last executing test programs: 2m42.36890099s ago: executing program 3 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m42.189388555s ago: executing program 3 (id=1469): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) 2m42.13493743s ago: executing program 3 (id=1470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={0x38, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfc, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 2m41.997595931s ago: executing program 3 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x81d) 2m41.914054208s ago: executing program 3 (id=1473): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) 2m41.857681053s ago: executing program 3 (id=1474): sync() r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e1d, @empty}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0xd8a, 0x299, 0xfffb, 0x400}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r3, 'id1\x00'}) sendmsg$key(r5, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0x4) 2m26.571956212s ago: executing program 32 (id=1474): sync() r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e1d, @empty}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0xd8a, 0x299, 0xfffb, 0x400}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r3, 'id1\x00'}) sendmsg$key(r5, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0x4) 51.135963216s ago: executing program 1 (id=2292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0x81d) 50.163662897s ago: executing program 1 (id=2301): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.864670208s ago: executing program 1 (id=2323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 46.551020055s ago: executing program 1 (id=2324): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)={0x40, 0x2b, 0x4, "8bc9ec88"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x3, "7cad09"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001000)={0x44, &(0x7f0000000d80)={0x40, 0xa, 0x4, 'LYJ6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x16, 0x4, "fc632494"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x40, 0x18, 0x4, "60a89da7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 42.7202829s ago: executing program 1 (id=2333): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0xab, @loopback, 0x8000}}, [0xd, 0x580, 0x7, 0x8000000005, 0x1, 0xffffffffffffffff, 0x26b3, 0x5, 0x400007, 0x10001, 0xfffffffffffffffd, 0x100000000, 0x0, 0xfffd, 0xc]}, &(0x7f0000000180)=0x100) 42.512126727s ago: executing program 1 (id=2334): bpf$MAP_CREATE(0x0, 0x0, 0x48) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00000cd000/0x3000)=nil, 0x7) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_open_procfs(0x0, &(0x7f0000001200)='net/sctp\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}, {0x6, 0x60}]}) socket$nl_route(0x10, 0x3, 0x0) sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000400000006000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) setresuid(0xee00, 0xee00, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) 27.452438458s ago: executing program 33 (id=2334): bpf$MAP_CREATE(0x0, 0x0, 0x48) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00000cd000/0x3000)=nil, 0x7) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_open_procfs(0x0, &(0x7f0000001200)='net/sctp\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}, {0x6, 0x60}]}) socket$nl_route(0x10, 0x3, 0x0) sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000400000006000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) setresuid(0xee00, 0xee00, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) 16.736894542s ago: executing program 0 (id=2447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) 15.084348258s ago: executing program 0 (id=2452): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000892293ed19b9650260725d8c4ce673e8cd85216c8b7277dccf6f5059599f21f6ed5fce6dcdf9e291c4b67cfb26181dc027d1407901d59f1027719fc5c567029b2b1a80f8dd3883b8d88ed6812ba6e91429c4326dc6d5f0e7d96c360e413cea16cb6c8bb0ddf85bb51672f3731b735bd8c66a014d819f2fc4aea76233594bf90d9188837b4f986359b5793ebe4fa56e10954061ce50c3db4a9af424b5ed58ee5cfbc8c2ef96dbfef14a83f3fe370803760f43165c702dfebc84537b5e69cff2af09e2889c535e2f5f25cff41fd12b6d8ec5f713"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x47f, 0x0, 0x0, 0xb9ff, 0x5, "000000008200"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x76) 13.36031681s ago: executing program 0 (id=2460): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 11.853342854s ago: executing program 0 (id=2465): r0 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 11.324200027s ago: executing program 0 (id=2466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 11.242555814s ago: executing program 0 (id=2467): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) getdents64(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003cc3fcbd02509f00b6abbd3f078445d483d1d548f5107c6fc1"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 10.409552003s ago: executing program 5 (id=2471): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x67c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x104, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1e"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x51c, 0x9, 0x0, 0x1, [@m_gact={0x134, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x148, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xe1a3, 0x6, 0x3, 0x6}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x236}]}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xcc, 0x3, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x11c, 0xe, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xe9, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83338caa73ec2f351fdbe40e46f577bf7a5be51d0996a396ab824c47f201ff8a90dc191b12"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x67c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 9.558709552s ago: executing program 5 (id=2472): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) 9.179974464s ago: executing program 5 (id=2475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 8.912589246s ago: executing program 5 (id=2476): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, 0x0}) 8.710275643s ago: executing program 5 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x49000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8) r2 = dup(r1) read$msr(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001240)) creat(0x0, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 5.918888943s ago: executing program 2 (id=2488): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 4.688697104s ago: executing program 2 (id=2489): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a40000000060a8bae00000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006f31a81b840650fbb9b2c79b61b85f5ac73df31c3b93215d25e15a4420b48a71da2b13d0a0682db05b64fd0e93e2cc10a8de88214cd454145caba9c776b7b261daf6a39588c76e396830587d5a604eb156d954336d98105400"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sys_enter\x00'}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0xff6a) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 4.430325305s ago: executing program 2 (id=2490): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000892293ed19b9650260725d8c4ce673e8cd85216c8b7277dccf6f5059599f21f6ed5fce6dcdf9e291c4b67cfb26181dc027d1407901d59f1027719fc5c567029b2b1a80f8dd3883b8d88ed6812ba6e91429c4326dc6d5f0e7d96c360e413cea16cb6c8bb0ddf85bb51672f3731b735bd8c66a014d819f2fc4aea76233594bf90d9188837b4f986359b5793ebe4fa56e10954061ce50c3db4a9af424b5ed58ee5cfbc8c2ef96dbfef14a83f3fe370803760f43165c702dfebc84537b5e69cff2af09e2889c535e2f5f25cff41fd12b6d8ec5f713"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x47f, 0x0, 0x0, 0xb9ff, 0x5, "000000008200"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x101000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x76) 4.217010423s ago: executing program 4 (id=2492): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, 0x0}) 4.13112121s ago: executing program 4 (id=2493): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x67c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x104, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1e"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x51c, 0x9, 0x0, 0x1, [@m_gact={0x134, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x148, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xe1a3, 0x6, 0x3, 0x6}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x236}]}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xcc, 0x3, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x54, 0xffffffffffffffff, 0x10, 0xfffff001}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xffffffff, 0x10000000, 0x3, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x11c, 0xe, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xe9, 0x6, "2a0caebad864038ff40a5d287f3088600ceb92031a440f806744f2c29cd762b34d1c3e200652a37a380abee23790e6050e067b4335afeb4ae4a0dfe9fa72cc1df85464324a30272ee56c17d0913025ba5b385f50249552b3d0baa66c6ffc89df47949c8e52874be2547d84a88eaf65c1a57f44be2ac8409dc80a1286dc54b446bceacb288bceeb018feed674cd3991cf602a4e1e2de9b27bb4036b0ac3e4a6048cdd4ebfc8b92c63ac0f4245eecd529108a46a7eaf202777861df68712f67c7f83338caa73ec2f351fdbe40e46f577bf7a5be51d0996a396ab824c47f201ff8a90dc191b12"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x67c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.460268955s ago: executing program 2 (id=2494): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2.68486211s ago: executing program 2 (id=2495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.317934719s ago: executing program 5 (id=2496): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/51, 0x33}], 0x2}, 0x10001}], 0x2, 0x40000040, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000400)=""/188, 0x2a, 0xbc, 0x1}, 0x28) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={0x0, &(0x7f0000000300)=""/40, 0x0, 0x0, 0x5, r4}, 0x38) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r6, &(0x7f00000004c0)="3734df55b8aa384973f953696f65a1aeb67a3a19858b", 0x16}]) 1.204667731s ago: executing program 4 (id=2497): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) 1.031010225s ago: executing program 4 (id=2498): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) 346.880752ms ago: executing program 4 (id=2499): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x84, 0x0, &(0x7f0000000180)) 164.121127ms ago: executing program 4 (id=2500): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2501): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000892293ed19b9650260725d8c4ce673e8cd85216c8b7277dccf6f5059599f21f6ed5fce6dcdf9e291c4b67cfb26181dc027d1407901d59f1027719fc5c567029b2b1a80f8dd3883b8d88ed6812ba6e91429c4326dc6d5f0e7d96c360e413cea16cb6c8bb0ddf85bb51672f3731b735bd8c66a014d819f2fc4aea76233594bf90d9188837b4f986359b5793ebe4fa56e10954061ce50c3db4a9af424b5ed58ee5cfbc8c2ef96dbfef14a83f3fe370803760f43165c702dfebc84537b5e69cff2af09e2889c535e2f5f25cff41fd12b6d8ec5f713"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x47f, 0x0, 0x0, 0xb9ff, 0x5, "000000008200"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x101000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x76) kernel console output (not intermixed with test programs): ailed, can't read hub descriptor (err -22) [ 309.048963][T10356] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 309.074952][T10356] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 309.097253][T10359] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1571'. [ 309.270847][T10366] netlink: 'syz.0.1574': attribute type 29 has an invalid length. [ 309.280131][T10366] netlink: 'syz.0.1574': attribute type 29 has an invalid length. [ 309.364932][ T7218] usb usb34-port1: attempt power cycle [ 309.374581][ T5800] Bluetooth: hci4: command tx timeout [ 309.927171][T10386] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1581'. [ 309.944851][ T7234] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 310.005370][ T7218] usb usb34-port1: unable to enumerate USB device [ 310.033440][T10390] syz.4.1583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 310.099025][T10392] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1584'. [ 310.149681][ T7234] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 310.163412][ T7234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.172235][ T7234] usb 1-1: Product: syz [ 310.182078][ T7234] usb 1-1: Manufacturer: syz [ 310.190734][ T7234] usb 1-1: SerialNumber: syz [ 310.198372][ T7234] usb 1-1: config 0 descriptor?? [ 310.411831][ T7234] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 310.493387][ T7233] usb 3-1: USB disconnect, device number 44 [ 310.524615][T10406] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 310.533629][T10406] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 310.768005][ T7234] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 311.514410][ T5800] Bluetooth: hci4: command tx timeout [ 311.597455][ T7218] usb 2-1: USB disconnect, device number 49 [ 311.842160][T10424] netlink: 'syz.1.1596': attribute type 5 has an invalid length. [ 312.305279][ T7219] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 313.154504][ T8] usb 1-1: USB disconnect, device number 42 [ 313.175696][ T7219] usb 2-1: Using ep0 maxpacket: 32 [ 313.183302][ T7219] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 313.191975][ T7219] usb 2-1: config 0 has no interface number 0 [ 313.200778][ T7219] usb 2-1: config 0 interface 184 has no altsetting 0 [ 313.212290][ T7219] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 313.222038][ T7219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.342630][ T7219] usb 2-1: Product: syz [ 313.347065][ T7219] usb 2-1: Manufacturer: syz [ 313.351729][ T7219] usb 2-1: SerialNumber: syz [ 313.366716][ T7219] usb 2-1: config 0 descriptor?? [ 313.378115][ T7219] smsc75xx v1.0.0 [ 313.536316][ T5803] Bluetooth: hci4: command tx timeout [ 313.966860][ T7234] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 313.993647][ T7219] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 314.005169][ T7219] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 314.023114][ T7219] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 314.034326][ T7219] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 314.045101][ T7219] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 314.063562][ T7219] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 314.073656][ T7219] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 