last executing test programs: 14.254708092s ago: executing program 3 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r2, 0x0) 12.655543962s ago: executing program 1 (id=452): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 12.542993861s ago: executing program 3 (id=454): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffd, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 10.941983956s ago: executing program 2 (id=457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMDELTIMER(r3, 0x541b, 0x0) 10.804537264s ago: executing program 3 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x14, 0x1e, 0x109}, 0x14}}, 0x44090) 10.71708944s ago: executing program 1 (id=460): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000400)=""/32, 0x20}, {0x0}, {0x0}], 0x4}, 0x400}], 0x1, 0x42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x34, r4, 0x301, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) 9.853657856s ago: executing program 2 (id=461): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000380), 0x4) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r2) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x12810400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000) 9.711498708s ago: executing program 3 (id=463): syz_open_dev$usbmon(0x0, 0x7, 0x5c1440) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x44b2, &(0x7f0000000380)={0x0, 0xaec7, 0x8, 0x1, 0x101}, 0x0, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x2000, 0x40, 0x0, 0x8000021e, 0x0, r2}, &(0x7f00000001c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 9.65321445s ago: executing program 1 (id=464): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r5, 0x0, 0x1004000, 0x0, 0x0}) 8.219882062s ago: executing program 4 (id=468): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.337424491s ago: executing program 1 (id=471): socket$inet_sctp(0x2, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.976422376s ago: executing program 4 (id=472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x4000000000001dd, 0x40000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sigaltstack(&(0x7f0000000080)={&(0x7f0000000540)=""/276, 0x0, 0xfffffc1a}, &(0x7f0000000280)={&(0x7f0000000140)=""/193, 0x0, 0xc1}) 5.903318768s ago: executing program 2 (id=473): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x0, 0xc, 0xe9d9, 0x800, 0x2, 0x1, 0x1}, 0x0, &(0x7f0000000340)={0x3ff, 0xd0000000, 0x10007, 0x7e3, 0x3, 0x80000008, 0xfffffffffffffffe, 0xbf7}, 0x0, 0x0) 5.827778776s ago: executing program 3 (id=474): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 5.767889024s ago: executing program 0 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 5.754417894s ago: executing program 1 (id=476): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x969, {0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x200000, 0x0, r3, 0x1fff}}, {0x3, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 4.747750073s ago: executing program 4 (id=477): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 3.971939005s ago: executing program 0 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) 3.971311337s ago: executing program 1 (id=479): ioperm(0x0, 0x83, 0x1f) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x1a3865) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x2081c04, &(0x7f0000000140)=ANY=[], 0x1, 0x69d, &(0x7f0000000d00)="$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") 3.596627787s ago: executing program 2 (id=480): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000400)=0x126a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x404c094) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet(r3, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x300}]}}}}}}}, 0x0) 2.796135406s ago: executing program 0 (id=481): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) 1.784768527s ago: executing program 0 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.732068868s ago: executing program 3 (id=483): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b00010000000009040000"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[], 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote}, 0xc) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000500)={0xed, 0x0, 0x1000000000005}) readahead(0xffffffffffffffff, 0xffffffff, 0xfffffffffffffffd) 1.636976001s ago: executing program 2 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r4, 0x309, 0x3, 0x0, {0x1d}}, 0x14}}, 0x20) 1.527836483s ago: executing program 4 (id=485): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x200, 0xfffffbff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7100fcdbdf258900000008000300", @ANYRES32, @ANYBLOB="1c001d80010000800c0002"], 0x38}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.3684428s ago: executing program 0 (id=486): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 522.171ms ago: executing program 2 (id=487): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) landlock_create_ruleset(&(0x7f0000000080)={0x8040}, 0x18, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x2, 0x0, 0x0) 498.057557ms ago: executing program 0 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = timerfd_create(0x8, 0x0) read(r1, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 424.676235ms ago: executing program 4 (id=489): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 0s ago: executing program 4 (id=490): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x20}, 0xc) write(r2, &(0x7f0000000180)="ec", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2f}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x71, 0xffff1896, 0x3, 0x26, 0x0, 0x1a}, 0x9c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 84.275069][ T5814] cgroup: Unknown subsys name 'net' [ 84.425506][ T5814] cgroup: Unknown subsys name 'cpuset' [ 84.434834][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.213006][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.629847][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.638620][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.646750][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.655339][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.663433][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.836745][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.847020][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.855759][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.865202][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.883368][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.884021][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.892642][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.906673][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.906714][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.915148][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.922614][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.929292][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.937200][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.943648][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.958788][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.966993][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.967142][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.983642][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.004501][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.024053][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.272954][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 90.490488][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.498171][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.505876][ T5825] bridge_slave_0: entered allmulticast mode [ 90.513505][ T5825] bridge_slave_0: entered promiscuous mode [ 90.523264][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.530435][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.537919][ T5825] bridge_slave_1: entered allmulticast mode [ 90.545745][ T5825] bridge_slave_1: entered promiscuous mode [ 90.635398][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.651459][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.793644][ T5825] team0: Port device team_slave_0 added [ 90.847675][ T5825] team0: Port device team_slave_1 added [ 90.949714][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.956948][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.983079][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.995141][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 91.030653][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.038065][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.065739][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.099922][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.174328][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.240949][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.415049][ T5825] hsr_slave_0: entered promiscuous mode [ 91.421702][ T5825] hsr_slave_1: entered promiscuous mode [ 91.441046][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.448440][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.456161][ T5833] bridge_slave_0: entered allmulticast mode [ 91.463508][ T5833] bridge_slave_0: entered promiscuous mode [ 91.498886][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.506307][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.514028][ T5831] bridge_slave_0: entered allmulticast mode [ 91.521311][ T5831] bridge_slave_0: entered promiscuous mode [ 91.540856][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.548595][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.555981][ T5833] bridge_slave_1: entered allmulticast mode [ 91.563365][ T5833] bridge_slave_1: entered promiscuous mode [ 91.586763][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.594043][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.601282][ T5831] bridge_slave_1: entered allmulticast mode [ 91.608829][ T5831] bridge_slave_1: entered promiscuous mode [ 91.702790][ T5835] Bluetooth: hci0: command tx timeout [ 91.719588][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.727102][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.735011][ T5832] bridge_slave_0: entered allmulticast mode [ 91.742467][ T5832] bridge_slave_0: entered promiscuous mode [ 91.759953][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.784823][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.794362][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.801652][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.808916][ T5832] bridge_slave_1: entered allmulticast mode [ 91.816626][ T5832] bridge_slave_1: entered promiscuous mode [ 91.840719][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.865724][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.873210][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.880419][ T5830] bridge_slave_0: entered allmulticast mode [ 91.888048][ T5830] bridge_slave_0: entered promiscuous mode [ 91.898163][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.963226][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.970490][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.978376][ T5830] bridge_slave_1: entered allmulticast mode [ 91.985770][ T5830] bridge_slave_1: entered promiscuous mode [ 92.007714][ T5833] team0: Port device team_slave_0 added [ 92.022601][ T5835] Bluetooth: hci3: command tx timeout [ 92.022894][ T5147] Bluetooth: hci1: command tx timeout [ 92.046306][ T5831] team0: Port device team_slave_0 added [ 92.067162][ T5833] team0: Port device team_slave_1 added [ 92.076048][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.095197][ T5831] team0: Port device team_slave_1 added [ 92.108369][ T5147] Bluetooth: hci2: command tx timeout [ 92.108378][ T5835] Bluetooth: hci4: command tx timeout [ 92.116457][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.120937][ T798] cfg80211: failed to load regulatory.db [ 