last executing test programs: 2m49.911686886s ago: executing program 0 (id=408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 2m49.731252547s ago: executing program 0 (id=409): mmap$IORING_OFF_SQ_RING(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000400)={r4, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f000000a300)={{r5, 0x0, 0x1, [0x1, 0x8]}, {0x80000000, r3, 0x0, [0xc1b, 0x4]}, 0x10000000, [0x7e, 0x8]}) mkdir(0x0, 0x0) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x6}, {0x15, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xff}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xe}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) listen(r8, 0x80) r9 = socket$netlink(0x10, 0x3, 0x15) writev(r9, &(0x7f00000002c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m47.410321502s ago: executing program 0 (id=414): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x20) poll(&(0x7f0000000100)=[{r0, 0x804f}, {r0, 0x3123}], 0x2, 0x11ff) shutdown(r0, 0x0) 2m47.070259075s ago: executing program 0 (id=416): dup(0xffffffffffffffff) gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m45.448769713s ago: executing program 0 (id=422): mmap$IORING_OFF_SQ_RING(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000400)={r4, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f000000a300)={{r5, 0x0, 0x1, [0x1, 0x8]}, {0x80000000, r3, 0x0, [0xc1b, 0x4]}, 0x10000000, [0x7e, 0x8]}) mkdir(0x0, 0x0) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x6}, {0x15, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xff}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xe}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) listen(r8, 0x80) r9 = socket$netlink(0x10, 0x3, 0x15) writev(r9, &(0x7f00000002c0)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 2m43.177173244s ago: executing program 0 (id=430): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt(0xffffffffffffffff, 0x2b, 0x401, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x27, r1, 0x1, 0x5}, 0x10) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x288000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) 2m27.686711794s ago: executing program 32 (id=430): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt(0xffffffffffffffff, 0x2b, 0x401, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x27, r1, 0x1, 0x5}, 0x10) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x288000, 0x0) chroot(&(0x7f0000000000)='./file0\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) 8.838846642s ago: executing program 2 (id=936): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4004004) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x2, 0xa00, 0xffffffffffffffff, 0x39, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x6}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000500)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x9, 0x10000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ff, 0x0, 0x0, 0x0, 0xe3a}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x2a571fe07d12e8cc, 0x100, 0x8}]}, &(0x7f00000009c0)='syzkaller\x00', 0x4e, 0x3, &(0x7f0000000a00)=""/3, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b22, &(0x7f0000000040)) 7.751433444s ago: executing program 2 (id=937): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) r8 = fcntl$dupfd(r5, 0x406, r0) ioctl$TCFLSH(r8, 0x400455c8, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x2f64, 0x1, 0x4, 0x7ff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000140)=0x100) sendfile(r5, r4, 0x0, 0x20000023893) 6.034469448s ago: executing program 2 (id=940): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket(0x840000000002, 0x3, 0x100) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$inet6_udp(0xa, 0x2, 0x0) 5.658672593s ago: executing program 4 (id=943): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0x9}, {0x0, 0x9}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x94) 5.587055528s ago: executing program 4 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 5.56416348s ago: executing program 2 (id=945): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4004004) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x2, 0xa00, 0xffffffffffffffff, 0x39, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x6}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000500)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x9, 0x10000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ff, 0x0, 0x0, 0x0, 0xe3a}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x2a571fe07d12e8cc, 0x100, 0x8}]}, &(0x7f00000009c0)='syzkaller\x00', 0x4e, 0x3, &(0x7f0000000a00)=""/3, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b22, &(0x7f0000000040)) 5.483230415s ago: executing program 4 (id=946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x23, 0x80000, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYRES8=r5, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r5, @ANYBLOB="db64ac1f864336236dd3b90071d2eea40a6411aa6752ba7a3f297b59adbbe424cc9f02e1abd61489172dbeaba6cb9e00c5457eaf028124248ca0ddba8d250133a7e07e7f5e247f6cd6d3eaff772fd5df2c501af46b18004861125559d2d3aed34b3d33614b8980587a853169fad3be70813a2a19bfa183009f582c4e781d029cafd43740b75ffd0ed4c80b33c325a6a86f2eb845ec8e1d76e00bc51d83c635bafbd938246d10782339a71637ecf237b54be8de09fa123abec42711c405182c804d5aa6", @ANYRES32=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES16=r2], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r4) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @scatter={0x5, 0x0, &(0x7f0000000a00)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000840)=""/115, 0x73}, {&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000000900)=""/236, 0xec}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000c80)={r8, 0x0, {0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x5, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e134f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c010000100013040000000000000000fe8000000000000000000000000000aa20010000000000000000000000000000fffd00004e2400020200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000000032000000fc0000000000000000000000000000010002000000000000070000000000000000000000000000000400000000000000ffffffffffffffff04000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000200000100000000000000004c001200726663343330392863636d28616573292900"/240], 0x13c}}, 0x804) 4.469780812s ago: executing program 2 (id=949): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x106f) 3.474666179s ago: executing program 1 (id=953): epoll_create(0x7) r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) epoll_create1(0x0) bpf$BPF_BTF_LOAD(0x25, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.30618416s ago: executing program 1 (id=955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 3.194142267s ago: executing program 3 (id=956): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast2, 0x1}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000003c0)=""/50, 0x32, 0x0, &(0x7f0000000400)=""/46, 0x2e}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r4) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg(r3, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041) ioctl$SIOCNRDECOBS(r3, 0x89e2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf250700000012000200fc000000000000000000000000000001080002006401010212000300"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) 2.931485325s ago: executing program 3 (id=957): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4004004) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x2, 0xa00, 0xffffffffffffffff, 0x39, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x6}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000500)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x9, 0x10000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ff, 0x0, 0x0, 0x0, 0xe3a}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x2a571fe07d12e8cc, 0x100, 0x8}]}, &(0x7f00000009c0)='syzkaller\x00', 0x4e, 0x3, &(0x7f0000000a00)=""/3, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x3, 0x7, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b22, &(0x7f0000000040)) 2.919492276s ago: executing program 1 (id=958): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(0x4) socket(0x1a, 0x5, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.756451516s ago: executing program 1 (id=959): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) r8 = fcntl$dupfd(r5, 0x406, r0) ioctl$TCFLSH(r8, 0x400455c8, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x2f64, 0x1, 0x4, 0x7ff}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000140)=0x100) sendfile(r5, r4, 0x0, 0x20000023893) 1.80102539s ago: executing program 3 (id=960): syz_open_dev$video4linux(0x0, 0x83, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x1, 0x2845}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x1000001, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x20}}, 0x0) ioprio_get$uid(0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x24, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='cgroup2\x00', 0x208000, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000002080)=""/4115) 640.710477ms ago: executing program 3 (id=961): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0x0, 0x9}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x94) 594.28063ms ago: executing program 1 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000019000000040000000100000000000000", @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000d40), 0x0}, 0x20) 456.952439ms ago: executing program 3 (id=963): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r3 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x84}, 0x300) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0xc4, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0x2, 0x9]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbaf}, @NL80211_ATTR_FRAME={0x8a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @random="c7dc07b32d15", {0xc, 0x1d9}, @value=@ver_80211n={0x0, 0x7ffb, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x7, @default, 0x5024, @val, @void, @val={0x3, 0x1, 0xb1}, @val={0x4, 0x6, {0x4, 0x0, 0x2, 0x5}}, @val={0x6, 0x2, 0x6}, @val={0x5, 0x3, {0xca, 0x35, 0x6}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x41}}, @val={0x76, 0x6, {0x50, 0xa6, 0x35, 0xfff9}}, [{0xdd, 0x2a, "0b1c7d5d9e7a5f253d638f11a8e2259866c2b0e2dcb97d62d20ef96195c791364bc7e9df62211c7e8afd"}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xdfd182dcd395e7a6}}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, 'xfrm0\x00'}) 353.596037ms ago: executing program 4 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 299.66843ms ago: executing program 2 (id=965): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast2, 0x1}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000003c0)=""/50, 0x32, 0x0, &(0x7f0000000400)=""/46, 0x2e}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r4) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg(r3, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041) ioctl$SIOCNRDECOBS(r3, 0x89e2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf250700000012000200fc000000000000000000000000000001080002006401010212000300"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) 175.055638ms ago: executing program 3 (id=966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 161.445719ms ago: executing program 4 (id=967): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(0x4) socket(0x1a, 0x5, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 331.52µs ago: executing program 4 (id=968): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4004004) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x2, 0xa00, 0xffffffffffffffff, 0x39, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x6}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000500)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x9, 0x10000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ff, 0x0, 0x0, 0x0, 0xe3a}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x2a571fe07d12e8cc, 0x100, 0x8}]}, &(0x7f00000009c0)='syzkaller\x00', 0x4e, 0x3, &(0x7f0000000a00)=""/3, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x3, 0x7, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b22, &(0x7f0000000040)) 0s ago: executing program 1 (id=969): syz_open_dev$video4linux(0x0, 0x83, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x1, 0x2845}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x1000001, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x20}}, 0x0) ioprio_get$uid(0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x24, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='cgroup2\x00', 0x208000, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000002080)=""/4115) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. syzkaller login: [ 83.299894][ T5778] cgroup: Unknown subsys name 'net' [ 83.445145][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.177283][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.309220][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.323154][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.332616][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.340898][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.350581][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.358268][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.367865][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.367953][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.379657][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.386884][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.402196][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.405869][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.411362][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.418212][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.431972][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.434030][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.439538][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.448123][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.526082][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.540036][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.555207][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.564223][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.572988][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.580888][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.282101][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 