314.127389][T10480] loop2: detected capacity change from 0 to 2048 [ 314.164298][T10480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.164515][ T7234] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 314.187699][T10480] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.208589][ T7234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.220926][ T7234] usb 1-1: Product: syz [ 314.225650][ T7234] usb 1-1: Manufacturer: syz [ 314.230781][ T7234] usb 1-1: SerialNumber: syz [ 314.237642][ T7234] usb 1-1: config 0 descriptor?? [ 314.450658][ T7234] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.653135][ T7234] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 314.751060][T10487] tipc: Started in network mode [ 314.756225][T10487] tipc: Node identity ac14140f, cluster identity 4711 [ 314.763642][T10487] tipc: New replicast peer: 255.255.255.255 [ 314.772647][T10487] tipc: Enabled bearer , priority 10 [ 314.953802][T10501] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 314.962997][T10501] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 315.280926][ T5842] usb 2-1: USB disconnect, device number 50 [ 315.748190][T10522] loop1: detected capacity change from 0 to 512 [ 315.749493][T10521] lo speed is unknown, defaulting to 1000 [ 315.784029][T10522] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1636: bg 0: block 16: invalid block bitmap [ 315.800465][T10522] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 315.811095][T10522] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1636: invalid indirect mapped block 5 (level 0) [ 315.811768][T10522] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1636: invalid indirect mapped block 4294967295 (level 1) [ 315.825418][T10522] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1636: invalid indirect mapped block 4294967295 (level 2) [ 315.842351][T10522] EXT4-fs (loop1): 1 truncate cleaned up [ 315.843733][T10522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.858963][T10522] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.886684][ T785] tipc: Node number set to 2886997007 [ 316.546713][ T7234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 316.737642][ T7234] usb 5-1: Using ep0 maxpacket: 32 [ 316.754374][ T7234] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 316.769064][ T7234] usb 5-1: config 0 has no interface number 0 [ 316.786209][ T7234] usb 5-1: config 0 interface 184 has no altsetting 0 [ 316.807042][ T7234] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 316.816580][ T7234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.826290][ T7234] usb 5-1: Product: syz [ 316.830833][ T7234] usb 5-1: Manufacturer: syz [ 316.834882][ T785] usb 1-1: USB disconnect, device number 43 [ 316.837761][ T7234] usb 5-1: SerialNumber: syz [ 316.855418][ T7234] usb 5-1: config 0 descriptor?? [ 316.872156][ T7234] smsc75xx v1.0.0 [ 317.495867][ T7234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 317.515215][ T7234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 317.528084][ T7234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 317.539470][ T7234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 317.549290][ T7234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 317.560035][ T7234] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 317.579538][ T7234] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 317.922230][ T7234] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 318.024337][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.111903][ T7234] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 318.127324][ T7234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.135491][ T7234] usb 1-1: Product: syz [ 318.145965][ T7234] usb 1-1: Manufacturer: syz [ 318.150957][ T7234] usb 1-1: SerialNumber: syz [ 318.158592][ T7234] usb 1-1: config 0 descriptor?? [ 318.393305][ T7234] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 318.594384][ T7234] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 319.327737][ T7234] usb 5-1: USB disconnect, device number 2 [ 319.689189][ T7233] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 319.897956][ T7233] usb 3-1: Using ep0 maxpacket: 32 [ 319.909832][ T7233] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.954642][ T7233] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.980456][ T7233] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 319.997645][ T7233] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 320.006062][ T7233] usb 3-1: Product: syz [ 320.025710][ T7233] usb 3-1: Manufacturer: syz [ 320.037136][ T7233] hub 3-1:4.0: USB hub found [ 320.188366][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.196183][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.246865][ T7233] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 320.455097][T10546] Set syz1 is full, maxelem 65536 reached [ 320.691903][ T7219] usb 1-1: USB disconnect, device number 44 [ 321.689618][T10595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.750537][T10595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.131929][T10595] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.141191][T10595] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.150696][T10595] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.160127][T10595] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.316332][T10609] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 322.343401][T10609] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 322.482873][T10623] loop1: detected capacity change from 0 to 512 [ 322.524675][T10623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.564944][T10623] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.590708][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 322.590724][ T28] audit: type=1326 audit(1754692883.314:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 322.626053][ T7237] usb 3-1: USB disconnect, device number 45 [ 322.637731][T10623] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1669: corrupted xattr block 19: overlapping e_value [ 322.637811][ T28] audit: type=1326 audit(1754692883.344:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 322.640029][T10630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1670'. [ 322.683892][ T5861] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 322.693028][ T28] audit: type=1326 audit(1754692883.424:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 322.716110][ T28] audit: type=1326 audit(1754692883.424:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 322.757451][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.888418][ T5879] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 322.904364][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 322.914139][ T5861] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 322.928405][ T5861] usb 5-1: config 0 has no interface number 0 [ 322.934582][ T5861] usb 5-1: config 0 interface 184 has no altsetting 0 [ 322.961273][ T5861] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 322.980169][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.998399][ T5861] usb 5-1: Product: syz [ 323.002633][ T5861] usb 5-1: Manufacturer: syz [ 323.007274][ T5861] usb 5-1: SerialNumber: syz [ 323.025163][ T5861] usb 5-1: config 0 descriptor?? [ 323.033863][ T5861] smsc75xx v1.0.0 [ 323.093903][ T5879] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 323.113579][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.124269][ T5879] usb 1-1: Product: syz [ 323.129161][ T5879] usb 1-1: Manufacturer: syz [ 323.134074][ T5879] usb 1-1: SerialNumber: syz [ 323.149698][ T5879] usb 1-1: config 0 descriptor?? [ 323.361984][T10656] tipc: Enabling not permitted [ 323.363865][ T5879] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 323.367709][T10656] tipc: Enabling of bearer rejected, failed to enable media [ 323.408585][ T5174] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 323.566747][ T5879] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 323.588587][ T5174] usb 2-1: Using ep0 maxpacket: 32 [ 323.608636][ T5174] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.626886][ T5174] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.640617][ T5174] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 323.651055][ T5861] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 323.668566][ T5174] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 323.677467][ T5861] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 323.693525][ T5174] usb 2-1: Product: syz [ 323.698163][ T5174] usb 2-1: Manufacturer: syz [ 323.703967][ T5861] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 323.726908][ T5174] hub 2-1:4.0: USB hub found [ 323.733676][ T5861] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 323.751480][ T5861] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 323.767169][ T5861] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 323.795622][ T5861] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 323.930654][ T5174] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 325.449291][ T7237] usb 5-1: USB disconnect, device number 3 [ 325.499917][T10700] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1696'. [ 325.696296][ T7237] usb 1-1: USB disconnect, device number 45 [ 325.939156][ T5174] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 326.089156][ T5174] usb 3-1: device descriptor read/64, error -71 [ 326.201929][T10722] loop1: detected capacity change from 0 to 1024 [ 326.213298][T10722] ext4: Unknown parameter 'uid>00000000000000000000' [ 326.267340][ T28] audit: type=1326 audit(1754692886.983:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 326.289840][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.299989][ T7237] usb 2-1: USB disconnect, device number 51 [ 326.312386][ T28] audit: type=1326 audit(1754692886.983:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 326.335453][ T28] audit: type=1326 audit(1754692887.013:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 326.357903][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.366529][ T28] audit: type=1326 audit(1754692887.013:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 326.389302][ T5174] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 326.389370][ T28] audit: type=1326 audit(1754692887.013:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 326.425793][ T28] audit: type=1326 audit(1754692887.023:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 326.487232][T10725] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1706'. [ 326.569316][ T5174] usb 3-1: device descriptor read/64, error -71 [ 326.689412][ T5174] usb usb3-port1: attempt power cycle [ 326.999384][ T7237] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 327.109218][ T5174] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 327.140197][ T5174] usb 3-1: device descriptor read/8, error -71 [ 327.195423][ T7237] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.204810][ T7237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.213493][ T7237] usb 5-1: Product: syz [ 327.217706][ T7237] usb 5-1: Manufacturer: syz [ 327.222431][ T7237] usb 5-1: SerialNumber: syz [ 327.228873][ T7237] usb 5-1: config 0 descriptor?? [ 327.309438][ T7209] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 327.409566][ T5174] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 327.446131][ T5174] usb 3-1: device descriptor read/8, error -71 [ 327.446716][ T7237] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 327.489301][ T7209] usb 1-1: Using ep0 maxpacket: 32 [ 327.497432][ T7209] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.517305][ T7209] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.526313][T10744] loop1: detected capacity change from 0 to 1024 [ 327.532273][ T7209] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 327.537610][T10744] EXT4-fs: inline encryption not supported [ 327.548713][ T7209] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 327.557387][ T7209] usb 1-1: Product: syz [ 327.561803][ T7209] usb 1-1: Manufacturer: syz [ 327.566842][T10744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.574048][ T7209] hub 1-1:4.0: USB hub found [ 327.580248][ T5174] usb usb3-port1: unable to enumerate USB device [ 327.599609][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 327.599655][ T28] audit: type=1326 audit(1754692888.323:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.628221][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.636681][ T28] audit: type=1326 audit(1754692888.323:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.660170][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.669812][ T28] audit: type=1326 audit(1754692888.323:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.692365][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.700685][ T7237] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 327.707512][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.718226][ T28] audit: type=1326 audit(1754692888.323:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.744922][ T28] audit: type=1326 audit(1754692888.323:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.783209][ T7209] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 327.791675][ T28] audit: type=1326 audit(1754692888.323:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.803777][T10750] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1716'. [ 327.825548][ T28] audit: type=1326 audit(1754692888.323:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.854878][ T28] audit: type=1326 audit(1754692888.323:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.877258][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.893219][ T28] audit: type=1326 audit(1754692888.323:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 327.916147][ T28] audit: type=1326 audit(1754692888.323:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10743 comm="syz.1.