92.136420][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.161779][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.287828][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.294956][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.321243][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.334700][ T5832] team0: Port device team_slave_0 added [ 92.341079][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.348837][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.374919][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.386940][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.394095][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.420411][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.434503][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.441481][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.467930][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.494892][ T5830] team0: Port device team_slave_0 added [ 92.510906][ T5832] team0: Port device team_slave_1 added [ 92.533895][ T5830] team0: Port device team_slave_1 added [ 92.574092][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.581070][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.607506][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.662535][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.669515][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.696094][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.770125][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.777445][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.804438][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.817781][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.825067][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.852105][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.870019][ T5833] hsr_slave_0: entered promiscuous mode [ 92.876786][ T5833] hsr_slave_1: entered promiscuous mode [ 92.883403][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 92.889206][ T5833] Cannot create hsr debugfs directory [ 92.900668][ T5831] hsr_slave_0: entered promiscuous mode [ 92.907314][ T5831] hsr_slave_1: entered promiscuous mode [ 92.913961][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 92.919845][ T5831] Cannot create hsr debugfs directory [ 93.012415][ T5832] hsr_slave_0: entered promiscuous mode [ 93.020504][ T5832] hsr_slave_1: entered promiscuous mode [ 93.027748][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 93.033658][ T5832] Cannot create hsr debugfs directory [ 93.151584][ T5830] hsr_slave_0: entered promiscuous mode [ 93.158158][ T5830] hsr_slave_1: entered promiscuous mode [ 93.164889][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 93.170637][ T5830] Cannot create hsr debugfs directory [ 93.317018][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.358841][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.416127][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.468417][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.697428][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.710939][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.728872][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.740076][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.782525][ T5147] Bluetooth: hci0: command tx timeout [ 93.835791][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.849157][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.871566][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.899552][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.945743][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.010164][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.027601][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.040254][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.063376][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.075733][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.102859][ T5147] Bluetooth: hci3: command tx timeout [ 94.102959][ T5835] Bluetooth: hci1: command tx timeout [ 94.135510][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.142960][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.155317][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.162645][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.182178][ T5835] Bluetooth: hci2: command tx timeout [ 94.191933][ T5835] Bluetooth: hci4: command tx timeout [ 94.263949][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.317637][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.337307][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.354268][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.365475][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.376188][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.407197][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.414538][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.455807][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.463084][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.617773][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.630872][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.717023][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.751464][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.785591][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.792834][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.805560][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.812721][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.832868][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.840021][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.879022][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.886294][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.935553][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.007371][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.058860][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.103223][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.110467][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.148581][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.156135][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.269525][ T5825] veth0_vlan: entered promiscuous mode [ 95.353682][ T5825] veth1_vlan: entered promiscuous mode [ 95.470126][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.537231][ T5825] veth0_macvtap: entered promiscuous mode [ 95.612396][ T5825] veth1_macvtap: entered promiscuous mode [ 95.650092][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.742800][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.794668][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.818155][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.847051][ T5831] veth0_vlan: entered promiscuous mode [ 95.863957][ T5835] Bluetooth: hci0: command tx timeout [ 95.881085][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.892357][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.915237][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.924672][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.989307][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.001259][ T5831] veth1_vlan: entered promiscuous mode [ 96.084370][ T5832] veth0_vlan: entered promiscuous mode [ 96.184332][ T5835] Bluetooth: hci3: command tx timeout [ 96.185879][ T5147] Bluetooth: hci1: command tx timeout [ 96.209220][ T5832] veth1_vlan: entered promiscuous mode [ 96.229413][ T5831] veth0_macvtap: entered promiscuous mode [ 96.243154][ T5831] veth1_macvtap: entered promiscuous mode [ 96.253169][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.262566][ T5147] Bluetooth: hci4: command tx timeout [ 96.262961][ T5835] Bluetooth: hci2: command tx timeout [ 96.273590][ T5833] veth0_vlan: entered promiscuous mode [ 96.285282][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.364710][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.383492][ T5833] veth1_vlan: entered promiscuous mode [ 96.408961][ T4483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.412584][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.425295][ T4483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.456660][ T5832] veth0_macvtap: entered promiscuous mode [ 96.494373][ T4483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.506988][ T4483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.528596][ T5832] veth1_macvtap: entered promiscuous mode [ 96.531084][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.566314][ T4483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.575162][ T4483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.596323][ T5830] veth0_vlan: entered promiscuous mode [ 96.605187][ T5833] veth0_macvtap: entered promiscuous mode [ 96.621867][ T5833] veth1_macvtap: entered promiscuous mode [ 96.728223][ T5830] veth1_vlan: entered promiscuous mode [ 96.734432][ T5942] Bluetooth: MGMT ver 1.23 [ 96.739759][ T5942] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 96.779906][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.303291][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.334713][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.378876][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.408502][ T5830] veth0_macvtap: entered promiscuous mode [ 97.416502][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.436113][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.452338][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.530309][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.541065][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.555406][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.583465][ T5950] process 'syz.1.7' launched './file0' with NULL argv: empty string added [ 97.585916][ T5830] veth1_macvtap: entered promiscuous mode [ 97.941723][ T5835] Bluetooth: hci0: command tx timeout [ 97.964726][ T5946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.979839][ T5946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.987525][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.000178][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.162157][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.171062][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.224247][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.253831][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.262482][ T5835] Bluetooth: hci1: command tx timeout [ 98.262493][ T5147] Bluetooth: hci3: command tx timeout [ 98.342990][ T5835] Bluetooth: hci4: command tx timeout [ 98.346442][ T5147] Bluetooth: hci2: command tx timeout [ 98.361811][ T1019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.415070][ T1019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.477027][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.511716][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.587722][ T1019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.622516][ T1019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.698080][ T4483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.706786][ T4483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.442328][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.472501][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.633893][ T5965] loop3: detected capacity change from 0 to 4096 [ 99.650551][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.669281][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.720660][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.862586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.870854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.890627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.992723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.102575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.291722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.426732][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.436809][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.459413][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.496059][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.849759][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.803685][ T5976] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 101.945560][ T5979] loop1: detected capacity change from 0 to 2048 [ 102.007285][ T5979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.342150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.348205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.422239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.422400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.034654][ T6030] netlink: 'syz.3.25': attribute type 12 has an invalid length. [ 108.287645][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.612206][ T5909] IPVS: starting estimator thread 0... [ 109.981768][ T6042] IPVS: using max 26 ests per chain, 62400 per kthread [ 114.568897][ T6068] loop4: detected capacity change from 0 to 512 [ 114.656388][ T6068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.743282][ T6068] EXT4-fs (loop4): Test dummy encryption mode enabled [ 114.917197][ T6068] EXT4-fs error (device loop4): ext4_iget_extra_inode:5072: inode #15: comm syz.4.36: corrupted in-inode xattr: invalid ea_ino [ 115.067723][ T6068] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.36: couldn't read orphan inode 15 (err -117) [ 115.106383][ T6068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.704801][ T6079] ref_ctr increment failed for inode: 0x4a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807f5ecb40 [ 115.789743][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.485157][ T6089] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 116.512018][ T6089] CIFS mount error: No usable UNC path provided in device string! [ 116.512018][ T6089] [ 116.522419][ T6089] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.191093][ T30] audit: type=1326 audit(1762283088.845:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 118.692923][ T30] audit: type=1326 audit(1762283088.855:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.105858][ T30] audit: type=1326 audit(1762283088.855:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.167646][ T30] audit: type=1326 audit(1762283088.855:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.280608][ T30] audit: type=1326 audit(1762283088.885:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.350803][ T30] audit: type=1326 audit(1762283088.885:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.461684][ T30] audit: type=1326 audit(1762283088.885:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.507743][ T30] audit: type=1326 audit(1762283088.895:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.530098][ T30] audit: type=1326 audit(1762283088.895:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.555749][ T30] audit: type=1326 audit(1762283088.895:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 119.663304][ T6124] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.753990][ T5909] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.117006][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 121.245144][ T5909] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 121.263738][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.276706][ T5909] usb 1-1: Product: syz [ 121.280928][ T5909] usb 1-1: Manufacturer: syz [ 121.287019][ T5909] usb 1-1: SerialNumber: syz [ 121.305039][ T6135] syzkaller0: entered promiscuous mode [ 121.323620][ T6135] syzkaller0: entered allmulticast mode [ 121.991068][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 122.199801][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 122.389700][ T6146] NILFS (nullb0): couldn't find nilfs on the device [ 123.628531][ T6165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.001955][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 125.055773][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 125.338979][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 125.601766][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 125.823933][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 125.908525][ T6191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.653442][ T5909] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 126.810348][ T5909] usb 1-1: USB disconnect, device number 2 [ 128.406498][ T6204] vlan2: entered promiscuous mode [ 128.432224][ T6204] syz_tun: entered promiscuous mode [ 128.795120][ T6208] netlink: 'syz.1.72': attribute type 12 has an invalid length. [ 128.937435][ T6213] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.966923][ T6213] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 130.942387][ T6233] netlink: 'syz.4.78': attribute type 3 has an invalid length. [ 132.042377][ T6244] batadv_slave_1: entered promiscuous mode [ 132.200545][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 132.229948][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.524988][ T6244] batadv_slave_1 (unregistering): left promiscuous mode [ 132.582476][ T6244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.075068][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.081965][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.882378][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 133.942148][ T6255] warning: `syz.3.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.636240][ T6261] loop1: detected capacity change from 0 to 40427 [ 134.658135][ T6261] F2FS-fs (loop1): invalid crc value [ 134.711231][ T6261] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 134.722609][ T6261] F2FS-fs (loop1): Start checkpoint disabled! [ 134.736284][ T6261] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 134.744406][ T6261] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 135.706221][ T36] kworker/u8:2: attempt to access beyond end of device [ 135.706221][ T36] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.750160][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 135.750182][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.750189][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 135.750214][ T36] Call Trace: [ 135.750219][ T36] [ 135.750225][ T36] dump_stack_lvl+0x189/0x250 [ 135.750246][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.750262][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 135.750276][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 135.750293][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 135.750317][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 135.750336][ T36] f2fs_write_end_io+0x886/0xb60 [ 135.750366][ T36] __submit_merged_bio+0x27a/0x6a0 [ 135.750383][ T36] __submit_merged_write_cond+0x255/0x530 [ 135.750401][ T36] f2fs_write_data_pages+0x261d/0x3000 [ 135.750437][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 135.750465][ T36] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 135.750530][ T36] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 135.750563][ T36] ? trace_f2fs_writepages+0x7f/0x200 [ 135.750578][ T36] ? f2fs_write_node_pages+0x478/0x6e0 [ 135.750603][ T36] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 135.750624][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 135.750640][ T36] do_writepages+0x32e/0x550 [ 135.750657][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 135.750672][ T36] ? writeback_sb_inodes+0x3bc/0x1950 [ 135.750689][ T36] __writeback_single_inode+0x143/0x12d0 [ 135.750703][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 135.750716][ T36] writeback_sb_inodes+0x984/0x1950 [ 135.750747][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 135.750785][ T36] ? rcu_is_watching+0x15/0xb0 [ 135.750806][ T36] wb_writeback+0x43b/0xaf0 [ 135.750823][ T36] ? queue_io+0x391/0x590 [ 135.750837][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 135.750855][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.750875][ T36] wb_workfn+0x409/0xef0 [ 135.750901][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 135.750920][ T36] ? __lock_acquire+0xab9/0xd20 [ 135.750940][ T36] ? process_one_work+0x868/0x15d0 [ 135.750959][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.750978][ T36] ? process_one_work+0x868/0x15d0 [ 135.750990][ T36] process_one_work+0x94a/0x15d0 [ 135.751002][ T36] ? __lock_acquire+0xab9/0xd20 [ 135.751028][ T36] ? __pfx_process_one_work+0x10/0x10 [ 135.751047][ T36] ? assign_work+0x3a1/0x410 [ 135.751064][ T36] worker_thread+0x9b0/0xee0 [ 135.751094][ T36] kthread+0x711/0x8a0 [ 135.751113][ T36] ? __pfx_worker_thread+0x10/0x10 [ 135.751126][ T36] ? __pfx_kthread+0x10/0x10 [ 135.751144][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.751160][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.751170][ T36] ? __pfx_kthread+0x10/0x10 [ 135.751192][ T36] ret_from_fork+0x52d/0xa70 [ 135.751208][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 135.751228][ T36] ? __switch_to_asm+0x39/0x70 [ 135.751238][ T36] ? __switch_to_asm+0x33/0x70 [ 135.751247][ T36] ? __pfx_kthread+0x10/0x10 [ 135.751265][ T36] ret_from_fork_asm+0x1a/0x30 [ 135.751287][ T36] [ 136.171749][ T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 136.329334][ T6273] syzkaller0: entered promiscuous mode [ 136.335052][ T6273] syzkaller0: entered allmulticast mode [ 136.515298][ T6275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.915199][ T6281] loop3: detected capacity change from 0 to 1024 [ 136.943950][ T6281] hfsplus: Unknown parameter 'rootcontext' [ 142.153457][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 142.336770][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 142.424791][ T6322] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 142.602765][ T6323] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 143.335317][ T6323] bond1 (unregistering): Released all slaves [ 143.367191][ T6333] binder: BINDER_SET_CONTEXT_MGR already set [ 143.373532][ T6333] binder: 6332:6333 ioctl 4018620d 200000000040 returned -16 [ 143.386610][ T6333] binder: 6332:6333 ioctl c0306201 200000000240 returned -11 [ 144.493459][ T6349] loop2: detected capacity change from 0 to 256 [ 144.559018][ T6351] vlan2: entered promiscuous mode [ 144.576961][ T6351] vlan2: entered allmulticast mode [ 144.604227][ T6351] hsr_slave_1: entered allmulticast mode [ 144.641655][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 144.868970][ T6349] FAT-fs (loop2): Directory bread(block 64) failed [ 144.876159][ T6349] FAT-fs (loop2): Directory bread(block 65) failed [ 144.886906][ T6349] FAT-fs (loop2): Directory bread(block 66) failed [ 144.894000][ T6349] FAT-fs (loop2): Directory bread(block 67) failed [ 144.903967][ T6349] FAT-fs (loop2): Directory bread(block 68) failed [ 144.910811][ T6349] FAT-fs (loop2): Directory bread(block 69) failed [ 144.924300][ T6349] FAT-fs (loop2): Directory bread(block 70) failed [ 144.931244][ T6349] FAT-fs (loop2): Directory bread(block 71) failed [ 144.939014][ T6349] FAT-fs (loop2): Directory bread(block 72) failed [ 144.961926][ T6349] FAT-fs (loop2): Directory bread(block 73) failed [ 146.625060][ T6361] tipc: Started in network mode [ 146.633622][ T6361] tipc: Node identity 7f000001, cluster identity 4711 [ 146.655086][ T6361] tipc: Enabled bearer , priority 10 [ 146.813719][ T6361] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 146.864108][ T6361] tipc: Enabled bearer , priority 10 [ 147.241650][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 147.241669][ T30] audit: type=1326 audit(1762283117.795:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 147.406504][ T30] audit: type=1326 audit(1762283117.795:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 147.578711][ T30] audit: type=1326 audit(1762283117.795:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 147.652482][ T30] audit: type=1326 audit(1762283117.795:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 147.903343][ T5977] tipc: Node number set to 2130706433 [ 148.271961][ T30] audit: type=1326 audit(1762283117.795:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 148.294485][ T30] audit: type=1326 audit(1762283117.795:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 148.474418][ T30] audit: type=1326 audit(1762283117.795:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 148.741726][ T30] audit: type=1326 audit(1762283117.795:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 149.490538][ T30] audit: type=1326 audit(1762283117.795:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 149.512710][ T30] audit: type=1326 audit(1762283117.795:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 151.019736][ T6398] xt_hashlimit: size too large, truncated to 1048576 [ 151.349404][ T6399] loop3: detected capacity change from 0 to 32768 [ 151.416871][ T6399] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 151.428163][ T6399] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 151.557367][ T6399] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 151.682006][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 151.703751][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 151.833137][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 152.193366][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 152.748295][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1044ms [ 153.020500][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 153.050010][ T6399] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 156.054536][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 157.387843][ T6452] loop0: detected capacity change from 0 to 40427 [ 157.418280][ T6452] F2FS-fs (loop0): invalid crc value [ 157.567243][ T6452] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 157.592429][ T6452] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.656563][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 157.656583][ T30] audit: type=1800 audit(1762283128.325:35): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.143" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 158.240069][ T6460] syz.0.143: attempt to access beyond end of device [ 158.240069][ T6460] loop0: rw=2049, sector=45096, nr_sectors = 2128 limit=40427 [ 158.260625][ T6460] syz.0.143: attempt to access beyond end of device [ 158.260625][ T6460] loop0: rw=2049, sector=47224, nr_sectors = 440 limit=40427 [ 159.143162][ T30] audit: type=1800 audit(1762283128.785:36): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.143" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 159.272420][ T5832] syz-executor: attempt to access beyond end of device [ 159.272420][ T5832] loop0: rw=2049, sector=47664, nr_sectors = 8 limit=40427 [ 159.294751][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 159.294781][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.294793][ T5832] Call Trace: [ 159.294801][ T5832] [ 159.294809][ T5832] dump_stack_lvl+0x189/0x250 [ 159.294861][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.294889][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 159.294911][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 159.294940][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 159.294983][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 159.295019][ T5832] f2fs_write_end_io+0x886/0xb60 [ 159.295071][ T5832] __submit_merged_bio+0x27a/0x6a0 [ 159.295105][ T5832] __submit_merged_write_cond+0x255/0x530 [ 159.295139][ T5832] f2fs_write_data_pages+0x261d/0x3000 [ 159.295210][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 159.295299][ T5832] ? check_path+0x21/0x40 [ 159.295325][ T5832] ? check_noncircular+0xe0/0x160 [ 159.295421][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 159.295457][ T5832] do_writepages+0x32e/0x550 [ 159.295496][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 159.295523][ T5832] filemap_fdatawrite+0x199/0x240 [ 159.295546][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 159.295634][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 159.295662][ T5832] f2fs_sync_dirty_inodes+0x31f/0x830 [ 159.295707][ T5832] f2fs_write_checkpoint+0x93e/0x2440 [ 159.295732][ T5832] ? __lock_acquire+0xab9/0xd20 [ 159.295779][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 159.295835][ T5832] kill_f2fs_super+0x2cc/0x6d0 [ 159.295857][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 159.295886][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 159.295900][ T5832] deactivate_locked_super+0xbc/0x130 [ 159.295919][ T5832] cleanup_mnt+0x425/0x4c0 [ 159.295936][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.295951][ T5832] task_work_run+0x1d4/0x260 [ 159.295965][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 159.295975][ T5832] ? __x64_sys_umount+0x122/0x160 [ 159.295990][ T5832] ? exit_to_user_mode_loop+0x40/0x130 [ 159.296007][ T5832] exit_to_user_mode_loop+0xe9/0x130 [ 159.296021][ T5832] do_syscall_64+0x2cd/0xfa0 [ 159.296032][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.296043][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.296054][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 159.296068][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.296079][ T5832] RIP: 0033:0x7f82b0f909f7 [ 159.296091][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 159.296100][ T5832] RSP: 002b:00007fffa79e7ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 159.296114][ T5832] RAX: 0000000000000000 RBX: 00007f82b1011d7d RCX: 00007f82b0f909f7 [ 159.296122][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa79e7b70 [ 159.296129][ T5832] RBP: 00007fffa79e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 159.296135][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa79e8c00 [ 159.296142][ T5832] R13: 00007f82b1011d7d R14: 0000000000026c00 R15: 00007fffa79e8c40 [ 159.296164][ T5832] [ 159.296170][ T5832] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 159.762466][ T6464] loop1: detected capacity change from 0 to 512 [ 159.815982][ T6466] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 159.904800][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.951362][ T6468] vlan2: entered allmulticast mode [ 159.991693][ T6468] veth1: entered allmulticast mode [ 160.003890][ T6464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.017056][ T6464] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.098445][ T6468] bond1: (slave vlan2): making interface the new active one [ 160.132970][ T6468] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 160.576504][ T6476] lo: entered allmulticast mode [ 160.800128][ T6476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.905590][ T6477] loop4: detected capacity change from 0 to 4096 [ 161.019226][ T6477] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 161.078223][ T6477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.092009][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.273793][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.353719][ T6524] loop0: detected capacity change from 0 to 256 [ 165.441308][ T6524] ======================================================= [ 165.441308][ T6524] WARNING: The mand mount option has been deprecated and [ 165.441308][ T6524] and is ignored by this kernel. Remove the mand [ 165.441308][ T6524] option from the mount to silence this warning. [ 165.441308][ T6524] ======================================================= [ 166.411084][ T6524] FAT-fs (loop0): Directory bread(block 64) failed [ 166.477792][ T6524] FAT-fs (loop0): Directory bread(block 65) failed [ 166.502686][ T6524] FAT-fs (loop0): Directory bread(block 66) failed [ 166.541385][ T6524] FAT-fs (loop0): Directory bread(block 67) failed [ 166.564274][ T6524] FAT-fs (loop0): Directory bread(block 68) failed [ 166.594615][ T6524] FAT-fs (loop0): Directory bread(block 69) failed [ 166.656164][ T6524] FAT-fs (loop0): Directory bread(block 70) failed [ 166.674621][ T6524] FAT-fs (loop0): Directory bread(block 71) failed [ 166.701893][ T6524] FAT-fs (loop0): Directory bread(block 72) failed [ 166.719856][ T6524] FAT-fs (loop0): Directory bread(block 73) failed [ 167.615774][ T30] audit: type=1804 audit(1762283138.285:37): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.163" name="/newroot/39/file0" dev="fuse" ino=1 res=1 errno=0 [ 167.654544][ T30] audit: type=1804 audit(1762283138.305:38): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.163" name="/newroot/39/file0" dev="fuse" ino=1 res=1 errno=0 [ 169.811804][ T5909] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 171.285844][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.462970][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.476834][ T6572] mmap: syz.0.171 (6572) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.477635][ T6571] vxfs: unable to read disk superblock at 1 [ 171.532280][ T6571] vxfs: unable to read disk superblock at 8 [ 171.541654][ T6571] vxfs: can't find superblock. [ 171.604099][ T5909] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 171.647898][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.696155][ T5909] usb 4-1: Product: syz [ 171.793182][ T5909] usb 4-1: Manufacturer: syz [ 171.833018][ T5909] usb 4-1: SerialNumber: syz [ 171.976727][ T5909] usb 4-1: config 0 descriptor?? [ 172.000813][ T5909] uvcvideo 4-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 172.021761][ T5909] uvcvideo 4-1:0.0: No valid video chain found. [ 172.190787][ T6575] loop4: detected capacity change from 0 to 512 [ 173.182698][ T6575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.215387][ T6575] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.279633][ T5147] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 173.299657][ T5147] CPU: 0 UID: 0 PID: 5147 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 173.299686][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.299699][ T5147] Workqueue: hci0 hci_rx_work [ 173.299728][ T5147] Call Trace: [ 173.299735][ T5147] [ 173.299744][ T5147] dump_stack_lvl+0x189/0x250 [ 173.299780][ T5147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.299809][ T5147] ? __pfx__printk+0x10/0x10 [ 173.299839][ T5147] ? kernfs_path_from_node+0x250/0x290 [ 173.299858][ T5147] ? kernfs_path_from_node+0x2f/0x290 [ 173.299883][ T5147] sysfs_create_dir_ns+0x259/0x280 [ 173.299918][ T5147] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 173.299951][ T5147] ? do_raw_spin_unlock+0x122/0x240 [ 173.299977][ T5147] kobject_add_internal+0x59f/0xb70 [ 173.300010][ T5147] kobject_add+0x155/0x220 [ 173.300040][ T5147] ? __pfx_kobject_add+0x10/0x10 [ 173.300066][ T5147] ? _raw_spin_unlock+0x28/0x50 [ 173.300101][ T5147] ? get_device_parent+0x366/0x3a0 [ 173.300131][ T5147] device_add+0x408/0xb80 [ 173.300163][ T5147] hci_conn_add_sysfs+0xd5/0x210 [ 173.300191][ T5147] le_conn_complete_evt+0xf26/0x14d0 [ 173.300239][ T5147] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 173.300280][ T5147] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 173.300301][ T5147] ? __asan_memcpy+0x40/0x70 [ 173.300333][ T5147] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.300353][ T5147] ? skb_pull_data+0xfb/0x200 [ 173.300385][ T5147] hci_le_conn_complete_evt+0x187/0x480 [ 173.300425][ T5147] hci_event_packet+0x78f/0x1260 [ 173.300454][ T5147] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 173.300487][ T5147] ? __pfx_hci_event_packet+0x10/0x10 [ 173.300518][ T5147] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.300543][ T5147] ? hci_send_to_monitor+0xe2/0x590 [ 173.300568][ T5147] hci_rx_work+0x45d/0xfc0 [ 173.300609][ T5147] ? process_one_work+0x868/0x15d0 [ 173.300632][ T5147] process_one_work+0x94a/0x15d0 [ 173.300655][ T5147] ? __lock_acquire+0xab9/0xd20 [ 173.300705][ T5147] ? __pfx_process_one_work+0x10/0x10 [ 173.300741][ T5147] ? assign_work+0x3a1/0x410 [ 173.300772][ T5147] worker_thread+0x9b0/0xee0 [ 173.300830][ T5147] kthread+0x711/0x8a0 [ 173.300887][ T5147] ? __pfx_worker_thread+0x10/0x10 [ 173.300912][ T5147] ? __pfx_kthread+0x10/0x10 [ 173.300944][ T5147] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.300975][ T5147] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.300994][ T5147] ? __pfx_kthread+0x10/0x10 [ 173.301023][ T5147] ret_from_fork+0x52d/0xa70 [ 173.301052][ T5147] ? __pfx_ret_from_fork+0x10/0x10 [ 173.301091][ T5147] ? __switch_to_asm+0x39/0x70 [ 173.301109][ T5147] ? __switch_to_asm+0x33/0x70 [ 173.301126][ T5147] ? __pfx_kthread+0x10/0x10 [ 173.301157][ T5147] ret_from_fork_asm+0x1a/0x30 [ 173.301200][ T5147] [ 173.301234][ T5147] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.412830][ T6589] loop1: detected capacity change from 0 to 256 [ 173.416701][ T5147] Bluetooth: hci0: failed to register connection device [ 173.468146][ T30] audit: type=1800 audit(1762283144.115:39): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.173" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 173.503477][ T6589] vfat: Unknown parameter 'sys_immun±™że' [ 173.911513][ T6597] loop2: detected capacity change from 0 to 40427 [ 174.009746][ T6597] F2FS-fs (loop2): invalid crc value [ 174.076157][ T6597] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 174.086238][ T6597] F2FS-fs (loop2): Start checkpoint disabled! [ 174.106179][ T6597] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 174.114562][ T6597] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 174.733997][ T5951] kworker/u8:8: attempt to access beyond end of device [ 174.733997][ T5951] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.773635][ T5977] usb 4-1: USB disconnect, device number 2 [ 174.807095][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 174.807122][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.807135][ T5951] Workqueue: writeback wb_workfn (flush-7:2) [ 174.807172][ T5951] Call Trace: [ 174.807181][ T5951] [ 174.807189][ T5951] dump_stack_lvl+0x189/0x250 [ 174.807224][ T5951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.807251][ T5951] ? __pfx_queue_work_on+0x10/0x10 [ 174.807272][ T5951] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 174.807301][ T5951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.807340][ T5951] f2fs_handle_critical_error+0x37c/0x540 [ 174.807372][ T5951] f2fs_write_end_io+0x886/0xb60 [ 174.807420][ T5951] __submit_merged_bio+0x27a/0x6a0 [ 174.807463][ T5951] __submit_merged_write_cond+0x255/0x530 [ 174.807496][ T5951] f2fs_write_data_pages+0x261d/0x3000 [ 174.807521][ T5951] ? kasan_quarantine_put+0xdd/0x220 [ 174.807575][ T5951] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.807599][ T5951] ? trace_cfg80211_return_bss+0x7a/0x1f0 [ 174.807661][ T5951] ? unwind_next_frame+0xa5/0x2390 [ 174.807675][ T5951] ? unwind_next_frame+0x19ae/0x2390 [ 174.807693][ T5951] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.807708][ T5951] do_writepages+0x32e/0x550 [ 174.807726][ T5951] ? reacquire_held_locks+0x127/0x1d0 [ 174.807741][ T5951] ? writeback_sb_inodes+0x3bc/0x1950 [ 174.807759][ T5951] __writeback_single_inode+0x143/0x12d0 [ 174.807772][ T5951] ? do_raw_spin_unlock+0x122/0x240 [ 174.807786][ T5951] writeback_sb_inodes+0x984/0x1950 [ 174.807818][ T5951] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 174.807857][ T5951] ? rcu_is_watching+0x15/0xb0 [ 174.807878][ T5951] wb_writeback+0x43b/0xaf0 [ 174.807896][ T5951] ? queue_io+0x391/0x590 [ 174.807910][ T5951] ? __pfx_wb_writeback+0x10/0x10 [ 174.807927][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.807948][ T5951] wb_workfn+0x409/0xef0 [ 174.807974][ T5951] ? __pfx_wb_workfn+0x10/0x10 [ 174.808000][ T5951] ? __lock_acquire+0xab9/0xd20 [ 174.808020][ T5951] ? process_one_work+0x868/0x15d0 [ 174.808038][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.808057][ T5951] ? process_one_work+0x868/0x15d0 [ 174.808070][ T5951] process_one_work+0x94a/0x15d0 [ 174.808082][ T5951] ? __lock_acquire+0xab9/0xd20 [ 174.808108][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 174.808128][ T5951] ? assign_work+0x3a1/0x410 [ 174.808144][ T5951] worker_thread+0x9b0/0xee0 [ 174.808175][ T5951] kthread+0x711/0x8a0 [ 174.808194][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 174.808207][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.808225][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.808242][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.808254][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.808271][ T5951] ret_from_fork+0x52d/0xa70 [ 174.808286][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 174.808307][ T5951] ? __switch_to_asm+0x39/0x70 [ 174.808316][ T5951] ? __switch_to_asm+0x33/0x70 [ 174.808326][ T5951] ? __pfx_kthread+0x10/0x10 [ 174.808342][ T5951] ret_from_fork_asm+0x1a/0x30 [ 174.808369][ T5951] [ 174.808573][ T5951] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 174.810916][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.390889][ T5147] Bluetooth: hci4: link tx timeout [ 175.397054][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.453328][ T5147] Bluetooth: hci4: link tx timeout [ 175.478209][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.556293][ T5147] Bluetooth: hci4: link tx timeout [ 175.601950][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.610298][ T5147] Bluetooth: hci4: link tx timeout [ 175.617227][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.453259][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 176.459875][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 176.708363][ T6614] ceph: No mds server is up or the cluster is laggy [ 177.380530][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 177.728902][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 177.747855][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 178.364658][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 178.371104][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 179.473950][ T6638] loop4: detected capacity change from 0 to 40427 [ 179.515103][ T6639] loop3: detected capacity change from 0 to 8 [ 179.537201][ T6638] F2FS-fs (loop4): invalid crc value [ 179.562241][ T6643] netlink: 52 bytes leftover after parsing attributes in process `syz.0.191'. [ 179.640160][ T6638] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 179.651913][ T6638] F2FS-fs (loop4): Start checkpoint disabled! [ 179.668632][ T6638] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 179.676569][ T6638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 179.691887][ T6643] Zero length message leads to an empty skb [ 179.749964][ T6646] loop2: detected capacity change from 0 to 512 [ 179.969388][ T6646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.449335][ T13] kworker/u8:1: attempt to access beyond end of device [ 180.449335][ T13] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.497484][ T6646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.547478][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 180.547508][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.547520][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 180.547559][ T13] Call Trace: [ 180.547567][ T13] [ 180.547575][ T13] dump_stack_lvl+0x189/0x250 [ 180.547611][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.547639][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 180.547662][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 180.547693][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 180.547737][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 180.547769][ T13] f2fs_write_end_io+0x886/0xb60 [ 180.547818][ T13] __submit_merged_bio+0x27a/0x6a0 [ 180.547851][ T13] __submit_merged_write_cond+0x255/0x530 [ 180.547883][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 180.547951][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 180.548070][ T13] ? trace_pelt_se_tp+0x39/0x130 [ 180.548099][ T13] ? __lock_acquire+0xab9/0xd20 [ 180.548141][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 180.548169][ T13] do_writepages+0x32e/0x550 [ 180.548201][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 180.548225][ T13] ? writeback_sb_inodes+0x3bc/0x1950 [ 180.548256][ T13] __writeback_single_inode+0x143/0x12d0 [ 180.548278][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 180.548303][ T13] writeback_sb_inodes+0x984/0x1950 [ 180.548361][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 180.548433][ T13] ? rcu_is_watching+0x15/0xb0 [ 180.548471][ T13] wb_writeback+0x43b/0xaf0 [ 180.548503][ T13] ? queue_io+0x391/0x590 [ 180.548528][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 180.548560][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.548595][ T13] wb_workfn+0x409/0xef0 [ 180.548642][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 180.548676][ T13] ? __lock_acquire+0xab9/0xd20 [ 180.548713][ T13] ? process_one_work+0x868/0x15d0 [ 180.548744][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.548777][ T13] ? process_one_work+0x868/0x15d0 [ 180.548797][ T13] process_one_work+0x94a/0x15d0 [ 180.548819][ T13] ? __lock_acquire+0xab9/0xd20 [ 180.548874][ T13] ? __pfx_process_one_work+0x10/0x10 [ 180.548909][ T13] ? assign_work+0x3a1/0x410 [ 180.548939][ T13] worker_thread+0x9b0/0xee0 [ 180.549003][ T13] kthread+0x711/0x8a0 [ 180.549035][ T13] ? __pfx_worker_thread+0x10/0x10 [ 180.549059][ T13] ? __pfx_kthread+0x10/0x10 [ 180.549090][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.549118][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.549135][ T13] ? __pfx_kthread+0x10/0x10 [ 180.549164][ T13] ret_from_fork+0x52d/0xa70 [ 180.549191][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 180.549226][ T13] ? __switch_to_asm+0x39/0x70 [ 180.549243][ T13] ? __switch_to_asm+0x33/0x70 [ 180.549259][ T13] ? __pfx_kthread+0x10/0x10 [ 180.549289][ T13] ret_from_fork_asm+0x1a/0x30 [ 180.549330][ T13] [ 180.549338][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 180.641931][ T6646] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.493849][ T6644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.837721][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 183.191879][ T30] audit: type=1326 audit(1762283153.715:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 183.513675][ T797] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 183.679948][ T30] audit: type=1326 audit(1762283153.725:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 183.850159][ T30] audit: type=1326 audit(1762283153.725:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 183.873732][ T30] audit: type=1326 audit(1762283153.735:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 183.934344][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.962881][ T797] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 183.976047][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.013136][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 184.023174][ T797] usb 4-1: config 0 descriptor?? [ 184.040079][ T797] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 184.160706][ T6685] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 184.231915][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 184.264849][ T6671] IPVS: sh: TCP [::]:0 - no destination available [ 184.310641][ T6685] bond1: entered promiscuous mode [ 184.320664][ T5182] bcm5974 4-1:0.0: could not read from device [ 184.320710][ T5906] usb 4-1: USB disconnect, device number 3 [ 184.335875][ T6685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.355395][ T6691] loop0: detected capacity change from 0 to 1024 [ 184.365048][ T6604] bcm5974 4-1:0.0: could not read from device [ 184.383411][ T5182] bcm5974 4-1:0.0: could not read from device [ 184.622876][ T5182] bcm5974 4-1:0.0: could not read from device [ 185.037015][ T6691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.064654][ T6604] udevd[6604]: Error opening device "/dev/input/event4": No such file or directory [ 185.102072][ T6604] udevd[6604]: Unable to EVIOCGABS device "/dev/input/event4" [ 185.110127][ T6604] udevd[6604]: Unable to EVIOCGABS device "/dev/input/event4" [ 185.111910][ T6691] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.150389][ T6604] udevd[6604]: Unable to EVIOCGABS device "/dev/input/event4" [ 185.171368][ T6690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.190674][ T6604] udevd[6604]: Unable to EVIOCGABS device "/dev/input/event4" [ 185.231987][ T6690] bond1: (slave bond2): making interface the new active one [ 185.266409][ T6690] bond2: entered promiscuous mode [ 185.273257][ T6699] loop3: detected capacity change from 0 to 1024 [ 185.290856][ T6690] bond1: (slave bond2): Enslaving as an active interface with an up link [ 185.304925][ T6699] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 185.329835][ T6699] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: comm syz.3.205: inode #63: comm syz.3.205: iget: illegal inode # [ 185.372825][ T6699] EXT4-fs (loop3): Remounting filesystem read-only [ 185.394884][ T6699] EXT4-fs (loop3): no journal found [ 185.409758][ T6699] EXT4-fs (loop3): can't get journal size [ 185.432733][ T6699] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 185.448304][ T6699] EXT4-fs (loop3): failed to initialize system zone (-22) [ 185.456365][ T6699] EXT4-fs (loop3): mount failed [ 185.602404][ T6699] netlink: 56 bytes leftover after parsing attributes in process `syz.3.205'. [ 189.074902][ T30] audit: type=1326 audit(1762283159.745:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 189.181695][ T30] audit: type=1326 audit(1762283159.745:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 189.358169][ T30] audit: type=1326 audit(1762283159.765:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 189.381005][ T30] audit: type=1326 audit(1762283159.765:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 189.409228][ T30] audit: type=1326 audit(1762283159.765:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 190.091816][ T30] audit: type=1326 audit(1762283159.795:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 190.116141][ T30] audit: type=1326 audit(1762283159.795:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 190.220168][ T30] audit: type=1326 audit(1762283159.795:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 190.286316][ T30] audit: type=1326 audit(1762283159.795:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 191.305618][ T30] audit: type=1326 audit(1762283159.795:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 193.188014][ T6782] capability: warning: `syz.4.227' uses 32-bit capabilities (legacy support in use) [ 194.222059][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 194.222457][ T30] audit: type=1326 audit(1762283164.865:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 194.287579][ T30] audit: type=1326 audit(1762283164.865:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 194.330507][ T6799] loop0: detected capacity change from 0 to 16 [ 194.375441][ T30] audit: type=1326 audit(1762283164.875:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 194.415780][ T6799] erofs (device loop0): mounted with root inode @ nid 36. [ 194.522510][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.528886][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.594895][ T30] audit: type=1326 audit(1762283164.875:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 194.619526][ T30] audit: type=1326 audit(1762283164.875:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 194.668055][ T30] audit: type=1326 audit(1762283164.935:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 195.315099][ T30] audit: type=1326 audit(1762283164.935:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 195.341250][ T30] audit: type=1326 audit(1762283164.935:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 195.363735][ T30] audit: type=1326 audit(1762283164.935:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 195.387565][ T30] audit: type=1326 audit(1762283164.935:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1bba98f6c9 code=0x7ffc0000 [ 198.277142][ T6823] netlink: 'syz.2.240': attribute type 10 has an invalid length. [ 198.298646][ T6822] veth1_macvtap: left promiscuous mode [ 198.314813][ T6822] macsec0: entered promiscuous mode [ 198.345132][ T6824] kvm: pic: non byte write [ 198.467479][ T6823] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 198.539046][ T6823] team0: Failed to send options change via netlink (err -105) [ 198.571693][ T6823] team0: Port device netdevsim0 added [ 199.568828][ T6838] loop3: detected capacity change from 0 to 1024 [ 199.592947][ T6838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.712581][ T6838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.062436][ T6841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.073892][ T6841] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 201.205468][ T6841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.211787][ T6841] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 201.213376][ T6854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.289499][ T6854] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.339029][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.366644][ T6854] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.410931][ T6854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.417769][ T6841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.436907][ T6854] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.451389][ T6841] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 201.528871][ T6854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.536854][ T6841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.558219][ T6854] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.564921][ T6841] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 201.633768][ T6841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.639744][ T6841] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 203.847846][ T6897] tipc: Enabling of bearer rejected, failed to enable media [ 203.922238][ T6909] loop3: detected capacity change from 0 to 512 [ 203.936676][ T6909] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 203.956125][ T6909] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.973207][ T6909] EXT4-fs (loop3): 1 truncate cleaned up [ 204.068239][ T6909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.967925][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.167220][ T6954] loop3: detected capacity change from 0 to 256 [ 209.126836][ T6954] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 210.413486][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 210.588816][ T10] usb 1-1: config 0 has an invalid interface number: 129 but max is 0 [ 210.601603][ T10] usb 1-1: config 0 has no interface number 0 [ 210.622079][ T10] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=a9.42 [ 210.651768][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.662235][ T10] usb 1-1: Product: syz [ 210.675709][ T10] usb 1-1: Manufacturer: syz [ 210.685570][ T10] usb 1-1: SerialNumber: syz [ 210.725650][ T10] usb 1-1: config 0 descriptor?? [ 210.751721][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.751727][ T10] usb 1-1: MBOX3: Invalid descriptor size=18. [ 210.981912][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 211.016823][ T5906] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 211.671838][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.361910][ T5906] usb 4-1: Product: syz [ 212.366160][ T5906] usb 4-1: Manufacturer: syz [ 212.370778][ T5906] usb 4-1: SerialNumber: syz [ 212.479168][ T5977] usb 1-1: USB disconnect, device number 3 [ 212.542785][ T5906] usb 4-1: config 0 descriptor?? [ 212.565484][ T5906] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 213.247489][ T5906] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 213.932889][ T5906] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 213.944473][ T5906] usb 4-1: USB disconnect, device number 4 [ 214.496683][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 214.505768][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 214.575691][ T6997] bridge0: entered promiscuous mode [ 214.590155][ T6997] ip6gretap0: entered promiscuous mode [ 214.692542][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 214.692561][ T30] audit: type=1326 audit(1762283185.355:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 214.722217][ T30] audit: type=1326 audit(1762283185.355:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 214.749395][ T30] audit: type=1326 audit(1762283185.395:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 214.880021][ T30] audit: type=1326 audit(1762283185.395:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 215.340512][ T30] audit: type=1326 audit(1762283185.395:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 215.381100][ T30] audit: type=1326 audit(1762283185.395:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 215.410199][ T30] audit: type=1326 audit(1762283185.395:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 215.432871][ T30] audit: type=1326 audit(1762283185.395:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 215.466641][ T30] audit: type=1326 audit(1762283185.395:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 215.496600][ T30] audit: type=1326 audit(1762283185.395:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0f8f6c9 code=0x7ffc0000 [ 216.577553][ T7023] loop4: detected capacity change from 0 to 1024 [ 216.964485][ T7023] ext4: Unknown parameter 'obj_user' [ 217.961739][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.056253][ T7034] TCP: TCP_TX_DELAY enabled [ 218.131421][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.568324][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.050647][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 219.061382][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.082705][ T10] usb 4-1: config 0 descriptor?? [ 222.160721][ T7064] batman_adv: batadv0: Adding interface: gretap1 [ 222.167155][ T7064] batman_adv: batadv0: Interface activated: gretap1 [ 224.124548][ T10] usb 4-1: can't set config #0, error -110 [ 225.175284][ T7092] loop0: detected capacity change from 0 to 1024 [ 225.236552][ T10] usb 4-1: USB disconnect, device number 5 [ 225.483820][ T7097] loop3: detected capacity change from 0 to 512 [ 225.615815][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.624633][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.005081][ T7097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.224986][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 226.253612][ T7102] bridge0: entered allmulticast mode [ 226.275790][ T7097] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.289874][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 226.424386][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 226.518939][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 226.560148][ T7113] hfsplus: request for non-existent node 16777216 in B*Tree [ 226.588688][ T7113] hfsplus: request for non-existent node 16777216 in B*Tree [ 226.599777][ T7113] hfsplus: request for non-existent node 16777216 in B*Tree [ 226.615726][ T7113] hfsplus: request for non-existent node 16777216 in B*Tree [ 226.837698][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 227.472621][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 227.509974][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 227.721697][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 227.729081][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 227.757082][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 227.757102][ T30] audit: type=1326 audit(1762283198.425:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.1.320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e8138f6c9 code=0x0 [ 228.452299][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.460108][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.652738][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.672935][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.692979][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.728238][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.744580][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.760710][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.775369][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.803411][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.811135][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.819901][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.838112][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.858634][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.880705][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.901959][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.922562][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.945054][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.952650][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.960084][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.968042][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.975503][ T7092] hfsplus: request for non-existent node 16777216 in B*Tree [ 228.988368][ T30] audit: type=1800 audit(1762283199.655:150): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.313" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 229.032110][ T12] hfsplus: request for non-existent node 16777216 in B*Tree [ 229.044758][ T12] hfsplus: request for non-existent node 16777216 in B*Tree [ 236.260774][ T7184] No such timeout policy "syz1" [ 236.872060][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.337'. [ 237.141366][ T7191] loop4: detected capacity change from 0 to 64 [ 237.178992][ T7192] loop1: detected capacity change from 0 to 1024 [ 237.250154][ T7192] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 237.290229][ T7192] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 237.382256][ T7192] JBD2: no valid journal superblock found [ 237.394813][ T7192] EXT4-fs (loop1): Could not load journal inode [ 238.394712][ T7200] xt_CT: No such helper "snmp_trap" [ 240.023188][ T7206] loop1: detected capacity change from 0 to 8192 [ 240.988657][ T7206] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.788863][ T30] audit: type=1326 audit(1762283219.455:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 248.882480][ T30] audit: type=1326 audit(1762283219.485:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 248.941477][ T30] audit: type=1326 audit(1762283219.595:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 249.505050][ T30] audit: type=1326 audit(1762283219.595:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 249.505872][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'. [ 249.589251][ T4483] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.599016][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'. [ 249.617308][ T4483] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.640620][ T30] audit: type=1326 audit(1762283219.605:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 249.642101][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 249.672515][ T7287] Driver unsupported XDP return value 0 on prog (id 89) dev N/A, expect packet loss! [ 250.470015][ T30] audit: type=1326 audit(1762283220.175:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 250.492402][ T30] audit: type=1326 audit(1762283220.175:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 250.550533][ T4483] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.598622][ T4483] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.668331][ T30] audit: type=1326 audit(1762283220.175:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 250.695472][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 250.764581][ T30] audit: type=1326 audit(1762283220.175:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 250.824165][ T30] audit: type=1326 audit(1762283220.205:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e8138f6c9 code=0x7ffc0000 [ 253.245460][ T7319] loop4: detected capacity change from 0 to 256 [ 254.303805][ T7319] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 256.027259][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.041675][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.820884][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 258.809588][ T7343] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 259.550650][ T7345] loop1: detected capacity change from 0 to 16 [ 259.619244][ T7345] erofs (device loop1): mounted with root inode @ nid 36. [ 259.698945][ T7345] erofs (device loop1): unknown algorithm 7 @ pos 8192 for nid 89, please upgrade kernel [ 259.909898][ T7345] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 260.842107][ T7345] syz.1.382: attempt to access beyond end of device [ 260.842107][ T7345] loop1: rw=524288, sector=256, nr_sectors = 8 limit=16 [ 260.928434][ T7345] syz.1.382: attempt to access beyond end of device [ 260.928434][ T7345] loop1: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 260.966476][ T7345] syz.1.382: attempt to access beyond end of device [ 260.966476][ T7345] loop1: rw=0, sector=256, nr_sectors = 8 limit=16 [ 260.980559][ T7345] erofs (device loop1): read error -5 @ 1 of nid 89 [ 261.005989][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 261.006009][ T30] audit: type=1800 audit(1762283231.655:176): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.382" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 263.541731][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 263.756078][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 263.802050][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.864805][ T10] usb 1-1: config 0 descriptor?? [ 263.905392][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 264.325079][ T7380] loop4: detected capacity change from 0 to 512 [ 264.601763][ T7380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.778881][ T7380] EXT4-fs (loop4): 1 truncate cleaned up [ 265.606840][ T7380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.743294][ T7380] syz.4.392 (pid 7380) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 265.793851][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.392'. [ 266.012828][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.391735][ T5906] usb 1-1: USB disconnect, device number 4 [ 269.127488][ T7414] loop0: detected capacity change from 0 to 2048 [ 271.146917][ T7414] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 271.206940][ T7414] syz.0.400: attempt to access beyond end of device [ 271.206940][ T7414] loop0: rw=0, sector=111568486480, nr_sectors = 2 limit=2048 [ 271.221622][ T7414] NILFS (loop0): I/O error reading meta-data file (ino=4, block-offset=0) [ 271.233130][ T7414] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2) [ 272.346318][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 272.821292][ T30] audit: type=1326 audit(1762283243.485:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1178f6c9 code=0x7ffc0000 [ 272.853335][ T30] audit: type=1326 audit(1762283243.515:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fca1178f6c9 code=0x7ffc0000 [ 272.930700][ T30] audit: type=1326 audit(1762283243.515:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1178f6c9 code=0x7ffc0000 [ 272.984382][ T30] audit: type=1326 audit(1762283243.515:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1178f6c9 code=0x7ffc0000 [ 273.008842][ T30] audit: type=1326 audit(1762283243.515:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fca1178f6c9 code=0x7ffc0000 [ 273.754302][ T30] audit: type=1326 audit(1762283244.405:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.3.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1178f6c9 code=0x7ffc0000 [ 274.007073][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 274.144839][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 274.228540][ T7442] xt_CT: No such helper "snmp_trap" [ 274.525191][ T7445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.785021][ T7465] loop3: detected capacity change from 0 to 512 [ 275.795366][ T7465] EXT4-fs: Ignoring removed orlov option [ 275.923637][ T7465] ext4: Unknown parameter 'noacl' [ 278.580798][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 279.524875][ T7494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.643830][ T7490] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 279.809100][ T7498] binder_alloc: 7497: pid 7497 spamming oneway? 1 buffers allocated for a total size of 4096 [ 284.675871][ T7544] loop1: detected capacity change from 0 to 512 [ 284.733451][ T7544] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 284.781677][ T7544] EXT4-fs (loop1): Test dummy encryption mode enabled [ 284.834818][ T7544] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.442: inode has both inline data and extents flags [ 285.018470][ T7544] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.442: couldn't read orphan inode 15 (err -117) [ 285.830793][ T7544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.147383][ T7544] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 287.788816][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.421792][ T7588] loop0: detected capacity change from 0 to 8192 [ 290.576080][ T6183] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 290.588990][ T6183] loop0: partition table partially beyond EOD, truncated [ 290.596793][ T6183] loop0: p1 start 100663296 is beyond EOD, truncated [ 290.604809][ T6183] loop0: p2 size 134217732 extends beyond EOD, truncated [ 290.632011][ T6183] loop0: p4 size 14876672 extends beyond EOD, truncated [ 290.659938][ T6183] loop0: p5 size 134217732 extends beyond EOD, truncated [ 290.760620][ T6183] loop0: p6 size 14876672 extends beyond EOD, truncated [ 290.860586][ T7588] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 290.874814][ T7588] loop0: partition table partially beyond EOD, truncated [ 290.892879][ T7588] loop0: p1 start 100663296 is beyond EOD, truncated [ 290.899730][ T7588] loop0: p2 size 134217732 extends beyond EOD, truncated [ 290.948195][ T7588] loop0: p4 size 14876672 extends beyond EOD, truncated [ 290.974198][ T7588] loop0: p5 size 134217732 extends beyond EOD, truncated [ 291.002388][ T7588] loop0: p6 size 14876672 extends beyond EOD, truncated [ 293.137488][ T6136] udevd[6136]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 293.215840][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 293.230726][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 293.242247][ T6604] udevd[6604]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 293.254526][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 293.457349][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 293.479887][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 293.480456][ T6136] udevd[6136]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 293.494012][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 293.500529][ T6604] udevd[6604]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 293.725634][ T7636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.357699][ T7640] bond_slave_0: entered promiscuous mode [ 294.363852][ T7640] bond_slave_1: entered promiscuous mode [ 294.395024][ T7640] vlan3: entered promiscuous mode [ 294.400427][ T7640] bond0: entered promiscuous mode [ 296.813928][ T7664] syzkaller0: entered allmulticast mode [ 299.196229][ T797] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 299.660767][ T7690] capability: warning: `syz.0.486' uses deprecated v2 capabilities in a way that may be insecure [ 300.168196][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.316104][ T797] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 300.340272][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.389275][ T797] usb 4-1: Product: syz [ 300.406722][ T797] usb 4-1: Manufacturer: syz [ 302.073755][ T797] usb 4-1: SerialNumber: syz [ 317.388659][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.395158][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.830466][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.836943][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.491562][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 406.506364][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1019/1:b..l [ 406.524775][ C1] rcu: (detected by 1, t=10502 jiffies, g=21013, q=325 ncpus=2) [ 406.535059][ C1] task:kworker/u8:5 state:R running task stack:23240 pid:1019 tgid:1019 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 