88.310834][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 88.349467][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 88.453003][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 88.592951][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.601442][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.611142][ T5791] bridge_slave_0: entered allmulticast mode [ 88.619265][ T5791] bridge_slave_0: entered promiscuous mode [ 88.666516][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.674524][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.682967][ T5791] bridge_slave_1: entered allmulticast mode [ 88.691227][ T5791] bridge_slave_1: entered promiscuous mode [ 88.699765][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.707374][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.715113][ T5789] bridge_slave_0: entered allmulticast mode [ 88.723248][ T5789] bridge_slave_0: entered promiscuous mode [ 88.731973][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.739707][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.747769][ T5789] bridge_slave_1: entered allmulticast mode [ 88.755303][ T5789] bridge_slave_1: entered promiscuous mode [ 88.762413][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.770033][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.777825][ T5788] bridge_slave_0: entered allmulticast mode [ 88.785306][ T5788] bridge_slave_0: entered promiscuous mode [ 88.831225][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.838615][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.846536][ T5788] bridge_slave_1: entered allmulticast mode [ 88.853737][ T5788] bridge_slave_1: entered promiscuous mode [ 88.892787][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.932599][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.940003][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.948324][ T5790] bridge_slave_0: entered allmulticast mode [ 88.956769][ T5790] bridge_slave_0: entered promiscuous mode [ 88.967199][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.980062][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.994054][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.016380][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.024314][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.032048][ T5790] bridge_slave_1: entered allmulticast mode [ 89.040293][ T5790] bridge_slave_1: entered promiscuous mode [ 89.088896][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.101715][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.141806][ T5791] team0: Port device team_slave_0 added [ 89.151759][ T5791] team0: Port device team_slave_1 added [ 89.221101][ T5789] team0: Port device team_slave_0 added [ 89.230810][ T5789] team0: Port device team_slave_1 added [ 89.239995][ T5788] team0: Port device team_slave_0 added [ 89.250625][ T5788] team0: Port device team_slave_1 added [ 89.261060][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.274389][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.375540][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.382739][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.411173][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.426239][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.434768][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.463985][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.476894][ T5803] Bluetooth: hci0: command tx timeout [ 89.484291][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.491507][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.521670][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.536001][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.543175][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.555673][ T5803] Bluetooth: hci3: command tx timeout [ 89.570680][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.590985][ T5790] team0: Port device team_slave_0 added [ 89.600739][ T5790] team0: Port device team_slave_1 added [ 89.626382][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.633518][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.635966][ T5803] Bluetooth: hci1: command tx timeout [ 89.660618][ T5799] Bluetooth: hci2: command tx timeout [ 89.672101][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.682266][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.690262][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.717484][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.767229][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.774350][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.800838][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.815859][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.822900][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.849808][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.940515][ T5791] hsr_slave_0: entered promiscuous mode [ 89.947745][ T5791] hsr_slave_1: entered promiscuous mode [ 89.975148][ T5789] hsr_slave_0: entered promiscuous mode [ 89.985131][ T5789] hsr_slave_1: entered promiscuous mode [ 89.991933][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.000248][ T5789] Cannot create hsr debugfs directory [ 90.011929][ T5788] hsr_slave_0: entered promiscuous mode [ 90.018759][ T5788] hsr_slave_1: entered promiscuous mode [ 90.026245][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.033953][ T5788] Cannot create hsr debugfs directory [ 90.072021][ T5790] hsr_slave_0: entered promiscuous mode [ 90.079347][ T5790] hsr_slave_1: entered promiscuous mode [ 90.087664][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.097389][ T5790] Cannot create hsr debugfs directory [ 90.574676][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.589803][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.602888][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.614009][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.708169][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.735280][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.753628][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.794034][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.856612][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.868872][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.880067][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.895108][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.996002][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.007112][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.022804][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.033974][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.102259][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.184394][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.219690][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.227419][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.259342][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.267115][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.308545][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.328363][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.372757][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.408396][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.433392][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.440794][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.466751][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.474077][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.519320][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.526951][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.540286][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.547765][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.557046][ T5799] Bluetooth: hci0: command tx timeout [ 91.602450][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.635741][ T5799] Bluetooth: hci3: command tx timeout [ 91.716188][ T5799] Bluetooth: hci2: command tx timeout [ 91.722144][ T5803] Bluetooth: hci1: command tx timeout [ 91.748990][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.811590][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.819459][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.867449][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.874996][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.087916][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.252339][ T5789] veth0_vlan: entered promiscuous mode [ 92.295252][ T5789] veth1_vlan: entered promiscuous mode [ 92.387106][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.446836][ T9] cfg80211: failed to load regulatory.db [ 92.484047][ T5789] veth0_macvtap: entered promiscuous mode [ 92.503839][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.542452][ T5791] veth0_vlan: entered promiscuous mode [ 92.563602][ T5789] veth1_macvtap: entered promiscuous mode [ 92.596859][ T5791] veth1_vlan: entered promiscuous mode [ 92.646853][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.668099][ T5788] veth0_vlan: entered promiscuous mode [ 92.681907][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.706976][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.724503][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.734361][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.743487][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.753284][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.790097][ T5788] veth1_vlan: entered promiscuous mode [ 92.861224][ T5791] veth0_macvtap: entered promiscuous mode [ 92.910544][ T5791] veth1_macvtap: entered promiscuous mode [ 92.950299][ T5790] veth0_vlan: entered promiscuous mode [ 93.000228][ T5788] veth0_macvtap: entered promiscuous mode [ 93.021241][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.034926][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.049692][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.064605][ T5790] veth1_vlan: entered promiscuous mode [ 93.081336][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.094126][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.108558][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.123358][ T5788] veth1_macvtap: entered promiscuous mode [ 93.134416][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.158131][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.161986][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.170597][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.187662][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.197241][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.222510][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.237234][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.249050][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.260946][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.276066][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.318844][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.330957][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.342725][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.354403][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.370337][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.394679][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.395259][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.415920][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.425446][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.425469][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.434695][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.568398][ T5790] veth0_macvtap: entered promiscuous mode [ 93.623489][ T5790] veth1_macvtap: entered promiscuous mode [ 93.636126][ T5799] Bluetooth: hci0: command tx timeout [ 93.716590][ T5799] Bluetooth: hci3: command tx timeout [ 93.755054][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.756161][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.776215][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.789536][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.797782][ T5799] Bluetooth: hci1: command tx timeout [ 93.800194][ T5803] Bluetooth: hci2: command tx timeout [ 93.825092][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.837091][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.847883][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.859643][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.870436][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.881489][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.893919][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.938090][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.949016][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.953421][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.972280][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.984625][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.996620][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.007139][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.018974][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.030844][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.039039][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.060966][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.070825][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.075529][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.090823][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.101140][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.110708][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.236126][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 