last executing test programs: 13.786161929s ago: executing program 3 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 12.30210215s ago: executing program 3 (id=1004): close(0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 11.976010936s ago: executing program 2 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 11.400644993s ago: executing program 1 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 9.786954294s ago: executing program 3 (id=1010): socket$nl_generic(0x10, 0x3, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.785853824s ago: executing program 1 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) 9.665292584s ago: executing program 0 (id=1013): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() msgget$private(0x0, 0x0) getrusage(0x0, &(0x7f00000005c0)) 9.663063524s ago: executing program 2 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 8.883330548s ago: executing program 4 (id=1015): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) 8.625041098s ago: executing program 2 (id=1016): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f00000048c0), &(0x7f00000006c0)='./file0\x00', 0x200008, &(0x7f0000000000)={[{@heartbeat_none}, {@noacl}]}, 0x1, 0x489f, &(0x7f0000004980)="$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") 8.624565829s ago: executing program 1 (id=1017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@initdev, @empty, @remote}, &(0x7f0000000040)=0x6) socket$alg(0x26, 0x5, 0x0) 5.972259054s ago: executing program 1 (id=1018): close(0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="1eac4d20f8509e8f36d2842c8fae7bbe58c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d0558de77df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bbbe0131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d964b0161c1856697820eb52f55c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d09d0f74e180df6eaa94651336e7713414e49956fcb68a973e8239e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fbe071de646385dcf5cb7adf1ec70baef4061d2da93d2f5eef8b1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c109db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab58978eb8b269ba2ef764d4505ed495fe156f0dcbb79d177e4f0b476", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 5.934068777s ago: executing program 4 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x46}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1528, &(0x7f00000037c0)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 4.889918502s ago: executing program 3 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 4.769874512s ago: executing program 0 (id=1021): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) 4.125001014s ago: executing program 1 (id=1022): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)={0x84, 0x0, 0x2, 0x3}, 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r1) 2.8172114s ago: executing program 0 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 2.81697296s ago: executing program 3 (id=1024): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) syz_open_dev$midi(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) 2.81683024s ago: executing program 4 (id=1025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x6}], {0x10, 0x2}, {0x20, 0x6}}, 0x2c, 0x1) 2.688922871s ago: executing program 2 (id=1026): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0x40, 0x4) open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 2.674596602s ago: executing program 1 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="4f9c5b7fc1998094ddd2f0e76f34fa51b9cf89c4141938f930ce811589b346abbf1b8d02688e9f23262d23e170ce984ac97dc7f34496749c793f12f40a50fe4184280ad39e44b9cce1aa36fbbf5d755f278cbf988a660b0d8a979186aa1a5fe0a200867de8a27b415db2b077000fc50b993596ac2273aff83832be31f6d9ab6f8f5c492ab28e871f4586bb0032164756685d826d8974730248180d4b980703d5a6ebbce0d4513890418efb4094e9feb52edc"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001a40), 0x1003, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) 1.137247457s ago: executing program 4 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x7ffff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x2, 0xb}, {0x3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x10008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.135709717s ago: executing program 0 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) open(0x0, 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.088247551s ago: executing program 3 (id=1030): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c00"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 333.288682ms ago: executing program 2 (id=1031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x9, 0x0, &(0x7f0000000d40)="f6020000bd5260ce0a", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001080)="442693", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r3 = syz_clone(0x24000000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000010c0)="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") prlimit64(r3, 0x2, 0x0, 0x0) io_setup(0xfffffffd, &(0x7f0000000180)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, &(0x7f0000003000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1b) shutdown(r0, 0x1) 333.168263ms ago: executing program 4 (id=1032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) 145.530558ms ago: executing program 0 (id=1033): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) 145.313138ms ago: executing program 4 (id=1034): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 87.876322ms ago: executing program 2 (id=1035): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) 0s ago: executing program 0 (id=1036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000002900), 0x0, 0x12041, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x4080) kernel console output (not intermixed with test programs): HANGE): hsr_slave_1: link becomes ready [ 60.997023][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.009811][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.040737][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.057474][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.073784][ T4265] device veth0_vlan entered promiscuous mode [ 61.097270][ T4275] device veth0_vlan entered promiscuous mode [ 61.109869][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.119766][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.130162][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.138869][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.152174][ T4265] device veth1_vlan entered promiscuous mode [ 61.177516][ T4275] device veth1_vlan entered promiscuous mode [ 61.186602][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.198283][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.206630][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.215559][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.224338][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.232197][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.240619][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.249341][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.258055][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.265970][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.279441][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.294013][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.345786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.355897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.369099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.383091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.403930][ T4275] device veth0_macvtap entered promiscuous mode [ 61.414876][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.425048][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.434943][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.443998][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.453830][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.468127][ T4265] device veth0_macvtap entered promiscuous mode [ 61.490395][ T4275] device veth1_macvtap entered promiscuous mode [ 61.500014][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.509306][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.518619][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.527681][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.537095][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.546816][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.555877][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.564625][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.576378][ T4265] device veth1_macvtap entered promiscuous mode [ 61.585599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.594670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.603061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.621928][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.640680][ T4271] device veth0_vlan entered promiscuous mode [ 61.649027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.657190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.665373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.674889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.690426][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.701285][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.715216][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.726547][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.735199][ T4266] device veth0_vlan entered promiscuous mode [ 61.747139][ T4271] device veth1_vlan entered promiscuous mode [ 61.755929][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.764944][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.774553][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.783708][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.792148][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.806083][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.816646][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.829060][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.839652][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.849270][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.858360][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.868313][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.884631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.894642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.903756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.911749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.921833][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.931087][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.940481][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.950162][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.966404][ T4266] device veth1_vlan entered promiscuous mode [ 61.979321][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.021932][ T4271] device veth0_macvtap entered promiscuous mode [ 62.059483][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.068944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.079150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.098337][ T4271] device veth1_macvtap entered promiscuous mode [ 62.189478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.198830][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.208484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.219457][ T4266] device veth0_macvtap entered promiscuous mode [ 62.238145][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.250428][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.269014][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.280889][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.297456][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.316909][ T4266] device veth1_macvtap entered promiscuous mode [ 62.335305][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.346217][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.354809][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.364965][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.390539][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.403950][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.414025][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.425438][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.437021][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.453771][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.461757][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.475364][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.487396][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.497551][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.515425][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.525550][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.534983][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.544056][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.556262][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.567887][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.578034][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.588945][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 62.598174][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.608620][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.619761][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.630978][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.641526][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.643140][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.657594][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.669416][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 62.671646][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.675634][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 62.675664][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 62.675688][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 