406.557573][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 406.572522][ C1] Call Trace: [ 406.586671][ C1] [ 406.591491][ C1] __schedule+0x17c4/0x4d60 [ 406.599069][ C1] ? __pfx___schedule+0x10/0x10 [ 406.607904][ C1] ? __lock_acquire+0xab9/0xd20 [ 406.617771][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 406.648213][ C1] preempt_schedule_irq+0xb5/0x150 [ 406.657811][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 406.678755][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 406.694762][ C1] irqentry_exit+0x6f/0x90 [ 406.703878][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.720763][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 406.730485][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb 84 d6 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 406.777471][ C1] RSP: 0018:ffffc900039cf7e0 EFLAGS: 00000206 [ 406.786374][ C1] RAX: 12f77537440b2800 RBX: 0000000000000000 RCX: 12f77537440b2800 [ 406.802865][ C1] RDX: 0000000000000000 RSI: ffffffff8d96bf29 RDI: ffffffff8bbf30e0 [ 406.822277][ C1] RBP: ffffffff8b201fb0 R08: 0000000000000000 R09: ffffffff8b201fb0 [ 406.884289][ C1] R10: dffffc0000000000 R11: ffffed1028368c17 R12: 0000000000000002 [ 406.903167][ C1] R13: ffffffff8df3b520 R14: 0000000000000000 R15: 0000000000000246 [ 406.924265][ C1] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 406.941498][ C1] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 406.950252][ C1] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 406.964435][ C1] batadv_iv_ogm_schedule+0x454/0xf00 [ 406.972727][ C1] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 406.980716][ C1] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 406.989407][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 406.998274][ C1] ? batadv_send_skb_packet+0x426/0x690 [ 407.005208][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 407.018904][ C1] ? process_one_work+0x868/0x15d0 [ 407.028347][ C1] process_one_work+0x94a/0x15d0 [ 407.041079][ C1] ? __lock_acquire+0xab9/0xd20 [ 407.047499][ C1] ? __pfx_process_one_work+0x10/0x10 [ 407.064677][ C1] ? assign_work+0x3a1/0x410 [ 407.076309][ C1] worker_thread+0x9b0/0xee0 [ 407.094960][ C1] kthread+0x711/0x8a0 [ 407.105872][ C1] ? __pfx_worker_thread+0x10/0x10 [ 407.119057][ C1] ? __pfx_kthread+0x10/0x10 [ 407.127892][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.141549][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.150930][ C1] ? __pfx_kthread+0x10/0x10 [ 407.165266][ C1] ret_from_fork+0x52d/0xa70 [ 407.174160][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 407.183548][ C1] ? __switch_to_asm+0x39/0x70 [ 407.197478][ C1] ? __switch_to_asm+0x33/0x70 [ 407.217471][ C1] ? __pfx_kthread+0x10/0x10 [ 407.228611][ C1] ret_from_fork_asm+0x1a/0x30 [ 407.249272][ C1] [ 407.253469][ C1] rcu: rcu_preempt kthread starved for 10412 jiffies! g21013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 407.279097][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 407.297102][ C1] rcu: RCU grace-period kthread stack dump: [ 407.306155][ C1] task:rcu_preempt state:R running task stack:27104 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 407.331026][ C1] Call Trace: [ 407.336125][ C1] [ 407.339992][ C1] __schedule+0x17c4/0x4d60 [ 407.345341][ C1] ? __lock_acquire+0xab9/0xd20 [ 407.351398][ C1] ? __pfx___schedule+0x10/0x10 [ 407.357276][ C1] ? schedule+0x91/0x360 [ 407.363035][ C1] schedule+0x165/0x360 [ 407.367321][ C1] schedule_timeout+0x12b/0x270 [ 407.372255][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 407.378113][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 407.384542][ C1] ? __pfx_process_timeout+0x10/0x10 [ 407.390145][ C1] ? prepare_to_swait_event+0x341/0x380 [ 407.395902][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 407.400985][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.406203][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 407.412397][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 407.417700][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 407.422926][ C1] ? finish_swait+0xcd/0x1f0 [ 407.427587][ C1] rcu_gp_kthread+0x99/0x390 [ 407.432205][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 407.437439][ C1] ? __kthread_parkme+0x7b/0x200 [ 407.442397][ C1] ? __kthread_parkme+0x1a1/0x200 [ 407.447447][ C1] kthread+0x711/0x8a0 [ 407.451737][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 407.456961][ C1] ? __pfx_kthread+0x10/0x10 [ 407.461705][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.466930][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.472147][ C1] ? __pfx_kthread+0x10/0x10 [ 407.476777][ C1] ret_from_fork+0x52d/0xa70 [ 407.481389][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 407.486707][ C1] ? __switch_to_asm+0x39/0x70 [ 407.491576][ C1] ? __switch_to_asm+0x33/0x70 [ 407.496351][ C1] ? __pfx_kthread+0x10/0x10 [ 407.500962][ C1] ret_from_fork_asm+0x1a/0x30 [ 407.505758][ C1] [ 407.508804][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 407.515140][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 407.524178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 407.534250][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 407.539986][ C1] Code: 83 eb 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 49 11 00 f3 0f 1e fa fb f4 58 eb 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 407.559616][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 407.565703][ C1] RAX: cc68be077a4f4400 RBX: ffffffff81972177 RCX: cc68be077a4f4400 [ 407.573772][ C1] RDX: 0000000000000001 RSI: ffffffff8d7850b2 RDI: ffffffff8bbf30e0 [ 407.581763][ C1] RBP: ffffc90000197f10 R08: ffff8880b873321b R09: 1ffff110170e6643 [ 407.589842][ C1] R10: dffffc0000000000 R11: ffffed10170e6644 R12: ffffffff8f7d7d70 [ 407.597843][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b70 [ 407.605858][ C1] FS: 0000000000000000(0000) GS:ffff888125fd8000(0000) knlGS:0000000000000000 [ 407.614818][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.621421][ C1] CR2: 00007f7ef6e8d78d CR3: 000000007dbb6000 CR4: 00000000003526f0 [ 407.629428][ C1] Call Trace: [ 407.632820][ C1] [ 407.635777][ C1] default_idle+0x13/0x20 [ 407.640347][ C1] default_idle_call+0x73/0xb0 [ 407.645150][ C1] do_idle+0x1e7/0x510 [ 407.649251][ C1] ? __pfx_do_idle+0x10/0x10 [ 407.653884][ C1] cpu_startup_entry+0x44/0x60 [ 407.658696][ C1] start_secondary+0x101/0x110 [ 407.663500][ C1] common_startup_64+0x13e/0x147 [ 407.668569][ C1] [ 408.219186][ T797] usb 4-1: config 0 descriptor?? SYZFAIL: failed to send rpc fd=3 want=18264 sent=0 n=-1 (errno 32: Broken pipe) [ 409.025466][ T797] usb 4-1: can't set config #0, error -71 [ 409.071035][ T797] usb 4-1: USB disconnect, device number 6 [ 410.049101][ T5946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.149623][ T5946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.239177][ T5946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.303055][ T5946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.461935][ T5946] bridge_slave_1: left allmulticast mode [ 410.468216][ T5946] bridge_slave_1: left promiscuous mode [ 410.476350][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.489125][ T5946] bridge_slave_0: left allmulticast mode [ 410.496123][ T5946] bridge_slave_0: left promiscuous mode [ 410.502596][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.634149][ T5946] ip6gretap0 (unregistering): left promiscuous mode [ 410.766179][ T5946] bridge0 (unregistering): left promiscuous mode [ 410.919625][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.931093][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.944248][ T5946] bond0 (unregistering): Released all slaves [ 411.140820][ T5946] hsr_slave_0: left promiscuous mode [ 411.149232][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.157371][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.189399][ T5946] veth0_macvtap: left promiscuous mode [ 411.197390][ T5946] veth1_vlan: left promiscuous mode [ 411.203982][ T5946] veth0_vlan: left promiscuous mode [ 411.630099][ T5946] team0 (unregistering): Port device team_slave_1 removed [ 411.669921][ T5946] team0 (unregistering): Port device team_slave_0 removed [ 412.371947][ T5946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.382724][ T5946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.458436][ T5946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.468828][ T5946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.555568][ T5946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.565983][ T5946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.637754][ T5946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.648803][ T5946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.805021][ T5946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.872840][ T5946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.935651][ T5946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.996852][ T5946] team0: Port device netdevsim0 removed [ 413.004926][ T5946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.125905][ T5946] bridge_slave_1: left allmulticast mode [ 413.132122][ T5946] bridge_slave_1: left promiscuous mode [ 413.137860][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.147370][ T5946] bridge_slave_0: left allmulticast mode [ 413.153821][ T5946] bridge_slave_0: left promiscuous mode [ 413.159513][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.171812][ T5946] bridge_slave_1: left allmulticast mode [ 413.177466][ T5946] bridge_slave_1: left promiscuous mode [ 413.183381][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.192874][ T5946] bridge_slave_0: left allmulticast mode [ 413.198541][ T5946] bridge_slave_0: left promiscuous mode [ 413.205694][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.216434][ T5946] batman_adv: batadv0: Interface deactivated: gretap1 [ 413.568928][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.580016][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.592535][ T5946] bond0 (unregistering): Released all slaves [ 413.700600][ T5946] batman_adv: batadv0: Removing interface: gretap1 [ 413.924845][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.936035][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.947478][ T5946] bond0 (unregistering): Released all slaves [ 414.045011][ T5946] bond1 (unregistering): (slave bond2): Releasing backup interface [ 414.053039][ T5946] bond2 (unregistering): left promiscuous mode [ 414.059932][ T5946] bond1 (unregistering): Released all slaves [ 414.155618][ T5946] bond2 (unregistering): Released all slaves [ 414.564130][ T5946] hsr_slave_0: left promiscuous mode [ 414.570136][ T5946] hsr_slave_1: left promiscuous mode [ 414.577169][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.585537][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.593735][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.601135][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.613022][ T5946] hsr_slave_0: left promiscuous mode [ 414.619002][ T5946] hsr_slave_1: left promiscuous mode [ 414.625226][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.632883][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.640933][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.648434][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.683297][ T5946] veth1_macvtap: left promiscuous mode [ 414.688832][ T5946] veth0_macvtap: left promiscuous mode [ 414.695097][ T5946] veth1_vlan: left promiscuous mode [ 414.700383][ T5946] veth0_vlan: left promiscuous mode [ 414.707286][ T5946] veth1_macvtap: left promiscuous mode [ 414.712891][ T5946] veth0_macvtap: left promiscuous mode [ 414.718580][ T5946] veth1_vlan: left promiscuous mode [ 414.724942][ T5946] veth0_vlan: left promiscuous mode [ 415.179092][ T5946] team0 (unregistering): Port device team_slave_1 removed [ 415.218042][ T5946] team0 (unregistering): Port device team_slave_0 removed [ 415.900452][ T5946] team0 (unregistering): Port device team_slave_1 removed [ 415.938127][ T5946] team0 (unregistering): Port device team_slave_0 removed