx timeout [ 360.652618][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.660477][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.692455][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.699906][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.807040][ T69] veth1_macvtap: left promiscuous mode [ 360.881760][ T69] veth0_macvtap: left promiscuous mode [ 360.887395][ T69] veth1_vlan: left promiscuous mode [ 360.970773][ T69] veth0_vlan: left promiscuous mode [ 361.881067][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.923777][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.963575][ T5242] Bluetooth: hci3: command tx timeout [ 362.107460][ T9211] loop2: detected capacity change from 0 to 256 [ 364.152549][ T9228] Illegal XDP return value 9228 on prog (id 381) dev N/A, expect packet loss! [ 364.203548][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 364.203564][ T29] audit: type=1326 audit(1727355090.930:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 364.273497][ T9228] loop4: detected capacity change from 0 to 512 [ 364.323308][ T29] audit: type=1326 audit(1727355090.960:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 364.345957][ T29] audit: type=1326 audit(1727355090.960:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 364.368392][ T29] audit: type=1326 audit(1727355090.980:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 364.391101][ T29] audit: type=1326 audit(1727355090.980:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6d337df73 code=0x7ffc0000 [ 364.413984][ T29] audit: type=1326 audit(1727355090.980:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb6d337ca1f code=0x7ffc0000 [ 364.437493][ T29] audit: type=1326 audit(1727355091.000:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb6d337dfc7 code=0x7ffc0000 [ 364.460560][ T29] audit: type=1326 audit(1727355091.000:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d337c8d0 code=0x7ffc0000 [ 364.483964][ T9228] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 364.495502][ T9228] System zones: 0-2, 18-18, 34-34 [ 364.502437][ T29] audit: type=1326 audit(1727355091.000:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6d337db3b code=0x7ffc0000 [ 364.525207][ T29] audit: type=1326 audit(1727355091.050:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9227 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb6d337cbca code=0x7ffc0000 [ 364.548103][ T9228] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.955: bg 0: block 248: padding at end of block bitmap is not set [ 364.621106][ T9228] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.955: Failed to acquire dquot type 1 [ 364.645436][ T9228] EXT4-fs (loop4): 1 truncate cleaned up [ 364.662608][ T9228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.729947][ T9228] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.772808][ T9228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.847839][ T9243] loop2: detected capacity change from 0 to 512 [ 364.882320][ T9243] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 364.928434][ T9243] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 364.951450][ T9243] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 365.047983][ T9243] loop2: detected capacity change from 0 to 2048 [ 365.157050][ T9243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.368926][ T69] team0 (unregistering): Port device team_slave_1 removed [ 366.171915][ T69] team0 (unregistering): Port device team_slave_0 removed [ 366.923837][ T9088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.957478][ T9088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.159191][ T9088] team0: Port device team_slave_0 added [ 367.310080][ T9088] team0: Port device team_slave_1 added [ 367.414681][ T9260] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 368.417155][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.462311][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.469284][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.501686][ T9088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.514796][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.522254][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.548378][ T9088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.695901][ T9088] hsr_slave_0: entered promiscuous mode [ 369.833839][ T9088] hsr_slave_1: entered promiscuous mode [ 370.815297][ T9312] loop2: detected capacity change from 0 to 512 [ 370.857589][ T9312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 371.052415][ T9312] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 371.061573][ T9312] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 371.287768][ T9313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.975'. [ 371.301763][ T9317] loop3: detected capacity change from 0 to 2048 [ 371.375040][ T9309] loop2: detected capacity change from 0 to 2048 [ 371.552584][ T9309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.244031][ T9088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.273888][ T9088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.408860][ T9088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.474069][ T9088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.554513][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.668725][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.684334][ T9088] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.747552][ T9088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.757999][ T9088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.773700][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.780804][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.813349][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.820474][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.425576][ T9088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.470507][ T9088] veth0_vlan: entered promiscuous mode [ 373.484090][ T9088] veth1_vlan: entered promiscuous mode [ 373.567111][ T9088] veth0_macvtap: entered promiscuous mode [ 373.576259][ T9088] veth1_macvtap: entered promiscuous mode [ 373.592109][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.602642][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.612606][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.623139][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.633136][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.644228][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.654895][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.665823][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.675986][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.686518][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.698572][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.709364][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.720008][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.730097][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.741056][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.751400][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.764160][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.778290][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.792005][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.802099][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.812653][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.823781][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.924061][ T9088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.941511][ T9088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.974450][ T9088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.007386][ T9088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.415196][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.446129][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.521401][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.559819][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.602228][ T9374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.989'. [ 374.858808][ T9385] syz.0.990[9385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.858908][ T9385] syz.0.990[9385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.403165][ T9388] syzkaller0: entered promiscuous mode [ 375.420035][ T9388] syzkaller0: entered allmulticast mode [ 375.860434][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 376.101447][ T9385] syz.0.990[9385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.489540][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 376.489558][ T29] audit: type=1326 audit(1727355103.210:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 376.607946][ T29] audit: type=1326 audit(1727355103.330:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23857df39 code=0x7ffc0000 [ 376.715299][ T29] audit: type=1326 audit(1727355103.440:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 376.736336][ T9399] loop3: detected capacity change from 0 to 512 [ 376.820007][ T29] audit: type=1326 audit(1727355103.440:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 376.869816][ T9399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.919706][ T9399] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.967777][ T29] audit: type=1326 audit(1727355103.440:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 377.072805][ T29] audit: type=1326 audit(1727355103.440:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 377.147896][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.157294][ T29] audit: type=1326 audit(1727355103.440:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 377.209032][ T29] audit: type=1326 audit(1727355103.440:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 377.278986][ T29] audit: type=1326 audit(1727355103.440:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 377.310951][ T29] audit: type=1326 audit(1727355103.440:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.3.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 378.724296][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.730641][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.734095][ T9385] erspan0: entered promiscuous mode [ 380.052848][ T9385] erspan0: left promiscuous mode [ 380.420656][ T9426] netlink: 2008 bytes leftover after parsing attributes in process `syz.2.999'. [ 380.439120][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 382.272264][ T9464] loop2: detected capacity change from 0 to 1024 [ 382.379936][ T9464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.407375][ T9472] loop4: detected capacity change from 0 to 256 [ 382.419979][ T9474] loop1: detected capacity change from 0 to 256 [ 382.763441][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.565862][ T9511] loop2: detected capacity change from 0 to 512 [ 384.684485][ T9511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.698052][ T9511] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.250927][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1023'. [ 385.479345][ T9539] loop1: detected capacity change from 0 to 512 [ 385.580376][ T9539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 385.607891][ T9539] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.274507][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.612081][ T9573] loop2: detected capacity change from 0 to 512 [ 387.619044][ T9573] ext4: Unknown parameter 'smackfsdef' [ 388.892655][ T9088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 389.157303][ T9592] loop0: detected capacity change from 0 to 2048 [ 389.750866][ T9604] loop3: detected capacity change from 0 to 512 [ 389.908316][ T9604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 390.051803][ T9604] EXT4-fs (loop3): 1 truncate cleaned up [ 390.381643][ T9620] loop1: detected capacity change from 0 to 512 [ 390.888906][ T9604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.920733][ T9620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.933449][ T9620] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.076989][ T9626] loop0: detected capacity change from 0 to 256 [ 391.174030][ T9088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.615673][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.683314][ T9631] loop2: detected capacity change from 0 to 1024 [ 391.721258][ T9631] ext4: Unknown parameter 'noacl' [ 391.942572][ T9635] loop4: detected capacity change from 0 to 512 [ 391.949482][ T9635] ext4: Unknown parameter 'smackfsdef' [ 392.035004][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 392.035021][ T29] audit: type=1326 audit(1727355118.750:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 392.325175][ T29] audit: type=1326 audit(1727355118.750:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 392.361758][ T29] audit: type=1326 audit(1727355118.750:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 392.734976][ T29] audit: type=1326 audit(1727355118.760:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 392.757281][ T29] audit: type=1326 audit(1727355118.760:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 392.981982][ T9647] syz.1.1048[9647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.982074][ T9647] syz.1.1048[9647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.008192][ T29] audit: type=1326 audit(1727355118.760:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 393.042900][ T29] audit: type=1326 audit(1727355118.760:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 393.065530][ T29] audit: type=1326 audit(1727355118.760:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 393.091824][ T9647] syz.1.1048[9647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.131796][ T9647] loop1: detected capacity change from 0 to 164 [ 393.173775][ T29] audit: type=1326 audit(1727355118.760:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 393.361455][ T29] audit: type=1326 audit(1727355118.760:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.2.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 395.548000][ T9672] loop2: detected capacity change from 0 to 256 [ 397.175128][ T9682] loop0: detected capacity change from 0 to 512 [ 397.486967][ T9682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.500508][ T9682] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.860119][ T7586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.864092][ T9690] loop3: detected capacity change from 0 to 512 [ 398.101305][ T9695] loop2: detected capacity change from 0 to 512 [ 398.107807][ T9690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 398.107829][ T9690] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.141637][ T9690] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 398.181445][ T9695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 398.201057][ T9695] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.278863][ T9690] loop3: detected capacity change from 0 to 2048 [ 398.672944][ T9690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.768124][ T9706] loop0: detected capacity change from 0 to 2048 [ 399.940630][ T9719] loop0: detected capacity change from 0 to 256 [ 400.130988][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 400.212539][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.227848][ T9738] rdma_op ffff88807dcb71f0 conn xmit_rdma 0000000000000000 [ 401.260858][ T9740] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 401.271234][ T9739] IPVS: stopping master sync thread 9740 ... [ 401.374421][ T9744] loop1: detected capacity change from 0 to 512 [ 401.421733][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 401.459591][ T9744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 401.499715][ T9744] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.581703][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 401.589450][ T8] usb 3-1: no configurations [ 401.598900][ T8] usb 3-1: can't read configurations, error -22 [ 402.651950][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 402.713935][ T9088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 402.931666][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 402.956582][ T9766] loop3: detected capacity change from 0 to 256 [ 403.002187][ T8] usb 3-1: no configurations [ 403.012013][ T8] usb 3-1: can't read configurations, error -22 [ 403.018772][ T8] usb usb3-port1: attempt power cycle [ 404.051938][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 404.072764][ T8] usb 3-1: device descriptor read/8, error -71 [ 404.153598][ T9779] IPVS: stopping master sync thread 9783 ... [ 404.548188][ T9792] loop2: detected capacity change from 0 to 512 [ 404.604164][ T9792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 404.660097][ T9792] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.660554][ T9808] loop0: detected capacity change from 0 to 2048 [ 407.791182][ T9817] loop3: detected capacity change from 0 to 256 [ 408.063888][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 409.307910][ T9826] rdma_op ffff88807a52b1f0 conn xmit_rdma 0000000000000000 [ 409.310057][ T9830] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 409.332073][ T9824] IPVS: stopping master sync thread 9830 ... [ 409.421713][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 409.602959][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 409.623382][ T9] usb 1-1: no configurations [ 409.638121][ T9] usb 1-1: can't read configurations, error -22 [ 409.801789][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 409.912330][ T9813] loop1: detected capacity change from 0 to 40427 [ 409.940157][ T9813] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 409.977052][ T9813] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 410.001758][ T9813] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 410.016507][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 410.049558][ T9] usb 1-1: no configurations [ 410.074830][ T9] usb 1-1: can't read configurations, error -22 [ 410.109840][ T9] usb usb1-port1: attempt power cycle [ 410.274945][ T9834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.316885][ T9834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.461876][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 410.567299][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 410.621269][ T9834] bond0 (unregistering): Released all slaves [ 410.663371][ T9] usb 1-1: no configurations [ 410.723634][ T9] usb 1-1: can't read configurations, error -22 [ 410.972081][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 411.095689][ T9846] bridge_slave_0: left allmulticast mode [ 411.101517][ T9846] bridge_slave_0: left promiscuous mode [ 411.107695][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.551697][ T9] usb 1-1: device descriptor read/8, error -71 [ 411.650175][ T9859] loop1: detected capacity change from 0 to 2048 [ 411.661898][ T9] usb usb1-port1: unable to enumerate USB device [ 412.708748][ T5330] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 412.861696][ T5330] usb 4-1: Using ep0 maxpacket: 32 [ 412.880528][ T5330] usb 4-1: no configurations [ 412.896779][ T5330] usb 4-1: can't read configurations, error -22 [ 412.922579][ T9889] loop1: detected capacity change from 0 to 764 [ 412.984338][ T9889] rock: directory entry would overflow storage [ 413.006613][ T9889] rock: sig=0x4f50, size=4, remaining=3 [ 413.061911][ T9889] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 413.070677][ T5330] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 413.216047][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 413.216064][ T29] audit: type=1326 audit(1727355139.940:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 413.288166][ T29] audit: type=1326 audit(1727355139.980:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 413.370530][ T29] audit: type=1326 audit(1727355139.990:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.2.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 413.467712][ T29] audit: type=1326 audit(1727355139.990:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm=2BB55D7D5B exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 413.557217][ T29] audit: type=1326 audit(1727355139.990:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm=2BB55D7D5B exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 413.615805][ T9878] loop4: detected capacity change from 0 to 40427 [ 413.631845][ T29] audit: type=1326 audit(1727355140.320:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm=2BB55D7D5B exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 413.776712][ T9878] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 413.785817][ T9878] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 413.836033][ T9878] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 413.861720][ T29] audit: type=1326 audit(1727355140.320:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm=2BB55D7D5B exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e77df39 code=0x7ffc0000 [ 414.052983][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1137'. [ 415.531636][ T29] audit: type=1326 audit(1727355142.010:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 415.581724][ T29] audit: type=1326 audit(1727355142.010:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 415.989008][ T9924] bpf: Bad value for 'gid' [ 415.995708][ T29] audit: type=1326 audit(1727355142.110:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.4.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d337df39 code=0x7ffc0000 [ 416.124575][ T9929] loop2: detected capacity change from 0 to 256 [ 416.368721][ T9940] loop1: detected capacity change from 0 to 512 [ 416.402897][ T9940] ext2: Unknown parameter 'seclabel' [ 416.483762][ T9940] loop1: detected capacity change from 0 to 512 [ 416.551368][ T9940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.620798][ T9940] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.630739][ T9953] loop0: detected capacity change from 0 to 128 [ 416.670224][ T9953] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.722510][ T9953] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 416.928595][ T9088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.464802][ T7586] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 418.032025][ T9991] loop1: detected capacity change from 0 to 512 [ 418.051827][ T9991] EXT4-fs: Ignoring removed oldalloc option [ 418.073109][ T9991] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1172: Parent and EA inode have the same ino 15 [ 418.102826][ T9991] EXT4-fs (loop1): Remounting filesystem read-only [ 418.114995][ T9991] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 418.151025][ T9996] syz.0.1174[9996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.151123][ T9996] syz.0.1174[9996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.185969][ T9991] EXT4-fs (loop1): 1 orphan inode deleted [ 418.223035][ T9996] syz.0.1174[9996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.252621][ T9991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.525818][ T9088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.914332][T10017] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1183'. [ 418.948976][T10017] 0ªX¹¦À: renamed from caif0 [ 418.999087][T10017] 0ªX¹¦À: entered allmulticast mode [ 419.022362][T10017] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 419.117420][T10021] 9pnet_fd: Insufficient options for proto=fd [ 419.863910][T10025] loop3: detected capacity change from 0 to 256 [ 420.043669][T10035] loop2: detected capacity change from 0 to 2048 [ 420.276211][T10044] loop4: detected capacity change from 0 to 256 [ 420.634590][T10057] loop0: detected capacity change from 0 to 128 [ 