62.716894][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.728581][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.735316][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.737092][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.753375][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.765083][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.775080][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.785849][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.796952][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.808215][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.817044][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.826095][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.834933][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.845284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.853658][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.862258][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.870972][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.878810][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.887812][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.968636][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.982237][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.992156][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.001370][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.009859][ T4269] device veth0_vlan entered promiscuous mode [ 63.022553][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.031093][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.074777][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.090164][ T4269] device veth1_vlan entered promiscuous mode [ 63.107853][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.123671][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.180986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.225580][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.238720][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.257641][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.270145][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.281416][ T4269] device veth0_macvtap entered promiscuous mode [ 63.313940][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.331328][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.355335][ T4269] device veth1_macvtap entered promiscuous mode [ 63.371097][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.380122][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.395800][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.406241][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.460639][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.477055][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.479859][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.515203][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.551177][ T4381] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 63.559159][ T4381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 63.715710][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.785666][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.841131][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.909689][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.984575][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.013523][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.036717][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.047908][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.058360][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.067479][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.082881][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.095664][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.115392][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.198251][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.247265][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.259206][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.273823][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.283835][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.294582][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.332969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.333006][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 64.343587][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.362793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.414011][ T22] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 64.428845][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.442327][ T22] usb 4-1: config 0 descriptor?? [ 64.455896][ T22] as10x_usb: device has been detected [ 64.462409][ T22] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 64.566058][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.568584][ T22] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 64.632935][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.635991][ T22] as10x_usb: error during firmware upload part1 [ 64.647063][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.647925][ T22] Registered device nBox DVB-T Dongle [ 64.664874][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 64.750965][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 64.751585][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 64.751633][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 64.758242][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 64.778638][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.780652][ T7] usb 4-1: USB disconnect, device number 2 [ 64.787512][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.859259][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.096806][ T7] Unregistered device nBox DVB-T Dongle [ 65.121627][ T7] as10x_usb: device has been disconnected [ 65.702875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.023439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.031788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.040191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 66.048492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 66.053564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 66.064933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 66.073223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 66.091455][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.091632][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.101674][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.251984][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.291289][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.368601][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.176114][ T4428] process 'syz.1.12' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 69.191726][ T4441] loop4: detected capacity change from 0 to 128 [ 69.279049][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.397963][ T4441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.499780][ T4441] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.228413][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.235110][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.390890][ T4468] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.595721][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 74.398390][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.424280][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 75.492627][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 75.549215][ T7] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 75.582226][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.605729][ T7] usb 5-1: Product: syz [ 75.615784][ T7] usb 5-1: Manufacturer: syz [ 75.710299][ T7] usb 5-1: SerialNumber: syz [ 75.970239][ T7] usb 5-1: config 0 descriptor?? [ 76.134298][ T7] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 76.258464][ T26] audit: type=1326 audit(1754106955.860:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 76.362866][ T126] cfg80211: failed to load regulatory.db [ 77.023204][ T26] audit: type=1326 audit(1754106955.890:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 77.160864][ T7] usb 5-1: USB disconnect, device number 2 [ 77.245711][ T26] audit: type=1326 audit(1754106955.890:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 77.286157][ T4516] loop3: detected capacity change from 0 to 1024 [ 77.313321][ T4516] ======================================================= [ 77.313321][ T4516] WARNING: The mand mount option has been deprecated and [ 77.313321][ T4516] and is ignored by this kernel. Remove the mand [ 77.313321][ T4516] option from the mount to silence this warning. [ 77.313321][ T4516] ======================================================= [ 77.367238][ T26] audit: type=1326 audit(1754106955.890:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 77.434129][ T4516] EXT4-fs: inline encryption not supported [ 77.478103][ T4516] EXT4-fs: Ignoring removed bh option [ 77.493793][ T4521] Zero length message leads to an empty skb [ 77.516280][ T26] audit: type=1326 audit(1754106955.890:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 77.547297][ T4516] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.631565][ T26] audit: type=1326 audit(1754106955.890:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 77.691517][ T4516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 77.755804][ T26] audit: type=1326 audit(1754106955.890:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 77.900174][ T26] audit: type=1326 audit(1754106955.890:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 77.982132][ T26] audit: type=1326 audit(1754106955.890:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 78.074328][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 78.085220][ T26] audit: type=1326 audit(1754106955.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4510 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 79.266968][ T4552] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 79.347300][ T4558] netlink: 168 bytes leftover after parsing attributes in process `syz.2.48'. [ 79.571093][ T4559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 81.520020][ T4583] loop4: detected capacity change from 0 to 256 [ 81.587064][ T4583] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.628008][ T4583] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 81.678912][ T4583] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 81.752871][ T4340] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.952745][ T4340] usb 4-1: Using ep0 maxpacket: 8 [ 81.959692][ T4340] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 81.980330][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.002179][ T4340] usb 4-1: config 0 descriptor?? [ 82.397106][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 82.437352][ T4589] capability: warning: `syz.4.56' uses deprecated v2 capabilities in a way that may be insecure [ 84.327864][ T4605] Bluetooth: MGMT ver 1.22 [ 85.245591][ T4616] loop4: detected capacity change from 0 to 4096 [ 85.350438][ T4616] EXT4-fs error (device loop4): ext4_quota_enable:7022: inode #4: comm syz.4.63: iget: special inode unallocated [ 85.368894][ T4621] loop0: detected capacity change from 0 to 1024 [ 86.016715][ T4616] EXT4-fs error (device loop4): ext4_quota_enable:7025: comm syz.4.63: Bad quota inode: 4, type: 1 [ 86.038445][ T4616] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.111077][ T4616] EXT4-fs (loop4): mount failed [ 86.519685][ T4279] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.789414][ T4280] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.869686][ T4393] hfsplus: b-tree write err: -5, ino 4 [ 87.098881][ T4340] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 87.204873][ T4340] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 87.419317][ T4642] (syz.4.69,4642,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 87.428056][ T4642] (syz.4.69,4642,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 87.695368][ T4340] asix: probe of 4-1:0.0 failed with error -71 [ 87.976123][ T4340] usb 4-1: USB disconnect, device number 3 [ 91.143399][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 91.788701][ T4686] input: syz0 as /devices/virtual/input/input6 [ 92.603654][ T4694] loop2: detected capacity change from 0 to 1024 [ 92.616550][ T4694] EXT4-fs: inline encryption not supported [ 92.622612][ T4694] EXT4-fs: Ignoring removed bh option [ 92.769406][ T4699] loop1: detected capacity change from 0 to 256 [ 93.381634][ T4699] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 93.432378][ T4694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.785883][ T4282] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 93.794779][ T4282] Bluetooth: hci1: Injecting HCI hardware error event [ 93.804487][ T4280] Bluetooth: hci1: hardware error 0x00 [ 94.570618][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 95.341656][ T4719] loop1: detected capacity change from 0 to 1024 [ 95.396142][ T4722] loop0: detected capacity change from 0 to 128 [ 95.403101][ T4722] EXT4-fs: Ignoring removed nobh option [ 95.561383][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.586234][ T4731] loop2: detected capacity change from 0 to 512 [ 95.634449][ T4731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.706658][ T4722] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.774784][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.797457][ T4731] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.864862][ T4280] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 96.563142][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 96.594542][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 97.393704][ T4749] loop0: detected capacity change from 0 to 2048 [ 97.572889][ T4749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.668026][ T4767] device syzkaller0 entered promiscuous mode [ 97.838781][ T4767] tipc: Started in network mode [ 97.844017][ T4767] tipc: Node identity d6b20a180a15, cluster identity 4711 [ 97.861017][ T4767] tipc: Enabled bearer , priority 0 [ 97.871823][ T4766] tipc: Resetting bearer [ 98.052316][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 98.856652][ T14] tipc: Node number set to 3701934616 [ 99.185779][ T4337] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.388701][ T4337] usb 3-1: Using ep0 maxpacket: 16 [ 99.397500][ T4337] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.409767][ T4337] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.420253][ T4337] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.433548][ T4337] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.440323][ T4337] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 99.454018][ T4337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.477637][ T4337] usb 3-1: config 0 descriptor?? [ 99.922138][ T4337] hid (null): nested delimiters [ 99.927345][ T4337] hid (null): nested delimiters [ 99.932221][ T4337] hid (null): nested delimiters [ 99.947490][ T4337] hid (null): global environment stack underflow [ 99.954151][ T4337] hid (null): unknown global tag 0xe [ 100.811694][ T4795] loop0: detected capacity change from 0 to 256 [ 100.975001][ T4795] FAT-fs (loop0): Directory bread(block 64) failed [ 101.005343][ T4332] usb 3-1: USB disconnect, device number 2 [ 101.025229][ T4795] FAT-fs (loop0): Directory bread(block 65) failed [ 101.031885][ T4795] FAT-fs (loop0): Directory bread(block 66) failed [ 101.074251][ T4795] FAT-fs (loop0): Directory bread(block 67) failed [ 101.124274][ T4795] FAT-fs (loop0): Directory bread(block 68) failed [ 101.173498][ T4795] FAT-fs (loop0): Directory bread(block 69) failed [ 101.221706][ T4795] FAT-fs (loop0): Directory bread(block 70) failed [ 101.239927][ T4795] FAT-fs (loop0): Directory bread(block 71) failed [ 101.248669][ T4795] FAT-fs (loop0): Directory bread(block 72) failed [ 101.255572][ T4795] FAT-fs (loop0): Directory bread(block 73) failed [ 102.442360][ T4803] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 102.449216][ T4803] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.458528][ T4803] vhci_hcd vhci_hcd.0: Device attached [ 102.490356][ T4806] vhci_hcd: connection closed [ 102.494825][ T4309] vhci_hcd: stop threads [ 102.568669][ T4309] vhci_hcd: release socket [ 102.654162][ T4309] vhci_hcd: disconnect device [ 103.358056][ T4813] loop4: detected capacity change from 0 to 512 [ 103.366678][ T4813] EXT4-fs: Ignoring removed bh option [ 103.428212][ T4813] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 103.510978][ T4813] EXT4-fs (loop4): 1 truncate cleaned up [ 103.517261][ T4813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.539914][ T4820] loop2: detected capacity change from 0 to 128 [ 103.563389][ T4820] FAT-fs (loop2): Unrecognized mount option ""cÚ®òEg•Ý›& ŸbHTê=Õ  ÖßD_\:ç–þÆÖ3 ÿ­iyJÏï} gýAuòÍ‚ßvš¢î{þ6@UEÒæ`Éùâ"§.>q\HWÒ†N^'odpãÞ êôý°\ABÚ" or missing value [ 103.744415][ T4257] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.747486][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 103.747499][ T26] audit: type=1804 audit(1754106983.346:56): pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.118" name="/newroot/23/file1" dev="fuse" ino=1 res=1 errno=0 [ 104.555304][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 105.919143][ T4832] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 106.906627][ T4766] tipc: Disabling bearer [ 107.174989][ T4850] netlink: 'syz.2.124': attribute type 4 has an invalid length. [ 109.837986][ T4861] loop3: detected capacity change from 0 to 2048 [ 109.990496][ T4861] loop3: p1 < > p3 [ 110.016595][ T4861] loop3: p3 size 134217728 extends beyond EOD, truncated [ 111.972679][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 111.988845][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 112.602959][ T4897] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.611230][ T4897] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.710693][ T4908] loop1: detected capacity change from 0 to 256 [ 112.746853][ T4908] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.774251][ T4908] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 112.806524][ T4908] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 113.294797][ T4897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.357350][ T4897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.590628][ T4911] loop0: detected capacity change from 0 to 2048 [ 113.704584][ T4911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.732374][ T4897] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.747091][ T4897] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.759393][ T4911] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.141: bg 0: block 234: padding at end of block bitmap is not set [ 114.778022][ T4897] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.786464][ T4911] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 640 with error 28 [ 114.801518][ T4897] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.806344][ T4911] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.806344][ T4911] [ 114.825753][ T4911] EXT4-fs (loop0): Total free blocks count 0 [ 114.841946][ T4911] EXT4-fs (loop0): Free/Dirty block details [ 114.850725][ T4911] EXT4-fs (loop0): free_blocks=0 [ 114.855844][ T4911] EXT4-fs (loop0): dirty_blocks=656 [ 114.861545][ T4911] EXT4-fs (loop0): Block reservation details [ 114.867949][ T4911] EXT4-fs (loop0): i_reserved_data_blocks=41 [ 114.994148][ T4901] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 115.016413][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.042371][ T4903] device batadv_slave_1 entered promiscuous mode [ 115.078918][ T4903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.169269][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 115.237674][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 116.103960][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 116.286894][ T4906] device bridge_slave_1 left promiscuous mode [ 118.315717][ T4906] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.498979][ T4906] device bridge_slave_0 left promiscuous mode [ 118.516978][ T4906] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.534243][ T4952] xt_nfacct: accounting object `syz1' does not exists [ 120.141147][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059834400: rx timeout, send abort [ 120.150763][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059836000: rx timeout, send abort [ 120.167328][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059836000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.181954][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059834400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.286948][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 120.885913][ T4960] loop1: detected capacity change from 0 to 512 [ 120.978311][ T4960] EXT4-fs: Ignoring removed i_version option [ 121.099178][ T4960] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.112518][ T4960] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.289339][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 121.304595][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 121.966661][ T4960] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.083168][ T4960] EXT4-fs (loop1): 1 truncate cleaned up [ 122.123178][ T4960] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.340679][ T4310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.651544][ T4310] usb 4-1: config 0 has no interfaces? [ 123.667794][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.940704][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 123.953037][ T4310] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 123.970628][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.072249][ T4310] usb 4-1: SerialNumber: syz [ 124.268708][ T4310] usb 4-1: config 0 descriptor?? [ 125.131178][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.983095][ T4325] usb 4-1: USB disconnect, device number 4 [ 126.118882][ T4317] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 126.139629][ T4317] usb 5-1: can't read configurations, error -71 [ 126.283433][ T5000] loop0: detected capacity change from 0 to 256 [ 127.708155][ C1] sched: RT throttling activated [ 129.748486][ T4310] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 129.756336][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 130.832225][ T4310] usb 5-1: device descriptor read/64, error -32 [ 131.784803][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 131.795462][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.808778][ T4310] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 131.824797][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.843871][ T5034] device bridge_slave_0 left promiscuous mode [ 131.851609][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.532264][ T5034] device bridge_slave_1 left promiscuous mode [ 132.620065][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.659162][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 132.666796][ T4310] usb 5-1: device descriptor read/all, error -71 [ 132.674061][ T4310] usb usb5-port1: attempt power cycle [ 132.682623][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.688974][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.793326][ T5034] bond0: (slave bond_slave_0): Releasing backup interface [ 132.904803][ T5034] bond0: (slave bond_slave_1): Releasing backup interface [ 133.092350][ T5034] team0: Port device team_slave_0 removed [ 133.141208][ T5034] team0: Port device team_slave_1 removed [ 133.147404][ T5034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.165652][ T5034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.195612][ T5037] team0: Mode changed to "activebackup" [ 133.207400][ T5042] device vlan0 entered promiscuous mode [ 133.261895][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 134.544373][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 135.059442][ T5062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'. [ 137.586867][ T5096] loop4: detected capacity change from 0 to 1024 [ 138.725031][ T5096] EXT4-fs: Ignoring removed i_version option [ 139.221063][ T5108] loop3: detected capacity change from 0 to 1024 [ 139.257572][ T5110] device batadv_slave_1 entered promiscuous mode [ 139.271916][ T5096] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.190: Invalid block bitmap block 0 in block_group 0 [ 139.278864][ T5110] device veth1_virt_wifi entered promiscuous mode [ 139.313655][ T5108] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.337853][ T5109] device veth1_virt_wifi left promiscuous mode [ 139.345908][ T5109] device batadv_slave_1 left promiscuous mode [ 139.367720][ T5096] Quota error (device loop4): write_blk: dquota write failed [ 139.465160][ T5096] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.478520][ T26] audit: type=1326 audit(1754107019.082:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 139.527649][ T26] audit: type=1326 audit(1754107019.102:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 139.544314][ T5096] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.190: Failed to acquire dquot type 0 [ 139.580124][ T5118] loop1: detected capacity change from 0 to 1024 [ 139.595658][ T26] audit: type=1326 audit(1754107019.102:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 139.640982][ T5096] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.190: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.715259][ T5096] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.190: Invalid inode bitmap blk 0 in block_group 0 [ 139.724411][ T26] audit: type=1326 audit(1754107019.102:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.3.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fccae58eb69 code=0x7ffc0000 [ 139.763751][ T5120] hfsplus: keylen 65060 too large [ 139.774486][ T9] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 139.790612][ T5096] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 139.804773][ T5120] hfsplus: keylen 65060 too large [ 139.829856][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 0 [ 139.844834][ T5096] EXT4-fs (loop4): 1 orphan inode deleted [ 139.884652][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 139.901063][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 140.216485][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 140.433361][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 141.496166][ T4324] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 142.801476][ T4324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.820041][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 142.902744][ T4324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.933571][ T4324] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 142.970674][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.033685][ T4324] usb 4-1: Product: syz [ 143.045397][ T5136] loop0: detected capacity change from 0 to 1024 [ 143.056468][ T4324] usb 4-1: Manufacturer: syz [ 143.104421][ T4324] usb 4-1: SerialNumber: syz [ 143.168518][ T4324] usb 4-1: config 0 descriptor?? [ 143.200766][ T5123] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.230432][ T4324] usb 4-1: ucan: probing device on interface #0 [ 143.236731][ T4324] usb 4-1: ucan: invalid EP count (1) [ 143.279782][ T4324] usb 4-1: ucan: probe failed; try to update the device firmware [ 143.630215][ T4280] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 143.638903][ T4280] Bluetooth: hci4: Injecting HCI hardware error event [ 143.647959][ T4282] Bluetooth: hci4: hardware error 0x00 [ 144.010273][ T4373] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.204884][ T4373] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.412089][ T4373] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 144.455698][ T4373] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 144.491595][ T4373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.499897][ T4373] usb 5-1: SerialNumber: syz [ 144.528860][ T5146] loop2: detected capacity change from 0 to 16 [ 144.628479][ T5146] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.963027][ T5150] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.972611][ T5150] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.981385][ T5150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.990094][ T5150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.012489][ T5150] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 145.162479][ T4324] usb 4-1: USB disconnect, device number 5 [ 145.174976][ T5153] loop0: detected capacity change from 