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 329.418707][T10781] loop1: detected capacity change from 0 to 8192 [ 329.767714][ T5174] usb 5-1: USB disconnect, device number 4 [ 330.190124][ T7209] usb 1-1: USB disconnect, device number 46 [ 330.628850][T10809] loop2: detected capacity change from 0 to 512 [ 330.661649][T10809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.681086][T10809] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.702465][T10809] syz.2.1738[10809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.702570][T10809] syz.2.1738[10809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.787894][T10809] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz.2.1738: path /443/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 330.794609][T10809] EXT4-fs (loop2): Remounting filesystem read-only [ 330.836968][ T7237] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 330.950094][ T5174] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 330.959823][T10817] loop4: detected capacity change from 0 to 8192 [ 330.987258][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.036167][ T7237] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 331.057237][ T7237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.076065][ T7237] usb 1-1: Product: syz [ 331.084426][ T7237] usb 1-1: Manufacturer: syz [ 331.089106][ T7237] usb 1-1: SerialNumber: syz [ 331.100903][ T7237] usb 1-1: config 0 descriptor?? [ 331.160554][ T5174] usb 2-1: Using ep0 maxpacket: 32 [ 331.168263][ T5174] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 331.177164][ T5174] usb 2-1: config 0 has no interface number 0 [ 331.189468][ T5174] usb 2-1: config 0 interface 184 has no altsetting 0 [ 331.200122][ T5174] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 331.209533][ T5174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.219825][ T5174] usb 2-1: Product: syz [ 331.224133][ T5174] usb 2-1: Manufacturer: syz [ 331.228861][ T5174] usb 2-1: SerialNumber: syz [ 331.256194][ T5174] usb 2-1: config 0 descriptor?? [ 331.270221][ T5174] smsc75xx v1.0.0 [ 331.331896][ T7237] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 331.539076][ T7237] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 331.887529][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 331.915570][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 331.931925][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 331.949875][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 331.970313][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 332.003529][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 332.015075][ T5174] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 332.202739][T10837] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1749'. [ 332.806227][T10844] lo speed is unknown, defaulting to 1000 [ 333.590249][T10851] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1751'. [ 333.666765][ T23] usb 1-1: USB disconnect, device number 47 [ 333.740833][ T5174] usb 2-1: USB disconnect, device number 52 [ 335.118156][T10869] loop1: detected capacity change from 0 to 512 [ 335.191211][T10869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.250531][T10869] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.320660][T10869] syz.1.1758[10869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.320763][T10869] syz.1.1758[10869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.423955][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.475185][ T7237] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 335.529005][T10876] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.671225][ T7237] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 335.686150][ T7237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.694877][ T7237] usb 5-1: Product: syz [ 335.699173][ T7237] usb 5-1: Manufacturer: syz [ 335.706597][ T7237] usb 5-1: SerialNumber: syz [ 335.719321][ T7237] usb 5-1: config 0 descriptor?? [ 335.935116][ T7237] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 336.400379][ T7234] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 336.540534][ T7237] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 336.586772][ T7234] usb 1-1: Using ep0 maxpacket: 32 [ 336.598292][ T7234] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.619827][ T7234] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.642560][ T7234] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.651998][ T7234] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 336.660507][ T7234] usb 1-1: Product: syz [ 336.664802][ T7234] usb 1-1: Manufacturer: syz [ 336.674597][ T7234] hub 1-1:4.0: USB hub found [ 336.709936][T10886] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1766'. [ 336.881124][ T7234] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 337.105547][T10826] Set syz1 is full, maxelem 65536 reached [ 337.875451][ T1057] block nbd0: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 180 seconds [ 337.899457][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 337.899473][ T28] audit: type=1326 audit(1754692898.611:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 337.928309][ T28] audit: type=1326 audit(1754692898.611:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 337.951229][ T28] audit: type=1326 audit(1754692898.611:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 337.973946][ T28] audit: type=1326 audit(1754692898.611:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 337.996901][ T28] audit: type=1326 audit(1754692898.631:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10900 comm="syz.2.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 338.194457][ T7234] usb 5-1: USB disconnect, device number 5 [ 338.501013][ T1057] block nbd1: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 180 seconds [ 338.512091][ T1057] block nbd1: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 180 seconds [ 338.523375][ T1057] block nbd1: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 180 seconds [ 338.534833][ T1057] block nbd1: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 180 seconds [ 338.800916][ T7237] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 338.981062][ T7237] usb 3-1: Using ep0 maxpacket: 32 [ 338.988073][ T7237] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 338.996935][ T7237] usb 3-1: config 0 has no interface number 0 [ 339.003523][ T7237] usb 3-1: config 0 interface 184 has no altsetting 0 [ 339.013460][ T7237] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 339.022983][ T7237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.031636][ T7237] usb 3-1: Product: syz [ 339.035949][ T7237] usb 3-1: Manufacturer: syz [ 339.041076][ T7237] usb 3-1: SerialNumber: syz [ 339.047979][ T7237] usb 3-1: config 0 descriptor?? [ 339.055126][ T7237] smsc75xx v1.0.0 [ 339.320953][ T5861] usb 1-1: USB disconnect, device number 48 [ 339.610177][ T7234] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 339.991561][ T7237] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 340.120824][ T7234] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 340.155491][ T7237] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 340.165478][ T7234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.175915][ T7234] usb 2-1: Product: syz [ 340.180948][ T7237] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 340.192251][ T7234] usb 2-1: Manufacturer: syz [ 340.196906][ T7234] usb 2-1: SerialNumber: syz [ 340.204629][ T7237] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 340.215973][ T7234] usb 2-1: config 0 descriptor?? [ 340.221233][ T7237] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 340.235546][ T7237] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 340.246168][ T7237] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 340.318106][ T28] audit: type=1326 audit(1754692900.971:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.0.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 340.357462][ T28] audit: type=1326 audit(1754692900.971:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.0.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 340.380736][ T28] audit: type=1326 audit(1754692900.971:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.0.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 340.403422][ T28] audit: type=1326 audit(1754692900.971:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.0.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 340.426180][ T28] audit: type=1326 audit(1754692900.971:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10937 comm="syz.0.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 340.453964][ T7234] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.870683][ T5861] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 341.056772][ T7234] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 341.081429][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 341.094148][ T5861] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.120648][ T5861] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.141980][ T5861] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 341.151380][ T5861] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 341.159747][ T5861] usb 5-1: Product: syz [ 341.180684][ T5861] usb 5-1: Manufacturer: syz [ 341.189496][ T5861] hub 5-1:4.0: USB hub found [ 341.395105][ T5861] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 341.641827][T10954] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1791'. [ 341.759381][ T5861] usb 3-1: USB disconnect, device number 50 [ 342.928120][ T5861] usb 2-1: USB disconnect, device number 53 [ 343.108219][T10979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1799'. [ 343.295190][T10991] netlink: 'syz.1.1804': attribute type 13 has an invalid length. [ 343.314361][T10991] gretap0: refused to change device tx_queue_len [ 343.321260][T10991] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 343.771210][ T5174] usb 5-1: USB disconnect, device number 6 [ 344.192462][T11021] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1815'. [ 344.465497][T11033] loop2: detected capacity change from 0 to 512 [ 344.481782][T11033] EXT4-fs: Ignoring removed oldalloc option [ 344.497369][T11033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 344.558855][T11033] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1822: Parent and EA inode have the same ino 15 [ 344.583740][T11033] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 344.605674][T11033] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1822: Parent and EA inode have the same ino 15 [ 344.625334][T11033] EXT4-fs (loop2): 1 orphan inode deleted [ 344.633735][T11033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.695720][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.804737][T11047] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1827'. [ 344.942234][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 344.942249][ T28] audit: type=1326 audit(1754692905.661:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11052 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 345.035616][ T28] audit: type=1326 audit(1754692905.661:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11052 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 345.092242][ T28] audit: type=1326 audit(1754692905.691:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11052 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 345.139501][T11064] loop1: detected capacity change from 0 to 512 [ 345.146226][ T28] audit: type=1326 audit(1754692905.691:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11052 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 345.170495][T11064] EXT4-fs: Ignoring removed i_version option [ 345.177649][T11064] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 345.191525][ T28] audit: type=1326 audit(1754692905.691:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11052 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 345.229009][T11064] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 345.240068][ T28] audit: type=1326 audit(1754692905.691:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11052 comm="syz.1.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 345.273781][T11064] EXT4-fs (loop1): 1 truncate cleaned up [ 345.281257][T11064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.306692][T11064] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1835: corrupted in-inode xattr: overlapping e_value [ 345.324246][T11064] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1781: inode #15: comm syz.1.1835: unable to update i_inline_off [ 345.344995][T11064] EXT4-fs error (device loop1): ext4_xattr_ibody_get:653: inode #15: comm syz.1.1835: corrupted in-inode xattr: overlapping e_value [ 345.395011][T11064] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1835: corrupted in-inode xattr: overlapping e_value [ 345.418261][T11064] syz.1.1835 (11064) used greatest stack depth: 20104 bytes left [ 345.484646][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.762096][ T5861] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 346.966328][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 347.029703][ T5861] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 347.045181][ T5861] usb 3-1: config 0 has no interface number 0 [ 347.051414][ T5861] usb 3-1: config 0 interface 184 has no altsetting 0 [ 347.129027][ T5861] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 347.138225][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.154693][ T5861] usb 3-1: Product: syz [ 347.158986][ T5861] usb 3-1: Manufacturer: syz [ 347.178159][ T5861] usb 3-1: SerialNumber: syz [ 347.192681][ T5861] usb 3-1: config 0 descriptor?? [ 347.199983][ T5861] smsc75xx v1.0.0 [ 347.446102][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 347.817855][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 347.817890][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 348.020791][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 348.020835][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 348.020860][ T5861] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 348.021807][ T5861] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 348.891426][ T28] audit: type=1326 audit(1754692909.601:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 348.951214][ T28] audit: type=1326 audit(1754692909.641:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 349.001299][ T28] audit: type=1326 audit(1754692909.641:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 349.040430][ T28] audit: type=1326 audit(1754692909.641:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 349.521338][ T5861] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 349.531544][ T7237] usb 3-1: USB disconnect, device number 51 [ 349.711646][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 349.726678][ T5861] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.750428][ T5861] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.773209][ T5861] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 349.791305][ T5861] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 349.803514][ T5861] usb 1-1: Product: syz [ 349.807817][ T5861] usb 1-1: Manufacturer: syz [ 349.843222][ T5861] hub 1-1:4.0: USB hub found [ 350.052580][ T5861] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 350.841398][ T7237] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 350.860190][T11207] capability: warning: `syz.2.1895' uses deprecated v2 capabilities in a way that may be insecure [ 351.025631][ T7237] usb 2-1: Using ep0 maxpacket: 32 [ 351.043136][ T7237] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 351.052772][ T7237] usb 2-1: config 0 has no interface number 0 [ 351.074463][ T7237] usb 2-1: config 0 interface 184 has no altsetting 0 [ 351.107229][ T7237] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 351.121223][ T7237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.130395][ T7237] usb 2-1: Product: syz [ 351.142514][ T7237] usb 2-1: Manufacturer: syz [ 351.147181][ T7237] usb 2-1: SerialNumber: syz [ 351.159186][ T7237] usb 2-1: config 0 descriptor?? [ 351.190592][ T7237] smsc75xx v1.0.0 [ 351.828122][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 351.828157][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.031849][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 352.031884][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 352.031906][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 352.032098][ T7237] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 352.429017][T11135] Set syz1 is full, maxelem 65536 reached [ 352.431501][ T7237] usb 1-1: USB disconnect, device number 49 [ 353.239395][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1918'. [ 354.015487][ T5861] usb 2-1: USB disconnect, device number 54 [ 354.956698][ T7237] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 355.231712][ T7237] usb 2-1: Using ep0 maxpacket: 32 [ 355.348865][ T7237] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 355.511468][ T7237] usb 2-1: config 0 has no interface number 0 [ 355.521800][ T7237] usb 2-1: config 0 interface 184 has no altsetting 0 [ 355.549656][ T7237] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 355.565727][ T7237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.577932][ T7237] usb 2-1: Product: syz [ 355.589413][ T7237] usb 2-1: Manufacturer: syz [ 355.595620][ T7237] usb 2-1: SerialNumber: syz [ 355.608015][ T7237] usb 2-1: config 0 descriptor?? [ 355.617374][ T7237] smsc75xx v1.0.0 [ 355.998612][T11323] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1944'. [ 356.273241][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 356.285019][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 356.552054][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 356.597706][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 356.655745][ T7237] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 356.713562][ T7237] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 357.086678][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1947'. [ 357.608230][ T5861] usb 2-1: USB disconnect, device number 55 [ 357.653821][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1958'. [ 358.472109][ T7237] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 358.701482][ T7237] usb 1-1: Using ep0 maxpacket: 32 [ 358.719088][ T7237] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 358.727513][ T7237] usb 1-1: config 0 has no interface number 0 [ 358.736224][ T7237] usb 1-1: config 0 interface 184 has no altsetting 0 [ 358.747204][ T7237] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 358.756934][ T7237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.765272][ T7237] usb 1-1: Product: syz [ 358.769702][ T7237] usb 1-1: Manufacturer: syz [ 358.774477][ T7237] usb 1-1: SerialNumber: syz [ 358.785299][ T7237] usb 1-1: config 0 descriptor?? [ 358.796090][ T7237] smsc75xx v1.0.0 [ 358.850257][ T28] audit: type=1326 audit(1754692919.560:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 358.880775][ T28] audit: type=1326 audit(1754692919.600:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 358.911868][ T28] audit: type=1326 audit(1754692919.600:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 358.941442][ T28] audit: type=1326 audit(1754692919.600:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 359.415041][ T7237] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 359.433137][ T7237] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 359.688778][ T7237] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 359.700225][ T7237] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 359.719053][ T7237] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 359.729242][ T7237] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 359.815512][ T5861] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 360.008353][ T5861] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 360.017880][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.026217][ T5861] usb 3-1: Product: syz [ 360.030643][ T5861] usb 3-1: Manufacturer: syz [ 360.035450][ T5861] usb 3-1: SerialNumber: syz [ 360.044931][ T5861] usb 3-1: config 0 descriptor?? [ 360.260603][ T5861] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 360.571504][ T7237] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 360.766632][ T7237] usb 2-1: Using ep0 maxpacket: 32 [ 360.774052][ T7237] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.785480][ T7237] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.797242][ T7237] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 360.806589][ T7237] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 360.815185][ T7237] usb 2-1: Product: syz [ 360.819391][ T7237] usb 2-1: Manufacturer: syz [ 360.828705][ T7237] hub 2-1:4.0: USB hub found [ 361.033877][ T7237] hub 2-1:4.0: 2 ports detected [ 361.234759][ T7234] usb 1-1: USB disconnect, device number 50 [ 361.697806][ T5861] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 361.709471][ T5861] usb 3-1: USB disconnect, device number 52 [ 361.991120][ T7237] usb 2-1: USB disconnect, device number 56 [ 362.521550][ T5861] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 362.722039][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 362.735946][ T5861] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 362.761464][ T5861] usb 1-1: config 0 has no interface number 0 [ 362.778047][ T5861] usb 1-1: config 0 interface 184 has no altsetting 0 [ 362.798997][ T5861] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 362.818683][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.847103][ T5861] usb 1-1: Product: syz [ 362.857519][ T5861] usb 1-1: Manufacturer: syz [ 362.875891][ T5861] usb 1-1: SerialNumber: syz [ 362.890747][ T5861] usb 1-1: config 0 descriptor?? [ 362.909090][ T5861] smsc75xx v1.0.0 [ 362.982204][ T5174] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 363.109417][ T28] audit: type=1326 audit(1754692923.830:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 363.138172][ T28] audit: type=1326 audit(1754692923.830:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 363.147149][T11487] loop4: detected capacity change from 0 to 128 [ 363.168110][ T28] audit: type=1326 audit(1754692923.830:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 363.196078][ T28] audit: type=1326 audit(1754692923.830:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 363.206719][ T5174] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 363.219074][ T7237] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 363.236563][ T28] audit: type=1326 audit(1754692923.830:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 363.259934][ T5174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.268424][ T28] audit: type=1326 audit(1754692923.840:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 363.268658][ T5174] usb 3-1: Product: syz [ 363.296404][ T5174] usb 3-1: Manufacturer: syz [ 363.301135][ T5174] usb 3-1: SerialNumber: syz [ 363.305766][T11487] FAT-fs (loop4): Directory bread(block 32) failed [ 363.305921][T11487] FAT-fs (loop4): Directory bread(block 33) failed [ 363.306029][T11487] FAT-fs (loop4): Directory bread(block 34) failed [ 363.306058][T11487] FAT-fs (loop4): Directory bread(block 35) failed [ 363.306154][T11487] FAT-fs (loop4): Directory bread(block 36) failed [ 363.338954][ T5174] usb 3-1: config 0 descriptor?? [ 363.340122][T11487] FAT-fs (loop4): Directory bread(block 37) failed [ 363.352043][T11487] FAT-fs (loop4): Directory bread(block 38) failed [ 363.358615][T11487] FAT-fs (loop4): Directory bread(block 39) failed [ 363.365400][T11487] FAT-fs (loop4): Directory bread(block 40) failed [ 363.372402][T11487] FAT-fs (loop4): Directory bread(block 41) failed [ 363.451647][ T7237] usb 2-1: Using ep0 maxpacket: 32 [ 363.463694][ T7237] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.475297][ T7237] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.488278][ T7237] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 363.498247][ T7237] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 363.507079][ T7237] usb 2-1: Product: syz [ 363.511723][ T7237] usb 2-1: Manufacturer: syz [ 363.529539][ T7237] hub 2-1:4.0: USB hub found [ 363.542182][ T5861] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 363.559557][ T5174] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 363.568592][ T5861] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 363.745571][ T7237] hub 2-1:4.0: 2 ports detected [ 363.780015][ T5861] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 363.800676][ T5861] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 363.810463][ T5861] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 363.828306][ T5861] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 364.555036][ T7237] usb 2-1: USB disconnect, device number 57 [ 364.976399][ T5174] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 364.986422][ T5174] usb 3-1: USB disconnect, device number 53 [ 365.227139][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2026'. [ 365.239724][T11507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.250238][T11507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.316557][ T7237] usb 1-1: USB disconnect, device number 51 [ 365.372549][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 365.372566][ T28] audit: type=1326 audit(1754692926.100:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.407085][ T28] audit: type=1326 audit(1754692926.100:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.435275][ T28] audit: type=1326 audit(1754692926.100:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.469608][ T28] audit: type=1326 audit(1754692926.100:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.498031][ T28] audit: type=1326 audit(1754692926.100:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.524877][ T28] audit: type=1326 audit(1754692926.100:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.547776][ T28] audit: type=1326 audit(1754692926.100:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.606300][ T28] audit: type=1326 audit(1754692926.100:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.658869][ T28] audit: type=1326 audit(1754692926.130:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.702068][ T28] audit: type=1326 audit(1754692926.130:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 365.828871][T11525] tipc: Enabled bearer , priority 0 [ 365.862276][T11517] tipc: Resetting bearer [ 366.331982][ T23] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 366.525977][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 366.559819][ T23] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 366.568554][ T23] usb 2-1: config 0 has no interface number 0 [ 366.575068][ T23] usb 2-1: config 0 interface 184 has no altsetting 0 [ 366.585214][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 366.594491][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.602588][ T23] usb 2-1: Product: syz [ 366.606808][ T23] usb 2-1: Manufacturer: syz [ 366.611551][ T23] usb 2-1: SerialNumber: syz [ 366.626336][ T23] usb 2-1: config 0 descriptor?? [ 366.636614][ T23] smsc75xx v1.0.0 [ 367.274485][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 367.295607][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 367.525486][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 367.545544][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 367.564655][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 367.583117][ T23] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 367.951747][ T1057] block nbd0: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 210 seconds [ 368.430591][T11517] tipc: Disabling bearer [ 368.581824][ T1057] block nbd1: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 210 seconds [ 368.593668][ T1057] block nbd1: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 210 seconds [ 368.609050][ T1057] block nbd1: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 210 seconds [ 368.631722][ T1057] block nbd1: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 210 seconds [ 369.152726][ T5174] usb 2-1: USB disconnect, device number 58 [ 369.298850][T11569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2049'. [ 369.570059][T11574] random: crng reseeded on system resumption [ 369.667556][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2051'. [ 370.471730][ T5174] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 370.656015][ T5174] usb 3-1: Using ep0 maxpacket: 32 [ 370.657993][ T5174] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 370.658021][ T5174] usb 3-1: config 0 has no interface number 0 [ 370.658068][ T5174] usb 3-1: config 0 interface 184 has no altsetting 0 [ 370.660619][ T5174] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 370.660649][ T5174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.660670][ T5174] usb 3-1: Product: syz [ 370.660686][ T5174] usb 3-1: Manufacturer: syz [ 370.660701][ T5174] usb 3-1: SerialNumber: syz [ 370.664361][ T5174] usb 3-1: config 0 descriptor?? [ 370.672894][ T5174] smsc75xx v1.0.0 [ 370.756282][ T7224] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 370.956679][ T7224] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 370.971619][ T7224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.971647][ T7224] usb 1-1: Product: syz [ 370.971661][ T7224] usb 1-1: Manufacturer: syz [ 370.971677][ T7224] usb 1-1: SerialNumber: syz [ 370.974812][ T7224] usb 1-1: config 0 descriptor?? [ 