94.282906][ T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 94.306452][ T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 94.331600][ T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 94.352923][ T9] usb 2-1: config 250 has no interface number 0 [ 94.373412][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 94.401324][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 94.419811][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.740723][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.219291][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.230356][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 95.243111][ T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 95.313954][ T9] usb 2-1: config 250 interface 228 has no altsetting 0 [ 95.343061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.352615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.418772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.495967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.650385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.810044][ T5803] Bluetooth: hci0: command tx timeout [ 95.824641][ T5803] Bluetooth: hci3: command tx timeout [ 95.837184][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 95.863983][ T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 95.878427][ T9] usb 2-1: Product: syz [ 95.882702][ T9] usb 2-1: SerialNumber: syz [ 95.891890][ T5799] Bluetooth: hci1: command tx timeout [ 95.897697][ T5803] Bluetooth: hci2: command tx timeout [ 95.970470][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.169260][ T9] hub 2-1:250.228: bad descriptor, ignoring hub [ 96.181939][ T9] hub: probe of 2-1:250.228 failed with error -5 [ 96.206919][ T9] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 96.436319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.571774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.580901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.676509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.948779][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.567088][ T9] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 97.602848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.710347][ T5903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7'. [ 98.142853][ T9] usb 2-1: device descriptor read/all, error -71 [ 99.388310][ T9] usb 2-1: USB disconnect, device number 2 [ 99.412452][ T9] usblp0: removed [ 99.511366][ T5918] netlink: 'syz.2.9': attribute type 3 has an invalid length. [ 101.282534][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.546571][ T5930] warning: `syz.3.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.601620][ T5950] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 105.633225][ T5950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'. [ 105.658013][ T5950] team0: entered promiscuous mode [ 105.663578][ T5950] team_slave_0: entered promiscuous mode [ 105.716232][ T5953] capability: warning: `syz.0.19' uses deprecated v2 capabilities in a way that may be insecure [ 105.899954][ T5950] team_slave_1: entered promiscuous mode [ 105.925694][ T5950] team0: entered allmulticast mode [ 105.931134][ T5950] team_slave_0: entered allmulticast mode [ 107.001720][ T5950] team_slave_1: entered allmulticast mode [ 107.113954][ T5950] bridge0: port 3(team0) entered blocking state [ 107.316403][ T5950] bridge0: port 3(team0) entered disabled state [ 107.550530][ T5950] bridge0: port 3(team0) entered blocking state [ 107.557507][ T5950] bridge0: port 3(team0) entered forwarding state [ 108.349247][ T5971] ntfs3: nullb0: Primary boot signature is not NTFS. [ 108.364476][ T5971] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 110.066399][ T5987] ======================================================= [ 110.066399][ T5987] WARNING: The mand mount option has been deprecated and [ 110.066399][ T5987] and is ignored by this kernel. Remove the mand [ 110.066399][ T5987] option from the mount to silence this warning. [ 110.066399][ T5987] ======================================================= [ 110.110212][ T5987] overlay: Unknown parameter '/' [ 110.540448][ T5989] syz.2.30[5989]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 110.555017][ T5989] loop2: detected capacity change from 0 to 64 [ 114.176887][ T6019] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 114.206531][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 114.234906][ T6019] team0: entered promiscuous mode [ 114.267888][ T6019] team_slave_0: entered promiscuous mode [ 114.298672][ T6019] team_slave_1: entered promiscuous mode [ 114.322654][ T6019] team0: entered allmulticast mode [ 114.338973][ T6019] team_slave_0: entered allmulticast mode [ 114.363947][ T6019] team_slave_1: entered allmulticast mode [ 114.398909][ T6019] bridge0: port 3(team0) entered blocking state [ 114.451196][ T6019] bridge0: port 3(team0) entered disabled state [ 114.604503][ T6019] bridge0: port 3(team0) entered blocking state [ 114.611996][ T6019] bridge0: port 3(team0) entered forwarding state [ 114.955042][ T6027] loop0: detected capacity change from 0 to 2048 [ 115.254354][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.477971][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.344222][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 118.475956][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.485216][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.092376][ T6061] ntfs3: nullb0: Primary boot signature is not NTFS. [ 119.111531][ T6061] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 121.711143][ T6081] netlink: 72 bytes leftover after parsing attributes in process `syz.2.46'. [ 121.985520][ T2129] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.205833][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 122.283007][ T2129] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 122.332225][ T2129] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 122.360564][ T2129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.390242][ T2129] usb 4-1: config 0 descriptor?? [ 122.439428][ T2129] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 123.647850][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 123.669149][ T6094] bridge0: port 3(team0) entered disabled state [ 123.675745][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.683416][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.207072][ T6107] tmpfs: Bad value for 'nr_blocks' [ 124.525768][ T5796] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.998859][ T6102] netlink: 'syz.2.51': attribute type 10 has an invalid length. [ 125.015187][ T5904] usb 4-1: USB disconnect, device number 2 [ 125.105252][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 125.139723][ T6102] team0: entered promiscuous mode [ 125.155133][ T6102] team_slave_0: entered promiscuous mode [ 125.162334][ T6102] team_slave_1: entered promiscuous mode [ 125.175918][ T6102] team0: entered allmulticast mode [ 125.201693][ T6102] team_slave_0: entered allmulticast mode [ 125.213604][ T5796] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 125.222150][ T6102] team_slave_1: entered allmulticast mode [ 125.233550][ T5796] usb 1-1: config 0 has no interface number 0 [ 125.246809][ T6102] bridge0: port 3(team0) entered blocking state [ 125.267376][ T5796] usb 1-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 125.279997][ T6102] bridge0: port 3(team0) entered disabled state [ 125.309789][ T6102] bridge0: port 3(team0) entered blocking state [ 125.316340][ T6102] bridge0: port 3(team0) entered forwarding state [ 125.340252][ T5796] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 125.341130][ T6114] loop3: detected capacity change from 0 to 4096 [ 125.365532][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.467395][ T5796] usb 1-1: config 0 descriptor?? [ 125.509218][ T6114] ntfs: volume version 3.1. [ 125.865513][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.098608][ T6107] IPVS: Error connecting to the multicast addr [ 127.106702][ T5858] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.192497][ T6133] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 127.614073][ T5858] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.735764][ T5858] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.745654][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.976201][ T6118] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.023423][ T5858] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 128.075011][ T9] usb 1-1: USB disconnect, device number 2 [ 128.407411][ T6137] Zero length message leads to an empty skb [ 130.332149][ T6148] netlink: 72 bytes leftover after parsing attributes in process `syz.3.60'. [ 130.430539][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 130.825438][ T9] usb 2-1: USB disconnect, device number 3 [ 130.999898][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 132.075488][ T2129] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.357250][ T2129] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 132.375679][ T2129] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 132.388235][ T6166] tmpfs: Bad value for 'nr_blocks' [ 132.395589][ T2129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.440006][ T2129] usb 1-1: config 0 descriptor?? [ 132.467556][ T2129] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 132.488202][ T6168] syz.1.68[6168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.488320][ T6168] syz.1.68[6168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.675767][ T5804] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.416914][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.555871][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.773820][ T5804] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 133.791179][ T5804] usb 3-1: config 0 has no interface number 0 [ 133.799586][ T5804] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 133.811724][ T5804] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 133.822421][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.838305][ T5804] usb 3-1: config 0 descriptor?? [ 133.894965][ T6175] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock [ 134.174271][ T2129] usb 1-1: USB disconnect, device number 3 [ 135.034978][ T6166] IPVS: Error connecting to the multicast addr [ 135.624840][ T6190] ntfs3: nullb0: Primary boot signature is not NTFS. [ 135.635460][ T6190] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 135.804331][ T6192] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 135.926600][ T6192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.71'. [ 135.937009][ T6192] team0: entered promiscuous mode [ 135.943766][ T6192] team_slave_0: entered promiscuous mode [ 135.949892][ T6192] team_slave_1: entered promiscuous mode [ 135.956046][ T6192] team0: entered allmulticast mode [ 135.961337][ T6192] team_slave_0: entered allmulticast mode [ 136.133620][ T6192] team_slave_1: entered allmulticast mode [ 136.178882][ T6192] bridge0: port 3(team0) entered blocking state [ 136.255108][ T6192] bridge0: port 3(team0) entered disabled state [ 138.433703][ T5904] usb 3-1: USB disconnect, device number 2 [ 139.114511][ T6228] netlink: 72 bytes leftover after parsing attributes in process `syz.2.77'. [ 140.578613][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 140.607188][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 140.615574][ T6245] ceph: No mds server is up or the cluster is laggy [ 140.927455][ T9] libceph: connect (1)[c::]:6789 error -101 [ 140.933841][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 141.022210][ T5796] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 141.235758][ T5904] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 141.483396][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.503723][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.546452][ T5904] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 141.602807][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.688687][ T6256] ntfs3: nullb0: Primary boot signature is not NTFS. [ 141.701144][ T6256] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 142.195937][ T5904] usb 4-1: config 0 descriptor?? [ 142.215521][ T5904] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 142.224147][ T5904] dvb-usb: bulk message failed: -22 (3/0) [ 142.267739][ T5904] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 142.306758][ T5904] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 142.354520][ T5904] usb 4-1: media controller created [ 142.384667][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.455202][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 142.487090][ T5904] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 142.522444][ T5904] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 142.601686][ T5904] dvb-usb: schedule remote query interval to 150 msecs. [ 142.634236][ T5904] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 142.804635][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 142.990066][ T5904] dvb-usb: error while querying for an remote control event. [ 143.847438][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 143.853846][ T5904] dvb-usb: error while querying for an remote control event. [ 144.017601][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 144.040937][ T5904] dvb-usb: error while querying for an remote control event. [ 144.215667][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 144.221724][ T5904] dvb-usb: error while querying for an remote control event. [ 144.904960][ T5904] usb 4-1: USB disconnect, device number 3 [ 145.069109][ T5904] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 145.301983][ T5796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 145.319371][ T5796] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 145.355993][ T5796] usb 2-1: can't read configurations, error -71 [ 145.363441][ T6271] tmpfs: Bad value for 'nr_blocks' [ 145.736837][ T5858] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.236506][ T5904] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.419662][ T5858] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 146.428081][ T5858] usb 3-1: config 0 has no interface number 0 [ 146.434234][ T5858] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 146.455684][ T5858] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 146.464843][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.519616][ T5858] usb 3-1: config 0 descriptor?? [ 146.616271][ T5904] usb 4-1: too many configurations: 176, using maximum allowed: 8 [ 146.640563][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 146.664684][ T5904] usb 4-1: can't read configurations, error -61 [ 146.835880][ T5904] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.908035][ T6274] IPVS: Error connecting to the multicast addr [ 147.076687][ T5904] usb 4-1: too many configurations: 176, using maximum allowed: 8 [ 147.087124][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 147.094784][ T5904] usb 4-1: can't read configurations, error -61 [ 147.116681][ T5904] usb usb4-port1: attempt power cycle [ 147.386279][ T5858] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.704566][ T5904] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.867678][ T5904] usb 4-1: too many configurations: 176, using maximum allowed: 8 [ 147.948449][ T5858] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.968856][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 147.993641][ T5904] usb 4-1: can't read configurations, error -61 [ 148.031855][ T5858] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.123822][ T5858] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.170659][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.185677][ T5904] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.612110][ T6286] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 148.644688][ T5858] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 149.401147][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.476682][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.595975][ T5904] usb 4-1: device descriptor read/8, error -71 [ 149.756639][ T5904] usb usb4-port1: unable to enumerate USB device [ 149.849929][ T9] usb 3-1: USB disconnect, device number 3 [ 150.315683][ T5858] usb 1-1: USB disconnect, device number 4 [ 151.513047][ T6313] syz.3.94: attempt to access beyond end of device [ 151.513047][ T6313] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 151.536553][ T6313] SQUASHFS error: Failed to read block 0x0: -5 [ 151.547133][ T6313] unable to read squashfs_super_block [ 153.129215][ T6328] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 154.162790][ T6337] tipc: Started in network mode [ 154.171229][ T6337] tipc: Node identity 26ec250900b6, cluster identity 4711 [ 154.187685][ T6337] tipc: Enabled bearer , priority 0 [ 154.311597][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 154.444553][ T6337] tipc: Resetting bearer [ 154.528041][ T6334] tipc: Disabling bearer [ 154.537067][ T9] libceph: connect (1)[c::]:6789 error -101 [ 154.543666][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 154.639738][ T6349] ceph: No mds server is up or the cluster is laggy [ 154.678013][ T6356] tmpfs: Bad value for 'nr_blocks' [ 154.816462][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 154.995653][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 155.065917][ T5860] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 155.826381][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.040886][ T5904] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 156.164544][ T5904] usb 3-1: config 0 has no interface number 0 [ 156.270110][ T5904] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 156.355657][ T5904] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 156.413143][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.552213][ T5904] usb 3-1: config 0 descriptor?? [ 156.972760][ T6356] IPVS: Error connecting to the multicast addr [ 158.991566][ T5860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.050872][ T5860] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 159.100310][ T5860] usb 2-1: can't read configurations, error -71 [ 160.988625][ T5860] usb 3-1: USB disconnect, device number 4 [ 162.424148][ T6422] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 162.498790][ T6419] syz.3.114[6419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.499374][ T6419] syz.3.114[6419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.515937][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.181339][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.228147][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.239678][ T6426] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock [ 163.261117][ T9] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 163.309790][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.343811][ T9] usb 1-1: config 0 descriptor?? [ 163.798603][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 163.925608][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 164.396763][ T9] usb 1-1: USB disconnect, device number 5 [ 166.113921][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 166.150503][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 168.191377][ T6469] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 170.295592][ T5904] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.489174][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.508397][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.518981][ T5904] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 170.529101][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.547676][ T5904] usb 2-1: config 0 descriptor?? [ 171.570517][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 171.576732][ T5904] usbhid: probe of 2-1:0.0 failed with error -71 [ 171.655294][ T5904] usb 2-1: USB disconnect, device number 8 [ 171.842050][ T6506] loop0: detected capacity change from 0 to 512 [ 171.868768][ T6506] EXT4-fs: Ignoring removed oldalloc option [ 171.887139][ T6506] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 175.570563][ T6541] netlink: 'syz.1.135': attribute type 3 has an invalid length. [ 176.375369][ C0] sched: RT throttling activated [ 176.868265][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 180.044728][ T6570] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.467259][ T6587] loop1: detected capacity change from 0 to 736 [ 180.582962][ T6590] netlink: 72 bytes leftover after parsing attributes in process `syz.2.147'. [ 180.595911][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.818432][ T23] usb 4-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 181.126241][ T23] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.167196][ T23] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 181.185397][ T23] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 181.196488][ T23] usb 4-1: Manufacturer: syz [ 181.203329][ T23] usb 4-1: SerialNumber: syz [ 181.444740][ T23] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 181.498707][ T23] usb 4-1: USB disconnect, device number 8 [ 184.637215][ T6613] syz_tun: entered allmulticast mode [ 185.687636][ T6618] tmpfs: Bad value for 'nr_blocks' [ 185.986456][ T6570] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.938100][ T6570] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 186.975592][ T6570] usb 4-1: config 0 has no interface number 0 [ 186.982144][ T6570] usb 4-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 187.102790][ T6636] ntfs3: nullb0: Primary boot signature is not NTFS. [ 187.275751][ T6636] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 187.302154][ T6570] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 187.415594][ T6570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.416692][ T6570] usb 4-1: config 0 descriptor?? [ 193.490831][ T6570] usb 4-1: can't set config #0, error -110 [ 193.574727][ T5780] usb 4-1: USB disconnect, device number 9 [ 193.815054][ T6668] netlink: 72 bytes leftover after parsing attributes in process `syz.3.168'. [ 193.833139][ T6670] loop0: detected capacity change from 0 to 736 [ 194.839047][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.854675][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.095632][ T6700] tmpfs: Bad value for 'nr_blocks' [ 200.205493][ T5796] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 201.247245][ T5796] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 201.303176][ T5796] usb 1-1: config 0 has no interface number 0 [ 201.447337][ T5796] usb 1-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 201.600930][ T5796] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 201.666080][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.845523][ T5796] usb 1-1: config 0 descriptor?? [ 201.863240][ T6714] syz.2.180[6714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.863384][ T6714] syz.2.180[6714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.209500][ T6715] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 202.382799][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 202.403497][ T6717] bridge0: port 3(team0) entered disabled state [ 202.410110][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.417914][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.783538][ T6725] ntfs3: nullb0: Primary boot signature is not NTFS. [ 203.791470][ T6725] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 205.281815][ T28] audit: type=1326 audit(1759853501.366:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.3.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a4a18eec9 code=0x0 [ 205.628789][ T5796] usb 1-1: can't set config #0, error -71 [ 205.653583][ T5796] usb 1-1: USB disconnect, device number 7 [ 206.527153][ T6749] syz.1.192[6749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.527303][ T6749] syz.1.192[6749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.850967][ T6750] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock [ 206.998043][ T5796] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.482728][ T5796] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.537937][ T6760] netlink: 'syz.2.195': attribute type 3 has an invalid length. [ 207.719046][ T5796] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 207.929108][ T5796] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 208.153391][ T5796] usb 1-1: Manufacturer: syz [ 208.381236][ T5796] usb 1-1: SerialNumber: syz [ 208.863127][ T6773] IPv6: sit1: Disabled Multicast RS [ 208.974790][ T5796] usb 1-1: can't set config #36, error -71 [ 209.108485][ T5796] usb 1-1: USB disconnect, device number 8 [ 209.169102][ T6774] tmpfs: Bad value for 'nr_blocks' [ 209.475546][ T5780] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.477216][ T5780] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 210.489451][ T5780] usb 3-1: config 0 has no interface number 0 [ 210.537428][ T5780] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 210.559145][ T5780] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 210.594432][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.668627][ T5780] usb 3-1: config 0 descriptor?? [ 211.006224][ T6791] binder: 6788:6791 unknown command 1074553619 [ 211.012749][ T6791] binder: 6788:6791 ioctl c0306201 200000000540 returned -22 [ 211.037511][ T6787] loop1: detected capacity change from 0 to 4096 [ 211.138904][ T6787] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 211.883506][ T6774] IPVS: Error connecting to the multicast addr [ 211.965987][ T6793] syz.0.206[6793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.966146][ T6793] syz.0.206[6793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.195943][ T6793] erofs: (device nbd0): erofs_read_superblock: cannot find valid erofs superblock [ 212.286943][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 212.293360][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 212.293419][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 212.347486][ T6787] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 212.458045][ T58] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 212.567760][ T6787] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 212.579447][ T6787] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 212.613431][ T6787] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 212.669033][ T130] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 213.591225][ T6803] syz.1.207: attempt to access beyond end of device [ 213.591225][ T6803] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 213.605170][ T6803] SQUASHFS error: Failed to read block 0x0: -5 [ 213.611907][ T6803] unable to read squashfs_super_block [ 215.331349][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 216.449107][ T5804] usb 3-1: USB disconnect, device number 5 [ 217.680126][ T6839] ceph: No mds server is up or the cluster is laggy [ 218.599202][ T5796] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 218.768697][ T6570] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 218.874550][ T6856] netlink: 72 bytes leftover after parsing attributes in process `syz.3.217'. [ 218.928324][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 219.163597][ T6570] usb 2-1: unable to get BOS descriptor or descriptor too short [ 219.188215][ T6570] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 219.225891][ T6570] usb 2-1: can't read configurations, error -71 [ 224.375736][ T5780] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 225.512585][ T5780] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.560947][ T5780] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.583888][ T5780] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.598103][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.629093][ T6896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.709535][ T5780] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 225.806433][ T6908] ceph: No mds server is up or the cluster is laggy [ 226.169295][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.178711][ T5804] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 226.276425][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 