0 to 32768 [ 145.182019][ T5153] XFS: ikeep mount option is deprecated. [ 145.343925][ T5151] loop1: detected capacity change from 0 to 32768 [ 145.380640][ T5151] XFS (loop1): Mounting V5 Filesystem [ 145.386847][ T5153] XFS (loop0): Mounting V5 Filesystem [ 145.479804][ T5151] XFS (loop1): Ending clean mount [ 145.491934][ T5151] XFS (loop1): Quotacheck needed: Please wait. [ 145.518619][ T5153] XFS (loop0): Ending clean mount [ 145.528612][ T5153] XFS (loop0): Quotacheck needed: Please wait. [ 145.578037][ T5151] XFS (loop1): Quotacheck: Done. [ 145.710432][ T4282] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 145.781808][ T5153] XFS (loop0): Quotacheck: Done. [ 146.733563][ T4317] usb 5-1: USB disconnect, device number 8 [ 148.522803][ T5191] netlink: 'syz.4.211': attribute type 4 has an invalid length. [ 148.530904][ T5191] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.211'. [ 148.752275][ T5180] syz.0.206 (5180) used greatest stack depth: 19472 bytes left [ 148.840558][ T5197] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 148.840558][ T5197] The task syz.2.209 (5197) triggered the difference, watch for misbehavior. [ 148.852251][ T4271] XFS (loop1): Unmounting Filesystem [ 148.876112][ T4265] XFS (loop0): Unmounting Filesystem [ 149.088665][ T5200] loop3: detected capacity change from 0 to 128 [ 149.146611][ T5202] netlink: 'syz.4.214': attribute type 5 has an invalid length. [ 149.246569][ T5200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.260901][ T5202] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.214'. [ 149.340005][ T5200] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.468654][ T5217] loop4: detected capacity change from 0 to 2048 [ 150.506778][ T5217] loop4: p1 < > p3 [ 150.549297][ T5217] loop4: p3 size 134217728 extends beyond EOD, truncated [ 150.622780][ T5214] kvm: emulating exchange as write [ 150.724137][ T3637] loop4: p1 < > p3 [ 150.738528][ T3637] loop4: p3 size 134217728 extends beyond EOD, truncated [ 150.795131][ T4324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.081090][ T4324] usb 1-1: Using ep0 maxpacket: 16 [ 151.112303][ T4324] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 151.347566][ T4324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.483611][ T4324] usb 1-1: config 0 has no interface number 0 [ 151.489760][ T4324] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 151.502126][ T5231] loop2: detected capacity change from 0 to 64 [ 151.511866][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.522625][ T5231] hfs: unable to parse mount options [ 151.530375][ T4324] usb 1-1: config 0 descriptor?? [ 151.584828][ T4324] usb 1-1: Found UVC 0.00 device (0bd3:05f4) [ 151.742513][ T4324] usb 1-1: No valid video chain found. [ 151.796079][ T14] usb 1-1: USB disconnect, device number 2 [ 151.887422][ T26] audit: type=1326 audit(1754107031.471:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 152.057580][ T26] audit: type=1326 audit(1754107031.481:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 152.139071][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 152.442958][ T26] audit: type=1326 audit(1754107031.481:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 152.583598][ T5245] loop3: detected capacity change from 0 to 256 [ 152.591694][ T26] audit: type=1326 audit(1754107031.481:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 152.635405][ T4283] udevd[4283]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 152.654253][ T5186] udevd[5186]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 152.656580][ T5245] exfat: Deprecated parameter 'codepage' [ 152.713668][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 152.751630][ T5245] exfat: Bad value for 'codepage' [ 152.753963][ T5186] udevd[5186]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 152.787754][ T5252] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.889153][ T5253] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.526902][ T5328] ptrace attach of "./syz-executor exec"[4269] was attempted by "./syz-executor exec"[5328] [ 155.681569][ T4324] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.889846][ T5332] loop4: detected capacity change from 0 to 32768 [ 155.897176][ T5332] XFS: ikeep mount option is deprecated. [ 156.379958][ T5345] 9pnet_virtio: no channels available for device [ 156.538329][ T4324] usb 1-1: Using ep0 maxpacket: 32 [ 156.563203][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.694609][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.723976][ T4324] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 156.735663][ T5335] syz.3.234 sent an empty control message without MSG_MORE. [ 158.145449][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.174687][ T5332] XFS (loop4): Mounting V5 Filesystem [ 158.198425][ T4324] usb 1-1: config 0 descriptor?? [ 158.424923][ T5332] XFS (loop4): Ending clean mount [ 158.441801][ T5332] XFS (loop4): Quotacheck needed: Please wait. [ 158.521292][ T5332] XFS (loop4): Quotacheck: Done. [ 158.601707][ T4324] usbhid 1-1:0.0: can't add hid device: -71 [ 158.711527][ T5364] netlink: 6 bytes leftover after parsing attributes in process `syz.2.241'. [ 158.720511][ T5364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.576865][ T4324] usbhid: probe of 1-1:0.0 failed with error -71 [ 159.622672][ T26] audit: type=1800 audit(1754107039.180:65): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.235" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 159.686422][ T4324] usb 1-1: USB disconnect, device number 3 [ 159.734331][ T4269] XFS (loop4): Unmounting Filesystem [ 164.172804][ T4340] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.357016][ T5396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.244'. [ 164.384936][ T4340] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.423707][ T4340] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.453891][ T4340] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.462249][ T4340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.506111][ T4340] usb 2-1: SerialNumber: syz [ 165.593432][ T5400] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 165.751438][ T4340] usb 2-1: 0:2 : does not exist [ 165.939984][ T4340] usb 2-1: USB disconnect, device number 2 [ 166.863581][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.002494][ T5396] mmap: syz.4.244 (5396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.132348][ T5421] loop3: detected capacity change from 0 to 128 [ 167.317737][ T5421] 9pnet: Could not find request transport: f [ 167.339611][ T5425] loop0: detected capacity change from 0 to 512 [ 167.350029][ T5421] syz.3.254: attempt to access beyond end of device [ 167.350029][ T5421] loop3: rw=2049, sector=145, nr_sectors = 512 limit=128 [ 167.397279][ T5425] EXT4-fs: Ignoring removed oldalloc option [ 167.476245][ T5425] ext4: Unknown parameter 'rootcontext' [ 168.817642][ T5440] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 168.844029][ T5440] CIFS mount error: No usable UNC path provided in device string! [ 168.844029][ T5440] [ 168.854482][ T5440] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 169.442288][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.705976][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.981077][ T126] usb 3-1: config 0 has no interfaces? [ 170.156181][ T126] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 170.570038][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.869498][ T126] usb 3-1: Product: syz [ 170.894622][ T5485] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 170.899862][ T126] usb 3-1: Manufacturer: syz [ 170.958062][ T126] usb 3-1: SerialNumber: syz [ 171.007145][ T126] usb 3-1: config 0 descriptor?? [ 171.069697][ T5485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.151773][ T5486] bond1: (slave veth3): Enslaving as an active interface with a down link [ 171.218301][ T5490] device veth1 entered promiscuous mode [ 171.254134][ T5490] device veth1 left promiscuous mode [ 171.269049][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.282038][ T5490] bond1: (slave vlan2): making interface the new active one [ 171.285375][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.301385][ T5490] device veth1 entered promiscuous mode [ 171.322185][ T5490] device vlan2 entered promiscuous mode [ 171.340054][ T5490] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 171.352771][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 171.379713][ T126] usb 3-1: USB disconnect, device number 3 [ 172.557364][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 172.677458][ T5509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.746511][ T5509] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 172.771362][ T5515] device vlan2 entered promiscuous mode [ 172.777153][ T5515] device bond1 entered promiscuous mode [ 172.782928][ T5515] device gretap1 entered promiscuous mode [ 172.790421][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 173.860248][ T5530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.383056][ T5536] loop2: detected capacity change from 0 to 64 [ 175.101977][ T5544] overlayfs: failed to clone upperpath [ 175.613092][ T5544] overlayfs: unrecognized mount option "mask=MAY_WRITE" or missing value [ 179.773653][ T5574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'. [ 179.806218][ T5574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.825337][ T5574] device vlan2 entered promiscuous mode [ 179.833158][ T5574] device bond1 entered promiscuous mode [ 179.883956][ T5574] device gretap1 entered promiscuous mode [ 179.899875][ T5574] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 179.932471][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 180.638987][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 180.681864][ T5583] loop0: detected capacity change from 0 to 512 [ 180.854375][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 180.984636][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 180.990744][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 181.615370][ T5601] Cannot find set identified by id 0 to match [ 181.817888][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 183.881959][ T4282] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 183.891549][ T4282] Bluetooth: hci2: Injecting HCI hardware error event [ 183.899982][ T4282] Bluetooth: hci2: hardware error 0x00 [ 184.021867][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 184.729820][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 185.855629][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 185.901149][ T5634] loop0: detected capacity change from 0 to 16 [ 185.983395][ T4282] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 186.088538][ T5634] erofs: (device loop0): mounted with root inode @ nid 36. [ 186.241672][ T5636] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 186.285000][ T4282] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 186.300191][ T5631] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 186.382096][ T26] audit: type=1800 audit(1754107065.976:66): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.303" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 186.572839][ T5631] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 186.603848][ T5644] loop3: detected capacity change from 0 to 512 [ 187.300932][ T5634] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 187.342024][ T5644] EXT4-fs: Ignoring removed oldalloc option [ 187.382212][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 187.422796][ T5644] ext4: Unknown parameter 'rootcontext' [ 187.432075][ T5634] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 187.488878][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 187.606209][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 189.421741][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 190.315681][ T4398] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.451250][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 190.535804][ T4398] usb 3-1: Using ep0 maxpacket: 32 [ 190.546039][ T5667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.546174][ T4398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.563961][ T4398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.574169][ T4398] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 190.583848][ T4398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.599704][ T4398] usb 3-1: config 0 descriptor?? [ 190.603575][ T5672] device vlan2 entered promiscuous mode [ 190.692754][ T5672] device bond1 entered promiscuous mode [ 190.771938][ T5667] device gretap1 entered promiscuous mode [ 190.831181][ T5667] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 190.847892][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 190.873969][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 190.950654][ T4393] device vlan2 left promiscuous mode [ 191.251527][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.262377][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.322634][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.334789][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.347262][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.358002][ T5683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.890761][ T5686] support for the xor transformation has been removed. [ 192.142644][ T4398] usbhid 3-1:0.0: can't add hid device: -71 [ 192.148759][ T4398] usbhid: probe of 3-1:0.0 failed with error -71 [ 192.155539][ T5691] loop0: detected capacity change from 0 to 16 [ 192.217054][ T5692] Cannot find set identified by id 0 to match [ 192.242695][ T4398] usb 3-1: USB disconnect, device number 4 [ 192.847660][ T5691] erofs: (device loop0): mounted with root inode @ nid 36. [ 192.935083][ T5691] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 193.149621][ T5691] syz.0.319: attempt to access beyond end of device [ 193.149621][ T5691] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 193.164332][ T5691] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 193.173078][ T5691] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 193.188099][ T5696] 9pnet_fd: Insufficient options for proto=fd [ 