371.190210][ T7224] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 371.281336][ T5174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 371.293962][ T5174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 371.523127][ T5174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 371.545198][ T5174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 371.572128][ T5174] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 371.587444][ T5174] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 371.627735][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 371.627752][ T28] audit: type=1326 audit(1754692932.350:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 371.661852][ T28] audit: type=1326 audit(1754692932.350:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 371.674877][T11612] loop1: detected capacity change from 0 to 1024 [ 371.694730][ T28] audit: type=1326 audit(1754692932.360:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e1d98eb69 code=0x7ffc0000 [ 371.720565][ T28] audit: type=1326 audit(1754692932.360:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e1d98eba3 code=0x7ffc0000 [ 371.753384][T11612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.766369][ T28] audit: type=1326 audit(1754692932.370:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e1d98d61f code=0x7ffc0000 [ 371.788941][ T28] audit: type=1326 audit(1754692932.390:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4e1d98ebf7 code=0x7ffc0000 [ 371.813071][ T28] audit: type=1326 audit(1754692932.400:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e1d98d4d0 code=0x7ffc0000 [ 371.835749][ T28] audit: type=1326 audit(1754692932.400:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e1d98e76b code=0x7ffc0000 [ 371.864932][ T28] audit: type=1326 audit(1754692932.410:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e1d98d7ca code=0x7ffc0000 [ 371.893003][ T28] audit: type=1326 audit(1754692932.410:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e1d98d7ca code=0x7ffc0000 [ 372.425073][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.661742][ T7224] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 372.664000][ T7224] usb 1-1: USB disconnect, device number 52 [ 373.249404][ T7224] usb 3-1: USB disconnect, device number 54 [ 374.161612][ T7224] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 374.291782][ T5174] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 374.355321][ T7224] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 374.355355][ T7224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.355377][ T7224] usb 5-1: Product: syz [ 374.355392][ T7224] usb 5-1: Manufacturer: syz [ 374.355408][ T7224] usb 5-1: SerialNumber: syz [ 374.357990][ T7224] usb 5-1: config 0 descriptor?? [ 374.491796][ T5174] usb 2-1: Using ep0 maxpacket: 32 [ 374.494387][ T5174] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 374.494416][ T5174] usb 2-1: config 0 has no interface number 0 [ 374.494494][ T5174] usb 2-1: config 0 interface 184 has no altsetting 0 [ 374.497396][ T5174] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 374.497426][ T5174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.497480][ T5174] usb 2-1: Product: syz [ 374.497496][ T5174] usb 2-1: Manufacturer: syz [ 374.497512][ T5174] usb 2-1: SerialNumber: syz [ 374.500618][ T5174] usb 2-1: config 0 descriptor?? [ 374.509225][ T5174] smsc75xx v1.0.0 [ 374.596495][ T7224] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 375.006154][T11688] random: crng reseeded on system resumption [ 375.079573][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2096'. [ 375.133956][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 375.146068][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 375.357437][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 375.368726][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 375.378515][ T5174] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 375.388501][ T5174] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 376.041250][ T7224] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 376.064008][ T7224] usb 5-1: USB disconnect, device number 7 [ 376.351640][ T7237] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 376.541630][ T7237] usb 1-1: Using ep0 maxpacket: 32 [ 376.549532][ T7237] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.560628][ T7237] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.573759][ T7237] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 376.583537][ T7237] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 376.593997][ T7237] usb 1-1: Product: syz [ 376.598221][ T7237] usb 1-1: Manufacturer: syz [ 376.609191][ T7237] hub 1-1:4.0: USB hub found [ 376.881670][ T7237] hub 1-1:4.0: 2 ports detected [ 377.041657][ T7224] usb 2-1: USB disconnect, device number 59 [ 377.140725][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 377.140742][ T28] audit: type=1326 audit(1754692937.860:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 377.170860][ T28] audit: type=1326 audit(1754692937.860:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 377.211764][ T28] audit: type=1326 audit(1754692937.910:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 377.251748][ T28] audit: type=1326 audit(1754692937.910:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 377.275333][ T28] audit: type=1326 audit(1754692937.910:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 377.298475][ T28] audit: type=1326 audit(1754692937.910:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 377.330326][ T28] audit: type=1326 audit(1754692937.910:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 377.362077][ T28] audit: type=1326 audit(1754692937.910:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.4.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 377.528838][T11741] netem: change failed [ 377.762189][ T7224] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 377.959608][ T7224] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 377.968863][ T7224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.977556][ T7224] usb 2-1: Product: syz [ 377.982208][ T7224] usb 2-1: Manufacturer: syz [ 377.986850][ T7224] usb 2-1: SerialNumber: syz [ 377.994619][ T7224] usb 2-1: config 0 descriptor?? [ 378.095167][ T7237] hub 1-1:4.0: activate --> -90 [ 378.214576][ T7224] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.282227][ T7237] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 378.289206][ T23] usb 1-1: USB disconnect, device number 53 [ 379.288481][T11780] loop2: detected capacity change from 0 to 512 [ 379.298749][T11780] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 379.317865][T11780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 379.343700][T11780] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.2135: Invalid block bitmap block 0 in block_group 0 [ 379.393810][T11780] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 379.417843][T11780] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.2135: attempt to clear invalid blocks 983261 len 1 [ 379.434453][T11780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.2135: Invalid inode table block 0 in block_group 0 [ 379.461415][T11780] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 379.481109][T11780] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 379.484176][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.502237][T11780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.2135: Invalid inode table block 0 in block_group 0 [ 379.532209][T11780] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 379.555032][T11780] EXT4-fs error (device loop2): ext4_truncate:4288: inode #11: comm syz.2.2135: mark_inode_dirty error [ 379.578567][T11780] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 379.592363][T11780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.2135: Invalid inode table block 0 in block_group 0 [ 379.606145][T11780] EXT4-fs (loop2): 1 truncate cleaned up [ 379.615868][T11780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.665163][T11794] syz.0.2141[11794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.665304][T11794] syz.0.2141[11794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.699156][T11780] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.2135: Invalid inode table block 0 in block_group 0 [ 379.733499][ T7224] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 379.751924][ T7224] usb 2-1: USB disconnect, device number 60 [ 379.819662][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.066432][ T28] audit: type=1326 audit(1754692940.790:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 380.110304][ T28] audit: type=1326 audit(1754692940.790:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 380.226161][T11819] loop4: detected capacity change from 0 to 512 [ 380.235392][T11819] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 380.246968][T11819] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 380.264662][T11819] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.2153: Invalid block bitmap block 0 in block_group 0 [ 380.429825][T11819] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 380.455541][T11819] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.2153: attempt to clear invalid blocks 983261 len 1 [ 380.508761][T11819] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.2153: Invalid inode table block 0 in block_group 0 [ 380.528185][T11819] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 380.538571][T11819] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 380.853087][T11830] lo speed is unknown, defaulting to 1000 [ 381.099111][T11819] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.2153: Invalid inode table block 0 in block_group 0 [ 381.227900][T11819] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 381.293376][T11819] EXT4-fs error (device loop4): ext4_truncate:4288: inode #11: comm syz.4.2153: mark_inode_dirty error [ 381.347004][T11819] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 381.407694][T11819] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.2153: Invalid inode table block 0 in block_group 0 [ 381.446517][T11819] EXT4-fs (loop4): 1 truncate cleaned up [ 381.483151][T11819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.583651][T11819] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.2153: Invalid inode table block 0 in block_group 0 [ 381.680335][T10276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.313446][ T7237] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 382.563075][ T7237] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 382.583829][ T7237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.593305][ T7237] usb 3-1: Product: syz [ 382.597522][ T7237] usb 3-1: Manufacturer: syz [ 382.605693][ T7237] usb 3-1: SerialNumber: syz [ 382.615768][ T7237] usb 3-1: config 0 descriptor?? [ 383.095386][T11888] wireguard0: entered promiscuous mode [ 383.107119][T11888] wireguard0: entered allmulticast mode [ 383.258893][ T7237] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 384.726352][ T7237] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 384.731948][ T7237] usb 3-1: USB disconnect, device number 55 [ 386.491674][ T7224] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 386.691948][ T7224] usb 1-1: Using ep0 maxpacket: 32 [ 386.700141][ T7224] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 386.718908][ T7224] usb 1-1: config 0 has no interface number 0 [ 386.732122][ T7224] usb 1-1: config 0 interface 184 has no altsetting 0 [ 386.770018][ T7224] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 386.792933][ T7224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.812307][ T7224] usb 1-1: Product: syz [ 386.816932][ T7224] usb 1-1: Manufacturer: syz [ 386.822647][ T7224] usb 1-1: SerialNumber: syz [ 386.829789][ T7224] usb 1-1: config 0 descriptor?? [ 386.838273][ T7224] smsc75xx v1.0.0 [ 387.159979][T11970] loop1: detected capacity change from 0 to 4096 [ 387.195725][T11970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.337156][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.462891][ T7224] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 387.507926][ T7224] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 387.720169][ T7224] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 387.731481][ T7224] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 387.743331][ T7224] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 387.755875][ T7224] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 388.114277][T11985] loop2: detected capacity change from 0 to 2048 [ 388.193622][T11985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.215805][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 388.215822][ T28] audit: type=1326 audit(1754692948.940:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.252157][ T28] audit: type=1326 audit(1754692948.940:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.286793][T11985] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.2218: bit already cleared for inode 15 [ 388.318974][ T28] audit: type=1326 audit(1754692948.940:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.356506][ T28] audit: type=1326 audit(1754692948.940:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.379649][ T28] audit: type=1326 audit(1754692948.940:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.404138][ T28] audit: type=1326 audit(1754692948.970:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.407581][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.428099][ T28] audit: type=1326 audit(1754692948.970:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.458603][ T28] audit: type=1326 audit(1754692948.970:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.483257][ T28] audit: type=1326 audit(1754692948.980:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 388.522056][ T28] audit: type=1326 audit(1754692949.030:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 389.258905][ T23] usb 1-1: USB disconnect, device number 54 [ 391.178129][T12055] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2242'. [ 393.601666][ T7237] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 393.786418][ T7237] usb 2-1: Using ep0 maxpacket: 32 [ 393.789384][ T7237] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.807916][ T7237] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.810330][ T7237] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 393.810362][ T7237] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 393.810384][ T7237] usb 2-1: Product: syz [ 393.810400][ T7237] usb 2-1: Manufacturer: syz [ 393.825341][ T7237] hub 2-1:4.0: USB hub found [ 394.038790][ T7237] hub 2-1:4.0: 2 ports detected [ 394.089343][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 394.089360][ T28] audit: type=1326 audit(1754692954.810:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.089614][ T28] audit: type=1326 audit(1754692954.810:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.094557][ T28] audit: type=1326 audit(1754692954.820:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.211796][ T28] audit: type=1326 audit(1754692954.860:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.211854][ T28] audit: type=1326 audit(1754692954.860:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.211900][ T28] audit: type=1326 audit(1754692954.870:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.211948][ T28] audit: type=1326 audit(1754692954.870:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.211994][ T28] audit: type=1326 audit(1754692954.870:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.212039][ T28] audit: type=1326 audit(1754692954.870:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.212086][ T28] audit: type=1326 audit(1754692954.870:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12090 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 394.576472][T12101] 9pnet_fd: Insufficient options for proto=fd [ 395.726362][ T7237] hub 2-1:4.0: activate --> -90 [ 395.932418][ T23] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 395.933382][ T5861] usb 2-1: USB disconnect, device number 61 [ 396.020349][ T7224] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 396.060521][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2264'. [ 396.109467][T12120] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 396.211743][ T7224] usb 3-1: Using ep0 maxpacket: 32 [ 396.219277][ T7224] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 396.249631][ T7224] usb 3-1: config 0 has no interface number 0 [ 396.267984][ T7224] usb 3-1: config 0 interface 184 has no altsetting 0 [ 396.289101][ T7224] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 396.298637][ T7224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.319134][ T7224] usb 3-1: Product: syz [ 396.319157][ T7224] usb 3-1: Manufacturer: syz [ 396.319173][ T7224] usb 3-1: SerialNumber: syz [ 396.324963][ T7224] usb 3-1: config 0 descriptor?? [ 396.327512][ T7224] smsc75xx v1.0.0 [ 396.937310][ T7224] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 396.948896][ T7224] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 397.150763][ T7224] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 397.167274][ T7224] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 397.177811][ T7224] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 397.192917][ T7224] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 397.212944][T12142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.220989][T12142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.445912][T12146] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 397.802185][ T5861] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 397.810602][ T7224] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 397.992021][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 398.002031][ T5861] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.013912][ T5861] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.024470][ T1057] block nbd0: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 240 seconds [ 398.037926][ T5861] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 398.047829][ T7224] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 398.056989][ T5861] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 398.065876][ T7224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.074052][ T5861] usb 2-1: Product: syz [ 398.078248][ T5861] usb 2-1: Manufacturer: syz [ 398.083226][ T7224] usb 1-1: Product: syz [ 398.087530][ T7224] usb 1-1: Manufacturer: syz [ 398.093178][ T7224] usb 1-1: SerialNumber: syz [ 398.101006][ T7224] usb 1-1: config 0 descriptor?? [ 398.107461][ T5861] hub 2-1:4.0: USB hub found [ 398.305801][ T5861] hub 2-1:4.0: 2 ports detected [ 398.325392][ T7224] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 398.662070][ T1057] block nbd1: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 240 seconds [ 398.673148][ T1057] block nbd1: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 240 seconds [ 398.684255][ T1057] block nbd1: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 240 seconds [ 398.695394][ T1057] block nbd1: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 240 seconds [ 398.763430][ T5174] usb 3-1: USB disconnect, device number 56 [ 399.528774][ T5861] hub 2-1:4.0: activate --> -90 [ 399.730067][ T5861] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 399.742288][ T5861] usb 2-1: USB disconnect, device number 62 [ 399.768523][ T7224] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 399.784537][ T7224] usb 1-1: USB disconnect, device number 55 [ 400.220143][T12187] Driver unsupported XDP return value 0 on prog (id 413) dev N/A, expect packet loss! [ 400.597314][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2294'. [ 401.430670][T12219] loop2: detected capacity change from 0 to 1024 [ 401.456580][T12219] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 401.479122][T12219] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 401.504180][T12219] JBD2: no valid journal superblock found [ 401.510024][T12219] EXT4-fs (loop2): Could not load journal inode [ 401.531961][ T23] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 401.752961][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 401.760877][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.777618][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.790607][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 401.801254][ T23] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 401.808211][T12228] serio: Serial port ptm0 [ 401.810207][ T23] usb 2-1: Product: syz [ 401.818759][ T23] usb 2-1: Manufacturer: syz [ 401.829509][ T23] hub 2-1:4.0: USB hub found [ 402.036484][ T23] hub 2-1:4.0: 2 ports detected [ 402.124745][ T28] kauditd_printk_skb: 217 callbacks suppressed [ 402.124761][ T28] audit: type=1326 audit(1754692962.850:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.125964][ T28] audit: type=1326 audit(1754692962.850:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.157940][T12239] loop2: detected capacity change from 0 to 512 [ 402.178358][ T28] audit: type=1326 audit(1754692962.860:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.206994][ T28] audit: type=1326 audit(1754692962.860:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.207079][ T28] audit: type=1326 audit(1754692962.860:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.207124][ T28] audit: type=1326 audit(1754692962.860:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.207196][ T28] audit: type=1326 audit(1754692962.860:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.207243][ T28] audit: type=1326 audit(1754692962.860:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.207288][ T28] audit: type=1326 audit(1754692962.860:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.207369][ T28] audit: type=1326 audit(1754692962.860:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f51f4b8eb69 code=0x7ffc0000 [ 402.355923][T12239] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 402.386440][T12239] EXT4-fs (loop2): mount failed [ 403.326205][ T23] hub 2-1:4.0: activate --> -90 [ 403.592636][ T7224] usb 2-1: USB disconnect, device number 63 [ 403.726888][ T23] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 403.868441][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2321'. [ 404.702694][T12274] netlink: 'syz.1.2323': attribute type 3 has an invalid length. [ 404.861596][ C0] sched: RT throttling activated [ 405.658135][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.674200][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.683423][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.694555][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.704040][ T5800] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 405.711514][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.798504][T12277] lo speed is unknown, defaulting to 1000 [ 406.231855][ T7224] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 406.310916][T12277] chnl_net:caif_netlink_parms(): no params data found [ 406.422231][ T7224] usb 2-1: Using ep0 maxpacket: 32 [ 406.432476][T12277] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.432725][T12277] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.432911][T12277] bridge_slave_0: entered allmulticast mode [ 406.434640][T12277] bridge_slave_0: entered promiscuous mode [ 406.434642][ T7224] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 406.434669][ T7224] usb 2-1: config 0 has no interface number 0 [ 406.434715][ T7224] usb 2-1: config 0 interface 184 has no altsetting 0 [ 406.437482][ T7224] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 406.437513][ T7224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.437535][ T7224] usb 2-1: Product: syz [ 406.437551][ T7224] usb 2-1: Manufacturer: syz [ 406.437567][ T7224] usb 2-1: SerialNumber: syz [ 406.438072][T12277] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.438234][T12277] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.438458][T12277] bridge_slave_1: entered allmulticast mode [ 406.440480][ T7224] usb 2-1: config 0 descriptor?? [ 406.440745][T12277] bridge_slave_1: entered promiscuous mode [ 406.443325][ T7224] smsc75xx v1.0.0 [ 406.484579][T12277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.586785][T12277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.641081][T12277] team0: Port device team_slave_0 added [ 406.645777][T12277] team0: Port device team_slave_1 added [ 406.699908][T12277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.699927][T12277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.699954][T12277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.705282][T12277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.756952][T12277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.756985][T12277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.840704][T12277] hsr_slave_0: entered promiscuous mode [ 406.862561][T12277] hsr_slave_1: entered promiscuous mode [ 406.872383][T12277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.881682][T12277] Cannot create hsr debugfs directory [ 406.908677][T12298] hub 6-0:1.0: USB hub found [ 406.922141][T12298] hub 6-0:1.0: 1 port detected [ 406.998764][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 407.081415][ T7224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 407.101652][ T7224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 407.325907][ T7224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 407.339791][ T7224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 407.349926][ T7224] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 407.376191][ T7224] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 407.551781][ T7234] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 407.564732][T12277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.580568][T12277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.600499][T12277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.613430][T12277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.718993][T12277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.744382][T12277] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.760365][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.767661][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.777154][ T7234] usb 1-1: Using ep0 maxpacket: 32 [ 407.783780][ T5800] Bluetooth: hci5: command tx timeout [ 407.796327][ T7234] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.808008][ T7234] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.823967][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.831186][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.840869][ T7234] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 407.862509][ T7234] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 407.870933][ T7234] usb 1-1: Product: syz [ 407.876136][ T7234] usb 1-1: Manufacturer: syz [ 407.889131][ T7234] hub 1-1:4.0: USB hub found [ 408.091420][ T7234] hub 1-1:4.0: 2 ports detected [ 408.205046][T12277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.268514][T12277] veth0_vlan: entered promiscuous mode [ 408.297378][T12277] veth1_vlan: entered promiscuous mode [ 408.430041][T12277] veth0_macvtap: entered promiscuous mode [ 408.467776][T12277] veth1_macvtap: entered promiscuous mode [ 408.558470][T12277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.633667][T12277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.657809][ T7224] usb 2-1: USB disconnect, device number 64 [ 408.715721][T12277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.731071][T12277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.740433][T12277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.758209][T12277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.883684][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.897521][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.973964][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.984634][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.477591][ T7234] hub 1-1:4.0: activate --> -90 [ 409.620779][T12345] loop2: detected capacity change from 0 to 164 [ 409.654446][T12345] syz.2.2340: attempt to access beyond end of device [ 409.654446][T12345] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 409.655120][T12345] syz.2.2340: attempt to access beyond end of device [ 409.655120][T12345] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 409.678233][ T7234] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 409.678578][ T7224] usb 1-1: USB disconnect, device number 56 [ 409.871855][ T5800] Bluetooth: hci5: command tx timeout [ 410.652045][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2342'. [ 411.975736][ T5800] Bluetooth: hci5: command tx timeout [ 412.913774][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2344'. [ 412.943826][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 