226.277037][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.522880][ T9] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 226.531449][ T5804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 226.546960][ T5804] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 226.555264][ T5804] usb 4-1: can't read configurations, error -71 [ 226.736163][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 226.754877][ T9] usb 3-1: can't read configurations, error -61 [ 226.935447][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.191050][ T9] usb 3-1: device descriptor read/all, error -71 [ 229.241329][ T9] usb usb3-port1: attempt power cycle [ 232.882199][ T6942] loop3: detected capacity change from 0 to 128 [ 233.179008][ T6942] zonefs (loop3) ERROR: Not a zoned block device [ 233.910020][ T6954] ceph: No mds server is up or the cluster is laggy [ 233.970857][ T5904] usb 1-1: USB disconnect, device number 9 [ 234.816029][ T6570] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 236.464744][ T6570] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.496816][ T6570] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 236.504806][ T6570] usb 2-1: can't read configurations, error -71 [ 239.038183][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 241.966792][ T7020] ceph: No mds server is up or the cluster is laggy [ 242.422531][ T6570] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 243.019083][ T6570] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.032366][ T6570] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 243.040904][ T6570] usb 1-1: can't read configurations, error -71 [ 243.987111][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 247.474639][ T7059] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 247.596063][ T7062] syz.1.272[7062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.596205][ T7062] syz.1.272[7062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.077765][ T7072] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock [ 248.329760][ T7070] veth0_to_bond: entered allmulticast mode [ 248.907306][ T7067] tmpfs: Bad value for 'nr_blocks' [ 249.470021][ T967] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 250.882563][ T7088] ceph: No mds server is up or the cluster is laggy [ 251.196259][ T23] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 251.456982][ T967] usb 1-1: device descriptor read/all, error -71 [ 251.500057][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.537147][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 251.544817][ T23] usb 2-1: can't read configurations, error -71 [ 253.117230][ T7125] tmpfs: Bad value for 'nr_blocks' [ 254.185637][ T2129] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 254.680280][ T2129] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 254.738125][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 254.746520][ T2129] usb 4-1: config 0 has no interface number 0 [ 254.754238][ T2129] usb 4-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 254.765740][ T2129] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 254.780175][ T2129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.835410][ T5803] Bluetooth: hci1: command tx timeout [ 254.849531][ T2129] usb 4-1: config 0 descriptor?? [ 255.336057][ T7125] IPVS: Error connecting to the multicast addr [ 256.279816][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.785910][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.050933][ T9] usb 4-1: USB disconnect, device number 12 [ 257.514784][ T7158] Unsupported ieee802154 address type: 0 [ 258.885498][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 260.928564][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 261.586104][ T7204] tmpfs: Bad value for 'nr_blocks' [ 261.896399][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 262.198026][ T5904] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 262.238390][ T5904] usb 3-1: config 0 has no interface number 0 [ 262.275506][ T5904] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 262.323798][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 262.385954][ T5904] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 262.449589][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.520302][ T5904] usb 3-1: config 0 descriptor?? [ 262.679687][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.728048][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 262.755255][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.782828][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.349369][ T7212] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 263.402597][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 263.467670][ T7204] IPVS: Error connecting to the multicast addr [ 264.561620][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.782187][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.534056][ T2129] usb 3-1: USB disconnect, device number 9 [ 266.871896][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 267.867386][ T967] usb 2-1: USB disconnect, device number 15 [ 269.660808][ T7291] nbd3: detected capacity change from 0 to 63 [ 269.735690][ T7298] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 269.808261][ T7297] block nbd3: NBD_DISCONNECT [ 269.872902][ T7297] block nbd3: Disconnected due to user request. [ 269.915850][ T7297] block nbd3: shutting down sockets [ 270.001971][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.012142][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 270.020210][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 270.029964][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 270.038064][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 270.045876][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 270.055583][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.065523][ T54] Buffer I/O error on dev nbd3, logical block 0, async page read [ 270.073781][ T54] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 270.086765][ T54] Buffer I/O error on dev nbd3, logical block 1, async page read [ 270.096137][ T54] Buffer I/O error on dev nbd3, logical block 2, async page read [ 270.104459][ T54] Buffer I/O error on dev nbd3, logical block 3, async page read [ 270.114955][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 270.124465][ T54] Buffer I/O error on dev nbd3, logical block 0, async page read [ 270.133397][ T54] Buffer I/O error on dev nbd3, logical block 1, async page read [ 270.143875][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 270.154509][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 270.164455][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.176341][ T54] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 270.186317][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.198403][ T5801] ldm_validate_partition_table(): Disk read failed. [ 270.244693][ T5801] Dev nbd3: unable to read RDB block 0 [ 270.261916][ T7290] netlink: 72 bytes leftover after parsing attributes in process `syz.3.327'. [ 270.353654][ T5801] nbd3: unable to read partition table [ 270.369502][ T5801] ldm_validate_partition_table(): Disk read failed. [ 270.378873][ T5801] Dev nbd3: unable to read RDB block 0 [ 270.386649][ T5801] nbd3: unable to read partition table [ 271.070957][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 271.307897][ T7327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.333'. [ 276.565515][ T5860] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 276.776472][ T5860] usb 1-1: too many configurations: 176, using maximum allowed: 8 [ 277.581142][ T5860] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 277.605023][ T5860] usb 1-1: can't read configurations, error -61 [ 277.786277][ T5860] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 278.038310][ T5860] usb 1-1: too many configurations: 176, using maximum allowed: 8 [ 278.053538][ T5860] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 278.068474][ T5860] usb 1-1: can't read configurations, error -61 [ 278.079091][ T5860] usb usb1-port1: attempt power cycle [ 280.091598][ T7396] tmpfs: Bad value for 'nr_blocks' [ 280.765508][ T5860] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 280.957691][ T5860] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 280.967970][ T5860] usb 1-1: config 0 has no interface number 0 [ 280.975558][ T5860] usb 1-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 280.987720][ T5860] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 280.998339][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.009677][ T5860] usb 1-1: config 0 descriptor?? [ 281.245119][ T7396] IPVS: Error connecting to the multicast addr [ 282.751636][ T7416] ceph: No mds server is up or the cluster is laggy [ 283.485629][ T967] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 283.952412][ T967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 283.993079][ T967] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 284.025177][ T967] usb 3-1: can't read configurations, error -71 [ 284.198767][ T5860] usb 1-1: USB disconnect, device number 17 [ 288.035187][ T7480] tmpfs: Bad value for 'nr_blocks' [ 288.315639][ T5796] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 288.653945][ T5796] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 288.690808][ T5796] usb 2-1: config 0 has no interface number 0 [ 288.712243][ T5796] usb 2-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 288.745251][ T5796] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 288.805159][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.837495][ T5796] usb 2-1: config 0 descriptor?? [ 289.140206][ T7480] IPVS: Error connecting to the multicast addr [ 289.408242][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 289.760963][ T7504] loop2: detected capacity change from 0 to 4096 [ 289.863806][ T7504] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 290.766951][ T7515] syz.3.378 uses obsolete (PF_INET,SOCK_PACKET) [ 291.800908][ T7504] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 292.068340][ T11] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 292.118676][ T7504] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 292.131234][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.380'. [ 292.141493][ T7504] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 292.190422][ T7504] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 292.192786][ T7526] netlink: 'syz.3.381': attribute type 13 has an invalid length. [ 292.216020][ T11] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 292.950589][ T2129] usb 2-1: USB disconnect, device number 16 [ 294.504626][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.577938][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.128637][ T7526] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.138853][ T7526] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.149147][ T7526] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.159130][ T7526] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.409959][ T7542] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 295.448043][ T7526] syz.3.381 (7526) used greatest stack depth: 20464 bytes left [ 295.462858][ T7542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.383'. [ 295.563864][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 296.612084][ T7586] loop3: detected capacity change from 0 to 4096 [ 296.700444][ T7586] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 296.799695][ T7586] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 296.813828][ T3520] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 296.822818][ T7586] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 296.830788][ T7586] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 296.855417][ T7586] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 296.892638][ T3520] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 299.483189][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 300.803509][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'. [ 300.883128][ T7620] syzkaller1: entered promiscuous mode [ 300.889314][ T7620] syzkaller1: entered allmulticast mode [ 300.913825][ T7623] syz.3.402[7623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.913989][ T7623] syz.3.402[7623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.959830][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 301.329616][ T7627] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock [ 302.620004][ T7645] nbd0: detected capacity change from 0 to 127 [ 302.651337][ T5803] block nbd0: Receive control failed (result -104) [ 302.651481][ T95] block nbd0: Send control failed (result -32) [ 302.666215][ T95] block nbd0: Request send failed, requeueing [ 302.677397][ T95] block nbd0: Dead connection, failed to find a fallback [ 302.684647][ T95] block nbd0: shutting down sockets [ 302.692040][ T95] blk_print_req_error: 94 callbacks suppressed [ 302.692050][ T95] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 302.708921][ T95] buffer_io_error: 138 callbacks suppressed [ 302.708931][ T95] Buffer I/O error on dev nbd0, logical block 3, async page read [ 303.235659][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 303.982600][ T7552] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 304.535697][ T7552] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 304.577326][ T7552] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 304.585465][ T7552] usb 3-1: can't read configurations, error -61 [ 304.755778][ T7552] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 304.863669][ T7660] syz.3.415[7660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.863814][ T7660] syz.3.415[7660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.135551][ T7552] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 305.263276][ T7664] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock [ 305.896965][ T7552] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 305.904834][ T7552] usb 3-1: can't read configurations, error -61 [ 305.915683][ T7552] usb usb3-port1: attempt power cycle [ 307.876023][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 308.896371][ T7705] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.429'. [ 309.800726][ T7714] tipc: Started in network mode [ 309.808539][ T7714] tipc: Node identity 1e8690c0ec, cluster identity 4711 [ 309.818210][ T7714] tipc: Enabled bearer , priority 0 [ 309.829861][ T7714] syzkaller0: entered promiscuous mode [ 309.838985][ T7714] syzkaller0: entered allmulticast mode [ 309.896959][ T7714] tipc: Resetting bearer [ 309.923476][ T7713] tipc: Resetting bearer [ 309.991800][ T7713] tipc: Disabling bearer [ 312.274953][ T7748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 312.351413][ T7753] syz_tun: entered allmulticast mode [ 312.367716][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 314.821710][ T7552] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 315.246743][ T7552] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 315.279448][ T7552] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 315.305197][ T7552] usb 2-1: can't read configurations, error -61 [ 315.485899][ T7552] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 315.686325][ T7552] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 315.700451][ T7552] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 315.714562][ T7552] usb 2-1: can't read configurations, error -61 [ 315.728440][ T7552] usb usb2-port1: attempt power cycle [ 316.145537][ T7552] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 316.178377][ T7552] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 316.193578][ T7552] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 316.202403][ T7552] usb 2-1: can't read configurations, error -61 [ 316.368409][ T7552] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 316.390430][ T7790] netlink: 'syz.3.455': attribute type 10 has an invalid length. [ 316.398465][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.455'. [ 316.411856][ T7552] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 316.422888][ T7552] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 316.434010][ T7552] usb 2-1: can't read configurations, error -61 [ 316.443070][ T7552] usb usb2-port1: unable to enumerate USB device [ 316.450178][ T7790] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.732166][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.739007][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.840871][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 320.090817][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 320.113594][ T7823] netlink: 84 bytes leftover after parsing attributes in process `syz.2.466'. [ 320.266907][ T7823] netlink: 14 bytes leftover after parsing attributes in process `syz.2.466'. [ 320.373017][ T7823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.401823][ T7823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.445498][ T7823] bond0 (unregistering): Released all slaves [ 323.205522][ T7850] netlink: 168 bytes leftover after parsing attributes in process `syz.3.473'. [ 323.333363][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 325.001192][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.011840][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.021901][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.037172][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.055116][ T5803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.063926][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.601457][ T7879] netlink: 76 bytes leftover after parsing attributes in process `syz.2.483'. [ 325.740876][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 326.093471][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.141023][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.150442][ T7870] bridge_slave_0: entered allmulticast mode [ 326.166446][ T7870] bridge_slave_0: entered promiscuous mode [ 326.183741][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.191546][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.204718][ T7870] bridge_slave_1: entered allmulticast mode [ 326.215233][ T7870] bridge_slave_1: entered promiscuous mode [ 326.296252][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.310585][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.461670][ T7870] team0: Port device team_slave_0 added [ 326.487052][ T7870] team0: Port device team_slave_1 added [ 327.155451][ T5802] Bluetooth: hci4: command tx timeout [ 327.420897][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.433796][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.528645][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.590381][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.608676][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.644752][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.755117][ T7870] hsr_slave_0: entered promiscuous mode [ 327.772676][ T7870] hsr_slave_1: entered promiscuous mode [ 327.800798][ T7870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.839189][ T7870] Cannot create hsr debugfs directory [ 328.925099][ T7870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.943140][ T7870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.965653][ T7870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.986320][ T7870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.243158][ T5802] Bluetooth: hci4: command tx timeout [ 329.762295][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.836037][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.349672][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.357516][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.433769][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.442540][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.435592][ T5802] Bluetooth: hci4: command tx timeout [ 332.865083][ T7949] netlink: 76 bytes leftover after parsing attributes in process `syz.3.499'. [ 332.874571][ T5904] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 333.527754][ T5802] Bluetooth: hci4: command tx timeout [ 333.537718][ T95] block nbd0: Possible stuck request ffff888021f28000: control (read@0,1024B). Runtime 30 seconds [ 333.549431][ T95] block nbd0: Possible stuck request ffff888021f28200: control (read@1024,1024B). Runtime 30 seconds [ 333.561532][ T5904] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 333.569867][ T95] block nbd0: Possible stuck request ffff888021f28400: control (read@2048,1024B). Runtime 30 seconds [ 333.587627][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 333.625707][ T5904] usb 2-1: can't read configurations, error -61 [ 333.782114][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.789922][ T5904] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 333.986683][ T5904] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 334.039624][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 334.059805][ T5904] usb 2-1: can't read configurations, error -61 [ 334.093119][ T5904] usb usb2-port1: attempt power cycle [ 334.515812][ T5904] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 334.557344][ T5904] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 334.606973][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 334.623152][ T7870] veth0_vlan: entered promiscuous mode [ 334.663276][ T5904] usb 2-1: can't read configurations, error -61 [ 334.673555][ T7870] veth1_vlan: entered promiscuous mode [ 334.832969][ T7870] veth0_macvtap: entered promiscuous mode [ 334.865756][ T7870] veth1_macvtap: entered promiscuous mode [ 334.916047][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.928580][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.946546][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.960522][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.005400][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.055355][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.089780][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.142217][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.181372][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.199957][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.212744][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.228330][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.243047][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.348550][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.362568][ T7870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.372351][ T7870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.385524][ T7870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.394845][ T7870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.427383][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 335.462892][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 335.498917][ T7978] bridge0: port 3(team0) entered disabled state [ 335.506601][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.514395][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.251135][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.297497][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.431312][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.458203][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.998127][ T7998] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 338.129407][ T7999] loop2: detected capacity change from 0 to 4096 [ 338.154342][ T7999] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 338.274280][ T7999] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 338.350351][ T3520] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 338.390879][ T7999] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 338.415373][ T7999] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 338.450299][ T7999] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 338.462437][ T48] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 338.759262][ T8013] netlink: 76 bytes leftover after parsing attributes in process `syz.3.515'. [ 339.032804][ T8020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 339.171328][ T8022] netlink: 88 bytes leftover after parsing attributes in process `syz.1.521'. [ 339.694393][ T8027] tipc: Started in network mode [ 339.704452][ T8027] tipc: Node identity aaa5dded7f7b, cluster identity 4711 [ 339.854050][ T8027] tipc: Enabled bearer , priority 0 [ 339.970045][ T8028] syzkaller0: entered promiscuous mode [ 339.985876][ T8028] syzkaller0: entered allmulticast mode [ 340.010816][ T8027] tipc: Resetting bearer [ 340.082810][ T8026] tipc: Resetting bearer [ 340.169090][ T8026] tipc: Disabling bearer [ 340.505668][ T8035] loop2: detected capacity change from 0 to 4096 [ 340.514423][ T8035] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 340.625082][ T8035] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 340.860607][ T48] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 340.892627][ T8035] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 340.915444][ T8035] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 340.944959][ T8035] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 340.971122][ T48] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 346.393675][ T8090] syz.4.543[8090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.394323][ T8090] syz.4.543[8090] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.870333][ T8097] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 349.361180][ T8127] syz.1.556[8127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.361326][ T8127] syz.1.556[8127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.906035][ T8127] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock [ 352.132116][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 352.182559][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.190867][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.965711][ T27] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 353.241895][ T27] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 353.344522][ T27] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 353.366518][ T27] usb 3-1: can't read configurations, error -61 [ 353.518993][ T27] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 354.266379][ T27] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 354.409248][ T27] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 354.544833][ T27] usb 3-1: can't read configurations, error -61 [ 354.561033][ T27] usb usb3-port1: attempt power cycle [ 354.995774][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 355.038826][ T27] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 355.064858][ T27] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 355.076772][ T27] usb 3-1: can't read configurations, error -61 [ 355.323603][ T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 355.565845][ T27] usb 3-1: device not accepting address 18, error -71 [ 355.582412][ T27] usb usb3-port1: unable to enumerate USB device [ 356.116082][ T7535] libceph: connect (1)[c::]:6789 error -101 [ 356.122202][ T7535] libceph: mon0 (1)[c::]:6789 connect error [ 356.208329][ T8203] ceph: No mds server is up or the cluster is laggy [ 356.390681][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 356.397133][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 356.555468][ T7535] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 357.249023][ T7535] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.323051][ T7535] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 357.355690][ T7535] usb 5-1: can't read configurations, error -71 [ 360.836325][ T7535] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 361.056302][ T7535] usb 5-1: too many configurations: 176, using maximum allowed: 8 [ 361.080614][ T7535] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 361.097317][ T7535] usb 5-1: can't read configurations, error -61 [ 361.430029][ T7535] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 361.626106][ T7535] usb 5-1: too many configurations: 176, using maximum allowed: 8 [ 361.637924][ T7535] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 361.651501][ T7535] usb 5-1: can't read configurations, error -61 [ 361.658420][ T7535] usb usb5-port1: attempt power cycle [ 363.408152][ T8261] ceph: No