420.699129][T10057] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.760646][T10057] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 421.109521][ T7586] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.752052][T10083] syz.0.1208[10083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.752147][T10083] syz.0.1208[10083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.839452][T10088] loop4: detected capacity change from 0 to 128 [ 421.871459][T10083] syz.0.1208[10083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.904651][T10089] 9pnet_fd: Insufficient options for proto=fd [ 421.986067][T10091] loop2: detected capacity change from 0 to 512 [ 422.062283][T10091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 422.075644][T10091] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.549505][T10101] loop4: detected capacity change from 0 to 512 [ 422.634422][T10101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.709547][T10101] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.990378][ T7823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.191766][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 423.298517][T10117] bridge_slave_0: left allmulticast mode [ 423.305342][T10117] bridge_slave_0: left promiscuous mode [ 423.311727][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.838251][T10119] loop4: detected capacity change from 0 to 128 [ 424.181746][T10121] loop1: detected capacity change from 0 to 256 [ 424.692525][T10109] loop3: detected capacity change from 0 to 40427 [ 424.723688][T10109] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 424.758597][T10109] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 424.787888][T10109] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 424.878846][T10142] 9pnet_fd: Insufficient options for proto=fd [ 425.715252][T10149] loop2: detected capacity change from 0 to 128 [ 425.763278][T10149] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 426.053291][T10155] bridge_slave_0: left allmulticast mode [ 426.059022][T10155] bridge_slave_0: left promiscuous mode [ 426.065707][T10155] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.103524][T10154] overlayfs: missing 'lowerdir' [ 426.404658][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 426.404690][ T29] audit: type=1326 audit(1727355152.880:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 426.792139][ T29] audit: type=1326 audit(1727355152.880:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 426.852283][ T29] audit: type=1326 audit(1727355152.880:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 426.918370][ T29] audit: type=1326 audit(1727355152.880:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 427.040809][ T29] audit: type=1326 audit(1727355152.880:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 427.122076][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 427.134346][ T29] audit: type=1326 audit(1727355152.880:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4d4997c7d7 code=0x7ffc0000 [ 427.201854][ T29] audit: type=1326 audit(1727355152.880:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 427.273161][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 427.280643][ T29] audit: type=1326 audit(1727355152.880:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 427.421349][T10168] loop2: detected capacity change from 0 to 512 [ 428.028209][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 428.037344][ T8] usb 4-1: can't read configurations, error -61 [ 428.052393][ T29] audit: type=1326 audit(1727355152.880:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 428.075903][ T29] audit: type=1326 audit(1727355152.880:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4997df39 code=0x7ffc0000 [ 428.181944][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 428.184547][T10168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.202091][T10168] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.233743][T10172] loop0: detected capacity change from 0 to 512 [ 428.242549][T10172] ext4: Unknown parameter 'smackfsdef' [ 428.463606][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.610213][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 429.198969][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 429.206643][ T8] usb 4-1: can't read configurations, error -61 [ 429.213595][ T8] usb usb4-port1: attempt power cycle [ 429.551823][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 429.592533][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 429.600506][ T8] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 429.603178][T10199] syzkaller0: entered promiscuous mode [ 429.608216][ T8] usb 4-1: can't read configurations, error -61 [ 429.634073][T10199] syzkaller0: entered allmulticast mode [ 429.764789][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 429.786792][T10205] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 429.856280][ T8] usb 4-1: device descriptor read/8, error -71 [ 429.981210][ T8] usb usb4-port1: unable to enumerate USB device [ 430.133076][T10214] loop2: detected capacity change from 0 to 512 [ 430.158907][T10214] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.193103][T10214] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 430.274424][T10214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 430.308467][T10214] System zones: 1-12 [ 430.356895][T10214] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1253: corrupted in-inode xattr: e_value size too large [ 430.469860][T10214] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1253: couldn't read orphan inode 15 (err -117) [ 430.495842][T10214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.600109][T10219] loop1: detected capacity change from 0 to 512 [ 430.641963][T10219] ext4: Unknown parameter 'smackfsdef' [ 431.455365][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.694456][T10232] capability: warning: `syz.1.1258' uses deprecated v2 capabilities in a way that may be insecure [ 431.919156][T10236] loop4: detected capacity change from 0 to 128 [ 433.743613][T10250] loop4: detected capacity change from 0 to 256 [ 434.031672][ T5330] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 434.195905][ T5330] usb 4-1: Using ep0 maxpacket: 32 [ 434.203786][ T5330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 434.219906][ T5330] usb 4-1: can't read configurations, error -61 [ 434.391802][ T5330] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 434.573336][ T5330] usb 4-1: Using ep0 maxpacket: 32 [ 434.669181][ T5330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 434.677930][ T5330] usb 4-1: can't read configurations, error -61 [ 434.692560][ T5330] usb usb4-port1: attempt power cycle [ 434.760325][T10254] loop4: detected capacity change from 0 to 1024 [ 434.767516][T10254] EXT4-fs: Ignoring removed nobh option [ 434.812028][T10254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.841243][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 434.841267][ T29] audit: type=1800 audit(1727355161.560:927): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1263" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 435.041733][ T5330] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 435.079056][ T5330] usb 4-1: Using ep0 maxpacket: 32 [ 435.095007][ T5330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 435.114975][ T5330] usb 4-1: can't read configurations, error -61 [ 435.246181][ T7823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.801678][ T5330] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 436.165899][ T5330] usb 4-1: Using ep0 maxpacket: 32 [ 436.180900][ T5330] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 436.201684][ T5330] usb 4-1: can't read configurations, error -61 [ 436.209007][ T5330] usb usb4-port1: unable to enumerate USB device [ 436.384256][T10270] loop4: detected capacity change from 0 to 512 [ 436.399106][T10270] ext4: Unknown parameter 'smackfsdef' [ 438.577791][T10287] loop4: detected capacity change from 0 to 256 [ 439.614606][T10278] bridge0: port 3(vlan2) entered blocking state [ 439.621193][T10278] bridge0: port 3(vlan2) entered disabled state [ 439.661891][T10278] vlan2: entered allmulticast mode [ 439.932507][T10278] vlan2: left allmulticast mode [ 440.127194][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 440.139841][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 440.147849][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 440.187760][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.195687][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 440.203885][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.226636][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.233133][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.933816][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 442.101689][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 442.120643][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.128699][ T8] usb 5-1: can't read configurations, error -61 [ 442.272364][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 442.288299][ T55] Bluetooth: hci6: command tx timeout [ 442.371723][T10317] hsr_slave_0: left promiscuous mode [ 442.387879][T10317] hsr_slave_1: left promiscuous mode [ 442.442065][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 442.458555][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 443.348714][ T8] usb 5-1: can't read configurations, error -61 [ 443.355518][ T8] usb usb5-port1: attempt power cycle [ 443.568843][T10338] loop1: detected capacity change from 0 to 256 [ 443.611070][T10339] xt_nat: multiple ranges no longer supported [ 443.690896][T10343] loop2: detected capacity change from 0 to 1024 [ 443.721814][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 443.740423][T10343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.750038][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 443.767876][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 443.787495][T10343] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 443.805382][ T8] usb 5-1: can't read configurations, error -61 [ 443.964016][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.039348][T10346] bridge0: port 3(vlan2) entered blocking state [ 444.058040][T10346] bridge0: port 3(vlan2) entered disabled state [ 444.079659][T10350] loop4: detected capacity change from 0 to 164 [ 444.105617][T10346] vlan2: entered allmulticast mode [ 444.117263][T10350] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 444.132802][T10343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.163845][T10341] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 444.243664][T10350] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 444.254047][T10350] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 444.331401][T10346] vlan2: left allmulticast mode [ 444.368359][ T55] Bluetooth: hci6: command tx timeout [ 444.383653][T10297] chnl_net:caif_netlink_parms(): no params data found [ 444.643436][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.850467][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.964633][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.989881][T10359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1294'. [ 445.118335][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.204150][T10366] netlink: 'syz.3.1294': attribute type 10 has an invalid length. [ 445.245091][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.291823][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.299189][T10297] bridge_slave_0: entered allmulticast mode [ 445.356656][T10297] bridge_slave_0: entered promiscuous mode [ 445.390807][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.450701][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.481992][T10297] bridge_slave_1: entered allmulticast mode [ 445.513165][T10297] bridge_slave_1: entered promiscuous mode [ 445.718903][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.775329][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.914280][T10297] team0: Port device team_slave_0 added [ 445.951462][T10297] team0: Port device team_slave_1 added [ 446.047387][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.071168][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.171637][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.252150][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.281764][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 446.290015][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.395944][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.446030][ T55] Bluetooth: hci6: command tx timeout [ 446.481746][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 446.491403][ T8] usb 3-1: config 0 has no interfaces? [ 446.506681][ T8] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 446.516635][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.532865][ T8] usb 3-1: Product: syz [ 446.538396][ T8] usb 3-1: Manufacturer: syz [ 446.554206][ T8] usb 3-1: SerialNumber: syz [ 446.622924][ T8] usb 3-1: config 0 descriptor?? [ 446.769187][T10297] hsr_slave_0: entered promiscuous mode [ 446.802125][T10297] hsr_slave_1: entered promiscuous mode [ 446.816749][T10297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.856413][T10297] Cannot create hsr debugfs directory [ 446.864107][ T8] usb 3-1: USB disconnect, device number 13 [ 446.887035][ T69] bridge_slave_1: left allmulticast mode [ 446.905725][ T69] bridge_slave_1: left promiscuous mode [ 446.925878][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.596668][T10390] loop2: detected capacity change from 0 to 1024 [ 447.642453][T10390] EXT4-fs: Ignoring removed orlov option [ 447.664187][T10390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.789034][T10390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.345261][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.550563][ T55] Bluetooth: hci6: command tx timeout [ 448.822360][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.857854][ T69] bond0 (unregistering): Released all slaves [ 449.006118][T10400] netlink: 'syz.2.1305': attribute type 10 has an invalid length. [ 449.020258][T10400] batman_adv: batadv0: Adding interface: team0 [ 449.026991][T10400] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.052238][T10400] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 449.062873][T10401] netlink: 'syz.2.1305': attribute type 10 has an invalid length. [ 449.070735][T10401] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1305'. [ 449.079860][T10401] team0: entered promiscuous mode [ 449.084970][T10401] team_slave_0: entered promiscuous mode [ 449.090849][T10401] team_slave_1: entered promiscuous mode [ 449.098183][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.105813][T10401] batman_adv: batadv0: Interface activated: team0 [ 449.112378][T10401] batman_adv: batadv0: Interface deactivated: team0 [ 449.119002][T10401] batman_adv: batadv0: Removing interface: team0 [ 449.451960][T10401] bridge0: port 1(team0) entered blocking state [ 449.458349][T10401] bridge0: port 1(team0) entered disabled state [ 449.458349][T10407] loop3: detected capacity change from 0 to 40427 [ 449.471420][T10401] team0: entered allmulticast mode [ 449.476649][T10401] team_slave_0: entered allmulticast mode [ 449.482645][T10401] team_slave_1: entered allmulticast mode [ 449.490442][T10401] bridge0: port 1(team0) entered blocking state [ 449.496804][T10401] bridge0: port 1(team0) entered forwarding state [ 449.548576][T10407] F2FS-fs (loop3): invalid crc value [ 449.617455][ T7793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.647151][T10407] F2FS-fs (loop3): Found nat_bits in checkpoint [ 449.729750][T10407] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 449.746624][ T1669] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 449.850043][T10416] loop2: detected capacity change from 0 to 512 [ 449.877749][T10416] ext4: Unknown parameter 'smackfsdef' [ 450.114827][ T5331] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 450.125984][ T5331] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 450.134501][ T5331] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 450.204188][ T1669] usb 5-1: Using ep0 maxpacket: 32 [ 450.222298][ T1669] usb 5-1: config 0 has no interfaces? [ 450.252970][ T6942] syz-executor: attempt to access beyond end of device [ 450.252970][ T6942] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 450.279619][ T1669] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 450.307807][ T1669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.336096][ T6942] syz-executor: attempt to access beyond end of device [ 450.336096][ T6942] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 450.388626][ T5331] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 450.438366][ T1669] usb 5-1: Product: syz [ 450.490029][ T1669] usb 5-1: Manufacturer: syz [ 450.537052][ T1669] usb 5-1: SerialNumber: syz [ 450.617977][ T1669] usb 5-1: config 0 descriptor?? [ 450.908229][ T1049] kworker/u8:5: attempt to access beyond end of device [ 450.908229][ T1049] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 450.924138][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1316'. [ 450.978316][ T1049] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 450.985810][ T1049] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 450.996499][ T69] hsr_slave_0: left promiscuous mode [ 451.105685][T10427] 9pnet_fd: Insufficient options for proto=fd [ 451.121892][ T69] hsr_slave_1: left promiscuous mode [ 451.143653][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.259482][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.408284][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.535699][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.736312][ T69] veth1_macvtap: left promiscuous mode [ 451.755243][ T69] veth0_macvtap: left promiscuous mode [ 451.760830][ T69] veth1_vlan: left promiscuous mode [ 451.772320][ T69] veth0_vlan: left promiscuous mode [ 452.381479][ T937] usb 5-1: USB disconnect, device number 6 [ 452.513814][ T69] team0 (unregistering): Port device team_slave_1 removed [ 452.677378][ T69] team0 (unregistering): Port device team_slave_0 removed [ 454.824944][T10450] loop2: detected capacity change from 0 to 128 [ 454.868147][T10450] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.896067][T10450] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 455.248048][T10458] netlink: 'syz.1.1326': attribute type 2 has an invalid length. [ 455.283562][ T7793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.654698][T10297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 455.849783][T10297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 456.113231][T10297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 456.219257][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.275289][T10297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.454113][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.502431][ T1669] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 456.528515][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.679241][ T1669] usb 3-1: Using ep0 maxpacket: 32 [ 456.690777][ T1669] usb 3-1: config 0 has no interfaces? [ 456.714925][ T1669] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 456.726648][T10225] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.733788][T10225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.743031][T10225] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.750124][T10225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.770571][ T1669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.803264][ T1669] usb 3-1: Product: syz [ 456.830008][ T1669] usb 3-1: Manufacturer: syz [ 456.840874][ T1669] usb 3-1: SerialNumber: syz [ 456.854249][ T1669] usb 3-1: config 0 descriptor?? [ 456.932137][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 456.950858][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.963747][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.975368][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.109460][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 457.118409][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.302386][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.472208][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.696121][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.990923][ T69] bridge_slave_1: left allmulticast mode [ 457.997249][ T69] bridge_slave_1: left promiscuous mode [ 458.003969][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.014935][ T69] bridge_slave_0: left allmulticast mode [ 458.026282][ T69] bridge_slave_0: left promiscuous mode [ 458.032209][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.055540][T10496] xt_nat: multiple ranges no longer supported [ 460.750829][ T5242] Bluetooth: hci0: command tx timeout [ 460.977985][ T937] usb 3-1: USB disconnect, device number 14 [ 461.439099][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.612330][T10297] veth0_vlan: entered promiscuous mode [ 461.633563][T10297] veth1_vlan: entered promiscuous mode [ 461.678054][T10297] veth0_macvtap: entered promiscuous mode [ 461.696745][T10297] veth1_macvtap: entered promiscuous mode [ 461.779128][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.841620][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.851485][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.905997][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.931634][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.951590][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.981743][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.007697][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.031706][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.059785][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.098583][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.149740][T10473] chnl_net:caif_netlink_parms(): no params data found [ 462.311319][ T69] IPVS: stopping master sync thread 9099 ... [ 462.361239][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.432475][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.481623][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.521675][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.561601][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.623434][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.671030][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.720626][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.770392][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.050652][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.081339][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.068445][ T55] Bluetooth: hci0: command tx timeout [ 464.657230][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 464.679074][T10297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.705796][ T937] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 464.733885][T10297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.781673][T10297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.790410][T10297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.913081][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 464.934562][ T937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.966851][ T937] usb 3-1: config 0 has no interfaces? [ 465.010233][ T937] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 465.060967][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.108647][ T937] usb 3-1: Product: syz [ 465.130116][ T937] usb 3-1: Manufacturer: syz [ 465.155314][ T937] usb 3-1: SerialNumber: syz [ 465.187508][ T937] usb 3-1: config 