194.123264][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.123332][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.026446][ T4398] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 197.503009][ T5750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.340'. [ 197.512323][ T5750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.340'. [ 199.415899][ T5764] loop4: detected capacity change from 0 to 16 [ 199.461932][ T5764] erofs: (device loop4): mounted with root inode @ nid 36. [ 199.507980][ T5764] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 199.519465][ T5766] loop0: detected capacity change from 0 to 512 [ 199.578581][ T5764] syz.4.343: attempt to access beyond end of device [ 199.578581][ T5764] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 199.578659][ T5764] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 199.578676][ T5764] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 199.610248][ T5771] loop3: detected capacity change from 0 to 256 [ 199.625672][ T5766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.625760][ T5766] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.049308][ T5771] FAT-fs (loop3): Directory bread(block 64) failed [ 200.049578][ T5771] FAT-fs (loop3): Directory bread(block 65) failed [ 200.051517][ T5771] FAT-fs (loop3): Directory bread(block 66) failed [ 200.051678][ T5771] FAT-fs (loop3): Directory bread(block 67) failed [ 200.052151][ T5771] FAT-fs (loop3): Directory bread(block 68) failed [ 200.052289][ T5771] FAT-fs (loop3): Directory bread(block 69) failed [ 200.053399][ T5771] FAT-fs (loop3): Directory bread(block 70) failed [ 200.053543][ T5771] FAT-fs (loop3): Directory bread(block 71) failed [ 200.053994][ T5771] FAT-fs (loop3): Directory bread(block 72) failed [ 200.054244][ T5771] FAT-fs (loop3): Directory bread(block 73) failed [ 200.496679][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 202.076485][ T14] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 202.165654][ T5784] loop3: detected capacity change from 0 to 1024 [ 202.373785][ T5784] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.397959][ T5784] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.024621][ T5784] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.347: lblock 3 mapped to illegal pblock 3 (length 3) [ 203.107442][ T14] usb 5-1: device descriptor read/all, error -71 [ 203.187487][ T5784] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 203.224121][ T5784] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.224121][ T5784] [ 203.250345][ T5792] loop4: detected capacity change from 0 to 64 [ 203.296293][ T5783] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.347: lblock 3 mapped to illegal pblock 3 (length 1) [ 204.311711][ T5783] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.347: lblock 3 mapped to illegal pblock 3 (length 1) [ 204.386205][ T5794] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.347: lblock 3 mapped to illegal pblock 3 (length 1) [ 205.077938][ T5794] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.347: lblock 3 mapped to illegal pblock 3 (length 1) [ 206.947173][ T33] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 206.966586][ T33] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 207.794874][ T33] EXT4-fs (loop3): This should not happen!! Data will be lost [ 207.794874][ T33] [ 207.810881][ T5828] loop0: detected capacity change from 0 to 1024 [ 208.197617][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 208.492166][ T5830] loop2: detected capacity change from 0 to 4096 [ 208.565543][ T5830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 208.969557][ T5846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.058062][ T4373] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 210.163129][ T5851] loop0: detected capacity change from 0 to 512 [ 210.249133][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 210.256734][ T5851] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.365: iget: bad extended attribute block 1 [ 210.268107][ T4373] usb 4-1: Using ep0 maxpacket: 8 [ 210.277709][ T4373] usb 4-1: config 0 has no interfaces? [ 210.300110][ T4373] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.312873][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.321333][ T4373] usb 4-1: Product: syz [ 210.325511][ T4373] usb 4-1: Manufacturer: syz [ 210.330632][ T4373] usb 4-1: SerialNumber: syz [ 210.337388][ T4373] usb 4-1: config 0 descriptor?? [ 210.344906][ T5851] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.365: couldn't read orphan inode 15 (err -117) [ 210.350131][ T5854] device veth1_macvtap left promiscuous mode [ 210.385332][ T5851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.554996][ T5851] EXT4-fs warning (device loop0): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 210.640491][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 212.316763][ T5871] loop4: detected capacity change from 0 to 1024 [ 212.323475][ T14] usb 4-1: USB disconnect, device number 6 [ 212.454813][ T5882] syz.3.372 (5882): attempted to duplicate a private mapping with mremap. This is not supported. [ 212.477170][ T5871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.496973][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 212.510401][ T5871] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.572620][ T5871] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.370: lblock 3 mapped to illegal pblock 3 (length 3) [ 212.633249][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 212.670575][ T5871] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 212.784031][ T5871] EXT4-fs (loop4): This should not happen!! Data will be lost [ 212.784031][ T5871] [ 212.794045][ T5886] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.370: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.821406][ T5886] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.370: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.853220][ T5886] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.370: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.859005][ T4393] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 214.466383][ T4393] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 214.786395][ T4393] EXT4-fs (loop4): This should not happen!! Data will be lost [ 214.786395][ T4393] [ 214.854027][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'. [ 214.874228][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 217.486175][ T5922] loop4: detected capacity change from 0 to 64 [ 218.598361][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 219.706809][ T5928] tipc: Started in network mode [ 219.716733][ T5928] tipc: Node identity 4, cluster identity 4711 [ 219.739462][ T5928] tipc: Node number set to 4 [ 219.894245][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 220.035295][ T5946] xt_TCPMSS: Only works on TCP SYN packets [ 220.159378][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 220.170399][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.257998][ T126] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 220.327751][ T126] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.715178][ T126] usb 3-1: config 0 interface 0 has no altsetting 1 [ 220.726021][ T126] usb 3-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 220.735359][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.743778][ T126] usb 3-1: Product: syz [ 220.747974][ T126] usb 3-1: Manufacturer: syz [ 220.752933][ T126] usb 3-1: SerialNumber: syz [ 220.760061][ T126] usb 3-1: config 0 descriptor?? [ 221.616732][ T126] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 221.625317][ T126] usb 3-1: USB disconnect, device number 5 [ 221.862007][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.269299][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 227.329175][ T6009] device bridge_slave_1 left promiscuous mode [ 227.335812][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.369949][ T6009] device bridge_slave_0 left promiscuous mode [ 227.408014][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.991143][ T26] audit: type=1326 audit(1754107108.581:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 229.098072][ T26] audit: type=1326 audit(1754107108.581:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 229.234477][ T6023] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 229.643957][ T26] audit: type=1326 audit(1754107108.611:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 229.900991][ T26] audit: type=1326 audit(1754107108.611:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 229.923632][ T26] audit: type=1326 audit(1754107108.611:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 230.042960][ T26] audit: type=1326 audit(1754107108.611:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 230.148512][ T26] audit: type=1326 audit(1754107108.611:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 230.270450][ T26] audit: type=1326 audit(1754107108.611:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 230.692184][ T26] audit: type=1326 audit(1754107108.611:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 231.052448][ T26] audit: type=1326 audit(1754107108.611:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a2b8eb69 code=0x7ffc0000 [ 232.819669][ T6069] loop3: detected capacity change from 0 to 1024 [ 233.394105][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 233.890332][ T126] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 235.091667][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.108423][ T126] usb 5-1: not running at top speed; connect to a high speed hub [ 235.120030][ T126] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 235.151169][ T126] usb 5-1: config 129 has no interface number 0 [ 235.157482][ T126] usb 5-1: config 129 interface 135 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 235.198018][ T6096] loop2: detected capacity change from 0 to 1024 [ 235.215078][ T126] usb 5-1: config 129 interface 135 has no altsetting 0 [ 236.033104][ T126] usb 5-1: string descriptor 0 read error: -71 [ 236.049692][ T126] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 236.188606][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.191824][ T6096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 236.221320][ T6096] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.015361][ T126] usb 5-1: can't set config #129, error -71 [ 238.041525][ T126] usb 5-1: USB disconnect, device number 11 [ 238.119411][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 238.193494][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.212521][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 242.431958][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 242.447423][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 242.548779][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.194449][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.221084][ T7] usb 3-1: Product: syz [ 243.230703][ T7] usb 3-1: Manufacturer: syz [ 243.237648][ T7] usb 3-1: SerialNumber: syz [ 243.382972][ T7] usb 3-1: config 0 descriptor?? [ 243.398425][ T7] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 244.129775][ T7] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 244.255058][ T7] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 244.415837][ T7] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 245.062522][ T7] em28xx 3-1:0.0: board has no eeprom [ 245.222272][ T7] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 245.238840][ T7] em28xx 3-1:0.0: dvb set to bulk mode. [ 245.250006][ T14] em28xx 3-1:0.0: Binding DVB extension [ 246.081241][ T7] usb 3-1: USB disconnect, device number 6 [ 246.087863][ T7] em28xx 3-1:0.0: Disconnecting em28xx [ 246.325510][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 246.475787][ T14] em28xx 3-1:0.0: Registering input extension [ 246.576457][ T7] em28xx 3-1:0.0: Closing input extension [ 246.809195][ T6206] xt_nfacct: accounting object `syz1' does not exists [ 247.810591][ T7] em28xx 3-1:0.0: Freeing device [ 247.924732][ T6210] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 248.309484][ T6215] loop3: detected capacity change from 0 to 32768 [ 248.317052][ T6215] XFS: ikeep mount option is deprecated. [ 248.864822][ T6210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.864986][ T6215] XFS (loop3): Mounting V5 Filesystem [ 248.967049][ T6213] bond2: (slave veth3): Enslaving as an active interface with a down link [ 249.025030][ T6215] XFS (loop3): Ending clean mount [ 249.044725][ T6215] XFS (loop3): Quotacheck needed: Please wait. [ 249.060833][ T6216] bond2: (slave vlan3): Opening slave failed [ 249.085847][ T6215] XFS (loop3): Quotacheck: Done. [ 249.664584][ T6235] loop4: detected capacity change from 0 to 128 [ 249.738130][ T4275] XFS (loop3): Unmounting Filesystem [ 250.673404][ T6242] syz.4.467: attempt to access beyond end of device [ 250.673404][ T6242] loop4: rw=2049, sector=145, nr_sectors = 264 limit=128 [ 250.810546][ T6235] 9pnet: Could not find request transport: f [ 252.046288][ T6261] xt_nfacct: accounting object `syz1' does not exists [ 253.089099][ T6265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.533294][ T6270] syz.0.476 (6270): drop_caches: 2 [ 255.086829][ T6278] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 255.576556][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.586369][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.729746][ T6278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.814835][ T6278] bond2: (slave veth3): Enslaving as an active interface with a down link [ 256.008267][ T6278] device veth1 entered promiscuous mode [ 256.280404][ T6278] device veth1 left promiscuous mode [ 256.476522][ T6278] bond2: (slave vlan3): making interface the new active one [ 256.484794][ T6278] device veth1 entered promiscuous mode [ 256.491208][ T6278] device vlan3 entered promiscuous mode [ 256.497287][ T6278] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 256.560927][ T6291] tmpfs: Bad value for 'nr_inodes' [ 256.597263][ T6291] loop2: detected capacity change from 0 to 256 [ 256.621508][ T6291] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.632313][ T6291] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 