412.978013][T12358] wireguard0: entered promiscuous mode [ 412.984541][T12358] wireguard0: entered allmulticast mode [ 413.518172][T12371] loop4: detected capacity change from 0 to 512 [ 413.548120][T12371] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.559276][T12371] EXT4-fs (loop4): failed to initialize system zone (-117) [ 413.567864][T12371] EXT4-fs (loop4): mount failed [ 413.639033][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2349'. [ 414.021875][ T5800] Bluetooth: hci5: command tx timeout [ 415.294870][T12348] Set syz1 is full, maxelem 65536 reached [ 415.799791][T12396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2353'. [ 417.981718][ T7234] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 418.194259][ T7234] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 418.212038][ T7234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.220114][ T7234] usb 1-1: Product: syz [ 418.238836][ T7234] usb 1-1: Manufacturer: syz [ 418.243671][ T7234] usb 1-1: SerialNumber: syz [ 418.250954][ T7234] usb 1-1: config 0 descriptor?? [ 418.334310][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'. [ 418.465405][ T7234] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 419.049274][T12422] loop4: detected capacity change from 0 to 2048 [ 419.070273][T12422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.118588][T10276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.305287][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 419.305304][ T28] audit: type=1326 audit(1754692980.030:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 419.336998][ T28] audit: type=1326 audit(1754692980.060:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 419.360511][ T28] audit: type=1326 audit(1754692980.060:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 419.383857][ T28] audit: type=1326 audit(1754692980.060:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 419.408922][ T28] audit: type=1326 audit(1754692980.060:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12430 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b27f8eb69 code=0x7ffc0000 [ 419.897436][ T7234] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 419.913961][ T7234] usb 1-1: USB disconnect, device number 57 [ 420.615162][T12457] loop4: detected capacity change from 0 to 128 [ 420.636613][ T28] audit: type=1800 audit(1754692981.360:1029): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2376" name="file0" dev="loop4" ino=1048603 res=0 errno=0 [ 420.757940][T12457] netlink: 'syz.4.2376': attribute type 10 has an invalid length. [ 420.781696][T12457] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2376'. [ 420.990845][T12471] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 420.998993][T12471] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2381'. [ 421.015505][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2380'. [ 421.711738][ T7234] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 421.926252][ T7234] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 421.951911][ T7234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.959981][ T7234] usb 1-1: Product: syz [ 421.969140][ T7234] usb 1-1: Manufacturer: syz [ 421.981872][ T7234] usb 1-1: SerialNumber: syz [ 421.993561][ T7234] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.044206][ T7237] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 422.261237][ T5861] usb 1-1: USB disconnect, device number 58 [ 422.352501][T12490] loop2: detected capacity change from 0 to 128 [ 422.379529][ T28] audit: type=1800 audit(1754692983.100:1030): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2389" name="file0" dev="loop2" ino=1048604 res=0 errno=0 [ 422.413765][T12492] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 422.429089][T12492] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 422.464886][T12490] netlink: 'syz.2.2389': attribute type 10 has an invalid length. [ 422.474444][T12490] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2389'. [ 422.647896][T12498] loop2: detected capacity change from 0 to 128 [ 422.655477][T12498] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.668307][T12498] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 423.061822][ T7237] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 423.071020][ T7237] ath9k_htc: Failed to initialize the device [ 423.095825][ T5861] usb 1-1: ath9k_htc: USB layer deinitialized [ 423.611194][T12514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2400'. [ 423.829550][T12516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2401'. [ 424.136306][T12519] loop4: detected capacity change from 0 to 128 [ 424.179660][ T28] audit: type=1800 audit(1754692984.900:1031): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2403" name="file0" dev="loop4" ino=1048605 res=0 errno=0 [ 424.270877][T12523] netlink: 'syz.0.2405': attribute type 10 has an invalid length. [ 424.316237][T12523] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2405'. [ 424.547145][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.558737][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.567441][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.579172][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.601724][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 424.609637][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.716618][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 424.822212][T12528] lo speed is unknown, defaulting to 1000 [ 426.089897][T12547] netlink: 'syz.2.2411': attribute type 2 has an invalid length. [ 426.672070][ T5803] Bluetooth: hci3: command tx timeout [ 426.965974][T12528] chnl_net:caif_netlink_parms(): no params data found [ 427.061512][T12555] loop2: detected capacity change from 0 to 128 [ 427.175479][ T28] audit: type=1800 audit(1754692987.840:1032): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2414" name="file0" dev="loop2" ino=1048606 res=0 errno=0 [ 427.240594][T12557] veth1_to_bond: entered allmulticast mode [ 427.256805][T12557] veth1_to_bond: left allmulticast mode [ 427.472926][T12528] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.497879][T12528] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.517512][T12528] bridge_slave_0: entered allmulticast mode [ 427.539614][T12528] bridge_slave_0: entered promiscuous mode [ 427.562651][T12528] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.582866][T12528] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.590872][T12528] bridge_slave_1: entered allmulticast mode [ 427.598880][T12528] bridge_slave_1: entered promiscuous mode [ 427.649326][T12528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.667686][T12528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.701824][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 427.960430][T12528] team0: Port device team_slave_0 added [ 428.110772][ T1057] block nbd0: Possible stuck request ffff888021e80000: control (read@0,4096B). Runtime 270 seconds [ 428.472566][T12528] team0: Port device team_slave_1 added [ 428.646354][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2418'. [ 428.675997][T12528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.683430][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.747240][ T1057] block nbd1: Possible stuck request ffff888021ee0000: control (read@0,1024B). Runtime 270 seconds [ 428.758293][ T1057] block nbd1: Possible stuck request ffff888021ee0200: control (read@1024,1024B). Runtime 270 seconds [ 428.769507][ T1057] block nbd1: Possible stuck request ffff888021ee0400: control (read@2048,1024B). Runtime 270 seconds [ 428.780760][ T1057] block nbd1: Possible stuck request ffff888021ee0600: control (read@3072,1024B). Runtime 270 seconds [ 428.814933][ T5800] Bluetooth: hci3: command tx timeout [ 428.851813][T12528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.891052][T12528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.908764][T12528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.937692][T12577] loop2: detected capacity change from 0 to 2048 [ 428.945505][T12528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.005541][T12577] Alternate GPT is invalid, using primary GPT. [ 429.023663][T12577] loop2: p2 p3 p7 [ 429.033376][T12528] hsr_slave_0: entered promiscuous mode [ 429.048217][T12528] hsr_slave_1: entered promiscuous mode [ 429.061797][T12528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.081891][T12528] Cannot create hsr debugfs directory [ 429.325029][T12577] loop2: detected capacity change from 0 to 8192 [ 429.353506][T12577] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 429.397963][T12577] FAT-fs (loop2): error, corrupted file size (i_pos 1046, 9216) [ 429.407948][T12528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 429.425946][T12528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 429.439919][T12577] FAT-fs (loop2): Filesystem has been set read-only [ 429.448575][T12585] FAT-fs (loop2): error, corrupted file size (i_pos 1046, 9000) [ 429.460917][T12528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 429.474170][T12528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 429.739591][T12528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.801225][T12528] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.854665][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.862003][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.170925][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.178246][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.343871][ T5803] Bluetooth: hci3: command tx timeout [ 431.417913][T12611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2427'. [ 432.533622][T12619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2438'. [ 432.588459][T12621] netlink: 'syz.4.2431': attribute type 2 has an invalid length. [ 432.818294][T12528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.284778][ T28] audit: type=1326 audit(1754692994.010:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.327665][ T28] audit: type=1326 audit(1754692994.010:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.356609][ T28] audit: type=1326 audit(1754692994.030:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.388230][ T5803] Bluetooth: hci3: command tx timeout [ 433.409364][ T28] audit: type=1326 audit(1754692994.030:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.438438][ T28] audit: type=1326 audit(1754692994.030:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.467329][ T28] audit: type=1326 audit(1754692994.030:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.506838][ T28] audit: type=1326 audit(1754692994.030:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.535754][ T28] audit: type=1326 audit(1754692994.030:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.566682][ T28] audit: type=1326 audit(1754692994.030:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.611831][ T28] audit: type=1326 audit(1754692994.030:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb766d8eb69 code=0x7ffc0000 [ 433.729825][T12528] veth0_vlan: entered promiscuous mode [ 433.787991][T12528] veth1_vlan: entered promiscuous mode [ 433.839739][T12528] veth0_macvtap: entered promiscuous mode [ 433.875773][T12528] veth1_macvtap: entered promiscuous mode [ 433.934238][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.958186][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.985893][T12528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.036537][T12528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.057354][T12528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.083339][T12528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.129694][T12528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.139437][T12528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.148482][T12528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.157561][T12528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.297395][T12653] netlink: 'syz.0.2442': attribute type 2 has an invalid length. [ 434.323760][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.347631][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.420996][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.430413][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.784094][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2444'. [ 435.795071][T12665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 435.803973][T12671] loop5: detected capacity change from 0 to 128 [ 435.828702][T12665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 435.853521][T12665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 435.890037][T12665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 435.917012][T12665] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 435.944008][T12665] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 435.969316][T12665] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 436.030713][T12665] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 436.072287][T12665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.111031][T12665] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 436.126505][T12665] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 437.410513][T12693] lo speed is unknown, defaulting to 1000 [ 437.883670][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 437.890580][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 437.893843][ T5800] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.949499][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 438.021752][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 438.101706][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 438.784561][T12711] printk: syz.5.2461 (12711): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 438.985598][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.993420][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.922676][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.994582][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.021814][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 440.102286][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 440.181681][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 440.566386][T12705] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.575791][T12705] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.586449][T12705] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.596010][T12705] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.763218][T12726] netlink: 