0 descriptor?? [ 465.455466][T10473] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.479402][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.501769][T10473] bridge_slave_0: entered allmulticast mode [ 465.525072][T10473] bridge_slave_0: entered promiscuous mode [ 465.557255][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.568940][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.582977][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.604318][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.633322][T10473] bridge_slave_1: entered allmulticast mode [ 465.664410][T10473] bridge_slave_1: entered promiscuous mode [ 465.841857][T10473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.877527][T10473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.023022][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.034902][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.054477][T10473] team0: Port device team_slave_0 added [ 466.148716][T10473] team0: Port device team_slave_1 added [ 466.398330][T10473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.421625][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.532933][ T937] usb 3-1: USB disconnect, device number 15 [ 466.539760][T10473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.682225][ T5242] Bluetooth: hci0: command tx timeout [ 466.698904][T10533] loop2: detected capacity change from 0 to 256 [ 466.792696][T10473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.820788][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.924746][T10473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.091747][ T69] hsr_slave_0: left promiscuous mode [ 467.133628][ T69] hsr_slave_1: left promiscuous mode [ 467.193591][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.223430][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.273745][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.281279][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.387698][ T69] veth1_macvtap: left promiscuous mode [ 467.430912][ T69] veth0_macvtap: left promiscuous mode [ 467.455006][ T69] veth1_vlan: left promiscuous mode [ 467.481897][ T69] veth0_vlan: left promiscuous mode [ 468.762113][ T5242] Bluetooth: hci0: command tx timeout [ 469.111560][ C1] sched: DL replenish lagged too much [ 469.525451][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.549203][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.567449][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.576907][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.586847][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 469.595072][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.788003][ T69] team0 (unregistering): Port device team_slave_1 removed [ 470.005421][ T69] team0 (unregistering): Port device team_slave_0 removed [ 471.641834][ T5242] Bluetooth: hci5: command tx timeout [ 472.216012][T10473] hsr_slave_0: entered promiscuous mode [ 472.392071][T10473] hsr_slave_1: entered promiscuous mode [ 472.430693][T10473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.445487][T10473] Cannot create hsr debugfs directory [ 472.498197][T10546] netlink: 'syz.0.1351': attribute type 10 has an invalid length. [ 472.570820][T10548] loop1: detected capacity change from 0 to 2048 [ 472.598335][T10546] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 473.721834][ T5242] Bluetooth: hci5: command tx timeout [ 473.835627][T10543] chnl_net:caif_netlink_parms(): no params data found [ 474.310592][T10572] loop1: detected capacity change from 0 to 512 [ 474.334061][ T937] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 474.349760][T10572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.362499][T10572] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.550607][ T937] usb 1-1: Using ep0 maxpacket: 32 [ 474.586203][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.630572][ T937] usb 1-1: config 0 has no interfaces? [ 474.667685][ T937] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 474.683697][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.706824][T10543] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.721785][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.750546][T10543] bridge_slave_0: entered allmulticast mode [ 474.762834][ T937] usb 1-1: Product: syz [ 474.780729][ T937] usb 1-1: Manufacturer: syz [ 474.786844][T10543] bridge_slave_0: entered promiscuous mode [ 474.805642][ T937] usb 1-1: SerialNumber: syz [ 474.826334][T10577] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 474.855710][ T937] usb 1-1: config 0 descriptor?? [ 474.881092][T10577] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 475.801862][ T5242] Bluetooth: hci5: command tx timeout [ 476.962152][ T937] usb 1-1: USB disconnect, device number 9 [ 477.882635][ T5242] Bluetooth: hci5: command tx timeout [ 483.158928][ T9088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.285692][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.331190][T10543] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.351963][T10543] bridge_slave_1: entered allmulticast mode [ 483.397963][T10543] bridge_slave_1: entered promiscuous mode [ 483.791613][T10597] xt_ipcomp: unknown flags 12 [ 487.482250][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.493461][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.501289][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.510035][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.517626][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 487.525057][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.561815][ T5234] Bluetooth: hci2: command tx timeout [ 491.641758][ T5234] Bluetooth: hci2: command tx timeout [ 493.721758][ T5234] Bluetooth: hci2: command tx timeout [ 495.618255][ T5242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 495.628126][ T5242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 495.636556][ T5242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 495.646901][ T5242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 495.654756][ T5242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 495.662177][ T5242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 495.758917][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 495.768725][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 495.776636][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 495.784613][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 495.795001][ T5234] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 495.804080][ T5234] Bluetooth: hci2: command tx timeout [ 495.810404][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 497.721985][T10611] Bluetooth: hci7: command tx timeout [ 497.881687][T10611] Bluetooth: hci8: command tx timeout [ 499.801644][T10611] Bluetooth: hci7: command tx timeout [ 499.961906][T10611] Bluetooth: hci8: command tx timeout [ 501.643211][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.649555][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.881739][T10611] Bluetooth: hci7: command tx timeout [ 502.041608][T10611] Bluetooth: hci8: command tx timeout [ 503.962031][T10611] Bluetooth: hci7: command tx timeout [ 504.123449][T10611] Bluetooth: hci8: command tx timeout [ 519.547624][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 519.561702][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 519.569527][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 519.579737][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 519.587655][ T55] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 519.595171][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 521.641728][ T55] Bluetooth: hci9: command tx timeout [ 523.730876][ T55] Bluetooth: hci9: command tx timeout [ 525.801651][ T55] Bluetooth: hci9: command tx timeout [ 527.881705][ T55] Bluetooth: hci9: command tx timeout [ 530.543296][T10611] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 530.553409][T10611] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 530.571744][T10611] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 530.580514][T10611] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 530.588201][T10611] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 530.595654][T10611] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 532.690016][T10611] Bluetooth: hci10: command tx timeout [ 534.769788][T10611] Bluetooth: hci10: command tx timeout [ 536.849661][T10611] Bluetooth: hci10: command tx timeout [ 538.926134][T10611] Bluetooth: hci10: command tx timeout [ 548.133798][ T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 548.157903][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 548.165816][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 548.174493][ T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 548.182182][ T55] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 548.190786][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 550.281831][ T55] Bluetooth: hci11: command tx timeout [ 552.361629][ T55] Bluetooth: hci11: command tx timeout [ 554.441792][ T55] Bluetooth: hci11: command tx timeout [ 554.851727][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 556.260320][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 556.269422][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 556.278106][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 556.286418][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 556.294136][ T55] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 556.302513][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 556.357971][T10611] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 556.367987][T10611] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 556.376608][T10611] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 556.384686][T10611] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 556.392469][T10611] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 556.400593][T10611] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 556.521753][T10611] Bluetooth: hci11: command tx timeout [ 558.361724][T10611] Bluetooth: hci12: command tx timeout [ 558.521878][T10611] Bluetooth: hci13: command tx timeout [ 560.441771][T10611] Bluetooth: hci12: command tx timeout [ 560.601666][T10611] Bluetooth: hci13: command tx timeout [ 562.525267][T10611] Bluetooth: hci12: command tx timeout [ 562.681701][T10611] Bluetooth: hci13: command tx timeout [ 563.034166][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.040487][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.601806][ T55] Bluetooth: hci12: command tx timeout [ 564.761756][ T55] Bluetooth: hci13: command tx timeout [ 565.088406][ T55] Bluetooth: hci6: command 0x0406 tx timeout [ 580.236912][ T5234] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 580.249599][ T5234] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 580.257529][ T5234] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 580.265600][ T5234] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 580.282206][ T5234] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 580.290726][ T5234] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 580.448771][ T5234] Bluetooth: hci0: command 0x0406 tx timeout [ 582.362531][ T55] Bluetooth: hci14: command tx timeout [ 584.441796][ T55] Bluetooth: hci14: command tx timeout [ 586.521661][ T55] Bluetooth: hci14: command tx timeout [ 588.603293][ T55] Bluetooth: hci14: command tx timeout [ 591.629378][ T5234] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 591.638594][ T5234] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 591.649999][ T5234] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 591.658125][ T5234] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 591.665880][ T5234] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 591.675629][ T5234] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 593.735826][ T5234] Bluetooth: hci15: command tx timeout [ 595.801782][ T5234] Bluetooth: hci15: command tx timeout [ 595.807324][ T5234] Bluetooth: hci5: command 0x0406 tx timeout [ 597.881682][ T55] Bluetooth: hci15: command tx timeout [ 599.962126][ T55] Bluetooth: hci15: command tx timeout [ 608.316198][ T5234] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 608.327491][ T5234] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 608.335461][ T5234] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 608.344292][ T5234] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 608.352112][ T5234] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 608.359457][ T5234] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 610.441695][ T55] Bluetooth: hci16: command tx timeout [ 611.167830][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 612.521735][ T5234] Bluetooth: hci16: command tx timeout [ 614.601585][ T5234] Bluetooth: hci16: command tx timeout [ 616.435582][ T55] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 616.449412][ T55] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 616.457758][ T55] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 616.467519][ T55] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 616.477977][T10649] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 616.486305][T10649] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 616.493946][T10649] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 616.501792][ T5242] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 616.511674][ T5242] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 616.520761][T10649] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 616.530327][T10649] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 616.537796][T10649] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 616.681604][T10649] Bluetooth: hci16: command tx timeout [ 618.611687][T10649] Bluetooth: hci17: command tx timeout [ 618.618334][T10649] Bluetooth: hci18: command tx timeout [ 620.681715][ T5242] Bluetooth: hci18: command tx timeout [ 620.687255][ T5242] Bluetooth: hci17: command tx timeout [ 621.406748][ T5242] Bluetooth: hci7: command 0x0406 tx timeout [ 621.420706][ T5234] Bluetooth: hci8: command 0x0406 tx timeout [ 622.761791][T10649] Bluetooth: hci17: command tx timeout [ 622.767333][T10649] Bluetooth: hci18: command tx timeout [ 624.451944][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.458277][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.841702][T10649] Bluetooth: hci18: command tx timeout [ 624.847592][T10611] Bluetooth: hci17: command tx timeout [ 640.894413][ T5242] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 640.905046][ T5242] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 640.912947][ T5242] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 640.921245][ T5242] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 640.929375][ T5242] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 640.939318][ T5242] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 641.899601][ T5242] Bluetooth: hci9: command 0x0406 tx timeout [ 643.001862][T10611] Bluetooth: hci19: command tx timeout [ 644.921943][ T30] INFO: task kworker/u8:4:69 blocked for more than 143 seconds. [ 644.929627][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 644.961378][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 644.981506][ T30] task:kworker/u8:4 state:D stack:22384 pid:69 tgid:69 ppid:2 flags:0x00004000 [ 645.031560][ T30] Workqueue: netns cleanup_net [ 645.036398][ T30] Call Trace: [ 645.091543][T10611] Bluetooth: hci19: command tx timeout [ 645.111061][ T30] [ 645.121859][ T30] __schedule+0x1895/0x4b30 [ 645.179065][ T30] ? __pfx___schedule+0x10/0x10 [ 645.212075][ T30] ? __pfx_lock_release+0x10/0x10 [ 645.217142][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 645.281544][ T30] ? kthread_data+0x52/0xd0 [ 645.286093][ T30] ? schedule+0x90/0x320 [ 645.290355][ T30] ? wq_worker_sleeping+0x66/0x240 [ 645.348567][ T30] ? schedule+0x90/0x320 [ 645.381106][ T30] schedule+0x14b/0x320 [ 645.401600][ T30] schedule_preempt_disabled+0x13/0x30 [ 645.408102][ T30] __mutex_lock+0x6a7/0xd70 [ 645.444791][ T30] ? __mutex_lock+0x52a/0xd70 [ 645.449518][ T30] ? wg_destruct+0x25/0x2e0 [ 645.476455][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 645.491428][ T30] ? __pfx_free_percpu+0x10/0x10 [ 645.496455][ T30] ? kobject_put+0x272/0x480 [ 645.511596][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 645.516576][ T30] wg_destruct+0x25/0x2e0 [ 645.520931][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 645.560840][ T30] netdev_run_todo+0xe1a/0x1000 [ 645.580233][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 645.591852][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 645.597789][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 645.627253][ T30] default_device_exit_batch+0xa24/0xaa0 [ 645.648547][ T30] ? __pfx___might_resched+0x10/0x10 [ 645.670792][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 645.690450][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 645.701685][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 645.707001][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 645.737073][ T30] cleanup_net+0x89d/0xcc0 [ 645.757635][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 645.765060][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 645.770466][ T30] ? process_scheduled_works+0x976/0x1850 [ 645.803168][ T30] process_scheduled_works+0xa63/0x1850 [ 645.808804][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 645.840460][ T30] ? assign_work+0x364/0x3d0 [ 645.845416][ T30] worker_thread+0x870/0xd30 [ 645.850051][ T30] ? __kthread_parkme+0x169/0x1d0 [ 645.885303][ T30] ? __pfx_worker_thread+0x10/0x10 [ 645.890463][ T30] kthread+0x2f0/0x390 [ 645.918862][ T30] ? __pfx_worker_thread+0x10/0x10 [ 645.931671][ T30] ? __pfx_kthread+0x10/0x10 [ 645.936291][ T30] ret_from_fork+0x4b/0x80 [ 645.940736][ T30] ? __pfx_kthread+0x10/0x10 [ 645.981737][ T30] ret_from_fork_asm+0x1a/0x30 [ 645.986559][ T30] [ 645.998412][ T30] INFO: task kworker/0:2:937 blocked for more than 144 seconds. [ 646.031589][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 646.050203][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.081634][ T30] task:kworker/0:2 state:D stack:23280 pid:937 tgid:937 ppid:2 flags:0x00004000 [ 646.111626][ T30] Workqueue: events switchdev_deferred_process_work [ 646.118259][ T30] Call Trace: [ 646.141673][ T30] [ 646.145029][ T30] __schedule+0x1895/0x4b30 [ 646.158504][ T30] ? try_to_wake_up+0x971/0x1480 [ 646.181629][ T30] ? schedule+0x90/0x320 [ 646.185917][ T30] ? __pfx___schedule+0x10/0x10 [ 646.190788][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 646.221507][ T30] ? __pfx_lock_release+0x10/0x10 [ 646.244528][ T30] ? kick_pool+0x45c/0x620 [ 646.249180][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 646.291556][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 646.296794][ T30] ? schedule+0x90/0x320 [ 646.301053][ T30] schedule+0x14b/0x320 [ 646.327977][ T30] schedule_preempt_disabled+0x13/0x30 [ 646.337485][ T30] __mutex_lock+0x6a7/0xd70 [ 646.361746][ T30] ? __mutex_lock+0x52a/0xd70 [ 646.366462][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 646.399214][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 646.411665][ T30] ? process_scheduled_works+0x976/0x1850 [ 646.417421][ T30] switchdev_deferred_process_work+0xe/0x20 [ 646.440324][ T30] process_scheduled_works+0xa63/0x1850 [ 646.461539][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 646.467569][ T30] ? assign_work+0x364/0x3d0 [ 646.489784][ T30] worker_thread+0x870/0xd30 [ 646.501660][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 646.507598][ T30] ? __kthread_parkme+0x169/0x1d0 [ 646.541526][ T30] ? __pfx_worker_thread+0x10/0x10 [ 646.546683][ T30] kthread+0x2f0/0x390 [ 646.569791][ T30] ? __pfx_worker_thread+0x10/0x10 [ 646.581738][ T30] ? __pfx_kthread+0x10/0x10 [ 646.586362][ T30] ret_from_fork+0x4b/0x80 [ 646.590805][ T30] ? __pfx_kthread+0x10/0x10 [ 646.619812][ T30] ret_from_fork_asm+0x1a/0x30 [ 646.631680][ T30] [ 646.641535][ T30] INFO: task kworker/u8:5:1049 blocked for more than 145 seconds. [ 646.649364][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 646.690780][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 646.730872][ T30] task:kworker/u8:5 state:D stack:20048 pid:1049 tgid:1049 ppid:2 flags:0x00004000 [ 646.761273][ T30] Workqueue: events_unbound linkwatch_event [ 646.780556][ T30] Call Trace: [ 646.792933][ T30] [ 646.795895][ T30] __schedule+0x1895/0x4b30 [ 646.800444][ T30] ? __pfx___schedule+0x10/0x10 [ 646.829771][ T30] ? __pfx_lock_release+0x10/0x10 [ 646.839858][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 646.861605][ T30] ? kthread_data+0x52/0xd0 [ 646.871490][ T30] ? schedule+0x90/0x320 [ 646.875769][ T30] ? wq_worker_sleeping+0x66/0x240 [ 646.880907][ T30] ? schedule+0x90/0x320 [ 646.921704][ T30] schedule+0x14b/0x320 [ 646.925901][ T30] schedule_preempt_disabled+0x13/0x30 [ 646.931376][ T30] __mutex_lock+0x6a7/0xd70 [ 646.961687][ T30] ? __mutex_lock+0x52a/0xd70 [ 646.966603][ T30] ? linkwatch_event+0xe/0x60 [ 646.971302][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 646.996125][ T30] ? process_scheduled_works+0x976/0x1850 [ 647.021548][ T30] linkwatch_event+0xe/0x60 [ 647.026083][ T30] process_scheduled_works+0xa63/0x1850 [ 647.045227][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.051256][ T30] ? assign_work+0x364/0x3d0 [ 647.091531][ T30] worker_thread+0x870/0xd30 [ 647.096187][ T30] ? __kthread_parkme+0x169/0x1d0 [ 647.101238][ T30] ? __pfx_worker_thread+0x10/0x10 [ 647.125937][ T30] kthread+0x2f0/0x390 [ 647.130044][ T30] ? __pfx_worker_thread+0x10/0x10 [ 647.151736][ T30] ? __pfx_kthread+0x10/0x10 [ 647.156584][ T30] ret_from_fork+0x4b/0x80 [ 647.161031][ T30] ? __pfx_kthread+0x10/0x10 [ 647.165895][T10611] Bluetooth: hci19: command tx timeout [ 647.201550][ T30] ret_from_fork_asm+0x1a/0x30 [ 647.206378][ T30] [ 647.221568][ T30] INFO: task kworker/u8:7:1119 blocked for more than 145 seconds. [ 647.229397][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 647.271542][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.297766][ T30] task:kworker/u8:7 state:D stack:20480 pid:1119 tgid:1119 ppid:2 flags:0x00004000 [ 647.331515][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 647.337804][ T30] Call Trace: [ 647.360793][ T30] [ 647.363822][ T30] __schedule+0x1895/0x4b30 [ 647.368368][ T30] ? __pfx___schedule+0x10/0x10 [ 647.398261][ T30] ? __pfx_lock_release+0x10/0x10 [ 647.411621][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 647.417115][ T30] ? kthread_data+0x52/0xd0 [ 647.437840][ T30] ? schedule+0x90/0x320 [ 647.454262][ T30] ? wq_worker_sleeping+0x66/0x240 [ 647.459422][ T30] ? schedule+0x90/0x320 [ 647.481366][ T30] schedule+0x14b/0x320 [ 647.501522][ T30] schedule_preempt_disabled+0x13/0x30 [ 647.511710][ T30] __mutex_lock+0x6a7/0xd70 [ 647.516249][ T30] ? __mutex_lock+0x52a/0xd70 [ 647.520948][ T30] ? addrconf_verify_work+0x19/0x30 [ 647.556610][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 647.575190][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 647.596692][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 647.611624][ T30] ? process_scheduled_works+0x976/0x1850 [ 647.617383][ T30] addrconf_verify_work+0x19/0x30 [ 647.641666][ T30] process_scheduled_works+0xa63/0x1850 [ 647.647290][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.671570][ T30] ? assign_work+0x364/0x3d0 [ 647.676202][ T30] worker_thread+0x870/0xd30 [ 647.680832][ T30] ? __kthread_parkme+0x169/0x1d0 [ 647.730688][ T30] ? __pfx_worker_thread+0x10/0x10 [ 647.735962][ T30] kthread+0x2f0/0x390 [ 647.740057][ T30] ? __pfx_worker_thread+0x10/0x10 [ 647.774848][ T30] ? __pfx_kthread+0x10/0x10 [ 647.779529][ T30] ret_from_fork+0x4b/0x80 [ 647.800662][ T30] ? __pfx_kthread+0x10/0x10 [ 647.820176][ T30] ret_from_fork_asm+0x1a/0x30 [ 647.831650][ T30] [ 647.841615][ T30] INFO: task jbd2/sda1-8:4648 blocked for more than 146 seconds. [ 647.849359][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 647.878200][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.910612][ T30] task:jbd2/sda1-8 state:D stack:23984 pid:4648 tgid:4648 ppid:2 flags:0x00004000 [ 647.941649][ T30] Call Trace: [ 647.944962][ T30] [ 647.947909][ T30] __schedule+0x1895/0x4b30 [ 647.966803][ T30] ? __pfx___schedule+0x10/0x10 [ 647.986393][ T30] ? __pfx_lock_release+0x10/0x10 [ 647.997200][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.017673][ T30] ? schedule+0x90/0x320 [ 648.037419][ T30] schedule+0x14b/0x320 [ 648.041756][ T30] io_schedule+0x8d/0x110 [ 648.046115][ T30] bit_wait_io+0x12/0xd0 [ 648.050377][ T30] __wait_on_bit+0xb0/0x2f0 [ 648.081584][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 648.086563][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 648.119571][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 648.141540][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 648.147559][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 648.180810][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 648.191710][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 648.198621][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 648.240210][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 648.246224][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 648.270296][ T30] ? __timer_delete_sync+0x15c/0x310 [ 648.291536][ T30] ? __timer_delete_sync+0x25d/0x310 [ 648.297076][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 648.320353][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 648.340294][ T30] ? prepare_to_wait+0x186/0x210 [ 648.360215][ T30] ? schedule+0x90/0x320 [ 648.371649][ T30] kjournald2+0x41c/0x7b0 [ 648.376827][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 648.402092][ T30] ? __pfx_kjournald2+0x10/0x10 [ 648.406976][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 648.431600][ T30] ? __kthread_parkme+0x169/0x1d0 [ 648.436674][ T30] ? __pfx_kjournald2+0x10/0x10 [ 648.470225][ T30] kthread+0x2f0/0x390 [ 648.474388][ T30] ? __pfx_kjournald2+0x10/0x10 [ 648.501205][ T30] ? __pfx_kthread+0x10/0x10 [ 648.506323][ T30] ret_from_fork+0x4b/0x80 [ 648.510779][ T30] ? __pfx_kthread+0x10/0x10 [ 648.544848][ T30] ret_from_fork_asm+0x1a/0x30 [ 648.549664][ T30] [ 648.570367][ T30] INFO: task syz-executor:10473 blocked for more than 147 seconds. [ 648.601640][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 648.608613][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.641670][ T30] task:syz-executor state:D stack:20784 pid:10473 tgid:10473 ppid:1 flags:0x00004006 [ 648.671657][ T30] Call Trace: [ 648.674966][ T30] [ 648.677913][ T30] __schedule+0x1895/0x4b30 [ 648.706689][ T30] ? __pfx___schedule+0x10/0x10 [ 648.721622][ T30] ? __pfx_lock_release+0x10/0x10 [ 648.726683][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 648.751651][ T30] ? schedule+0x90/0x320 [ 648.755932][ T30] schedule+0x14b/0x320 [ 648.760114][ T30] schedule_preempt_disabled+0x13/0x30 [ 648.790835][ T30] __mutex_lock+0x6a7/0xd70 [ 648.806243][ T30] ? __mutex_lock+0x52a/0xd70 [ 648.821576][ T30] ? unregister_nexthop_notifier+0x17/0x40 [ 648.827421][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 648.880234][ T30] ? synchronize_rcu+0x11b/0x360 [ 648.885301][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 648.911349][ T30] ? rcu_is_watching+0x15/0xb0 [ 648.921510][ T30] unregister_nexthop_notifier+0x17/0x40 [ 648.927178][ T30] nsim_fib_destroy+0x89/0x180 [ 648.960735][ T30] nsim_dev_reload_destroy+0x2e3/0x490 [ 648.980296][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 648.990778][ T30] nsim_drv_remove+0x58/0x160 [ 649.009973][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 649.029929][ T30] bus_remove_device+0x34f/0x420 [ 649.041608][ T30] device_del+0x57a/0x9b0 [ 649.045982][ T30] ? __pfx_device_del+0x10/0x10 [ 649.050861][ T30] device_unregister+0x20/0xc0 [ 649.081592][ T30] del_device_store+0x363/0x480 [ 649.086487][ T30] ? __pfx_del_device_store+0x10/0x10 [ 649.114113][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 649.135596][ T30] ? bus_attr_store+0x4f/0xb0 [ 649.140315][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 649.180342][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 649.201523][ T30] vfs_write+0xa6d/0xc90 [ 649.205803][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 649.231584][ T30] ? __pfx_vfs_write+0x10/0x10 [ 649.236380][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 649.241254][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 649.246678][T10611] Bluetooth: hci19: command tx timeout [ 649.290251][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 649.296460][ T30] ? fdget_pos+0x265/0x320 [ 649.322360][ T30] ksys_write+0x183/0x2b0 [ 649.326727][ T30] ? __pfx_ksys_write+0x10/0x10 [ 649.345986][ T30] ? do_syscall_64+0x100/0x230 [ 649.350789][ T30] ? do_syscall_64+0xb6/0x230 [ 649.381622][ T30] do_syscall_64+0xf3/0x230 [ 649.386161][ T30] ? clear_bhb_loop+0x35/0x90 [ 649.390859][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.421601][ T30] RIP: 0033:0x7faba037ca1f [ 649.441555][ T30] RSP: 002b:00007fffc21d9b50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 649.450167][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007faba037ca1f [ 649.471598][ T30] RDX: 0000000000000001 RSI: 00007fffc21d9ba0 RDI: 0000000000000005 [ 649.479599][ T30] RBP: 00007faba03f12b5 R08: 0000000000000000 R09: 00007fffc21d99a7 [ 649.520304][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 649.541560][ T30] R13: 00007fffc21d9ba0 R14: 00007faba1064620 R15: 0000000000000003 [ 649.549580][ T30] [ 649.581522][ T30] INFO: task syz-executor:10543 blocked for more than 148 seconds. [ 649.589436][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 649.625846][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.661109][ T30] task:syz-executor state:D stack:21728 pid:10543 tgid:10543 ppid:1 flags:0x00000004 [ 649.700180][ T30] Call Trace: [ 649.703570][ T30] [ 649.707944][ T30] __schedule+0x1895/0x4b30 [ 649.730712][ T30] ? __pfx___schedule+0x10/0x10 [ 649.741932][ T30] ? __pfx_lock_release+0x10/0x10 [ 649.746998][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 649.791654][ T30] ? schedule+0x90/0x320 [ 649.795937][ T30] schedule+0x14b/0x320 [ 649.800119][ T30] schedule_preempt_disabled+0x13/0x30 [ 649.821584][ T30] __mutex_lock+0x6a7/0xd70 [ 649.826128][ T30] ? __mutex_lock+0x52a/0xd70 [ 649.830835][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 649.871614][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 649.876693][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 649.901651][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 649.906807][ T30] ? __lock_acquire+0x1384/0x2050 [ 649.931917][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.945795][ T30] netlink_rcv_skb+0x1e3/0x430 [ 649.950620][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.990243][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.995630][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 650.000852][ T30] netlink_unicast+0x7f6/0x990 [ 650.031983][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 650.042158][ T30] ? __virt_addr_valid+0x183/0x530 [ 650.047307][ T30] ? __check_object_size+0x48e/0x900 [ 650.080803][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 650.091623][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.096956][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 650.116662][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.141577][ T30] __sock_sendmsg+0x221/0x270 [ 650.146302][ T30] __sys_sendto+0x39b/0x4f0 [ 650.150923][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 650.190711][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.195995][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 650.229138][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 650.241630][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 650.248203][ T30] __x64_sys_sendto+0xde/0x100 [ 650.271560][ T30] do_syscall_64+0xf3/0x230 [ 650.276101][ T30] ? clear_bhb_loop+0x35/0x90 [ 650.280802][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.331360][ T30] RIP: 0033:0x7f1d0a97fdcc [ 650.335986][ T30] RSP: 002b:00007ffd5318a5e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 650.365642][ T30] RAX: ffffffffffffffda RBX: 00007f1d0b664620 RCX: 00007f1d0a97fdcc [ 650.391575][ T30] RDX: 0000000000000068 RSI: 00007f1d0b664670 RDI: 0000000000000003 [ 650.399578][ T30] RBP: 0000000000000000 R08: 00007ffd5318a634 R09: 000000000000000c [ 650.451582][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 650.459585][ T30] R13: 0000000000000000 R14: 00007f1d0b664670 R15: 0000000000000000 [ 650.489273][ T30] [ 650.501687][ T30] INFO: task syz.1.1362:10589 blocked for more than 148 seconds. [ 650.509424][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 650.541572][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.550453][ T30] task:syz.1.1362 state:D stack:23512 pid:10589 tgid:10588 ppid:9088 flags:0x00000004 [ 650.611528][ T30] Call Trace: [ 650.614838][ T30] [ 650.617794][ T30] __schedule+0x1895/0x4b30 [ 650.637791][ T30] ? __pfx___schedule+0x10/0x10 [ 650.658651][ T30] ? __pfx_lock_release+0x10/0x10 [ 650.671624][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 650.677128][ T30] ? schedule+0x90/0x320 [ 650.681388][ T30] schedule+0x14b/0x320 [ 650.720222][ T30] schedule_preempt_disabled+0x13/0x30 [ 650.725872][ T30] __mutex_lock+0x6a7/0xd70 [ 650.761533][ T30] ? __mutex_lock+0x52a/0xd70 [ 650.766255][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 650.791652][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 650.796735][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 650.821665][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 650.826824][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.851650][ T30] ? ref_tracker_free+0x643/0x7e0 [ 650.861915][ T30] netlink_rcv_skb+0x1e3/0x430 [ 650.866714][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.884657][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 650.889998][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 650.921795][ T30] netlink_unicast+0x7f6/0x990 [ 650.926603][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 650.947955][ T30] ? __virt_addr_valid+0x183/0x530 [ 650.971183][ T30] ? __check_object_size+0x48e/0x900 [ 650.990353][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 651.002175][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.007498][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 651.037156][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.051695][ T30] __sock_sendmsg+0x221/0x270 [ 651.056415][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 651.061212][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.109194][ T30] __sys_sendmsg+0x292/0x380 [ 651.115006][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.120191][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.151748][ T30] ? do_syscall_64+0x100/0x230 [ 651.156561][ T30] ? do_syscall_64+0xb6/0x230 [ 651.161257][ T30] do_syscall_64+0xf3/0x230 [ 651.199968][ T30] ? clear_bhb_loop+0x35/0x90 [ 651.211617][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.217544][ T30] RIP: 0033:0x7f606717df39 [ 651.250765][ T30] RSP: 002b:00007f6067f58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.271485][ T30] RAX: ffffffffffffffda RBX: 00007f6067335f80 RCX: 00007f606717df39 [ 651.279491][ T30] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000006 [ 651.341350][ T30] RBP: 