256.668296][ T6291] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 256.927200][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 256.927217][ T26] audit: type=1800 audit(1754107136.478:84): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.483" name="file0" dev="loop2" ino=1048634 res=0 errno=0 [ 256.991112][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 257.043919][ T6292] loop0: detected capacity change from 0 to 256 [ 258.494311][ T6307] tipc: Enabling of bearer rejected, failed to enable media [ 258.691652][ T4398] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 260.086424][ T4398] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.097086][ T4398] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.117692][ T4398] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 260.127586][ T4398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 260.136158][ T4398] usb 4-1: SerialNumber: syz [ 260.182174][ T6323] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 260.701135][ T4398] usb 4-1: 0:2 : does not exist [ 260.717529][ T4398] usb 4-1: USB disconnect, device number 7 [ 260.971167][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 260.982326][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.680698][ T6389] loop4: detected capacity change from 0 to 40427 [ 269.717682][ T6389] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 269.726121][ T6389] F2FS-fs (loop4): Unrecognized mount option "barrier" or missing value [ 269.822656][ T4324] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 270.937038][ T4324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.994260][ T4324] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.021216][ T4324] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.036272][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.044459][ T4324] usb 1-1: SerialNumber: syz [ 272.409554][ T4324] usb 1-1: 0:2 : does not exist [ 272.654828][ T4324] usb 1-1: USB disconnect, device number 5 [ 273.228552][ T6420] loop0: detected capacity change from 0 to 128 [ 273.322252][ T6423] Bluetooth: MGMT ver 1.22 [ 274.260894][ T6430] syz.0.517: attempt to access beyond end of device [ 274.260894][ T6430] loop0: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 274.319069][ T6420] 9pnet: Could not find request transport: f [ 276.685794][ T4324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 276.977478][ T4324] usb 4-1: Using ep0 maxpacket: 16 [ 277.006857][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 277.079361][ T4324] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.138348][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.197698][ T4324] usb 4-1: Product: syz [ 277.227789][ T4324] usb 4-1: Manufacturer: syz [ 277.254244][ T4324] usb 4-1: SerialNumber: syz [ 277.314928][ T4324] usb 4-1: config 0 descriptor?? [ 277.373139][ T4324] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 277.444978][ T4324] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 277.455212][ T6465] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 277.475737][ T6465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.503862][ T6465] bond2: (slave veth3): Enslaving as an active interface with a down link [ 277.528415][ T6465] device veth1 entered promiscuous mode [ 277.536034][ T6465] device veth1 left promiscuous mode [ 277.543082][ T6465] bond2: (slave vlan3): making interface the new active one [ 277.551409][ T6465] device veth1 entered promiscuous mode [ 277.557799][ T6465] device vlan3 entered promiscuous mode [ 277.563897][ T6465] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 277.599148][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 278.365743][ T4324] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 278.390254][ T4373] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 278.671522][ T75] device vlan3 left promiscuous mode [ 278.694090][ T4373] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.705308][ T4373] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.739287][ T4373] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.794728][ T4373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.877027][ T4373] usb 5-1: SerialNumber: syz [ 278.938229][ T6483] loop2: detected capacity change from 0 to 128 [ 279.225862][ T4373] usb 5-1: 0:2 : does not exist [ 279.246629][ T4324] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 279.256626][ T4324] em28xx 4-1:0.0: board has no eeprom [ 279.328169][ T6453] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 279.400576][ T4373] usb 5-1: USB disconnect, device number 12 [ 279.505784][ T6483] 9pnet: Could not find request transport: f [ 279.548850][ T6483] syz.2.534: attempt to access beyond end of device [ 279.548850][ T6483] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 279.672124][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.056286][ T4324] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 280.066552][ T4324] em28xx 4-1:0.0: dvb set to bulk mode. [ 280.076593][ T7] em28xx 4-1:0.0: Binding DVB extension [ 280.203483][ T4324] usb 4-1: USB disconnect, device number 8 [ 280.646813][ T4324] em28xx 4-1:0.0: Disconnecting em28xx [ 281.177322][ T7] em28xx 4-1:0.0: Registering input extension [ 281.183604][ T4324] em28xx 4-1:0.0: Closing input extension [ 281.235379][ T4324] em28xx 4-1:0.0: Freeing device [ 284.181129][ T6535] 9pnet_virtio: no channels available for device syz [ 290.363273][ T6591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.552771][ T6603] IPVS: Error connecting to the multicast addr [ 293.852456][ T6610] tmpfs: Bad value for 'nr_inodes' [ 294.858135][ T4317] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 295.047939][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 295.054963][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 295.089943][ T4317] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.119615][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.145295][ T4317] usb 1-1: Product: syz [ 295.157292][ T4317] usb 1-1: Manufacturer: syz [ 295.173079][ T4317] usb 1-1: SerialNumber: syz [ 295.199758][ T4317] usb 1-1: config 0 descriptor?? [ 295.231060][ T4317] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.251915][ T4317] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 295.828665][ T4317] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 296.148583][ T6669] loop4: detected capacity change from 0 to 512 [ 296.320559][ T6669] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 296.410879][ T4393] device vlan3 left promiscuous mode [ 296.776091][ T4317] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 296.787995][ T4317] em28xx 1-1:0.0: board has no eeprom [ 297.255822][ T6671] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 297.448180][ T4317] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 297.456054][ T4317] em28xx 1-1:0.0: dvb set to bulk mode. [ 297.514046][ T4373] em28xx 1-1:0.0: Binding DVB extension [ 297.679727][ T4317] usb 1-1: USB disconnect, device number 6 [ 297.702465][ T4317] em28xx 1-1:0.0: Disconnecting em28xx [ 297.757227][ T6691] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 298.392506][ T6692] IPVS: Error connecting to the multicast addr [ 300.153788][ T6709] ptrace attach of "./syz-executor exec"[4275] was attempted by " [ 300.333764][ T6711] netlink: 84 bytes leftover after parsing attributes in process `syz.2.583'. [ 300.834400][ T4373] em28xx 1-1:0.0: Registering input extension [ 300.844130][ T4317] em28xx 1-1:0.0: Closing input extension [ 301.545704][ T4317] em28xx 1-1:0.0: Freeing device [ 301.930699][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 302.057635][ T6732] bridge0: port 1(ip6gretap1) entered blocking state [ 302.142344][ T6732] bridge0: port 1(ip6gretap1) entered disabled state [ 302.163482][ T6732] device ip6gretap1 entered promiscuous mode [ 303.093694][ T6726] device veth5 entered promiscuous mode [ 303.110866][ T6726] bridge0: port 2(veth5) entered blocking state [ 303.159026][ T6726] bridge0: port 2(veth5) entered disabled state [ 303.881863][ T6746] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 304.732217][ T6754] IPVS: Unknown mcast interface: vcan0 [ 310.010561][ T6780] "syz.1.600" (6780) uses obsolete ecb(arc4) skcipher [ 311.588078][ T6796] loop3: detected capacity change from 0 to 512 [ 311.682825][ T6799] overlayfs: failed to clone upperpath [ 312.437363][ T6796] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 312.455395][ T6797] loop2: detected capacity change from 0 to 256 [ 314.615246][ T6823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.234615][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.242968][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.890867][ T6843] 9pnet: Could not find request transport: f [ 319.028335][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 319.072545][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 319.285818][ T6872] loop2: detected capacity change from 0 to 512 [ 319.331818][ T6872] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.362507][ T6872] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 319.387404][ T6872] EXT4-fs (loop2): DAX unsupported by block device. [ 319.685392][ T6865] bridge0: port 1(syz_tun) entered blocking state [ 320.092816][ T6865] bridge0: port 1(syz_tun) entered disabled state [ 320.287247][ T6865] device syz_tun entered promiscuous mode [ 320.297530][ T6865] bridge0: port 1(syz_tun) entered blocking state [ 320.305202][ T6865] bridge0: port 1(syz_tun) entered forwarding state [ 321.201918][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 321.210783][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.218245][ T6899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.226656][ T4373] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 321.236371][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.243982][ T6899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.251421][ T4310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 322.261061][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 322.292459][ T4373] usb 1-1: config 0 has no interfaces? [ 322.308228][ T4373] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 322.351060][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.351114][ T4310] usb 3-1: Using ep0 maxpacket: 32 [ 322.376876][ T4373] usb 1-1: config 0 descriptor?? [ 322.426919][ T4310] usb 3-1: config 1 interface 0 has no altsetting 0 [ 322.452829][ T4310] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.40 [ 322.471163][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.489665][ T4310] usb 3-1: Product: syz [ 322.495891][ T4310] usb 3-1: Manufacturer: syz [ 322.500913][ T4310] usb 3-1: SerialNumber: syz [ 322.606176][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.629320][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.094222][ T4324] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 323.158008][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.167142][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.206676][ T4373] usb 1-1: USB disconnect, device number 7 [ 323.387554][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 323.395592][ T4324] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.418696][ T4310] usbhid 3-1:1.0: can't add hid device: -71 [ 323.426020][ T4310] usbhid: probe of 3-1:1.0 failed with error -71 [ 323.437269][ T4324] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.478573][ T4310] usb 3-1: USB disconnect, device number 7 [ 323.498771][ T4324] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.525078][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.551543][ T6909] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 323.846421][ T4324] usb 5-1: USB disconnect, device number 13 [ 323.915377][ T6928] loop3: detected capacity change from 0 to 1024 [ 323.982208][ T6928] EXT4-fs: Ignoring removed nobh option [ 323.987844][ T6928] EXT4-fs: Ignoring removed bh option [ 324.058141][ T6928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 324.413049][ T6928] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 328.045447][ T6968] netlink: 84 bytes leftover after parsing attributes in process `syz.4.640'. [ 328.430811][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 328.490216][ T6982] syz.4.647 uses obsolete (PF_INET,SOCK_PACKET) [ 328.545159][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 328.658625][ T6982] device syz_tun entered promiscuous mode [ 328.688445][ T6982] device macvtap1 entered promiscuous mode [ 329.862285][ T6991] Falling back ldisc for ttyprintk. [ 329.892924][ T6987] device syz_tun left promiscuous mode [ 330.094181][ T6995] loop3: detected capacity change from 0 to 32768 [ 330.113075][ T6995] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.649 (6995) [ 330.151826][ T6995] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 330.162778][ T6995] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 330.172327][ T6995] BTRFS info (device loop3): using free space tree [ 331.004849][ T6995] BTRFS info (device loop3): enabling ssd optimizations [ 332.834127][ T4275] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 333.821587][ T7047] No such timeout policy "syz0" [ 334.499143][ T4283] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop3 scanned by udevd (4283) [ 336.437888][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 337.309837][ T7095] device veth3 entered promiscuous mode [ 337.333030][ T7095] bridge2: port 1(veth3) entered blocking state [ 337.347905][ T7095] bridge2: port 1(veth3) entered disabled state [ 337.370503][ T7092] loop2: detected capacity change from 0 to 8192 [ 340.176149][ T7111] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.672'. [ 340.235070][ T7111] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.029455][ T7129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.095289][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.685'. [ 345.106190][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 345.266096][ T7164] tipc: Started in network mode [ 345.313434][ T7164] tipc: Node identity ac1414aa, cluster identity 4711 [ 345.329557][ T7164] tipc: Enabled bearer , priority 10 [ 346.424412][ T7060] tipc: Node number set to 2886997162 [ 346.943134][ T7164] tipc: Enabled bearer , priority 0 [ 347.404070][ T26] audit: type=1326 audit(1754107226.948:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 348.344063][ T26] audit: type=1326 audit(1754107226.948:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 348.421950][ T26] audit: type=1326 audit(1754107226.958:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 348.464783][ T26] audit: type=1326 audit(1754107226.958:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 349.656527][ T26] audit: type=1326 audit(1754107226.958:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 349.678941][ T26] audit: type=1326 audit(1754107226.968:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 349.701854][ T26] audit: type=1326 audit(1754107226.968:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 349.724259][ T26] audit: type=1326 audit(1754107226.968:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 349.779852][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 349.873578][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 353.085589][ T7231] tipc: Enabling of bearer rejected, failed to enable media [ 353.166032][ T7233] loop2: detected capacity change from 0 to 1024 [ 353.207694][ T7233] EXT4-fs (loop2): filesystem is read-only [ 353.930799][ T26] audit: type=1326 audit(1754107233.507:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 354.666837][ T26] audit: type=1326 audit(1754107233.507:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 356.034045][ T26] audit: type=1326 audit(1754107233.507:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 356.400658][ T26] audit: type=1326 audit(1754107233.507:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 356.428452][ T26] audit: type=1326 audit(1754107233.507:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 356.450861][ T26] audit: type=1326 audit(1754107233.507:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 356.473391][ T26] audit: type=1326 audit(1754107233.507:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 357.399541][ T26] audit: type=1326 audit(1754107233.507:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 357.458772][ T7271] loop0: detected capacity change from 0 to 4096 [ 357.664120][ T26] audit: type=1326 audit(1754107233.507:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 357.708027][ T26] audit: type=1326 audit(1754107233.507:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65a38eb69 code=0x7ffc0000 [ 357.726040][ T7280] loop3: detected capacity change from 0 to 4096 [ 357.788177][ T7280] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 359.572006][ T4275] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 360.435628][ T7301] No source specified [ 360.974793][ T7310] tipc: Enabling of bearer rejected, failed to enable media [ 362.021047][ T7322] loop2: detected capacity change from 0 to 512 [ 362.111411][ T7322] EXT4-fs: Ignoring removed nobh option [ 362.797238][ T7322] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.725: iget: bad i_size value: 38620345925642 [ 363.228746][ T7322] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.725: couldn't read orphan inode 15 (err -117) [ 363.520532][ T7322] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 363.955599][ T7346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.725'. [ 364.661639][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 365.480676][ T7361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 365.986770][ T7368] tipc: Started in network mode [ 365.998411][ T7368] tipc: Node identity 8272c507d3e4, cluster identity 4711 [ 366.036599][ T7368] tipc: Enabled bearer , priority 0 [ 366.057943][ T7369] device syzkaller0 entered promiscuous mode [ 366.135604][ T7368] tipc: Resetting bearer [ 366.158576][ T7364] tipc: Resetting bearer [ 366.187349][ T7364] tipc: Disabling bearer [ 366.235633][ T7371] tipc: Enabled bearer , priority 0 [ 366.251133][ T7371] device syzkaller0 entered promiscuous mode [ 366.314563][ T7371] tipc: Resetting bearer [ 366.368239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.376758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.539913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.548093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.607606][ T7370] tipc: Resetting bearer [ 366.982744][ T7370] tipc: Disabling bearer [ 368.871360][ T7405] IPv6: Can't replace route, no match found [ 369.096786][ T4256] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 370.501534][ T4256] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.521900][ T4256] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.569934][ T4256] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.590482][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.599096][ T4256] usb 3-1: SerialNumber: syz [ 370.664430][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 370.664447][ T26] audit: type=1326 audit(1754107250.215:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.4.751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0dd498eb69 code=0x0 [ 370.993036][ T4256] usb 3-1: 0:2 : does not exist [ 371.552527][ T4256] usb 3-1: USB disconnect, device number 8 [ 371.569091][ T7447] tipc: Enabling of bearer rejected, failed to enable media [ 371.729368][ T7446] loop3: detected capacity change from 0 to 32768 [ 371.736342][ T7446] XFS: noikeep mount option is deprecated. [ 371.742197][ T7446] XFS: ikeep mount option is deprecated. [ 371.944990][ T7446] XFS (loop3): Mounting V5 Filesystem [ 372.687427][ T4283] udevd[4283]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.769107][ T7446] XFS (loop3): Ending clean mount [ 374.346540][ T4275] XFS (loop3): Unmounting Filesystem [ 375.462303][ T7499] tipc: Enabled bearer , priority 0 [ 375.549640][ T7502] device syzkaller0 entered promiscuous mode [ 376.354866][ T7499] tipc: Resetting bearer [ 376.394413][ T7498] tipc: Resetting bearer [ 376.437348][ T7498] tipc: Disabling bearer [ 376.454485][ T7505] tipc: Enabling of bearer rejected, failed to enable media [ 378.487780][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.494122][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.427513][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'. [ 381.531517][ T7555] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 382.251378][ T7565] overlayfs: failed to clone upperpath [ 383.352474][ T7576] Bluetooth: hci0: service_discovery: too big uuid_count value 14336 [ 384.217720][ T7586] netlink: 'syz.4.791': attribute type 2 has an invalid length. [ 384.660161][ T7594] tipc: Enabled bearer , priority 0 [ 384.694853][ T7595] tipc: Enabled bearer , priority 0 [ 385.275086][ T7604] device syzkaller0 entered promiscuous mode [ 386.055070][ T7] tipc: Node number set to 1368835335 [ 386.278144][ T7609] tipc: Resetting bearer [ 386.671030][ T7591] tipc: Resetting bearer [ 386.833550][ T7591] tipc: Disabling bearer [ 387.094399][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 389.294094][ T7642] netlink: 856 bytes leftover after parsing attributes in process `syz.3.803'. [ 391.254071][ T7656] loop2: detected capacity change from 0 to 256 [ 391.270623][ T7656] exfat: Unknown parameter '184467440737095516150xffffffffffffffff0xffffffffffffffff' [ 391.349870][ T7665] xt_connbytes: Forcing CT accounting to be enabled [ 391.356928][ T7665] Cannot find set identified by id 0 to match [ 391.964968][ T7656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 392.046667][ T7656] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 392.944533][ T7656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 392.995926][ T7656] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 393.015102][ T7656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.819009][ T7656] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 394.483173][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 394.510712][ T7656] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 395.046052][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 396.083847][ T7716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.093259][ T7716] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 396.420183][ T7719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.823'. [ 396.549529][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 397.165305][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 398.106735][ T7744] loop3: detected capacity change from 0 to 128 [ 398.211928][ T7744] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.438063][ T7744] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.053640][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.969241][ T4384] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 402.082100][ T7780] tipc: Started in network mode [ 402.087128][ T7780] tipc: Node identity 5e5b65ee7676, cluster identity 4711 [ 402.216269][ T7780] tipc: Enabled bearer , priority 0 [ 402.444423][ T7780] device syzkaller0 entered promiscuous mode [ 402.654712][ T7780] tipc: Resetting bearer [ 403.237024][ T7775] tipc: Resetting bearer [ 403.412147][ T7] tipc: Node number set to 674063854 [ 403.471011][ T7775] tipc: Disabling bearer [ 403.480345][ T7794] tipc: Enabling of bearer rejected, already enabled [ 403.946471][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 404.785758][ T7814] device gtp0 entered promiscuous mode [ 405.273722][ T7819] loop2: detected capacity change from 0 to 512 [ 405.281046][ T7819] EXT4-fs: Ignoring removed nobh option [ 405.337370][ T7819] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.855: iget: bad i_size value: 38620345925642 [ 405.542588][ T7819] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.855: couldn't read orphan inode 15 (err -117) [ 406.142029][ T7819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 407.345794][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 407.355868][ T7837] tipc: Enabling of bearer rejected, failed to enable media [ 408.594901][ T7846] tipc: Enabled bearer , priority 0 [ 408.790231][ T7851] tipc: Resetting bearer [ 408.810108][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 408.834518][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 409.302823][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 409.336770][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 409.347520][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 409.357866][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 409.371661][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.389460][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 409.406378][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.409662][ T7861] netlink: 27 bytes leftover after parsing attributes in process `syz.1.862'. [ 409.460092][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.479575][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.490668][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.517986][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.520137][ T7866] trusted_key: encrypted_key: insufficient parameters specified [ 409.531849][ T7841] tipc: Disabling bearer [ 409.541489][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.553769][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.572148][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 409.587686][ T7858] device ip6erspan0 entered promiscuous mode [ 409.591757][ T7864] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 411.152275][ T7884] loop2: detected capacity change from 0 to 256 [ 411.163056][ T7884] exfat: Deprecated parameter 'namecase' [ 411.359937][ T7884] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 414.532067][ T7921] loop2: detected capacity change from 0 to 8 [ 414.573025][ T7921] squashfs: Unknown parameter 'net/arp' [ 417.686239][ T7953] tipc: Enabled bearer , priority 0 [ 418.096975][ T7957] device syzkaller0 entered promiscuous mode [ 418.147777][ T7953] tipc: Resetting bearer [ 418.159246][ T7951] tipc: Resetting bearer [ 418.180689][ T7951] tipc: Disabling bearer [ 421.301414][ T7985] trusted_key: encrypted_key: insufficient parameters specified [ 423.375483][ T7994] tipc: Enabled bearer , priority 0 [ 423.413901][ T7994] device syzkaller0 entered promiscuous mode [ 423.650072][ T7991] tipc: Resetting bearer [ 424.214158][ T7991] tipc: Disabling bearer [ 424.946966][ T8016] tipc: Enabling of bearer rejected, failed to enable media [ 428.999683][ T8042] netlink: 48 bytes leftover after parsing attributes in process `syz.0.908'. [ 433.873060][ T8091] tipc: Enabled bearer , priority 0 [ 433.890844][ T8091] device syzkaller0 entered promiscuous mode [ 434.248439][ T8100] tipc: Resetting bearer [ 434.366592][ T8106] trusted_key: encrypted_key: insufficient parameters specified [ 434.829514][ T8090] tipc: Resetting bearer [ 434.927569][ T8090] tipc: Disabling bearer [ 440.094309][ T8177] netlink: 27 bytes leftover after parsing attributes in process `syz.4.936'. [ 440.111097][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.118276][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.149252][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 442.277555][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 442.949497][ T8208] loop2: detected capacity change from 0 to 128 [ 442.976364][ T8208] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 443.018176][ T8208] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 443.024182][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 443.311861][ T8211] trusted_key: encrypted_key: insufficient parameters specified [ 444.412842][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 444.433222][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 444.456777][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 444.493483][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 444.612238][ T8203] device ip6erspan0 entered promiscuous mode [ 444.635632][ T4383] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.724169][ T8219] tipc: Enabled bearer , priority 0 [ 444.732366][ T8219] device syzkaller0 entered promiscuous mode [ 445.359518][ T8225] tipc: Resetting bearer [ 445.417073][ T8218] tipc: Resetting bearer [ 446.182595][ T8218] tipc: Disabling bearer [ 448.113426][ T8255] overlayfs: failed to clone upperpath [ 