mds server is up or the cluster is laggy [ 363.702512][ T8268] tmpfs: Bad value for 'nr_blocks' [ 363.765825][ T7554] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 363.816550][ T95] block nbd0: Possible stuck request ffff888021f28000: control (read@0,1024B). Runtime 60 seconds [ 363.828473][ T95] block nbd0: Possible stuck request ffff888021f28200: control (read@1024,1024B). Runtime 60 seconds [ 363.839957][ T95] block nbd0: Possible stuck request ffff888021f28400: control (read@2048,1024B). Runtime 60 seconds [ 364.003375][ T7554] usb 3-1: unable to get BOS descriptor or descriptor too short [ 364.024873][ T7554] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 364.033320][ T7554] usb 3-1: can't read configurations, error -71 [ 364.137075][ T7535] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 364.292244][ T8286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.605'. [ 364.304530][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 364.480974][ T7535] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 364.505464][ T7535] usb 5-1: config 0 has no interface number 0 [ 364.513428][ T7535] usb 5-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 364.526006][ T7535] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 364.535414][ T7535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.555986][ T7535] usb 5-1: config 0 descriptor?? [ 364.885045][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 364.924371][ T8290] netlink: 84 bytes leftover after parsing attributes in process `syz.2.607'. [ 364.968916][ T8268] IPVS: Error connecting to the multicast addr [ 365.050075][ T8295] netlink: 14 bytes leftover after parsing attributes in process `syz.2.607'. [ 366.698272][ T8326] Illegal XDP return value 4294967262 on prog (id 168) dev syz_tun, expect packet loss! [ 367.330108][ T27] usb 5-1: USB disconnect, device number 7 [ 369.183598][ T8378] syzkaller1: entered promiscuous mode [ 369.187929][ T8381] syz.4.627[8381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.190036][ T8381] syz.4.627[8381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.205666][ T8378] syzkaller1: entered allmulticast mode [ 369.568958][ T8384] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 370.469156][ T8389] batadv0: entered promiscuous mode [ 370.486941][ T8389] vlan2: entered promiscuous mode [ 370.570354][ T8395] tmpfs: Bad value for 'nr_blocks' [ 370.855736][ T7557] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 371.183773][ T7557] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 371.955094][ T7557] usb 2-1: config 0 has no interface number 0 [ 371.970822][ T7557] usb 2-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 371.982106][ T7557] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 371.991475][ T7557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.101093][ T7557] usb 2-1: config 0 descriptor?? [ 372.496303][ T8395] IPVS: Error connecting to the multicast addr [ 374.082412][ T7552] usb 2-1: USB disconnect, device number 25 [ 374.384522][ T8429] syzkaller1: entered promiscuous mode [ 374.418832][ T8429] syzkaller1: entered allmulticast mode [ 374.884241][ T8440] bond_slave_0: entered promiscuous mode [ 374.891172][ T8440] bond_slave_1: entered promiscuous mode [ 374.959261][ T8440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.984577][ T8440] bond1: (slave macvlan2): making interface the new active one [ 375.007366][ T8440] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 375.018699][ T8444] (null): rxe_set_mtu: Set mtu to 1024 [ 376.694007][ T8444] infiniband syz1: set active [ 376.707227][ T8444] infiniband syz1: added syz_tun [ 376.731068][ T8444] syz1: rxe_create_cq: returned err = -12 [ 376.747047][ T8444] infiniband syz1: Couldn't create ib_mad CQ [ 376.753600][ T8444] infiniband syz1: Couldn't open port 1 [ 376.880672][ T8444] RDS/IB: syz1: added [ 376.901936][ T8444] smc: adding ib device syz1 with port count 1 [ 376.910529][ T8444] smc: ib device syz1 port 1 has pnetid [ 377.988352][ T8496] syzkaller1: entered promiscuous mode [ 378.009777][ T8496] syzkaller1: entered allmulticast mode [ 379.542918][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.549629][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.401764][ T8526] tipc: Enabled bearer , priority 0 [ 380.410629][ T8526] syzkaller0: entered promiscuous mode [ 380.428314][ T8526] syzkaller0: entered allmulticast mode [ 380.482546][ T8529] gretap0: entered promiscuous mode [ 380.488904][ T8529] vlan2: entered promiscuous mode [ 380.521910][ T8525] tipc: Resetting bearer [ 380.562438][ T8525] tipc: Disabling bearer [ 380.676284][ T8531] syzkaller1: entered promiscuous mode [ 380.682138][ T8531] syzkaller1: entered allmulticast mode [ 381.391699][ T7557] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 381.782117][ T7557] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 381.796838][ T7557] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 381.813497][ T7557] usb 3-1: can't read configurations, error -61 [ 381.975845][ T7557] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 382.197834][ T7557] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 382.223178][ T7557] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 382.235188][ T7557] usb 3-1: can't read configurations, error -61 [ 382.246246][ T7557] usb usb3-port1: attempt power cycle [ 382.715416][ T7557] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 382.776913][ T7557] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 382.810977][ T8556] tipc: Enabled bearer , priority 0 [ 382.819799][ T7557] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 382.840743][ T8556] syzkaller0: entered promiscuous mode [ 382.846663][ T7557] usb 3-1: can't read configurations, error -61 [ 382.862069][ T8556] syzkaller0: entered allmulticast mode [ 382.927675][ T8555] tipc: Resetting bearer [ 382.983433][ T8555] tipc: Disabling bearer [ 382.995026][ T8561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.668'. [ 383.015405][ T7557] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 383.041244][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 383.056634][ T7557] usb 3-1: too many configurations: 176, using maximum allowed: 8 [ 383.077060][ T7557] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 383.084811][ T7557] usb 3-1: can't read configurations, error -61 [ 383.112666][ T7557] usb usb3-port1: unable to enumerate USB device [ 384.252075][ T8573] syzkaller1: entered promiscuous mode [ 384.268189][ T8573] syzkaller1: entered allmulticast mode [ 384.366490][ T8576] gretap0: entered promiscuous mode [ 384.372211][ T8576] vlan2: entered promiscuous mode [ 384.693982][ T8584] tipc: Started in network mode [ 384.704270][ T8584] tipc: Node identity 529de516e175, cluster identity 4711 [ 384.738051][ T8584] tipc: Enabled bearer , priority 0 [ 384.749719][ T8587] syzkaller0: entered promiscuous mode [ 384.815760][ T8587] syzkaller0: entered allmulticast mode [ 385.295756][ T8583] tipc: Resetting bearer [ 385.413430][ T8583] tipc: Disabling bearer [ 385.447302][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 387.155528][ T7554] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 387.495027][ T7554] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 387.508585][ T7554] usb 3-1: config 0 has no interface number 0 [ 387.515073][ T7554] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 387.535626][ T7554] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 387.553069][ T7554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.659585][ T7554] usb 3-1: config 0 descriptor?? [ 387.764911][ T8626] tipc: Enabled bearer , priority 0 [ 387.782180][ T8626] syzkaller0: entered promiscuous mode [ 387.794275][ T8626] syzkaller0: entered allmulticast mode [ 387.867609][ T8625] tipc: Resetting bearer [ 387.983151][ T8625] tipc: Disabling bearer [ 387.996752][ T8613] IPVS: Error connecting to the multicast addr [ 388.283851][ T8631] ceph: No mds server is up or the cluster is laggy [ 388.673985][ T7554] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 390.239240][ T7554] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.296043][ T7554] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 390.320911][ T7554] usb 5-1: can't read configurations, error -71 [ 390.910521][ T8671] syz.4.699[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.910624][ T8671] syz.4.699[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.231822][ T8673] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 391.995912][ T7533] usb 3-1: USB disconnect, device number 25 [ 392.246141][ T8676] tipc: Enabled bearer , priority 0 [ 392.339777][ T8676] tipc: Resetting bearer [ 393.338233][ T7533] tipc: Node number set to 643441929 [ 393.596473][ T8675] tipc: Disabling bearer [ 393.902709][ T95] block nbd0: Possible stuck request ffff888021f28000: control (read@0,1024B). Runtime 90 seconds [ 393.913799][ T95] block nbd0: Possible stuck request ffff888021f28200: control (read@1024,1024B). Runtime 90 seconds [ 393.924928][ T95] block nbd0: Possible stuck request ffff888021f28400: control (read@2048,1024B). Runtime 90 seconds [ 395.665585][ T7533] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 396.484482][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 396.598031][ T7533] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 396.635921][ T7533] usb 4-1: config 0 has no interface number 0 [ 396.653852][ T7533] usb 4-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 396.694599][ T7533] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 396.725176][ T7533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.763368][ T7533] usb 4-1: config 0 descriptor?? [ 397.701570][ T8721] IPVS: Error connecting to the multicast addr [ 399.046136][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.719'. [ 400.405448][ T7556] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 400.616575][ T7556] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 400.650097][ T7556] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 400.678905][ T7556] usb 2-1: can't read configurations, error -61 [ 400.845454][ T7556] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 400.951348][ T7558] usb 4-1: USB disconnect, device number 13 [ 401.056207][ T7556] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 401.076650][ T7556] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 401.095112][ T7556] usb 2-1: can't read configurations, error -61 [ 401.102600][ T7556] usb usb2-port1: attempt power cycle [ 402.253355][ T7556] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 402.515060][ T7556] usb 2-1: device not accepting address 28, error -71 [ 405.012880][ T7556] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 405.445596][ T7535] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 406.229294][ T7535] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 406.697925][ T7535] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 406.972150][ T7535] usb 2-1: can't read configurations, error -61 [ 407.010256][ T7556] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 407.031790][ T7556] usb 3-1: config 0 has no interface number 0 [ 407.046627][ T7556] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 407.118469][ T7556] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 407.135604][ T7556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.149007][ T7556] usb 3-1: config 0 descriptor?? [ 407.226142][ T7535] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 409.185787][ T7535] usb 2-1: device not accepting address 31, error -71 [ 409.231201][ T7535] usb usb2-port1: attempt power cycle [ 409.667455][ T8862] syz.1.742[8862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.671180][ T8862] syz.1.742[8862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.429166][ T7557] usb 3-1: USB disconnect, device number 26 [ 410.686295][ T8869] syzkaller0: entered promiscuous mode [ 410.691868][ T8869] syzkaller0: entered allmulticast mode [ 412.496932][ T8862] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock [ 412.623858][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 415.885919][ T5858] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 416.788051][ T5858] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 416.803247][ T5858] usb 3-1: config 0 has no interface number 0 [ 417.592357][ T5858] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 417.603445][ T5858] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 417.615191][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.632597][ T5858] usb 3-1: config 0 descriptor?? [ 418.889792][ T8913] IPVS: Error connecting to the multicast addr [ 421.465705][ T8976] syzkaller1: entered promiscuous mode [ 421.472413][ T8976] syzkaller1: entered allmulticast mode [ 421.735043][ T7535] usb 3-1: USB disconnect, device number 27 [ 423.967367][ T95] block nbd0: Possible stuck request ffff888021f28000: control (read@0,1024B). Runtime 120 seconds [ 423.985876][ T95] block nbd0: Possible stuck request ffff888021f28200: control (read@1024,1024B). Runtime 120 seconds [ 424.302696][ T95] block nbd0: Possible stuck request ffff888021f28400: control (read@2048,1024B). Runtime 120 seconds [ 424.745471][ T27] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 424.984414][ T27] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 425.013357][ T27] usb 3-1: config 0 has no interface number 0 [ 425.031344][ T27] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 425.221202][ T27] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 425.349164][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.476468][ T27] usb 3-1: config 0 descriptor?? [ 425.944398][ T9025] IPVS: Error connecting to the multicast addr [ 426.315411][ T7556] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 427.209147][ T7556] usb 4-1: too many configurations: 176, using maximum allowed: 8 [ 427.947010][ T7556] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 427.977564][ T7556] usb 4-1: can't read configurations, error -61 [ 428.183854][ T7556] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 429.178257][ T9094] syz.3.799[9094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.178402][ T9094] syz.3.799[9094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.485834][ T9099] erofs: (device nbd3): erofs_read_superblock: cannot find valid erofs superblock [ 430.374581][ T7533] usb 3-1: USB disconnect, device number 28 [ 431.775930][ T9136] 8021q: VLANs not supported on caif0 [ 431.823243][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 431.932430][ T9139] tipc: Enabled bearer , priority 0 [ 431.954608][ T9139] tipc: Resetting bearer [ 431.999224][ T9137] tipc: Disabling bearer [ 433.650713][ T9168] 8021q: VLANs not supported on caif0 [ 433.840786][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 433.874026][ T9177] tipc: Enabled bearer , priority 0 [ 433.889220][ T9177] tipc: Resetting bearer [ 433.911536][ T9175] tipc: Disabling bearer [ 436.000855][ T9200] 8021q: VLANs not supported on caif0 [ 436.200251][ T9210] tipc: Enabled bearer , priority 0 [ 436.252051][ T9210] tipc: Resetting bearer [ 436.313237][ T9208] tipc: Disabling bearer [ 436.331329][ T9215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.836'. [ 436.845567][ T7533] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 437.784990][ T7533] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.802131][ T7533] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.816097][ T7533] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.825386][ T7533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.856911][ T9219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 437.879117][ T7533] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 439.020287][ T9238] 8021q: VLANs not supported on caif0 [ 440.600507][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.607087][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.607929][ T7533] usb 3-1: USB disconnect, device number 29 [ 446.426440][ T9346] netlink: 76 bytes leftover after parsing attributes in process `syz.1.877'. [ 446.661352][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 449.182721][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 449.360235][ T9393] tipc: Enabling of bearer rejected, failed to enable media [ 451.270983][ T9424] 8021q: VLANs not supported on nlmon0 [ 451.497484][ T9431] tipc: Enabling of bearer rejected, failed to enable media [ 453.823121][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 454.055910][ T95] block nbd0: Possible stuck request ffff888021f28000: control (read@0,1024B). Runtime 150 seconds [ 454.067063][ T95] block nbd0: Possible stuck request ffff888021f28200: control (read@1024,1024B). Runtime 150 seconds [ 454.161480][ T7557] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 454.356709][ T95] block nbd0: Possible stuck request ffff888021f28400: control (read@2048,1024B). Runtime 150 seconds [ 454.499840][ T7557] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.511385][ T7557] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.529029][ T7557] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.538234][ T7557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.556511][ T9461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 454.698779][ T7557] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 455.317574][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.147460][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.871356][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 458.886183][ T7557] usb 2-1: USB disconnect, device number 33 [ 463.042809][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 466.182355][ T9549] bridge0: port 4(erspan0) entered blocking state [ 466.201574][ T9549] bridge0: port 4(erspan0) entered disabled state [ 466.219038][ T9549] erspan0: entered allmulticast mode [ 466.250858][ T9549] erspan0: entered promiscuous mode [ 466.261487][ T9550] erspan0: left allmulticast mode [ 466.268042][ T9550] erspan0: left promiscuous mode [ 466.276086][ T9550] bridge0: port 4(erspan0) entered disabled state [ 466.454547][ T9555] netlink: 80 bytes leftover after parsing attributes in process `syz.1.941'. [ 466.501525][ T9555] bridge0: port 3(team0) entered blocking state [ 466.508435][ T9555] bridge0: port 3(team0) entered listening state [ 466.515518][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.523955][ T9555] bridge0: port 2(bridge_slave_1) entered listening state [ 466.532398][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.539974][ T9555] bridge0: port 1(bridge_slave_0) entered listening state [ 471.001879][ T5159] udevd[5159]: worker [5801] /devices/virtual/block/nbd0 is taking a long time [ 471.723483][ T9617] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 472.646102][ T29] INFO: task syz.0.430:7708 blocked for more than 144 seconds. [ 472.694440][ T29] Not tainted syzkaller #0 [ 472.750113][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.823170][ T29] task:syz.0.430 state:D stack:27784 pid:7708 ppid:5790 flags:0x00004004 [ 472.901848][ T29] Call Trace: [ 472.928365][ T29] [ 472.977979][ T29] __schedule+0x14d2/0x44d0 [ 473.267752][ T29] ? asan.module_dtor+0x20/0x20 [ 473.347310][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 473.384884][ T29] ? __mutex_trylock_common+0x84/0x250 [ 473.441120][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 473.448218][ T29] schedule+0xbd/0x170 [ 473.452730][ T29] schedule_preempt_disabled+0x13/0x20 [ 473.464733][ T29] __mutex_lock+0x6b7/0xcc0 [ 473.470853][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 473.665664][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 473.688081][ T29] ? mutex_lock_nested+0x20/0x20 [ 473.695606][ T29] ? iput+0x347/0x920 [ 473.701178][ T29] ? ilookup+0x1c4/0x200 [ 473.706627][ T29] ? disk_block_events+0xa7/0x120 [ 473.712616][ T29] ? blkdev_get_by_dev+0x101/0x600 [ 473.719296][ T29] blkdev_get_by_dev+0x121/0x600 [ 473.725043][ T29] bdev_open_by_dev+0x77/0x100 [ 473.731117][ T29] setup_bdev_super+0x59/0x660 [ 473.736820][ T29] get_tree_bdev+0x337/0x510 [ 473.742584][ T29] ? vfs_parse_fs_string+0x160/0x160 [ 473.761889][ T29] ? squashfs_reconfigure+0x160/0x160 [ 473.768374][ T29] ? setup_bdev_super+0x660/0x660 [ 473.774302][ T29] ? apparmor_capable+0x137/0x1a0 [ 473.785468][ T29] ? bpf_lsm_capable+0x9/0x10 [ 473.798886][ T29] ? security_capable+0x89/0xb0 [ 473.869998][ T29] vfs_get_tree+0x8c/0x280 [ 473.878835][ T29] do_new_mount+0x24b/0xa40 [ 473.883749][ T29] __se_sys_mount+0x2da/0x3c0 [ 473.888906][ T29] ? __x64_sys_mount+0xc0/0xc0 [ 473.893901][ T29] ? __x64_sys_mount+0x20/0xc0 [ 473.910630][ T29] do_syscall_64+0x55/0xb0 [ 473.942003][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.955786][ T29] ? clear_bhb_loop+0x40/0x90 [ 473.962482][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.977105][ T29] RIP: 0033:0x7f232d98eec9 [ 474.000256][ T29] RSP: 002b:00007f232e75f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 474.013881][ T29] RAX: ffffffffffffffda RBX: 00007f232dbe6090 RCX: 00007f232d98eec9 [ 474.023228][ T29] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000900 [ 474.033821][ T29] RBP: 00007f232da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.060933][ T29] R10: 0000000001408009 R11: 0000000000000246 R12: 0000000000000000 [ 474.072370][ T29] R13: 00007f232dbe6128 R14: 00007f232dbe6090 R15: 00007fffc25c0e28 [ 474.081087][ T29] [ 474.096949][ T29] [ 474.096949][ T29] Showing all locks held in the system: [ 474.158641][ T29] 1 lock held by khungtaskd/29: [ 474.186299][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 474.229877][ T29] 2 locks held by kworker/u4:8/3473: [ 474.236513][ T29] 2 locks held by klogd/5148: [ 474.242057][ T29] #0: ffff8880b8e3c218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 474.255858][ T29] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x20ee/0x44d0 [ 474.267870][ T29] 2 locks held by getty/5552: [ 474.272865][ T29] #0: ffff8880204280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.283953][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 474.295886][ T29] 1 lock held by udevd/5801: [ 474.339107][ T29] #0: ffff88814139b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 474.353344][ T29] 1 lock held by syz.0.430/7708: [ 474.363033][ T29] #0: ffff88814139b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 474.375643][ T29] [ 474.378035][ T29] ============================================= [ 474.378035][ T29] [ 474.388567][ T29] NMI backtrace for cpu 0 [ 474.393173][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 474.400500][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 474.410759][ T29] Call Trace: [ 474.414077][ T29] [ 474.417497][ T29] dump_stack_lvl+0x16c/0x230 [ 474.422245][ T29] ? preempt_count_add+0x91/0x1a0 [ 474.427317][ T29] ? show_regs_print_info+0x20/0x20 [ 474.432723][ T29] ? load_image+0x3b0/0x3b0 [ 474.437348][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 474.442417][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 474.448708][ T29] ? _printk+0xd0/0x110 [ 474.453052][ T29] ? load_image+0x3b0/0x3b0 [ 474.458134][ T29] ? load_image+0x3b0/0x3b0 [ 474.462685][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 474.468888][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 474.475103][ T29] watchdog+0xf41/0xf80 [ 474.479905][ T29] ? watchdog+0x1e1/0xf80 [ 474.484376][ T29] kthread+0x2fa/0x390 [ 474.488476][ T29] ? hungtask_pm_notify+0x90/0x90 [ 474.493630][ T29] ? kthread_blkcg+0xd0/0xd0 [ 474.498447][ T29] ret_from_fork+0x48/0x80 [ 474.502963][ T29] ? kthread_blkcg+0xd0/0xd0 [ 474.507592][ T29] ret_from_fork_asm+0x11/0x20 [ 474.512392][ T29] [ 474.516431][ T29] Sending NMI from CPU 0 to CPUs 1: [ 474.521856][ C1] NMI backtrace for cpu 1 [ 474.521867][ C1] CPU: 1 PID: 3503 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 474.521882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 474.521893][ C1] Workqueue: bat_events batadv_nc_worker [ 474.521919][ C1] RIP: 0010:switch_mm_irqs_off+0x432/0xb10 [ 474.521944][ C1] Code: b7 e0 b8 03 00 48 8b 04 24 48 8d 88 18 06 00 00 48 89 ca 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df 48 89 54 24 18 80 3c 02 00 <48> 89 4c 24 08 74 0f 48 8b 7c 24 08 e8 2d cd a0 00 48 8b 4c 24 08 [ 474.521957][ C1] RSP: 0018:ffffc9000c9d7600 EFLAGS: 00000046 [ 474.521970][ C1] RAX: dffffc0000000000 RBX: ffff88807b7e0000 RCX: ffff88807b7e8f98 [ 474.521982][ C1] RDX: 1ffff1100f6fd1f3 RSI: 0000000000000000 RDI: ffff888025bd1e00 [ 474.521993][ C1] RBP: ffffc9000c9d76d0 R08: ffff88802e34336f R09: 1ffff11005c6866d [ 474.522004][ C1] R10: dffffc0000000000 R11: ffffed1005c6866e R12: 0000000000000000 [ 474.522015][ C1] R13: ffff88802e341e01 R14: 0000000000001e59 R15: 0000000000000000 [ 474.522026][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 474.522039][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.522050][ C1] CR2: 0000200000015000 CR3: 000000002e29f000 CR4: 00000000003506e0 [ 474.522064][ C1] Call Trace: [ 474.522069][ C1] [ 474.522080][ C1] ? switch_mm+0x130/0x130 [ 474.522105][ C1] __schedule+0xf22/0x44d0 [ 474.522140][ C1] ? asan.module_dtor+0x20/0x20 [ 474.522160][ C1] ? mark_lock+0x94/0x320 [ 474.522180][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 474.522203][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 474.522227][ C1] preempt_schedule_irq+0xb5/0x140 [ 474.522249][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 474.522276][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 474.522299][ C1] irqentry_exit+0x67/0x70 [ 474.522324][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 474.522342][ C1] RIP: 0010:lock_acquire+0x1f2/0x410 [ 474.522358][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 474.522371][ C1] RSP: 0018:ffffc9000c9d7a40 EFLAGS: 00000206 [ 474.522382][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0dfae592cbc88000 [ 474.522392][ C1] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc63c0 [ 474.522403][ C1] RBP: ffffc9000c9d7b48 R08: dffffc0000000000 R09: 1ffffffff21b4ea0 [ 474.522414][ C1] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: 1ffff9200193af54 [ 474.522425][ C1] R13: ffffffff8cd2ff20 R14: 0000000000000246 R15: dffffc0000000000 [ 474.522449][ C1] ? batadv_nc_worker+0xd2/0x610 [ 474.522471][ C1] ? read_lock_is_recursive+0x20/0x20 [ 474.522490][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 474.522509][ C1] ? batadv_nc_worker+0xd2/0x610 [ 474.522530][ C1] ? batadv_nc_worker+0xd2/0x610 [ 474.522551][ C1] batadv_nc_worker+0xef/0x610 [ 474.522572][ C1] ? batadv_nc_worker+0xd2/0x610 [ 474.522595][ C1] ? process_scheduled_works+0x957/0x15b0 [ 474.522615][ C1] process_scheduled_works+0xa45/0x15b0 [ 474.522650][ C1] ? assign_work+0x400/0x400 [ 474.522673][ C1] ? assign_work+0x39e/0x400 [ 474.522694][ C1] worker_thread+0xa55/0xfc0 [ 474.522728][ C1] kthread+0x2fa/0x390 [ 474.522741][ C1] ? pr_cont_work+0x560/0x560 [ 474.522782][ C1] ? kthread_blkcg+0xd0/0xd0 [ 474.522797][ C1] ret_from_fork+0x48/0x80 [ 474.522816][ C1] ? kthread_blkcg+0xd0/0xd0 [ 474.522831][ C1] ret_from_fork_asm+0x11/0x20 [ 474.522861][ C1] [ 474.882814][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 474.889893][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 474.897263][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 474.907756][ T29] Call Trace: [ 474.911235][ T29] [ 474.914186][ T29] dump_stack_lvl+0x16c/0x230 [ 474.918919][ T29] ? show_regs_print_info+0x20/0x20 [ 474.924168][ T29] ? load_image+0x3b0/0x3b0 [ 474.928704][ T29] panic+0x2c0/0x710 [ 474.932807][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 474.938468][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 474.943161][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 474.948854][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 474.955327][ T29] watchdog+0xf80/0xf80 [ 474.959653][ T29] ? watchdog+0x1e1/0xf80 [ 474.964013][ T29] kthread+0x2fa/0x390 [ 474.968128][ T29] ? hungtask_pm_notify+0x90/0x90 [ 474.973269][ T29] ? kthread_blkcg+0xd0/0xd0 [ 474.977959][ T29] ret_from_fork+0x48/0x80 [ 474.982408][ T29] ? kthread_blkcg+0xd0/0xd0 [ 474.987107][ T29] ret_from_fork_asm+0x11/0x20 [ 474.992204][ T29] [ 474.995836][ T29] Kernel Offset: disabled [ 475.000227][ T29] Rebooting in 86400 seconds..