00007f60671f0216 R08: 0000000000000000 R09: 0000000000000000 [ 651.361637][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.369839][ T30] R13: 0000000000000000 R14: 00007f6067335f80 R15: 00007ffc2fb553b8 [ 651.410606][ T30] [ 651.413784][ T30] INFO: task syz.0.1363:10591 blocked for more than 149 seconds. [ 651.458165][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 651.481826][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 651.490520][ T30] task:syz.0.1363 state:D stack:27296 pid:10591 tgid:10590 ppid:10297 flags:0x00000004 [ 651.541638][ T30] Call Trace: [ 651.544958][ T30] [ 651.547905][ T30] __schedule+0x1895/0x4b30 [ 651.571201][ T30] ? __pfx___schedule+0x10/0x10 [ 651.585677][ T30] ? __pfx_lock_release+0x10/0x10 [ 651.590736][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 651.620539][ T30] ? schedule+0x90/0x320 [ 651.631663][ T30] schedule+0x14b/0x320 [ 651.635938][ T30] schedule_preempt_disabled+0x13/0x30 [ 651.641412][ T30] __mutex_lock+0x6a7/0xd70 [ 651.676307][ T30] ? __mutex_lock+0x52a/0xd70 [ 651.681301][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 651.697319][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 651.721831][ T30] ? __might_fault+0xc6/0x120 [ 651.726547][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 651.731432][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 651.757795][ T30] ? __fget_files+0x3f3/0x470 [ 651.771762][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 651.780654][ T30] __se_sys_ioctl+0xf9/0x170 [ 651.799382][ T30] do_syscall_64+0xf3/0x230 [ 651.811647][ T30] ? clear_bhb_loop+0x35/0x90 [ 651.821517][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.827440][ T30] RIP: 0033:0x7fabd017df39 [ 651.850034][ T30] RSP: 002b:00007fabd0e9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.880150][ T30] RAX: ffffffffffffffda RBX: 00007fabd0335f80 RCX: 00007fabd017df39 [ 651.906237][ T30] RDX: 0000000020000180 RSI: 00000000400454ca RDI: 0000000000000003 [ 651.939789][ T30] RBP: 00007fabd01f0216 R08: 0000000000000000 R09: 0000000000000000 [ 651.951703][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.960570][ T30] R13: 0000000000000000 R14: 00007fabd0335f80 R15: 00007ffcb197f0e8 [ 652.010718][ T30] [ 652.014033][ T30] INFO: task syz.0.1363:10592 blocked for more than 150 seconds. [ 652.037081][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 652.060466][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.091219][ T30] task:syz.0.1363 state:D stack:27296 pid:10592 tgid:10590 ppid:10297 flags:0x00000004 [ 652.131512][ T30] Call Trace: [ 652.134819][ T30] [ 652.137768][ T30] __schedule+0x1895/0x4b30 [ 652.159233][ T30] ? __pfx___schedule+0x10/0x10 [ 652.180874][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.191648][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 652.197155][ T30] ? schedule+0x90/0x320 [ 652.201414][ T30] schedule+0x14b/0x320 [ 652.231941][ T30] schedule_preempt_disabled+0x13/0x30 [ 652.237432][ T30] __mutex_lock+0x6a7/0xd70 [ 652.261506][ T30] ? __mutex_lock+0x52a/0xd70 [ 652.271614][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 652.276674][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 652.321529][ T30] ? __might_fault+0xc6/0x120 [ 652.326249][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 652.331134][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 652.358255][ T30] ? __fget_files+0x3f3/0x470 [ 652.381522][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 652.386670][ T30] __se_sys_ioctl+0xf9/0x170 [ 652.391288][ T30] do_syscall_64+0xf3/0x230 [ 652.416935][ T30] ? clear_bhb_loop+0x35/0x90 [ 652.441686][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.447621][ T30] RIP: 0033:0x7fabd017df39 [ 652.472542][ T30] RSP: 002b:00007fabcfbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.480993][ T30] RAX: ffffffffffffffda RBX: 00007fabd0336058 RCX: 00007fabd017df39 [ 652.514856][ T30] RDX: 0000000020000180 RSI: 00000000400454ca RDI: 0000000000000004 [ 652.541528][ T30] RBP: 00007fabd01f0216 R08: 0000000000000000 R09: 0000000000000000 [ 652.549528][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.590777][ T30] R13: 0000000000000000 R14: 00007fabd0336058 R15: 00007ffcb197f0e8 [ 652.629166][ T30] [ 652.632323][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 652.660280][ T30] INFO: task syz.0.1363:10595 blocked for more than 151 seconds. [ 652.691760][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 652.698545][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.729783][ T30] task:syz.0.1363 state:D stack:26976 pid:10595 tgid:10590 ppid:10297 flags:0x00004004 [ 652.760222][ T30] Call Trace: [ 652.779035][ T30] [ 652.782056][ T30] __schedule+0x1895/0x4b30 [ 652.786605][ T30] ? __pfx___schedule+0x10/0x10 [ 652.811103][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.830344][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 652.850261][ T30] ? schedule+0x90/0x320 [ 652.861636][ T30] schedule+0x14b/0x320 [ 652.865831][ T30] schedule_preempt_disabled+0x13/0x30 [ 652.871304][ T30] __mutex_lock+0x6a7/0xd70 [ 652.905068][ T30] ? __mutex_lock+0x52a/0xd70 [ 652.909785][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 652.940126][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 652.960296][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 652.971649][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 652.976816][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 653.001889][ T30] ? ref_tracker_free+0x643/0x7e0 [ 653.011638][ T30] netlink_rcv_skb+0x1e3/0x430 [ 653.016440][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 653.050269][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.061645][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 653.066886][ T30] netlink_unicast+0x7f6/0x990 [ 653.100909][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 653.109867][ T30] ? __virt_addr_valid+0x183/0x530 [ 653.140445][ T30] ? __check_object_size+0x48e/0x900 [ 653.145849][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 653.150651][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.188687][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 653.201520][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.206832][ T30] __sock_sendmsg+0x221/0x270 [ 653.228349][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 653.241818][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.247151][ T30] __sys_sendmsg+0x292/0x380 [ 653.271679][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.276869][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 653.310309][ T30] ? do_syscall_64+0x100/0x230 [ 653.329660][ T30] ? do_syscall_64+0xb6/0x230 [ 653.357057][ T30] do_syscall_64+0xf3/0x230 [ 653.361744][ T30] ? clear_bhb_loop+0x35/0x90 [ 653.366448][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.393953][ T30] RIP: 0033:0x7fabd017df39 [ 653.398398][ T30] RSP: 002b:00007fabcfbbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.440543][ T30] RAX: ffffffffffffffda RBX: 00007fabd0336208 RCX: 00007fabd017df39 [ 653.480260][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 653.488395][ T30] RBP: 00007fabd01f0216 R08: 0000000000000000 R09: 0000000000000000 [ 653.515684][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.541610][ T30] R13: 0000000000000000 R14: 00007fabd0336208 R15: 00007ffcb197f0e8 [ 653.549629][ T30] [ 653.580914][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 653.611109][ T30] INFO: task syz.2.1365:10600 blocked for more than 152 seconds. [ 653.631530][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 653.638318][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 653.680234][ T30] task:syz.2.1365 state:D stack:23512 pid:10600 tgid:10599 ppid:7793 flags:0x00000004 [ 653.710605][ T30] Call Trace: [ 653.714404][ T30] [ 653.717373][ T30] __schedule+0x1895/0x4b30 [ 653.750488][ T30] ? __pfx___schedule+0x10/0x10 [ 653.755610][ T30] ? __pfx_lock_release+0x10/0x10 [ 653.760664][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 653.791542][ T30] ? schedule+0x90/0x320 [ 653.795823][ T30] schedule+0x14b/0x320 [ 653.799995][ T30] schedule_preempt_disabled+0x13/0x30 [ 653.831593][ T30] __mutex_lock+0x6a7/0xd70 [ 653.836140][ T30] ? __mutex_lock+0x52a/0xd70 [ 653.840840][ T30] ? ethnl_default_dumpit+0x411/0xb30 [ 653.871669][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 653.876906][ T30] ? __nlmsg_put+0xf7/0x190 [ 653.881433][ T30] ? genlmsg_put+0x145/0x2e0 [ 653.928158][ T30] ethnl_default_dumpit+0x411/0xb30 [ 653.933718][ T30] ? ethnl_default_dumpit+0x83/0xb30 [ 653.939038][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 653.980268][ T30] genl_dumpit+0x107/0x1a0 [ 653.984788][ T30] netlink_dump+0x647/0xd80 [ 653.989310][ T30] ? ethnl_default_start+0x33e/0x560 [ 654.011630][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 654.016703][ T30] ? genl_start+0x597/0x6d0 [ 654.021238][ T30] __netlink_dump_start+0x5a2/0x790 [ 654.061594][ T30] genl_rcv_msg+0x88c/0xec0 [ 654.066131][ T30] ? mark_lock+0x9a/0x360 [ 654.070485][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.099292][ T30] ? __pfx_genl_start+0x10/0x10 [ 654.110823][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 654.126642][ T30] ? __pfx_genl_done+0x10/0x10 [ 654.148138][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 654.170527][ T30] ? __pfx_ethnl_default_start+0x10/0x10 [ 654.176279][ T30] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 654.211164][ T30] ? __pfx_ethnl_default_done+0x10/0x10 [ 654.230532][ T30] ? __pfx___might_resched+0x10/0x10 [ 654.250323][ T30] netlink_rcv_skb+0x1e3/0x430 [ 654.261615][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.266678][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 654.301536][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 654.307048][ T30] genl_rcv+0x28/0x40 [ 654.311050][ T30] netlink_unicast+0x7f6/0x990 [ 654.354978][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 654.360296][ T30] ? __virt_addr_valid+0x183/0x530 [ 654.383491][ T30] ? __check_object_size+0x48e/0x900 [ 654.388822][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 654.421528][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.426853][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 654.451604][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.456928][ T30] __sock_sendmsg+0x221/0x270 [ 654.490257][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 654.501684][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.507024][ T30] __sys_sendmsg+0x292/0x380 [ 654.532900][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.538068][ T30] ? bpf_raw_tracepoint_open+0x18b/0x1f0 [ 654.570749][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.590529][ T30] ? do_syscall_64+0x100/0x230 [ 654.601777][ T30] ? do_syscall_64+0xb6/0x230 [ 654.606497][ T30] do_syscall_64+0xf3/0x230 [ 654.611022][ T30] ? clear_bhb_loop+0x35/0x90 [ 654.642000][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.660610][ T30] RIP: 0033:0x7fd17e77df39 [ 654.680384][ T30] RSP: 002b:00007fd17f579038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.711704][ T30] RAX: ffffffffffffffda RBX: 00007fd17e935f80 RCX: 00007fd17e77df39 [ 654.719725][ T30] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 654.751958][ T30] RBP: 00007fd17e7f0216 R08: 0000000000000000 R09: 0000000000000000 [ 654.759969][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.811635][ T30] R13: 0000000000000000 R14: 00007fd17e935f80 R15: 00007ffc47f63228 [ 654.819668][ T30] [ 654.847082][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 654.871042][ T30] INFO: task syz-executor:10603 blocked for more than 153 seconds. [ 654.894931][ T30] Not tainted 6.11.0-next-20240926-syzkaller #0 [ 654.921511][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.949974][ T30] task:syz-executor state:D stack:24128 pid:10603 tgid:10603 ppid:1 flags:0x00004004