448.809336][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 449.443665][ T4373] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 449.892219][ T4373] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.125005][ T4373] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 450.138553][ T4373] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.149354][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.174669][ T8258] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 451.010222][ T4337] usb 1-1: USB disconnect, device number 8 [ 453.281669][ T8302] loop0: detected capacity change from 0 to 8 [ 453.326489][ T8302] squashfs: Unknown parameter 'net/arp' [ 454.175283][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.971'. [ 454.246053][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 454.290483][ T8316] bridge0: port 3(syz_tun) entered blocking state [ 454.325197][ T8316] bridge0: port 3(syz_tun) entered disabled state [ 454.758080][ T8316] device syz_tun entered promiscuous mode [ 454.767556][ T8321] trusted_key: encrypted_key: insufficient parameters specified [ 460.670450][ T7064] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 460.878984][ T7064] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 460.893187][ T7064] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 460.924094][ T7064] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.055430][ T7064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.108481][ T8386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 461.252983][ T8410] tipc: Enabled bearer , priority 0 [ 461.265209][ T8410] device syzkaller0 entered promiscuous mode [ 464.032924][ T8410] tipc: Resetting bearer [ 464.105802][ T8409] tipc: Resetting bearer [ 464.184037][ T7064] usb 1-1: USB disconnect, device number 9 [ 464.267746][ T8409] tipc: Disabling bearer [ 464.273529][ T26] audit: type=1326 audit(1754107343.834:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8419 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 464.314912][ T26] audit: type=1326 audit(1754107343.834:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8419 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 464.337573][ T26] audit: type=1326 audit(1754107343.834:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8419 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 464.361462][ T26] audit: type=1326 audit(1754107343.834:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8419 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 464.391050][ T26] audit: type=1326 audit(1754107343.834:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8419 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 464.418900][ T26] audit: type=1326 audit(1754107343.834:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8419 comm="syz.4.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 465.698194][ T8432] loop2: detected capacity change from 0 to 4096 [ 465.728237][ T8432] ntfs3: Invalid value for fmask. [ 466.694728][ T8446] overlayfs: failed to resolve './file0': -2 [ 467.148005][ T4283] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 468.114442][ T8460] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.1005'. [ 468.130730][ T8460] openvswitch: netlink: Flow actions attr not present in new flow. [ 472.888799][ T8506] loop2: detected capacity change from 0 to 32768 [ 473.496598][ T8506] JBD2: Ignoring recovery information on journal [ 473.705856][ T8506] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 478.126783][ T26] audit: type=1326 audit(1754107357.683:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 478.218264][ T26] audit: type=1326 audit(1754107357.683:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 478.229421][ T4266] ocfs2: Unmounting device (7,2) on (node local) [ 478.241256][ T26] audit: type=1326 audit(1754107357.713:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 478.391321][ T26] audit: type=1326 audit(1754107357.713:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 478.445690][ T26] audit: type=1326 audit(1754107357.713:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 478.807778][ T8544] tipc: Enabling of bearer rejected, already enabled [ 478.914624][ T26] audit: type=1326 audit(1754107357.713:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 478.936998][ T26] audit: type=1326 audit(1754107357.713:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 478.974705][ T8548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1030'. [ 478.988969][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 479.052579][ T26] audit: type=1326 audit(1754107357.713:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 479.165649][ T26] audit: type=1326 audit(1754107357.713:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 479.166287][ T8548] tipc: Enabled bearer , priority 10 [ 479.188846][ T26] audit: type=1326 audit(1754107357.713:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.4.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd498eb69 code=0x7ffc0000 [ 501.431772][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.438113][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.802861][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.809266][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.880117][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 584.886768][ C0] rcu: 0-...!: (1 GPs behind) idle=eaf4/1/0x4000000000000000 softirq=25074/25076 fqs=776 [ 584.897976][ C0] (t=10502 jiffies g=28105 q=368 ncpus=2) [ 584.903773][ C0] rcu: rcu_preempt kthread starved for 8940 jiffies! g28105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 584.914853][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 584.924797][ C0] rcu: RCU grace-period kthread stack dump: [ 584.930661][ C0] task:rcu_preempt state:R running task stack:27456 pid:16 ppid:2 flags:0x00004000 [ 584.941429][ C0] Call Trace: [ 584.944693][ C0] [ 584.947607][ C0] __schedule+0x10ec/0x40b0 [ 584.952103][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 584.957979][ C0] schedule+0xb9/0x180 [ 584.962027][ C0] schedule_timeout+0x15c/0x280 [ 584.966861][ C0] ? console_conditional_schedule+0x40/0x40 [ 584.972738][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 584.978617][ C0] ? update_process_times+0x1b0/0x1b0 [ 584.983978][ C0] ? prepare_to_swait_event+0x335/0x350 [ 584.989510][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 584.994344][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 585.000478][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 585.005218][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 585.010046][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 585.015225][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 585.020431][ C0] rcu_gp_kthread+0x95/0x380 [ 585.025097][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 585.030190][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 585.036070][ C0] ? __kthread_parkme+0x162/0x1c0 [ 585.041077][ C0] kthread+0x29d/0x330 [ 585.045126][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 585.050215][ C0] ? kthread_blkcg+0xd0/0xd0 [ 585.054807][ C0] ret_from_fork+0x1f/0x30 [ 585.059209][ C0] [ 585.062209][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 585.068507][ C0] Sending NMI from CPU 0 to CPUs 1: [ 585.073714][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 585.074712][ C0] CPU: 0 PID: 8567 Comm: syz.1.1027 Not tainted 6.1.147-syzkaller #0 [ 585.090634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.100671][ C0] RIP: 0010:cake_heapify+0x181/0x6a0 [ 585.105949][ C0] Code: fc ff df 89 d8 c1 e8 03 25 ff 03 00 00 83 e3 07 48 69 cb d0 98 01 00 49 03 0c 24 4c 8d bc 81 00 40 01 00 4c 89 f8 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 e9 03 00 00 45 8b 27 44 89 e7 8b 5c 24 0c [ 585.125540][ C0] RSP: 0018:ffffc90000006f60 EFLAGS: 00000a02 [ 585.131591][ C0] RAX: 1ffff1100a3927c2 RBX: 0000000000000005 RCX: ffff888051c7fc10 [ 585.139541][ C0] RDX: dffffc0000000000 RSI: 0000000000000202 RDI: 0000000000001000 [ 585.147492][ C0] RBP: 0000000000000202 R08: dffffc0000000000 R09: fffffbfff215ba81 [ 585.155443][ C0] R10: fffffbfff215ba81 R11: 1ffffffff215ba80 R12: ffff8880577902d0 [ 585.163395][ C0] R13: 0000000000000405 R14: 0000000000000202 R15: ffff888051c93e10 [ 585.171347][ C0] FS: 00007fc0a29ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 585.180255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.186817][ C0] CR2: 00007fc0a29fef98 CR3: 000000007c45a000 CR4: 00000000003506f0 [ 585.194770][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.202720][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.210673][ C0] Call Trace: [ 585.213934][ C0] [ 585.216758][ C0] ? ktime_get+0x247/0x270 [ 585.221159][ C0] cake_enqueue+0x305a/0x7ee0 [ 585.225833][ C0] ? INET_ECN_set_ce+0x960/0x960 [ 585.230769][ C0] ? mark_lock+0x94/0x320 [ 585.235084][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 585.241045][ C0] ? lock_chain_count+0x20/0x20 [ 585.245876][ C0] ? mark_lock+0x94/0x320 [ 585.250199][ C0] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 585.256430][ C0] ? lock_chain_count+0x20/0x20 [ 585.261261][ C0] ? get_random_u32+0x4db/0x930 [ 585.266110][ C0] ? ktime_get+0x247/0x270 [ 585.270508][ C0] netem_dequeue+0xcfc/0x13c0 [ 585.275180][ C0] ? netem_enqueue+0x36f0/0x36f0 [ 585.280104][ C0] __qdisc_run+0x247/0x15f0 [ 585.284589][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 585.289603][ C0] __dev_queue_xmit+0x107e/0x3760 [ 585.294617][ C0] ? __dev_queue_xmit+0x26f/0x3760 [ 585.299708][ C0] ? tipc_net+0x45/0x270 [ 585.303935][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 585.309202][ C0] ? tipc_net+0x205/0x270 [ 585.313511][ C0] ? tipc_crypto_xmit+0x1df/0x2440 [ 585.318605][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 585.323647][ C0] ? eth_header+0x117/0x200 [ 585.328129][ C0] ? llc_sysctl_exit+0x60/0x60 [ 585.332874][ C0] tipc_l2_send_msg+0x30f/0x3d0 [ 585.337732][ C0] tipc_bearer_xmit_skb+0x2a9/0x3f0 [ 585.342909][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 585.348173][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 585.353456][ C0] tipc_disc_timeout+0x568/0x6b0 [ 585.358381][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 585.363568][ C0] call_timer_fn+0x1a0/0x670 [ 585.368135][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 585.373314][ C0] ? call_timer_fn+0xc1/0x670 [ 585.377967][ C0] ? __run_timers+0x7c0/0x7c0 [ 585.382627][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 585.387805][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 585.392983][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 585.398162][ C0] __run_timers+0x525/0x7c0 [ 585.402650][ C0] ? detach_timer+0x350/0x350 [ 585.407305][ C0] ? lock_chain_count+0x20/0x20 [ 585.412139][ C0] run_timer_softirq+0x63/0xf0 [ 585.416884][ C0] handle_softirqs+0x2a1/0x920 [ 585.421651][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 585.426483][ C0] ? do_softirq+0x200/0x200 [ 585.430967][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 585.436148][ C0] __irq_exit_rcu+0x12f/0x220 [ 585.440827][ C0] ? irq_exit_rcu+0x20/0x20 [ 585.445319][ C0] irq_exit_rcu+0x5/0x20 [ 585.449541][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 585.455158][ C0] [ 585.458070][ C0] [ 585.460980][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 585.467023][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 585.473505][ C0] Code: 74 05 e8 2e e9 66 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b6 74 37 f7 65 8b 05 87 35 e2 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 585.493089][ C0] RSP: 0018:ffffc9001c36f5a0 EFLAGS: 00000206 [ 585.499134][ C0] RAX: 3304239e3b33e200 RBX: 0000000000000a06 RCX: 3304239e3b33e200 [ 585.507083][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c0460 RDI: 0000000000000001 [ 585.515032][ C0] RBP: ffffc9001c36f630 R08: dffffc0000000000 R09: fffffbfff215ba5d [ 585.522982][ C0] R10: fffffbfff215ba5d R11: 1ffffffff215ba5c R12: dffffc0000000000 [ 585.530933][ C0] R13: 0000000000000000 R14: ffff88807be106c0 R15: 1ffff9200386deb4 [ 585.538895][ C0] ? _raw_spin_unlock+0x40/0x40 [ 585.543735][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 585.548741][ C0] __wake_up_sync_key+0x11b/0x180 [ 585.553749][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 585.559717][ C0] ? sock_load_diag_module+0x130/0x130 [ 585.565161][ C0] __unix_dgram_recvmsg+0x498/0xd70 [ 585.570362][ C0] ? unix_unhash+0x10/0x10 [ 585.574762][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 585.579939][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 585.586070][ C0] ? mark_lock+0x94/0x320 [ 585.590384][ C0] ? unix_dgram_recvmsg+0xa9/0xd0 [ 585.595391][ C0] ? unix_dgram_sendmsg+0x16c0/0x16c0 [ 585.600747][ C0] ____sys_recvmsg+0x292/0x580 [ 585.605493][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 585.610505][ C0] ? import_iovec+0x6f/0xa0 [ 585.614988][ C0] ___sys_recvmsg+0x1b2/0x510 [ 585.619646][ C0] ? __sys_recvmsg+0x270/0x270 [ 585.624401][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 585.629405][ C0] ? __might_fault+0xc2/0x120 [ 585.634064][ C0] ? __might_fault+0xa6/0x120 [ 585.638723][ C0] do_recvmmsg+0x359/0x7d0 [ 585.643124][ C0] ? __sys_recvmmsg+0x280/0x280 [ 585.647960][ C0] ? __up_read+0x27c/0x660 [ 585.652361][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 585.657365][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 585.661940][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 585.667122][ C0] do_syscall_64+0x4c/0xa0 [ 585.671523][ C0] ? clear_bhb_loop+0x60/0xb0 [ 585.676175][ C0] ? clear_bhb_loop+0x60/0xb0 [ 585.680831][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.686712][ C0] RIP: 0033:0x7fc0a2b8eb69 [ 585.691107][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.710691][ C0] RSP: 002b:00007fc0a29ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 585.719105][ C0] RAX: ffffffffffffffda RBX: 00007fc0a2db6160 RCX: 00007fc0a2b8eb69 [ 585.727058][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 585.735009][ C0] RBP: 00007fc0a2c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 585.742960][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 585.750911][ C0] R13: 0000000000000001 R14: 00007fc0a2db6160 R15: 00007fff2b085238 [ 585.758869][ C0]