'syz.0.2467': attribute type 10 has an invalid length. [ 440.777453][T12726] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2467'. [ 440.917123][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.051681][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 442.051701][ T28] audit: type=1326 audit(1754693002.770:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.5.2472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f569058eb69 code=0x0 [ 442.186337][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 442.261784][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.384269][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 442.419236][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 442.449515][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 442.459544][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 442.502302][ T5800] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 442.510240][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 442.685080][T12746] lo speed is unknown, defaulting to 1000 [ 443.353854][T12755] netlink: 'syz.2.2478': attribute type 10 has an invalid length. [ 443.371737][T12755] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2478'. [ 443.540514][T12759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2479'. [ 443.588065][T12746] chnl_net:caif_netlink_parms(): no params data found [ 443.643979][T12546] tipc: Disabling bearer [ 443.658812][T12546] tipc: Left network mode [ 443.846360][T12770] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2482'. [ 443.965276][T12746] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.985153][T12746] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.996371][T12746] bridge_slave_0: entered allmulticast mode [ 444.009261][T12746] bridge_slave_0: entered promiscuous mode [ 444.028144][T12746] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.038947][T12746] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.050223][T12746] bridge_slave_1: entered allmulticast mode [ 444.062411][T12746] bridge_slave_1: entered promiscuous mode [ 444.235670][T12746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.321927][T12746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.439499][T12746] team0: Port device team_slave_0 added [ 444.449626][T12746] team0: Port device team_slave_1 added [ 444.527059][T12746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.541672][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.581742][ T50] Bluetooth: hci6: command tx timeout [ 444.597293][T12746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.624118][T12746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.644986][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.686443][T12746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.859363][T12746] hsr_slave_0: entered promiscuous mode [ 444.876682][T12746] hsr_slave_1: entered promiscuous mode [ 444.893861][T12746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.909082][T12746] Cannot create hsr debugfs directory [ 445.397507][T12781] netlink: 'syz.2.2487': attribute type 10 has an invalid length. [ 445.409105][T12781] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2487'. [ 445.595271][T12546] hsr_slave_0: left promiscuous mode [ 445.633779][T12546] hsr_slave_1: left promiscuous mode [ 445.640219][T12546] bridge_slave_1: left allmulticast mode [ 445.648910][T12546] bridge_slave_1: left promiscuous mode [ 445.657144][T12546] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.667557][T12546] bridge_slave_0: left allmulticast mode [ 445.674025][T12546] bridge_slave_0: left promiscuous mode [ 445.679954][T12546] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.668934][ T50] Bluetooth: hci6: command tx timeout [ 447.429434][T12546] team0 (unregistering): Port device team_slave_1 removed [ 447.545054][T12546] team0 (unregistering): Port device team_slave_0 removed [ 447.679568][T12546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.790425][T12546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.332124][T12546] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 448.751080][ T50] Bluetooth: hci6: command tx timeout [ 449.044391][T12752] Set syz1 is full, maxelem 65536 reached [ 450.010925][T12546] bond0 (unregistering): Released all slaves [ 450.763699][T12546] IPVS: stop unused estimator thread 0... [ 450.821837][ T50] Bluetooth: hci6: command tx timeout [ 450.855280][T12746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 450.876680][T12746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.946996][T12746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.975972][T12746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 451.436921][T12746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.497625][T12746] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.526391][ T2885] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.533655][ T2885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.609227][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.616696][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.784836][ T29] INFO: task syz.3.1474:10040 blocked for more than 143 seconds. [ 451.801613][ T29] Not tainted 6.6.101-syzkaller #0 [ 451.822960][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 451.862427][ T29] task:syz.3.1474 state:D stack:27408 pid:10040 ppid:5788 flags:0x00004004 [ 451.901928][ T29] Call Trace: [ 451.912062][ T29] [ 451.922011][ T29] __schedule+0x14d2/0x44d0 [ 451.950146][ T29] ? asan.module_dtor+0x20/0x20 [ 451.987415][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 452.013686][ T29] ? __mutex_trylock_common+0x84/0x250 [ 452.062032][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 452.105831][ T29] schedule+0xbd/0x170 [ 452.131820][ T29] schedule_preempt_disabled+0x13/0x20 [ 452.191721][ T29] __mutex_lock+0x6b7/0xcc0 [ 452.196331][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 452.201067][ T29] ? sync_bdevs+0x1af/0x330 [ 452.231126][ T29] ? mutex_lock_nested+0x20/0x20 [ 452.251653][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 452.257047][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 452.291646][ T29] sync_bdevs+0x1af/0x330 [ 452.296181][ T29] ksys_sync+0xba/0x150 [ 452.300399][ T29] ? sync_filesystem+0x220/0x220 [ 452.321617][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 452.328407][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 452.341686][ T29] __ia32_sys_sync+0xe/0x20 [ 452.346301][ T29] do_syscall_64+0x55/0xb0 [ 452.350763][ T29] ? clear_bhb_loop+0x40/0x90 [ 452.371647][ T29] ? clear_bhb_loop+0x40/0x90 [ 452.376404][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.392019][ T29] RIP: 0033:0x7f36b6d8eb69 [ 452.396513][ T29] RSP: 002b:00007f36b7cb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 452.421934][ T29] RAX: ffffffffffffffda RBX: 00007f36b6fb5fa0 RCX: 00007f36b6d8eb69 [ 452.430036][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.449683][ T29] RBP: 00007f36b6fb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 452.458837][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.467178][ T29] R13: 0000000000000001 R14: 00007f36b6fb5fa0 R15: 00007fff2a5f63b8 [ 452.475592][ T29] [ 452.501241][ T29] [ 452.501241][ T29] Showing all locks held in the system: [ 452.509597][ T29] 6 locks held by kworker/1:1/27: [ 452.518334][ T29] 1 lock held by khungtaskd/29: [ 452.523574][ T29] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 452.534016][ T29] 2 locks held by kworker/0:3/5174: [ 452.561814][ T29] #0: ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 452.611733][ T29] #1: ffff8880b8e288c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39c/0x6d0 [ 452.658180][ T29] 2 locks held by getty/5551: [ 452.673194][ T29] #0: ffff88814c84b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 452.702040][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 452.721638][ T29] 1 lock held by udevd/5798: [ 452.726322][ T29] #0: ffff8881413e04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 452.751685][ T29] 1 lock held by udevd/5807: [ 452.756360][ T29] #0: ffff888021dd34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 452.775468][ T29] 3 locks held by kworker/0:4/5861: [ 452.780741][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 452.822480][ T29] #1: ffffc90004b27d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 452.840125][ T29] #2: ffffffff8cd35b78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 452.868309][ T29] 3 locks held by kworker/1:6/5885: [ 452.882285][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 452.920538][ T29] #1: ffffc90004b97d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 452.958455][ T29] #2: ffff8880244c7240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x26c/0x3170 [ 452.980359][ T29] 2 locks held by kworker/1:11/7233: [ 453.001824][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 453.040090][ T29] #1: ffffc9000419fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 453.081818][ T29] 1 lock held by syz.3.1474/10040: [ 453.087018][ T29] #0: ffff8881413e04c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 453.102743][ T29] 1 lock held by syz.1.2334/12325: [ 453.107932][ T29] #0: ffff8881413e04c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 453.117697][ T29] 2 locks held by syz-executor/12528: [ 453.123211][ T29] #0: ffffffff8dfbb888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 453.132398][ T29] #1: ffffffff8cd35b78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 453.143693][ T29] 4 locks held by kworker/u4:9/12546: [ 453.149100][ T29] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 453.168334][ T29] #1: ffffc90004e17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 453.179076][ T29] #2: ffffffff8dfaea90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 453.189480][ T29] #3: ffffffff8dfbb888 (rtnl_mutex){+.+.}-{3:3}, at: gate_exit_net+0x30/0x110 [ 453.198644][ T29] 1 lock held by syz-executor/12746: [ 453.204080][ T29] 1 lock held by syz.4.2500/12830: [ 453.209248][ T29] 1 lock held by syz.2.2501/12826: [ 453.214818][ T29] [ 453.217190][ T29] ============================================= [ 453.217190][ T29] [ 453.231655][ T29] NMI backtrace for cpu 1 [ 453.236050][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 453.244004][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.254100][ T29] Call Trace: [ 453.257410][ T29] [ 453.260371][ T29] dump_stack_lvl+0x16c/0x230 [ 453.265098][ T29] ? show_regs_print_info+0x20/0x20 [ 453.270334][ T29] ? load_image+0x3b0/0x3b0 [ 453.274890][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 453.279872][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 453.286062][ T29] ? _printk+0xd0/0x110 [ 453.290258][ T29] ? load_image+0x3b0/0x3b0 [ 453.294804][ T29] ? load_image+0x3b0/0x3b0 [ 453.299340][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 453.305467][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 453.311471][ T29] watchdog+0xf41/0xf80 [ 453.315737][ T29] ? watchdog+0x1e1/0xf80 [ 453.320092][ T29] kthread+0x2fa/0x390 [ 453.324268][ T29] ? hungtask_pm_notify+0x90/0x90 [ 453.329311][ T29] ? kthread_blkcg+0xd0/0xd0 [ 453.333924][ T29] ret_from_fork+0x48/0x80 [ 453.338360][ T29] ? kthread_blkcg+0xd0/0xd0 [ 453.342985][ T29] ret_from_fork_asm+0x11/0x20 [ 453.347787][ T29] [ 453.351623][ T29] Sending NMI from CPU 1 to CPUs 0: [ 453.356917][ C0] NMI backtrace for cpu 0 [ 453.356934][ C0] CPU: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.6.101-syzkaller #0 [ 453.356950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.356960][ C0] RIP: 0010:zap_class+0x155/0x830 [ 453.356987][ C0] Code: 08 4c 89 ff e8 ac ae 74 00 4d 8b 3f 4d 85 ff 0f 94 c0 49 83 c7 f8 0f 94 c1 08 c1 75 b5 4d 89 fd 49 c1 ed 03 43 0f b6 44 35 00 <84> c0 0f 85 45 02 00 00 45 8b 27 41 f6 c4 fc 0f 84 03 02 00 00 41 [ 453.357002][ C0] RSP: 0018:ffffc90000087c88 EFLAGS: 00000802 [ 453.357017][ C0] RAX: 0000000000000000 RBX: 0000000000000f23 RCX: 000000000001dd00 [ 453.357027][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8fd06ef6 [ 453.357038][ C0] RBP: 000000000003bb18 R08: ffffffff90d7507f R09: 1ffffffff21aea0f [ 453.357049][ C0] R10: dffffc0000000000 R11: fffffbfff21aea10 R12: 000000000001dd8c [ 453.357061][ C0] R13: 1ffffffff21caf08 R14: dffffc0000000000 R15: ffffffff90e57840 [ 453.357073][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 453.357086][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.357097][ C0] CR2: 000000110c290fd7 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 453.357112][ C0] Call Trace: [ 453.357119][ C0] [ 453.357129][ C0] lockdep_unregister_key+0x39f/0x580 [ 453.357151][ C0] ? lockdep_reset_lock+0x320/0x320 [ 453.357170][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 453.357189][ C0] ? lock_chain_count+0x20/0x20 [ 453.357205][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 453.357232][ C0] pwq_release_workfn+0x233/0x290 [ 453.357255][ C0] kthread_worker_fn+0x4d4/0xa90 [ 453.357272][ C0] ? kthread_worker_fn+0xe2/0xa90 [ 453.357288][ C0] ? unbind_worker+0x180/0x180 [ 453.357308][ C0] kthread+0x2fa/0x390 [ 453.357322][ C0] ? __kthread_init_worker+0x1a0/0x1a0 [ 453.357337][ C0] ? kthread_blkcg+0xd0/0xd0 [ 453.357351][ C0] ret_from_fork+0x48/0x80 [ 453.357370][ C0] ? kthread_blkcg+0xd0/0xd0 [ 453.357384][ C0] ret_from_fork_asm+0x11/0x20 [ 453.357413][ C0] [ 453.373645][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 453.373663][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.101-syzkaller #0 [ 453.373686][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.373701][ T29] Call Trace: [ 453.373710][ T29] [ 453.373719][ T29] dump_stack_lvl+0x16c/0x230 [ 453.373756][ T29] ? show_regs_print_info+0x20/0x20 [ 453.373784][ T29] ? load_image+0x3b0/0x3b0 [ 453.373833][ T29] panic+0x2c0/0x710 [ 453.373864][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 453.373899][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 453.373938][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 453.373969][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 453.374006][ T29] watchdog+0xf80/0xf80 [ 453.374038][ T29] ? watchdog+0x1e1/0xf80 [ 453.374075][ T29] kthread+0x2fa/0x390 [ 453.374095][ T29] ? hungtask_pm_notify+0x90/0x90 [ 453.374124][ T29] ? kthread_blkcg+0xd0/0xd0 [ 453.374147][ T29] ret_from_fork+0x48/0x80 [ 453.374173][ T29] ? kthread_blkcg+0xd0/0xd0 [ 453.374194][ T29] ret_from_fork_asm+0x11/0x20 [ 453.374241][ T29] [ 453.376074][ T29] Kernel Offset: disabled [ 453.678509][ T29] Rebooting in 86400 seconds..